{"type": "bundle", "id": "bundle--6af06df7-74d9-4373-857f-a6fdb37609b9", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1", "name": "DigitalOcean Toronto", "latitude": 43.6547, "longitude": -79.3623, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "CA"}, {"type": "location", "spec_version": "2.1", "id": "location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--29170a96-f913-42f1-a92d-e7cc84451498", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--ec35903a-3873-49f0-b18b-8bb6312b18c5", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--5ff6d39e-877d-4f2d-8954-a1669707cf57", "name": "DigitalOcean Toronto", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b475b9d1-8130-498a-87bd-258cc7d3b271", "relationship_type": "located-at", "source_ref": "infrastructure--5ff6d39e-877d-4f2d-8954-a1669707cf57", "target_ref": "location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--b0fb9765-65b8-4e15-9b0a-cd86eab4d24d", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--7340d8ce-e219-4acf-99ab-d478eda35fb6", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c3f4cca-2d54-4cf3-9eec-434848d19960", "relationship_type": "located-at", "source_ref": "infrastructure--7340d8ce-e219-4acf-99ab-d478eda35fb6", "target_ref": "location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--8177fa18-c756-446a-8127-1e314c05e69a", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--dae69172-b13e-48f1-a06b-bc34fa4bacf3", "relationship_type": "located-at", "source_ref": "infrastructure--8177fa18-c756-446a-8127-1e314c05e69a", "target_ref": "location--29170a96-f913-42f1-a92d-e7cc84451498", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--6226460a-f6bd-499e-ad45-722342f04aee", "name": "CVE-2002-1149", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63fccb4-20fa-40bf-990f-59a0d92ab861", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.0.253.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3511f56-8dc4-48e8-918c-bfd83f1a1534", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.119.194.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e7fe77-60b9-4515-876e-5d96f2bb43a3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.222.180.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b22f02-4329-4788-b627-ca0a5efaac78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8517c136-1d79-463a-93ea-52865e1d351f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.30.160.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb0844b5-23ef-4ba7-9a00-2ccbd01fa815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.30.160.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98735b9e-9428-4cdf-b1d4-0d5df9d73e43", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.34.14.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932b41ce-7664-44e5-8567-7bce1c608853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.34.254.107']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00135dd-eb15-4a7d-8819-8f1b644ceb4a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.4.181.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a01b7d-708f-46e3-aa7e-1eddbf7c1b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.83.125.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f84b6380-ef5b-445a-b95c-dbe4de4e94f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.83.125.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f9cdfe-a123-41a5-8c7c-3ccfd52b2c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.83.125.89']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a946c48c-c945-477b-bf8d-e636db8a4050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '10.71.12.203']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3a2fb3-0dcc-489d-97fd-eb648a67d0da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9894b474-a66a-4295-b6ae-daab3e7f982c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5c9394-0dd2-48c7-84ee-50906738202d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9cf53c3-8066-4b9b-93e1-6f608ebca299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a8f95f-e6bc-435d-a128-2b889825ca34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c3c036-249c-423d-bca2-475d1a686fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569470d0-3401-478c-bef2-b04f062e4aac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.111']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb205a29-0e03-42e0-bf54-c611eb881974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--812b90ca-c99c-4c25-97b2-06ad6bba1193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a8b8f9e-de13-4e49-bf39-4135db4f4375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.120']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad1afd1-d9b7-4a8a-b04e-4c7d2632c196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a027c5f-17c4-4ff3-bd04-cdc43f7d40fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ce167e-f70b-4365-804c-08f3e78e04df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78be9346-29bd-433d-a617-7235c6698792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353a9dd4-e426-460a-a535-ddc5dcdcb5ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b350c2c1-0cef-472e-9241-a944b320f8eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb61e06-f841-4029-986b-bccd4bf3e65a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5068c45-87d3-4722-a633-9a5f6be7f937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1b57b7-a0cf-4bbe-9ee9-997650c2093c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee8cb83-62c6-452e-a02b-086f6c5b6574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20776611-ffd5-409e-85fd-7350c181b100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281bb02d-59fe-4c43-88f1-038fd3bf411b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927f8a12-44e4-49a5-9eb5-41e00fd4e534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d04c4d9-a5c3-4d0a-85e1-010bffb82cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.49']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3d8717-7748-42b0-b878-c891d641ea48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca88ef10-c366-4a08-86c1-2caca23e7231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.59']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319eb60b-2128-499d-a366-d023cdd1eb7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5020d906-1b16-4c87-bb31-dcba40085cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d380f9-9c3a-43d0-8a2f-ddec4f2805bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e63fd9-00ee-4d6c-9b6b-dcacb681a4f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.76']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bdfc579-0206-4287-b22a-492fe86f7993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aeae2b4-caec-4d36-9aaa-122c0eb1ccc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef7dada-2700-44a1-bd41-df6add2f0f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--451886c8-4b62-45e8-8c01-87ffe2d9e31e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b806c2a-fb4f-4e2b-81e5-6ad143c01a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373af92e-b0b6-4501-a4ce-37bd4af06faf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb789a64-bd33-43bd-8b59-2db18a5a0be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.95']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5232a118-20cd-48f0-a328-ee130648df61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.96']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163a1f78-5343-4623-ac3e-14ba007549e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e087eb5b-fbed-4349-b663-b2c9e3eebe83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.31.87.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d76f5d-4746-4621-9b51-97089e25d131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--929975e8-3409-4832-8dcc-b6ceb1e647e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e8bb41-4bc5-41f9-8f54-370f5d263bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.55.1.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee29fb54-14cc-4db9-a02d-1e403f13e095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.55.80.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee267927-cda5-45d8-91ab-4aa965303cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.59.195.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a5456c-1f29-451c-b968-73214eae5fb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.108.51.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2857bf1-7fbd-4362-b7bf-a96b0676e6a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.109.201.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3c83d0-6fe6-4b48-8c98-f0ac362dc72a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.24.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b789ba-5b34-4044-853c-8e46583b5e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.200.242.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c6bcc13-d95b-41b4-b9f7-0207425c8912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.201.38.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a95e8a-aec2-45b6-bd25-c62c1bab70b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.62.185']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5911de47-88df-4bfb-b279-061a36ef4a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.33.80.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb37f48-e5a1-40b7-bd99-ddbbe726623e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6874a07-5914-45ad-ba57-4150a9a78171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f35799f-e144-4a2e-86cf-91505df44139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5351839-d998-4973-acb1-84df87c08039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f23d42-5a14-4bcd-a1b0-1b79f9231a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00308a3c-ba32-4111-97bc-935c36b3e58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.158']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8901c190-bb2a-4887-aa85-5837512f9f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.175']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db189b9-e8b2-41a8-a194-6ae6e8ef3166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975cd314-0493-4d4a-948b-b37b98e1d64b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a897628-411e-4c84-9089-4d4513648554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.110.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74188537-342c-466b-8475-94ee9dbee5bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.112.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a62bc9-840a-4dda-9555-5bb208393475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16531e3f-3d73-479d-a654-432a3c1cadcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3530bf0b-5027-4501-9bfd-b349f238966b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.222']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe2c90f-349a-426d-b4ec-e4a7a40efd56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.116.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--603f1632-dc51-4bbc-b43a-8495f1cb568e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44da14e-a43b-47ca-ba42-e253f767d331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.119.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc5ead6-cbf9-4c4f-b43c-d7bfcba23bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8298c277-7583-4870-a038-6c2105daec6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.123.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9061582-b5e8-40b8-8969-d910b3fa7417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.124.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a8e586-a95c-4602-ada7-71a87c89c39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.127.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade53add-8824-4b15-9996-f08c7126e8b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7527db04-a205-435f-92cb-1fb83dd7e703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a829f4-7657-44a1-b968-caa6953def38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e365803-9d9b-47b4-806d-a3af70258322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b4ab42b-5402-41d1-9d88-085fb3111bdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f353e513-4394-4d67-b9eb-7be933cb7692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.37.157.84']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5d4868-869c-4ff9-8959-95443216e707", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.156.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcce4384-c52a-4e73-9701-0334b470c2d6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd5368d-1c56-401d-b778-941fc8de1011", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--937f03e6-537b-4e9d-aa5a-2bf4f819ff3b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2cdf491-a479-4b38-a612-e8750afcbd6e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.26.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89bf0c18-32c5-4aee-b556-d340388e9549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.119.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20df398b-9634-4095-a633-8e9df4be14ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.195.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--574afb7b-6cc6-447f-ada9-4ea5fc8471f1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.140.97.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858d3e42-1016-473c-a792-6d92500c03a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.164.30.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003a3435-de0d-4538-9b54-f35034353765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b70504-7746-4d0f-9fec-fe303911580e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad51ecd4-7c53-42e8-b8d4-b9aaec138e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a7f870-1d3b-4747-949f-5866c29bdd93", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.63']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9bac5a-c876-4e8d-ba2d-ccb53b542866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.223.185.51']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1463dea8-0781-4da6-8a39-74c81f8af5d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.223.185.56']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0010209e-432a-4895-8a17-bea6ee4cfc8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.21.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe11a63-95f5-4be7-b3f3-ec8f13fa52d1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.90.82.129']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad60cef4-5381-40d3-b390-e9a051b5c6ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ae6fe8-deb9-4569-ab0e-7e9d83e76e20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.100.211.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb84785d-a448-4e5c-9366-d91f6cbea4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.109.212.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737260a0-c2f7-41a8-9b53-57f0a081faea", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.112.54.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2056e0cd-b072-4fb8-b9c0-678aa60dfd99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.122.221.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a8627c-c29c-48ea-a70f-ed5136d14d92", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.132.236.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7442667c-48f4-404b-9afb-9b402661aa24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.132.98.160']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7126172c-5473-4ffd-a32a-5083e7609b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.134.0.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45cac80-26a7-464f-b762-eab1b7ed78b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d2c803a-fc74-498d-ab3e-b87b6c66b0bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.224']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240cb23b-2ed1-4210-94a3-6ee2be5f5fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.33.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19c15dd-4ea9-4ce0-8ebd-54e0b737725e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.140.142.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143a77ab-b996-4710-b0f2-57f0c9977d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.146.159.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7ab154-5b00-45fe-adce-74964f51a045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.170.125']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff25b8e8-5038-45d6-983c-802a24526ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--264e74d7-92fa-40ac-a8d8-3c3526f98173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.28.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605d1035-80a9-483a-8ed7-52c78c9f215c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.15.222.183']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607b8cac-2c1d-4173-ad77-5359d9f01b07", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.218.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e441e1-dc0b-4681-8229-aee227cdc921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.68.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f78a14-f3ba-4535-8f35-fc65cbc56002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.34.59']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c23e421-6a17-48e9-928c-7b8025ee96f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.163.47.147']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e795111-f67c-48e6-a48f-aa103954715f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.167.89.178']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7369eb86-956f-43ab-b621-b99faa27d3d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.78.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6a40fb-44da-41de-8a44-346e48b95cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.79.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c694e6b9-9632-4ffd-a39a-7305209380d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.176.20.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c19bd77-ad10-4f53-803a-c5f03b943344", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.177.189.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6ccd4c-bce6-45fa-ad68-583e2fd6e615", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.179.174.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf7ab24-39c7-456a-aa30-34c1739711b6", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.179.190.79']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989031cc-477e-4ec7-bf1a-01229038cca7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.180.119.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd74ccd-0c96-4453-a16e-5bede9883cb4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.181.109.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434e20bf-4715-44c1-a1e4-778888d2a7b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.181.176.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd539ec8-8edf-4310-adf5-6042b8f53744", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.190.214.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45efb867-4e05-4aec-82c6-21c7ef2baceb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.196.116.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf679953-fbd9-460c-bc4c-059a189bc3f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.199.123.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663fead1-7544-43f4-ae8d-53c4d48e3d82", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.199.210.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f59507c-5040-4886-9fef-fc13cb2591ee", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.20.122.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6857d8-704a-4cdc-8ba2-51e33c77a180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.20.193.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8748e14d-f539-4637-9705-c0b03110bc25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc2d099-b725-44d9-a95f-109ae926f14d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255bf3e7-7915-457d-b857-a7e197f57ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa66569-c4fb-48d5-bbde-daf438f26153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7cf531-994d-4b9f-8a08-6141b8afd0ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad56f6d-b7f7-4381-a7c7-fcb346d04bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4aaea63-6303-46e0-a6f0-15decb1a35d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--346601de-62ab-4fd2-9ea5-a23eff35e162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7ea31c-6525-4053-a663-00e651763a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.58.1']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c14934b-8068-448f-bd40-68af886dd9c4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.206.51.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce265ddf-0e35-4035-bf0c-5abb2bbb6520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.22.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b10713-e1ba-4ad5-bd52-df478b13ceab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.213.248.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8bc519c-0e24-461f-b7d6-aff4bce0c428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.213.95.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ccc84ff-fd73-4ce3-a4f8-cc3b59458344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.225.87.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c11c06e-6b59-4e7e-ae7a-a242e619256e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.161.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6df9214-61cd-4923-adce-c1eac30de3fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed675112-c0a9-47bd-936e-f3bf82ad3ba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b573e6f-f7d8-410d-a14b-73cd0a21d18b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa16f4d8-578f-4d73-92a5-a08aa056341e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--964200df-a3a2-4dc0-87e7-6a6909cd1aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6c763e-fbff-4a08-903e-a4acacd2f9f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e9f0bf-193a-4f07-8c44-cf0dda1ac50a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.236.201.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e034256c-db08-4ad8-8f14-3ebe0a50a6cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.236.90.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df670aa-c932-4632-abfc-986c73b73cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.236.90.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5965e70a-3bc2-403f-9d3d-5363136e9508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.242.2.89']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b59f524-8874-4cd6-87c3-817f69cb17fe", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.249.87.183']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f67d38-b6b6-4aa6-9eda-c2be9efd00aa", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.25.47.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d6ecdd-315d-46d7-ad16-036ebf2b00b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.176.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1754af3-8ec3-4373-a6ff-71408e01b5a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.179.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98cfb32b-4b89-499f-b08c-e7154f5fcbc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f9b0a4-b7db-46bd-9a55-29f16cec7614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95dbc7b-00e3-4b19-acd3-654344047bb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.238.120']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65343c97-75b0-4e3d-b687-0b408b7816d1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.28.224.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a8ed85-ced6-4f87-bfb3-3fca9774c487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.45.235.176']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f4f1da-2c42-43fb-a024-e84d77ce4485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.45.247.120']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b0ac91-c326-4872-b113-b2c32f0fe935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.47.81.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfba2c31-e21b-430b-992e-e9ee04d24188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.49.70.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6baba13-5a45-488d-a490-bd8736d2a509", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.59.163.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f8c4c2-da47-49bd-93b0-a5df94721e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.59.163.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3249998b-2b89-47f3-b231-927faae1cf2c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.59.163.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a2e5454-3f92-45b5-8723-48bb748fd93c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.59.163.135']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ba5a80-7dd7-4ef8-905d-f835c2086339", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.63.101.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dda8e0b-ac40-4def-8261-27bbc2b14cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.66.148.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11675bf0-99a6-4ff6-8a3f-41f2b5c26e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.66.78.51']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d3a0f0-33d3-4fc3-a225-50da69bdf59f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.69.189.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19054dc-4f08-41a4-84d9-98d9fdef8c77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.182.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cd7426d-b384-4fd4-a30e-de7cc427346f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.183.165']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b503ef-b79a-48c9-9f34-73153b8075e5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.76.88.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7062734a-de34-454f-b3cb-0f121da5efbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.175.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8ef9a7-848e-4b72-aac5-f111a1bfcb98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.242.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ef1804-2aef-439f-be71-ee4aa3f8dbc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.78.0.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6be71fc-e541-4c26-9029-fccb761c0c56", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.121.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1cee85-3d8f-4360-97f6-ba7919abcab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.132.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--866f581b-f1d4-42db-8436-31d15419d6f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.20.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0a5b14-c599-4f97-9f21-da5d498dccc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.253.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a457f348-81a5-4ec9-8a70-8913e02d6a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.36.79']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33131b8-332c-4d4c-859d-be658544b705", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.86.180.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b509b2a0-0271-43fe-a323-bf7790225f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.88.59.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd00d1c-4664-4d87-baf2-8f966817c871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.144']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6155a4a0-9f05-4b10-9594-e2333d606a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f9a92e-1390-403d-8c9e-97ab25702ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8a8e8b-9521-4b69-8f6b-a5340a26f6ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d1c24e-d45a-48a3-8f1c-64ac831c356b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b11b6f3-8cbe-4250-a8c1-c31bb1cf25b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c7feaf-13c6-4215-a62d-24f1cc81e26c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.51']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed7b8900-4ae2-413b-bedb-e64a54c4c28c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.84']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042ab3eb-330b-416d-a9a3-eddd86f2354a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.77.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67295cb8-5a9d-46d6-8353-3ccf557cafda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.91.208.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb8ee678-a183-4b9d-84cd-d0fc3c910bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.98.149.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a65e346-2f7a-4968-807c-d3c889d83831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.99.11.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e28e62be-1a2c-4b02-b88b-660798dea208", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.99.214.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc588e5-a570-4a8d-b201-681252337555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.99.37.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7972939c-9d73-44d2-abe8-5acd4e8bf5bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.130.6.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5097993-5e94-412b-a16a-00f17b4118ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd9e6c1-872c-4269-b622-7c1886cfc77b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d38c39d3-b39a-4a11-8466-05bbeb0f9aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e825eb2f-289e-4359-ba1e-e6b746ea6add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.21.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf7a6d72-84b8-429a-a651-a674d1cf2721", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.41.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214a3e64-698c-4068-8d25-86f5aff7d1ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.82.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0f43eb-51fb-4ea8-a86f-e2235fe085ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.192.205.181']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1414c856-6373-4dfd-8407-b385e56e92e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.10.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2689046-4188-4168-a613-acd458afa55f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.143.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e143442-3c2d-45b7-afff-f4b0c6b3e900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.143.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44edcde9-b141-4c85-b476-9c98c2331190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.93.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560a9d5e-ef95-4235-a062-b4d5c1968836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.218.145.107']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f525db-50ce-4f66-994e-75123dbd71fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6faec14-77ac-49cf-b87b-bb051dae1df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.233.196.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c538c5-a2dd-477e-a04a-c43744d343ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.233.196.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24de476c-1adf-4457-b0ef-e38b2c78fc72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.233.196.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b9b3c5-d12d-4e65-8787-1625f445493a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.233.196.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae7d44e-1f9f-438c-a64b-46183d3f3f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.233.196.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31e9d33-2f62-42bf-ac6a-01975fdab60d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.233.196.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b0eba2-5412-4889-a859-38b01c311a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.233.196.107']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200e86b3-85f7-47f1-9f68-70eec993216a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.233.196.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b15c6d7a-185b-46bd-8fa3-530791ab9b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.233.196.109']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd10d84f-a55f-4765-84a1-f1b9e59297c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.233.196.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79145175-6e68-42ae-acbb-1532241f299b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.233.196.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac9e8c2-adc1-441e-8675-84ff1d1a03c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.208.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc4e7c0-622d-4885-a8c4-005dc5c4ada7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.208.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--922f0df1-9129-4afe-9036-990a71ad685e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.94.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dacc1c33-d240-4bfe-bc72-a64174015e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.66.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22fb2ac2-ed8f-4b2c-93c2-7dd1989c3f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.132.63']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42fb2e4c-72c6-42f5-b23d-ecef336a5e39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.144.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae7bdd8-861c-4fbb-ba08-d0d80888e588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.144.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1bfe63-d6a5-4b6e-8106-7f3bf8b8c4c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.144.253']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa4936f-7903-4db9-be26-c8b39bdb1f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.144.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdbf0a47-7f1a-433b-a4ad-39c1557b180f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.145.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109a6299-2d39-4979-b900-c2e9fd90ea8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.150.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a1bf30-0729-4834-bc06-caacf169cc86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163defae-fb1c-4411-85a7-e03b4acbd494", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.32.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a09bda-e973-47be-bef2-416ee2782c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.42.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0429a3b4-f1a7-480e-8b9f-bfae3dc370ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.130.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ecbdb7f-e0ff-492a-94a5-ee3d6555da98", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.151.49']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db2adb2-c272-4faa-bb1b-78f12147f8cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.160.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc14f10-5730-49f7-9e6f-df72115e3ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.190.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8569b765-0574-4170-bbe3-bbb226dc15cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.210.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c722df07-41b6-49df-8332-1e0ff2b5c272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.212.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--011f7501-cccd-43f1-a6c9-a971ef468724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.217.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--071d40ab-c450-4b4c-b4a7-de533b80af6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.229.49']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce38aacf-5fd8-4f7d-b6df-efbabed9b944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.52.1']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18340c50-a64f-41da-a31e-732129474681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.190']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ace99c-aca8-4a2e-a172-05d1e9d97a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.84']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7802034f-6ce4-4e25-baf7-39a77bceb4f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.254.233.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a607b2fc-2977-4433-941d-42b2206ad181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.198.237.46']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12eee339-9697-4525-a2f8-cd3aff0f156d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.27.148.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2087e28c-e829-4435-acf7-0d80e5f8265b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.114.108.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d922de0f-ec48-4993-bc71-b695d5902887", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.239.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--291972ba-7ed8-4ac9-afa0-b04b597cf8e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.122.48']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1b0c79-d231-4b4b-883d-742548294fcd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.127.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6965787-3de2-4611-8d05-463ec1906b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.154.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35edd2fb-6c45-4848-ae2f-13dfb5e416b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.176.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cfd613b-9e6b-48f2-853c-7f960e252a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.7.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c232bb-8492-4bdf-ade7-69a0593d7565", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.124.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d8bbd5-6218-40e3-a883-070f14ec2bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.124.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--967dc1f0-7b5c-40fc-97c5-dba02ce5bfb7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.95.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a011c22d-5f4d-4457-8cca-a4ee6c4fa29b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.242.165.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf856a6-26c2-4a3d-8b41-662b04f9e46a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.136.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4053a9-9c87-42ab-968a-fb4e757b83c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.137.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2342392a-16a3-4c7e-af17-653327264936", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.14.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ffbbba9-3a56-4034-be44-ff4d9b13f81b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.145.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c03e2c-92c9-432e-b8e6-18059e4b6457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.152.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f7be9a5-5e0a-41c2-9e92-cb766a02ea7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.153.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3346a4-f26c-44d9-844f-51c0087f2b01", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.16.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a10c08-3dac-43bc-b457-bb8e8160a3c9", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.164.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77cedc09-5a65-4ca5-8544-1125f1777605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.165.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a8adc8-4faa-4cf1-b002-f112e77136d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.167.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726c8209-48a3-478e-b310-22ef8d0fc9f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.173.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18976caf-9a3e-4d27-b51b-d0882ebb518e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.174.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534518dc-9097-4ffe-8113-a017a09e2f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.174.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a6f3b44-4bd7-4156-aebc-07e1bdcd1f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.174.249']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a204b132-3d4b-4131-bcdd-0dde59b7de24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.174.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6843f95e-4366-4b5f-b837-59abae857f31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.175.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3b9ff5-2728-427a-83d2-674725fc30ae", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.184.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c00b32a-ff45-4fd8-b619-81c2f108eb50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.214.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf7071e-7bfb-424b-8afb-9648950ec9d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.149.110.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51f3cc2-ee9d-45d3-847b-c7a51362e00a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.149.138.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed01ec4-933e-4889-8b4d-1a8145e3810e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc13972c-2154-4d4f-9c22-ebc4318d63e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ca394d-8bed-4996-b75e-80967d2ea95d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.249']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a48ed86-1006-48f0-9a93-bb5ab1f16264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82dfdc36-a74b-4620-a745-d0322fb37b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.176']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d44aea-7e13-448c-adeb-3c20622ca5b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc9df09-d782-454e-a00f-e5b6c81fe8e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.112.48']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11cf84a5-d5dd-4164-916a-3e68756da683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23104266-0257-4f95-9ce4-b1c7ff178ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82e35e6-fed2-4aa6-a58b-aecf60eec521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.175']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4357447-7358-4184-bbd9-86cfc4fb1ea8", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.152.37.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--522f7142-efe8-4ff5-806e-027fc3009a1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.15.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c926c452-1188-4639-9f9e-14c36a3c0f96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.55.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98f4e74-5806-4cfa-b7ab-74d7aa313988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.56.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0636134d-3627-43c6-8c64-efe2d4e0b58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.56.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f387865-5f5f-47ed-9999-6d855fb672f2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.161.124.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91868baf-01f6-4f42-974d-8a561bfd57a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.252.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e333e8-6a0d-4451-b21c-836cd390ad78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.95.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b283b9-4ffb-4ba1-b5cd-38017fcfc288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.37.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56cdcfad-31f1-414f-b8c1-ace700009a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.21.135.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ffe7c7-f59b-4dad-909b-76193bfcac4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.21.191.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d2adaf-a623-4a0c-9b76-e48d7def0169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.22.152.216']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe19212-e523-40c2-a243-062ef6b87967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.23.10.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb018d7a-7337-4862-9cf6-abd9e6550225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.147.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b573d60a-9eaf-431f-a1e5-d3c149c96112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.179.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13923b26-3c89-40c7-91a7-215b12a3cf45", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.56.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84ad8dc-1755-4170-b1ec-77c69f4973a6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.41.5.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce61f6a8-6885-46b7-9d91-fe80281d48bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e97efcc-469d-44ed-93ff-2218fd811b43", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8190e956-e53d-49f3-b259-fb23da1afcfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567611e5-7eaf-42ad-8831-02155d54e3fd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1d3d05-3cd6-4f7e-9f8f-49a08385e75f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774bc151-b5fe-481c-997a-712f1c46e60d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f909fa-76f9-4c31-9ff5-abe6aa13ecf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.59']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5a826b-b386-419a-bde1-fbf112e71207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ee7d1b-4a38-4804-92e6-5fc47b493f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c9f2cbc-1363-46c0-a2e6-f9814ea6c3f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f03fdfd5-3314-4355-b6e4-836b06da0356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b8f2f56-b413-48f1-a263-54a1f1b7ee10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed32df63-d196-4d6f-999a-2ac0f80443b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25eaf000-b262-48b0-98c5-dc7ebeca9cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc2f6ae1-70c2-4492-a27e-561155d26f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ab5cec-f043-4ddf-8eaa-bc9b24f7b094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181066a1-c4bd-47ef-9455-2931b050a444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75cf469-c8ed-4a0b-9516-0a90eedf5f46", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.106.239.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--118180fc-e5d2-464d-9acf-b1ddb703e153", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.106.239.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54cd3be9-9fcc-42eb-b071-0e00b984f44f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.107.244.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2454275-ef0e-4c88-8cfb-59bb1f008564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.237.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7dd7f7c-4546-4472-bfcb-8b069077589d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.238.248']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d50b10f9-31dd-46d2-be76-5465b63b1521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.176.229.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5524a6f9-ca02-4863-8d98-865ef44360b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.199.106.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaaa2f32-2464-4bc5-af62-205520d6d050", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.199.96.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--864c63eb-a429-43b0-98f0-2ed4a1fb2cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.180.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ad60da-40cd-4a7f-adb0-02bf4a8d2a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.206.247.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707aa1d0-4884-471b-96b7-95d206381a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.207.174.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1e0c20-c011-4271-bc03-6fb5522a257a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.22.130.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97f98e6-fd22-43a6-a58d-31395d9c2611", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.231.68.63']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22c17b9-3517-4266-bb99-24e10052a593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.237.96.109']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f07727-0932-439a-b613-9043ca66557e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.247.190.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc528a76-b77c-4c7e-b8f1-ce3ea3082ae5", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.63.14.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62d9f06-91b9-4cbc-8a05-c041754ca3f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.179.80.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c4d58fa-ae15-42c2-9a72-ab412b6cfcf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.179.80.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ab7c61-b544-4243-9af2-dcd8ff5d7344", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.224.171.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b019180b-1152-4b79-8094-250ba90af41f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.249.202.176']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5b6071-d511-43d5-bff6-1807addabe57", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.37.59.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958392d5-8798-4b6f-a96c-fafa4dd92858", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.37.6.107']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3e0f9f-4329-4a4d-bb62-5adfef6e00c7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.37.64.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfaec405-a85e-4a4f-9a21-64798060b2c9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.37.95.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02eb355c-303d-469a-9e94-ca576e9f7dd7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.42.208.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94ed7ee-8db2-4080-a5cf-9e0284d71752", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.43.37.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d72ba2-561a-4565-8b13-2660f732a586", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.77.149.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f2a97c-cf10-42a3-b69c-bbcc25ccefc2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.78.165.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14def68b-2e97-4063-b1b5-345eaeb340d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.78.252.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac13c7f-09db-4472-9f34-16faf275df76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.89.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15484956-e8f0-4964-bcc0-8767c27870a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.89.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b919e963-c209-434f-bf0d-5dee14088fa3", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.170.36.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fab8bbd-4f56-4030-b57c-46cc27370e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.170.6.203']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4f7192-c42e-4c06-a03a-07782d1ba130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.175.88.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f923a94-dd9e-4761-8a4d-5f652f114909", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.225.148.120']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca68fba9-557a-4b29-ac7e-a23106585423", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.225.148.144']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69efd4cd-9068-461a-ab7a-379162ec976c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.228.34.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e1c7db-6dd2-4ac5-a660-eb18c2cc0500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.228.43.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00b3fd9-a3d7-4d69-8b43-97b70ec8194d", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.228.49.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d8d367-4eb3-46dd-9450-506d8792564a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.26.163.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2fc9b53-d3c3-47b4-891a-be4a98be6de3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.29.52.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bae71df-6b8a-4c74-ab0f-d52e1bada62d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.30.98.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2aebf6-97b0-407f-82dd-ecf8bc391ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.33.71.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb5aacab-1078-4654-b9bc-513486c3ab23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.43.15.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8556d3d-df1a-4d08-8a2c-3a590e81a516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.55.74.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aff0e36-72bb-4a4c-b4e0-7723290df7b3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.72.136.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bffc9b33-c225-408d-bcf5-ebd5b0e004fe", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.76.224.199']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0434c23-e7af-407c-a83c-b00def2e98bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.89.99.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce49d3e4-a6e9-44a8-985a-152e7ae742f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.140.187.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d13ccf-fa29-417f-bc8e-50585ed32795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.16.168.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a22c13-8da4-42a8-8ec1-80632e95ec0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.165.245.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78deee39-f878-49cb-a9a3-0ff0baa473fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.168.171.175']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--346380a6-8a58-4bd0-9e95-ba686d26aa32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.173.239.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef9694e6-1573-45ea-81d8-edf7f6f93e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.173.41.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d03e035e-46e3-4289-93b9-b66c781ce419", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.185.230.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59c11c8-d389-4c28-ac2c-d26ea806687c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.186.227.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33648bf1-b662-4b6c-96d2-b4b4b5694827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.197.2.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2d4ff1-dc09-4bcf-845a-ffeb583941d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.221.38.203']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f7d7f1-0fab-4355-8873-c4ac917a1e96", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.235.230.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4faa2d4-963d-40d6-929c-e942303c5e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.29.109.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56513102-d416-4572-a31d-48ae964e4b2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.29.109.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eca13e3-089e-4b77-8827-4c1edbca993d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.86.225.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09014904-a5e6-437d-94da-48052e9b925e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.86.225.175']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bbbbbee-c3fe-4d88-8cf5-2ee0dcc171d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.86.225.185']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb92e486-ffec-4521-ab4b-1d9831a0a9db", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.86.225.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d3cf9a-8ae4-4a6c-ac3a-efb7cc20ae15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.131.118.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2511dd-03aa-479f-adbc-8b4ea5aed69a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.131.200.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fd9b99b-b475-40a5-aee6-bd51c9fa1090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.141.70.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--156672eb-3481-478d-b8f1-bddf4c0470be", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.161.43.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27fc243e-bddc-44e9-ac33-edfd1a24fb26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.161.89.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ebd494d-4c67-4658-8b0f-eabf7c2e76b6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.211.116.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e2dff4-1007-411b-bd98-1f7ae747504d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.214.18.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e6800e-af12-409c-996a-98cb9c6b4c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.249.117.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2dc57e-c322-4749-8fe6-036d7c306436", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.131.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03bf859a-cf2e-4e0d-bf48-4c9c536a9a19", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96c026c-001a-4208-9b7a-7732d873d245", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2cc7738-a9c8-499c-916d-e3927f4711fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6471c84c-8dc5-41ce-bb4a-cbccaf7dc15e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7600646b-ba58-486d-a284-b51994dcaead", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb485e2a-398b-4252-9efe-3209d025de28", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--617ecd92-a94b-4a98-bd1e-7fff5ab0b444", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1e6266-16fe-4215-ab08-3cc9d1696bab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4042a5c5-f41f-4a6b-b160-e9b01dbe9025", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b2a106-5b24-4323-b6e6-ff7e7b45ea9c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42864495-2c29-437b-a615-3d500b8bebe0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93501e40-3b6c-4b3f-911e-b75899df9f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.219.157.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ef6fb7-b108-4722-8a8a-7c137fba4a25", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.34.106.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7fed12-9d49-49ec-b7ca-d0983e59a4a9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.55.111']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd5b9e3-90ea-43e7-bd2c-76609af8bcd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.47.161.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02fef765-8027-4168-a380-768195d9b4fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.111.183.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a065a479-a5f2-40de-bdf0-8551e94f10a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.151.43.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de0ab6a-b00e-435d-864e-81aee734d98c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.165.209.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a46f4de-ac91-4786-9723-6df5c08f8d12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.179.102.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c006d7c-6154-4753-93d4-171892e6914c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.182.75.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11bb5330-9e63-4599-9c3a-4cfbf28de283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.0.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad2b909-4432-42e7-914e-079f60c87a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.115.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f49ca1-3da2-4813-a5cd-302ddfd35bae", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.181.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f49a9c67-3d53-4b90-938a-7775e9829842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.192.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9906792c-baf1-4116-b284-a44a1aab757d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.244.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b60e13-458a-4a4d-a607-31d7d849b805", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.253.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806c9a73-7860-485e-a246-a53d334d0cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.255.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f5731b-d196-43dc-8012-f0a21ea90755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.37.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3dc4990-531c-495b-bd79-acb7b5f31bf0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.191.23.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3a4d46-1e16-4d0a-95e2-99683ba83625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.191.25.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccccf5e9-8389-453e-8abe-11540206b08a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.191.28.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8421ea1-cfb7-4e47-9ef5-3748809aafa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.191.32.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9d9eb0-5423-400e-9ecf-940e8e9f8125", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.195.237.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2caf5e80-1f77-4faa-93ef-b9f6a96046ac", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.198.104.251']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b466ec28-b12a-49ed-87f6-0f698f7a53d3", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.203.161.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0734ca6-5495-4ed8-8289-c93ae06c519e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.203.250.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62952be5-361e-44b8-8432-08b94e74422a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.209.234.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc28ba4-07f7-4a03-a194-90c7cff45ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.211.150.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef18d77b-956d-4135-8963-c890cc9e4498", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.211.205.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--619944b9-f26b-44a7-be3e-5b495661ce8c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.212.182.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76bafd4c-a2b6-46c1-bb67-63c530db1c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.212.238.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1df61d4-5bec-445d-b863-4e3e5b2a3cce", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.215.9.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e301f6-359f-4cd3-bfa6-a57d0c159af7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.216.2.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfb2d2c-12b8-4edd-9a61-b161b7fa19f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.22.172.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840af72c-ea58-45d8-bf6e-7245010ddc2d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.229.144.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be15e264-60e6-47eb-b838-63291ab491dd", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.231.10.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c8a53b7-bc59-4643-9f5d-0925e52425c6", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.231.78.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c083f4a9-bf5d-4450-9e1d-3311a2a87be3", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.241.181.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba086b41-c102-45a5-b6ee-33b76bc4c40c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.242.177.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb85c7c7-d7bc-465c-852d-8625f8dc7df3", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.42.75.107']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76975693-ef02-4c11-86b6-356944b1a721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.61.43.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80552726-1264-4590-b147-e2ba178602ee", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.68.177.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f85363-65a6-4eae-bb5f-415792b9d141", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.78.7.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a9ab93e-28ab-42c7-ad8e-7dfcec23f916", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.84.178.56']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79e1d8f-a550-44cb-b0bb-86910070ad0b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.96.27.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414d89f2-4882-4c3d-a2fe-012717119bf8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.97.58.111']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb4c7ec-244b-4e86-9e9a-db6be2e90eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.118.119.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9986c9-c0ab-4321-a23a-021e0e668fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.118.96.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27dead13-68cf-42ef-ba90-69746c68f98f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a32714-9ef2-4176-96d4-62b6d09777f8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc433ee6-13e9-496d-b599-9bd35728cd43", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.197']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b2768eb-b536-4ad7-b019-02fa259f734e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7214a4a4-87c2-41d0-a006-bdb24f08d4bf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed077217-7d07-4440-a9f1-dee210ab9981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.181.16.159']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08342cce-1821-4b2a-b377-9f6fe34b7d99", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.181.19.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21dfe7d1-7cad-43df-b5c4-11320127792e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.198.216.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1478b7-775e-4570-af97-6320247aab1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.204.182.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84546786-7583-4472-8c92-065a7f7435b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.46.114.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1a1c59-2c57-4fa9-8b78-441fb3ae6d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.58.170.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1293212-1dfb-43ba-9be0-ac4410b2b401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.62.167.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1506f90e-e448-47f9-a286-c087d075f9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.62.54.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfb0ec1-6482-4b43-9208-67f72f7b41ec", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.68.202.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d21a023-a671-4ccd-b546-ff41ab246544", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.68.202.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8538a4c3-bc6b-4905-b034-7374b8416347", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.72.231.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36704085-291b-49e7-b307-1efb03d5f930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.75.60.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f58a1c-7a51-4f1e-9d86-2db39721b270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.164.191.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc87947-c134-4c69-a932-9ec4dc894d26", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.2.22.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29975358-8ed9-47ba-9447-bbecda79099d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.2.62.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243c2c8e-4a05-4017-a4d1-f55a6cdcd26c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.219.35.214']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dafd1e66-ba53-4636-8f83-f8abd753b1b4", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.33.236.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c23781d-1ee6-4f7e-9ab4-e32a77b64f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.4.185.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0938d07-264c-4e64-bd70-8cfe06d7f89f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.40.114.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85be9d2a-fc0e-47ca-8732-57b6b3cc6aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.127.153']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3d5210-d678-4587-b7b6-cc6dc1ee52e7", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.186.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1dc00f-985c-4b69-ab2e-0348cf363006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.37.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79795828-558f-4239-9fdb-ab5a30ceb67c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.97.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ca58a5-057a-47e3-960e-468c8b6c757c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.128.157.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--833e27ee-db3b-441a-991a-012d39748c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.238.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73d9673-6499-4b40-bf55-662cedec931d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.163.224.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfc3a0a-0876-4c1a-92e7-dc5bbd05488d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.165.161.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7107df92-be5c-4945-b9a5-29f48fa48aba", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.174.49.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f466ac-c725-40fb-811d-6df2dc4c7b2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.182.101.76']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc0c840-2f06-4f43-87d1-e1afcc0fc627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.119']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd27466-bf96-43aa-830e-7833fa66d55f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ae7509-457b-4a06-901c-f497e5006107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4afc9877-6ab7-4666-b8bf-fb7898eaa301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.33.249']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a484450e-196c-4111-80f9-c62d8f2ebe27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.35.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5fe4c08-05f5-4966-b641-9eb89dbd5c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66e40ae-e67b-47f7-9bc9-cd67c61a88c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.56']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f292b7-6c33-477e-a7b4-d3fdbd33c556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.63']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--631946f8-221a-4043-b021-4aa8c0cb18d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a164536-7d0b-4171-85ab-f95cab715726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad55670-cd15-4ede-8b3c-598bfc136456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba26113a-9d72-476e-8e93-5fadde790eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.158']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c31871-aea5-4d86-823f-f20388723912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08536156-d935-4915-bb31-17697d279ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfca910f-ee57-4f9b-8650-9d9b2c4407b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.45.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cdf7f80-177a-42e4-8a30-1ba2b1386827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab495244-0691-481b-8efa-3cab233cedf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe28d0b9-7cda-4a0c-8402-daa36237ac8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.171']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94764a81-f88c-4e00-ba87-68b1b8e8bcfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69af7faf-e2a8-41e6-bc4a-f36729ec18ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40edc92b-a63b-48c2-a023-7b00a77ea192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4489dd9c-5035-4447-937c-8beaf2028ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--638c8e41-c27a-4d0d-8438-6087f50f5586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0594254d-dae4-49b9-8f50-c2d98727b99c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.120']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a1e4f2-7848-4152-bdf7-550a3793b93b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5506bc55-75b9-4ea4-b8d8-181434aa08ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557ebfa1-709a-483c-af5f-ecc28ce4dc48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ea16527-22f5-4875-94da-233bf4667b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0b14bd-71e2-4ffe-8ecb-b879a9521af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f19e60-1655-4cd9-91e4-a27c05774d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b9f1194-d4c3-421c-9ac9-54507af8484c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3b6d1e-ac82-4323-8992-71291f2eb863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa27d2e-9b87-4d5d-bd2d-eb4186c1404e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be7d38f-8a2a-442b-b233-442d7e26c119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccfcc3a2-2a39-4230-ae7d-e2da2de7ac53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb06635-0781-4a2f-8c30-5ef794356b91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ef6b9c-8866-4548-8820-ec41e127a2ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b244a9cf-18a8-4cf6-87d9-5251fae7ced4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.68.150']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06fbbd44-7c11-4f33-bcd0-e23a20cf097f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43db595-b4d3-481b-b23a-4c58011cca32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.72.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8ae645-66a7-4d19-9360-14520ffcff14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.73.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c1e180-5b31-4379-ae4e-fac2713743da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5defd759-6f12-45fa-9d01-06d74740d1f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.232.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c394532-bbad-4c08-8bcb-d161d152f3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.232.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c249f982-483b-44d6-9b35-459eb54fd9fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.253']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c97983e-5bda-4931-9f03-239c5e4b2160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef447593-09e9-4935-8aa3-94ec008cd5a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b5b4f7-40e1-4e0c-9915-477a231bfb80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.225']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42321b26-23ea-48bf-afb8-de95f2b6fdab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--451fd904-2411-4318-8c2f-1b008f98e968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea2e711-bafe-4577-8f17-96015bfbb9a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60198e9-f6b5-4cfa-a580-5e693ac50954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b379a0a4-6b55-46fc-ba3b-ed19e9429c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27df35d-8f0c-4182-97dc-45474ecd8969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f73a43-0c74-4501-873e-d559537f0400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.248.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349a2e6e-efbc-48e9-9cdd-9d1318d3fdce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--981d32d6-d2c5-444b-97f6-9b3b6d9ed9eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f40ced45-a8f7-4828-ae73-08a89e8aff4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ceb5899-22e0-441b-a2c5-34297f8c4f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ebf3b0-08e0-41a6-a524-4b31a7c62985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53aca963-9c62-4fad-83d1-89a08340ca18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.95']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67502ec9-4031-44df-b0f8-298992bec6b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c99f187-aaae-4ecb-b76c-bb3db74e721e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.144']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f77202b-7bf3-4a24-9225-da36c69da0e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c220c213-691f-4a23-86f0-1d87d5b05d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf4768f-4009-4d83-bf70-f392e5373cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--055ec8ca-8d36-46f3-9ad8-57e1555dfd75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88e5d0a-d3a2-455d-8ed8-180997a30040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.86.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3a97f82-d80a-4302-8caf-0a3b246e8846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62390ce6-f04a-4285-82e3-4f8f70dce4a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec22b3c2-d33e-46f8-8ac5-908a7e6c1dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed5297f-09d4-4ada-94da-4febb5f3a59f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a7fcd3-622f-4aeb-a7d8-4489727b1374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.144']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75f4195-80d4-4474-a28d-16f19abeb567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33bbae25-8ddd-45e9-8337-a55a2191b7ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.109.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d8378c-1a49-442f-8bae-bec4f63c21d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.110.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0752615-aa56-4e94-9b66-a0a5d519b47a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.110.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd51af6f-d063-469e-a2f5-f0afbbeed82e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.111.63']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--945a0b6d-e9d9-4ee9-8acc-39498b753074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.111.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a53eb38-1004-4a52-abd2-57c132567eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b072fc-955c-439f-ab09-55f99301b39b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.39.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60715d00-b00d-4b7f-b811-a51e619f9d3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.31.19.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e117349-2593-4eb7-8f82-05df7a2b6e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.37.125.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ffd4673-5ff1-4b31-b919-d2fd0f75ae0f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.39.219.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b27ca8b-ae4d-482a-af5f-b8edf6709d5d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.69.34.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313843f2-69b7-4a26-9c4c-d38f37e487fb", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.70.155.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c24c3c-cae3-4a3a-b15b-3bcca346ae44", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.110.239.76']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192fe265-a608-4089-8a6d-5d9dca194120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.204.154.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ccb25da-dd22-456a-8e18-1d7c7adaaf80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.206.114.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d85ec4-3f64-4995-bf03-4553d9d9c547", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.249.100.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d13ae94a-6514-47f0-8ac8-d0950fac3ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.149.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c8e01b-1b5e-4706-9428-fb537e2faa9d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.59.114.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--460d756f-57b0-41c9-8d00-e63a2cd4f498", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.91.20.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f9f2ae-be2f-407e-8e96-8ed0f4b6083b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.96.174.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b7ac6b0-33fb-4bcd-a200-91281ed96471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.96.96.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5947e7da-23f7-40cd-b04c-df176d2778b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.194.6.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eeb29fc-420c-4077-b3e8-8e25010c29fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.24.230.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46b3d58-4d68-4e02-8f7e-912e154d16b6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.241.135.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30448fa8-d234-4753-afb1-1a949df25458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.165.96']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c172d8-e3e3-4bc2-ac4c-df3e4cc0ca9a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.42.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--484e41b7-f69c-4580-841a-21510e54f08c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.94.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1efc0c8-e49c-4640-9048-e4328c79094d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.52.18.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e0e367-e959-4a91-a4ae-65977eb45d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.77.238.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b92fb6-a6eb-4698-8392-54a888f4a922", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.14.17.55']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1503a5f-4a82-4ee9-8bbb-87e80f226b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.142.193.48']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ea684c-1165-4b0f-a24e-bd1a6d8dad39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.157.114.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ba053f-64b2-4ace-a005-204b10bae627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.162.69.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33994d39-8c94-4284-b48b-0e962c3200b8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.163.177.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76807d20-3812-4c69-aa70-216395611c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.173.173.48']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0cbb1e9-4a55-4fc2-87bf-a5082ce449e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.185.130.89']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8611d319-5b54-417f-b990-1b29dffc0eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.188.154.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a239f1-5571-443b-bf5e-93145549767d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.202.148.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef238d4-45b9-4d00-b2db-cd92fd12653f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.40.84.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a338574-d755-4ecb-b5e8-a34677077806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.178.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef8dda1-e7d6-49be-8b08-69e6fa934368", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.61.142.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a889665-5af5-440f-81c2-819a61bf9fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.64.23.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05207c4-bc2a-4ce3-a869-d12f3e5f2070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.78.125.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e45ef29-380d-4ad4-95e3-3aa89920f8c7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.160.119.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74684990-f107-47ed-8752-aa3bf03d9064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.160.53.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e9f35d1-2658-41bf-b761-ee3f2d2ae20d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.169.110.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b397112c-f41a-4684-bf9b-d1ad324d0a4d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.170.106.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b5ec13a-3c9c-4535-a234-9cc7d1e62c41", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.179.155.165']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1d4ed3-5a87-47e4-9534-b6f4db20d389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.191.115.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f30b3ff-615b-46ea-af94-c88a7e49f84b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.193.10.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e92af7-e1d5-47ab-a2e8-62f2762d206d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.225.92.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be4e001-0471-4775-b598-524c96d48338", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.247.80.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f07e36-a70a-47b6-b53e-97e5c5b64cf8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.53.30.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb9dba4-e1cb-4b60-a115-b72bae795071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.8.94.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc8c47f4-c486-4ffe-ad82-126b905f3460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1904b6e3-a84f-4da0-a76c-f772cc0417da", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.97.209.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e71b54ee-348c-436b-8cdf-2f4bdf68ed47", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.108.51.150']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9615dee1-8d39-4150-84e6-b0e5515507d8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.138.18.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9067ff88-19ed-4359-8e6d-b9bf4c9a7e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.14.121.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1311fc-3354-49aa-aef2-6992cebf6a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.144.27.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7645828-31bc-4c76-b744-7f36b4e113a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.153.106.55']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08be597b-be99-4917-85e2-caa29d66fa70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.158.48.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b9b063-8cd8-4979-84cb-5f4427f263c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.173.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b60f58-112c-42ec-be1a-e5719182e3a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.173.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb8c5192-8ba6-4de1-b14b-f392b4e14757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.223.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ba1138-2e35-4809-ba49-f678fa0c09b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11b5c44-4c3c-4d82-888d-282247165e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce74e9ef-803f-4dc7-aef3-ae62a83d9ba8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.19.107.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a714d1ce-489d-4056-9683-111387dced30", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.20.60.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de95ea55-7922-4399-a657-f1981b3a0ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.24.206.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af95a5aa-0168-4d1e-8a86-debdaac470ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.84.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6328f3c-f507-4da9-95d0-cdcaa5d357b5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.25.239.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac17b45-c95c-41d7-b1e8-88d5ddb4a3b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.254.88.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8535af01-8aa1-4996-b581-7a30466919ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.30.106.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d1d670-30c5-45f2-be35-6ce5db61ba9a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.31.12.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f0df74-856e-4f94-98f6-49f544362627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.54.215.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac1bbc4-ad27-4a92-838b-0d446ff08dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.196.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d9905ee-30fb-4fbd-923e-8892c74ad6b8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.198.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3afe5353-6f2d-49a3-9f4a-dc5974945544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.120']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fedd84b4-2c6c-4d3c-9626-baf03e70db14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.147']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d38c18d-dda8-4981-a493-c644ce631b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.205.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8dae3d2-cc30-42e7-96b6-50e2bb34560f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d137f1d3-60dc-4652-8f20-1302642bec6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56665d4-3b00-4f28-a62b-0691fc8171b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16a2d15-dd3c-4ef8-b067-ac3e5f5ac422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.81']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9a3a31-39cc-4ff9-b719-1954e9b115c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.209.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2182aa3-3376-4d72-ad58-a95fbf5bb877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933d720a-c381-4114-870b-503616b1e2f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5148b5-2a79-49c1-a6b1-da376b4a8b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.215.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddecd37b-5226-4f7f-8d83-2f01beeeb698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.96.225.48']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6ce46a-88f0-4303-acce-664c583b6367", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.116.169.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814e1c61-1012-4dc6-ac35-b957307306a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.194.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c6ee485-80d0-47c9-b287-1e028b9a139b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.194.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad80f518-06e9-445c-b862-9954f509c9ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.194.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40df960-bb7a-4b3a-82f5-54f39cc6307c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.195.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad7a569-f294-47bd-99b5-e59aeb93781e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.121.93.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2976296-b5e8-4d8e-acf1-80af37534eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.225.181']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b35af8c0-bcc8-4c2f-bf88-c82c0eee3d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.160.236.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0580069-394b-4c98-b9ad-63b7e5a149e8", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.189.26.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f65e400-8582-442c-a66a-2a772a2447e7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.222.230.178']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b13dc0c-b1a4-439c-b7a9-6fdf445a4ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.222.246.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de29960a-db58-4fd2-af51-26e6fa08056c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.243.133.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7762aefe-c57d-44c8-b285-cba314a6b811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.253.20.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70aaf29c-d9bc-4a17-8bc3-fc484cd6ff47", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.253.200.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c11cf0-1ed0-4fd3-8a88-3d24934c7d76", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.253.249.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c92ff0-7b52-4cd8-8abe-4bcea29dbe24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.43.179.253']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8537c5e6-f0a4-4094-8ea3-7a400d79ae34", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.43.23.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b440598d-c788-49bd-bc4c-639c91ec93c0", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.43.6.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c48106a8-2f09-412f-9355-aa3ceb5ef03f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.71.229.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--255d1994-29a6-4dba-a3c6-99ee6745dca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.90.49.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89682ffb-7f5c-4760-a747-42e2d0b71594", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.112.7.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93710da0-4a62-4b10-acb4-6b2304fd3590", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.115.83.55']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef22789b-6908-4216-b69f-51a5f7b35b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.139.31.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be36b15-8f81-4a90-995a-27f7e3aec124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.212.217.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6df8e19-3027-4a24-bb15-d30f1839678d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.24.3.107']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041f14d5-b7e0-471b-9ef7-431410f5373c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.240.188.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba20873-4503-4bef-8a5d-1b27abde5121", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.25.225.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f348354b-9ec5-4635-9a6e-174a97ce7fc8", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.25.226.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c2ef91-96db-4b9e-85a5-8d19819b6c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.25.231.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0a5c7e-69d0-4e72-8337-6b4b42e3b859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.25.238.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16ef39ae-c156-42b7-a499-df6ac124d517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.250.202.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ef5b13-4f3c-4deb-a3d5-6e0f6f733573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.250.224.56']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c914c483-b7f2-48f7-88ae-89d58951e411", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.26.115.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--559cf142-5436-424e-a833-96f9790afcac", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.26.224.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2414b718-82c9-43df-b1a1-3d487f32a410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.36.254.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a07482c9-bdad-46bc-b045-0464d59fdffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662d87d1-af5d-48a9-bde4-5728e505b622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.33.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7007336-adcb-44d9-af9b-d0d88fa0b26f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.33.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32f437e-52af-47f0-a809-5b87dbe0efe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.33.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf094a1-df32-40f4-8b07-e25ec69004b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.33.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24fc89d1-2893-46f6-bcd0-fd1d80af3434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.33.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3bcc7a-cc3c-4bf8-8185-b4ec5ffb025a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.34.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92ea352-1665-4cbd-b10f-dfa1f99ab3ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.40.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1a6215-1c5e-4178-8e3d-700741c49534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.46.183']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7be770f-69f1-4292-9646-0e566a3c5534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.49.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdbcad5a-c55b-4ace-91a7-5dddb1d88cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.61.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93064337-63db-4daa-9eeb-40cc588ae243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.125']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e47923-c0f0-4414-90e7-e7e0cf422912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518b280b-8281-4180-b536-95f9fee64222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8f80db-1504-4a6b-b98e-c91909ae95d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.229.76']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895ca974-b78d-4fa2-a1ec-692a01f6754a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.232.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d29540-0d1b-4052-bc14-65b61d8550cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.233.253']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52552ccd-6afe-4638-ae0c-2f74e323b77b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf2c0a9-8d93-4680-90ba-b1e4a8d2e975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a19105-e269-41e9-b640-6ba2216be709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.120']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb37dae-a4ca-4cea-926d-715489003394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63f2aa1-4d1b-4adb-b300-b07e71dc3779", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.216.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fd545cd-b75e-4d31-9f0c-5f1d4e0a28dd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.201.116.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb33e51-2fc7-4ecc-be1a-238c21e0f5f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9809613-1476-4fd3-ba2e-1cb656988b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.201.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d0a59a-1b9e-4eee-99e5-88f0ff5d1426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.201.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf2297f-138d-4c60-8c3f-09726a5c682b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.24.160.160']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ecb8367-f0c6-4964-b4ed-4c43a3d4c773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.8.124.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e836316-3fcc-4bc2-aa1c-9c82df02716a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.204.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74abef45-c38f-4c07-8a19-38b4d42ab208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.28.29.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262f9570-0ea1-4ea3-ac79-96c9368078b2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.140.149.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12489259-c87c-4edd-9761-c2b67d5e6904", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.200.25.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e63a179-82b9-4b6b-b28a-6845017c0ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.231.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--492b1069-37bd-4674-9c24-d59857373db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.219.99.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10abb26c-4731-4d26-a3f0-c288214bca84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.220.113.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20acb399-916a-49b0-9884-9567ebc41b8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.220.253.111']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff189abb-8fc4-490c-955b-71b4e1ea6680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.220.91.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad28fbac-9533-4a20-8873-b566b2142b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.221.159.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbfc4671-1074-4e63-828b-f456b794bc46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.221.242.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7605a8ec-2001-400e-9eb3-22067638ec42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.221.244.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37311174-b551-471b-8c1d-23d8ec9901e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.221.67.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963154f9-16f0-49b8-8aa6-7d3fea7dcae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.231.27.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4fad59c-8ffe-4899-975a-60934fe3a582", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.245.137.0']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90787781-f304-4346-a109-e9943f4a5b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.72.110.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b225261d-d868-4e89-b497-ec62af6ae9ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.105.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d15fe17-4ab2-4be7-9240-e0707d17829e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.106.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2cecc9c-6f14-4537-8610-df5d1a2d9f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.113.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23a150e-49fd-4a98-b612-43c55e220bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.113.214']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a23dff-bf80-4965-b309-11a689e8873b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.115.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--024296b7-6eaf-4a40-a963-5772cb5e249b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.116.129']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06038854-3089-468d-b179-94c5c6f2f6e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.121.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e00091a-d204-4106-8ec7-78da45182b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064b01f7-e5fd-4a8b-a1de-1ce253e98c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9015683-4c9b-4cbd-bcc6-e3db77397856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8cf9244-c4df-442f-9e7e-034d98d10922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.229']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c710a43-e632-4001-896f-af1162d1ea06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44736d42-f674-4690-b9e7-ff874ba21f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e00c0fc-5f39-4ee1-bfdc-e2294bcb1b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a32d540-4765-4f9c-8f25-c39db8f51ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.90.206.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d806844-82a9-4eb3-92a8-952f78e696c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56073bc-42a0-4881-8516-a9a17c68aabd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2e8045-ec4c-4402-944a-17401d28295d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3d0c9c-9d58-4ccb-8533-835d0da232db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323ff841-9e11-4f95-809e-7e473c2a29c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.182.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce72aae-2df2-43ff-ad00-1827026d6bac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.182.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee8f734c-6483-4fdf-871a-7a52d35f85eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005b09f4-637c-4d51-a0b7-a74939153f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.76']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4cc089-48a6-4ea8-baca-bf06ee012783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d82a34a-a535-4700-899e-01efcbfc326a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e9ce86-a6d7-4560-9b2e-bff7b0716575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760aa62a-1e57-4f8a-9792-936559e8413e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1258867f-0de4-43b6-b17c-afc78f1d6d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.185.239.222']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b980f4a-398f-42f5-9db2-2045d7eee90c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.49.181.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c589e780-410e-4cce-80a1-4d98fef1048e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.61.73.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e84250dd-ad28-4fce-a810-85977aaa4293", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.100.62.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f63910-4236-4d13-8483-5af5f4a1c919", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.148.148.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c78cad-1371-4499-b6f1-9724d131d2cc", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.233.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa0190d0-e954-410c-a220-26d8ac0704a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.1.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78616a7b-3ec5-406d-99c6-162e81c49e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.125.153']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa6d724d-8793-4a21-9e4b-67cf380fee17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.140.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53fb6ed4-7e69-4d3a-9fc9-bfb93d2a6695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.30.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc29a04-2889-4fda-9849-833e56c73ae0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.93.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf553cc-8946-451b-8026-2a5060e36e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.185.103.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4721774c-5063-4279-8ac2-7a39f68667ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.163.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c09ff3-5b3a-415a-86b7-a0f5b4e9b5ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.171.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a47f3d5-b4a5-4b27-ab22-45a6a39f902c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.128.129']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e4b5478-1bc4-486c-b426-78e47e77467e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.254.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d63461-129e-4ea8-a388-ee242ea5bcc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.95.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6044c14-7264-4ad1-a985-58cb66d3aa3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.66.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a8da67-7810-410e-80cb-6a0fdc1171eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.73.107']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5750335c-9607-4922-8743-524d158740b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.73.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb61ba32-b142-4ea4-9fa9-365d532ec740", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b15989e-2a50-4b78-a44e-93cc762aa754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07d5f27-2c69-453b-b5cf-fa181b2c39ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53348d71-6a9e-4807-a4ff-23aadf649546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.84']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f616549-36a7-4a55-a5a6-26fc766d2840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.16.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ad7dbf-22c4-4210-9dcd-266fa5fb0154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.88.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d71f0b93-de1b-41d1-a1a7-d3a7854551d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a855d69d-bcfa-4cd3-a426-991c47d6c677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.97.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0b4a3f-92eb-40d1-a987-20506640f5c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.136.131.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38145d03-32da-459d-8e01-f5642b02b2ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.136.143.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef06305e-3868-41da-8ec4-ddbbc3baee75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91fbcfc4-63b6-4d4e-a4f0-0c9d9e49895e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6feac278-7dae-4abe-a4cf-3211450e0538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.96.197']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a418cb8a-ef96-4afb-94c4-c642e14efaa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.97.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87eb2168-75af-468f-988f-efa7a24f5148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.120.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eadbf02e-b821-4111-ac8b-185ea3791bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7923dea0-6204-4cb2-9744-74c31c6f7405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4107697-4d36-4b16-9f22-1ae9caf1b035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.96']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cabe74b8-fca5-4915-9ecc-a0c4ae9cabc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.109']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45b36f4-b1ee-435c-98dd-36fc980e32f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.135']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e29ee44-0a37-4121-8ae3-e2c9eb081608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165a59cb-f048-468f-b6a7-b4a6b2dd3479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.160']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f83926-9473-4629-a945-fd6eeb62cacc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a5c279-7a51-49df-ad1a-17700538d42c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e37c67a-ee09-45eb-85a6-39ff0fca6a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b273ce-5bcc-4559-810c-25beebc26856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17920807-2e9c-4dc6-b981-3ddb883c874b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d2b794-fe2f-48e8-b391-2caf5577bc9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5706e341-6b6c-4f61-973d-eb9a5f2836f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3a0e4fc-13cf-4d27-9202-9e88a5baea1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.135']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90ea378-5a75-4d7d-96f5-c9bea05a5739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e649ec-e0da-4b1f-aeea-c1ca48bc9ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95c3bcc-4ab8-4fa0-ace2-dd639a89d542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.154']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef13b251-1fc2-418a-8a0f-6e05b9fd33dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b908ed-1c80-4230-8951-d2f95f965242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b5e5eae-e330-4706-b8ea-f65ccfb3b468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db0d648-7652-4919-8d63-b8d43f8d7a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67231574-564f-4192-b011-9fbbbf6df5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e44fb1-3260-43c3-a2b6-887f66a68544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cebb02e-cfdf-4256-a7c1-ed3026176307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.225']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf882836-27e7-4a5e-8b33-8639aa469a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1407a7fc-57a7-45f5-a386-2ed01a7a1133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854cf1ad-8e26-4c37-8495-96c116f6bd9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa4536b-90c6-48fb-a0e1-d699420c27e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--092d7ddf-a9fb-41a5-bef8-eb818d408e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af679bc0-757a-45da-9e8e-69623da03a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e850d3f-328b-4cb2-b1ff-bcb22ad33da1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575fd283-0d3a-4f8e-b6b1-6e1e404275c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e169f4fa-f843-4b90-9053-b5e8dcfb1251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f45d474-febf-42f4-8b44-207df33acb06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571a8bad-50ac-4ccd-882f-745a4dc64955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac61a90-0f13-430e-8b09-5316145f8c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.81.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70cb3d1f-fab4-4169-9994-3e98b87b7bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.113.78.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943f1ccf-a85e-4379-8782-8abb6d3cb924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.116.85.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e45456c8-4f1b-499a-82cd-dda36f772cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.248.242.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eea7eaf-9043-4caa-9298-c54a50725e7a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.64.115.240']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90eff6db-3f28-4792-a5c4-575618cb9ab0", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.117.183.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d348429-59ba-4674-8a16-d02a05dabd8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.135.124.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8b0af3-ed5e-44c1-a8ba-8b7462d7aecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.175.105.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d98f27-9667-4c49-b7df-fc0721de20b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.112.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c1a1bf-071e-4229-b6f7-f01f46af2680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.112.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f85e81-861f-44be-af6b-ba0f73abe4d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.13.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c455db-4bb1-426b-8c22-7721df6978d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.159.183']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f74ec07-5036-45d8-bce2-23288614f16f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.190.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--284ad7f5-4736-4714-9861-df3704cb01dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.190.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04828da4-469b-4976-92be-02db4ac6e11e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.190.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682598b9-cf53-4f3a-a380-0e07d054f0c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.193.76']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c52832-968d-44bf-aa86-21f744b4964c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.27.190']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c7ed8a-0ea7-4fa2-9095-acacd2d83581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.32.56']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2dbb02-b4c7-4804-b634-47d1e7ecbefd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.50.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90f06e1-6314-4697-962b-0db6efa0279e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.85.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19fbdc3-617a-4cce-9bc6-f1b4cc2206b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.95.216']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ef0e21-fabd-4b1b-88bc-dc238dc80b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.117.120.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef68c12-7d88-4fa8-894d-8fbb8399cc84", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.185.108.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5573f5e-c70e-438c-9836-53bd00f54ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.15.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f19221-1324-45f1-8c28-af7b069fa32a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.15.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1568da4-9a7f-4825-a800-b708ccfdf26c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.158.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddaad98c-0782-4bff-b7aa-8e929eaf10f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.16.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de412ab-5282-4e7e-bf34-47fc51bd29bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.160.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de3f379-c90f-4d6d-8f87-bdd307b1b0e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.216.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee709559-ba90-4b19-86ac-dcb13f767432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.219.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f99d78-b21e-4b76-ada8-01551d169b78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.223.185']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d41d8d77-4184-4751-9864-f44b87b94f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.82.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa1e6d6-3c91-4561-87a9-ed246d9105ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.199.62.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae86a4f-5d67-4e45-b20f-b0b263510671", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.2.42.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b45c0567-4976-45e5-99d9-5f0e4be5f42c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.246.253.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5de082fa-e06a-4596-9d5f-171e3e731fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.255.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f854ca-f089-47ad-94ad-ef9b88644ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.65.59']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c6633f-323f-4b15-a86a-d2f8ab1504a4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.45.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae5c6c66-4df2-422b-b07d-302385eba9f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28fbda8-2a43-4266-b41e-b70fd16cc7a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72fa4b55-3bd9-46b6-aaa1-fb211e933ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8706a0a4-e4b7-49fb-8e6a-2a344e2cbc78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.113.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd0b14e9-fb7e-42b4-8d65-37ec171bf71e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.148.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba5d417-388c-4e84-909a-39b6efdcb889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.70.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5341f225-e448-4141-9b0a-5d85dd77215c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.88.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72fbf0e1-196e-427e-9fdf-d6196032b612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.177.196.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea48b6a0-84eb-49f5-a633-ca56207b78b2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57f119b-e0c4-4ebb-9770-af9bfb859ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.198.29.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac79b7ae-d3e4-45da-9a8d-e4582bce3ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.212.68.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed630f53-8c1a-4890-9360-a934df7eb3f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.227.100.253']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3586d23-4a62-47f8-a303-7c6fb52f792e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.255.50.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce5261a-b752-48ae-a250-e10143dd8160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.170.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2105dca-1fa6-4508-8c44-969e0b1527fb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.255.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d2dd23-5c02-4caf-be73-1f7c83de5547", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.1.105.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d99984f-fd1f-4363-9dd2-2a8f74fe4cb0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.45.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3893a4-1e4b-42d3-8df0-03314670cfea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.75.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7245772a-60b6-4be4-bae3-1525848c97d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.140.205.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e66dd3-ff2f-4d59-8601-116d4c77ad4e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.143.170.51']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003a224d-ab69-4bba-9362-47ec215b73d9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.153.177.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea5dbbc6-3005-448e-a561-af578abfb549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.154.161.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a72102-12e3-469e-9d68-01df6ccbdf0d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.157.13.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3764581a-c81f-445c-908d-b4afca3ded25", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.207.141.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d705e6fb-4f97-47cc-ac06-1aa1ab977373", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.212.213.55']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b55bfcd-abfa-4795-ae9c-d548b0e39549", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.162.225']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6299bfe-969e-4e1b-bfec-e20a5fb7ff4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.202.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b35005f-5ecc-49fb-9508-3d2a4893eae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.238.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ee5b60-9994-4062-a72b-7cf89b1e3787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.225.245.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8203f1b2-4a9b-49cc-8697-e883922e12fe", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.232.245.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671c6227-1b78-4ec4-9cb8-0647cae64c59", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.241.202.1']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3be5e1e-199e-49b6-b924-93a1ce77573f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.241.226.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b870221d-4b39-40a4-b0ae-c477e23a4f84", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.241.239.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f7e8c1-1a9a-480a-8afe-84fdd73020d7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.241.38.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13910b27-9472-4976-bbf3-c72b7775fe82", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.241.85.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd93a92a-edb5-4ef2-843a-1762c3d61965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.241.86.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a7c992-571c-4908-a1b7-a368575cf2e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.241.97.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036e391a-b240-41db-ab06-c12034e8b379", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.29.215.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba39f173-d3e6-4b43-b81f-fc20804eda69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.46.118.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116d5806-cb17-42d6-bdb7-05c6a2c376eb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.46.87.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c211d24f-d2c7-49f2-9c2e-d2a9d1cf4dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.57.233.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d0abe4-e013-4cff-9a99-cd07d931d515", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.96.80.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1b52d7-a3be-4fe6-b627-e7125c8d1845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.188.210.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36325484-71fc-4416-97d3-16ccc292668b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.188.218.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9350d0cc-d535-4551-8a4f-f901ea7f0f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.238.153.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2690648-aadb-426b-a73c-c85cd1667fa6", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.101.11.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19a8566-3d4d-4f95-9b38-58ee3b7193d0", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.109.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51fb111c-0ab7-4878-8baa-a16ea69aeb96", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.253.107.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--459c347b-a31d-4a2b-8718-dd2e2edc9552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.62.191.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64cd8595-9dbd-4a75-aaaf-ad93d19876da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.10.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9638e7d6-74b3-449f-9ff3-d25cc0cff584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1b392e-a498-439d-aaa0-dfb6bbd0b80a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.224']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb12315a-8a44-4a00-8db0-ef02c97b38ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.83.48']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90477581-4d74-45f1-a21c-58052386e911", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.111.152.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2590f931-0e61-4454-938a-e64d7301a809", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.134.240.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fae35f2-3a67-43dc-bcd5-cf8a59c762fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.181.179.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5af6f04-d6ad-486f-8816-da7fcd20d35f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.91.102.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b7823c-19ab-4fa6-a229-b8c0559e9164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.91.102.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3aff5dc-28c9-4c5d-a2d4-70dc18bb07ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.10.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d695aa2-ed74-43e0-bb52-df0a76c3c466", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.218.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41b9d12-fcef-41e5-93b4-8953d9dda087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.224.178']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca7bac7-433b-4c64-94c4-7d5e3728a7de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.253.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32c17f3-1274-4412-a72b-6c5f5479a191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.28.153']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c4aefe-f668-4cc4-807c-26eeb3a61ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.91.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3250d7ac-08a2-448c-9df4-e8244d81b65f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.105.28.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7e1500-ec73-489c-a643-0d88591f5cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.129.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a268ebc0-9bb8-4082-9dad-6bca47d952ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.219.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--826edf8d-8bf1-44ac-8101-8988d9b4af09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.239.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b41de2-5259-4e13-873b-30e8e47d9906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.115.76']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a91dd6a-6bcd-4f0d-b7f0-ef5d0962155d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.117.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68ebacb-489a-4b59-a068-b4f4155341a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.150.150']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4068eab-469c-4289-9910-ea4862296dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.160.178']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32127967-53d1-462c-a5c7-facbb844db0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.169.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b86942fc-54b6-4388-9960-8abb908125fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.225.197']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb01a3d-6c42-4932-a8e9-7c8d2bfd2bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.238.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d8c9ea-28f7-4491-856b-7202709c4cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.167.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80e676c7-1da1-448c-937b-736f7baa008e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e755ee7e-25ba-4ed3-9e61-6310443b642f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1177ac5c-fe98-4c8b-b864-d3e7f0233fad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7511fae8-af11-4b23-8e11-cbbc71d4790e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc4d7f5d-a3b9-48bd-9d56-0ce3dabc37ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--679f9aa3-b7f9-4a33-83d5-18e8e04df2de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f65f2b5a-1278-4400-9367-90eba881f440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce0d034-9299-4da7-b52e-52fb807d13be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6008f87-66c4-45ff-96ea-be837faddf32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96289aaf-6207-44e6-987e-d3001e84b5c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49cb8339-144b-45e2-8052-1fa917f402f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670f3efb-dd46-4c3c-ac3c-140a4eeac17b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18dceab5-cf66-4c0d-bab2-da012eba75ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5039e5ee-4cad-40a7-9032-84b1398403c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5499918e-0693-4291-aa07-0d9d32830629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad2eb5f7-50e2-4e9f-8dc2-d219fff934b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934398be-a58b-49c8-bc0e-6a7deb9f6a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f82ddc15-7d85-43b5-b4e4-2202bf80cc91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de0b40b3-f4b0-40b6-ac9d-3883074920d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d283d46-83f9-48aa-a984-751563c2768a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68489f3-de78-421a-b491-98a385b7e069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0b4ad0-4e1e-4cad-a631-c622e18af66a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.76.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b17c2a9-cb69-4ef1-a99a-57367ba85c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.139.56']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ffaa18a-a216-43b0-8e8d-7d26d14accdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.216.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08a0fd0-a136-4b0d-9592-3488ad373517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.100.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e65e92e-a469-46d2-846b-5ac8401180a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.91.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07063aa8-d50f-4082-9b42-fcb57648933e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.82.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f28185-2e5c-44be-a153-ee894788a12b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea972a8-0017-4ba5-8787-ba22088a1a4a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.76.32.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c250889e-ec4a-4e31-940e-d7c5b97b294d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.79.249.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91de70e-9943-4422-b3a1-cd4d5810df78", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.239.89.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afb1f730-b724-4170-a32a-7ba775c53c21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.38.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb8a9c3-fc72-4400-b6e1-71a0bda81354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.119.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e3e2a7-d738-4871-85fc-2b55bb68d12b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.119.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5142b216-96d0-4aaa-962c-954db0a80497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.134.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4c1981-b738-46ea-bffa-04164193c550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.149.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c687f5-f1db-482c-bb45-daaedb51910d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.153.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e926cae4-b106-4b80-ae9b-80b7c4491a80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.21.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9bd115-44de-48e0-bb79-d1dfbc4d749c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.210.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e4be21-79fe-4adf-aed2-704e27fbf8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.213.248']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19913f0f-617c-4ca5-bbe5-bf834906402c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.48.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8799d17f-a28c-415a-9339-51940cb483ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.79.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5f227c-9067-4c60-a478-9598062603cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24a0a58e-e8a5-491d-83b9-203d6442ccc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2240c9-a7ab-4a0b-b741-e3f2683af491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e90ba88-9d26-42af-93e8-383b639a729b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61e9c595-f574-4b93-bdba-94c5970b6769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.12.193.89']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7168ef2-4209-4f1e-8080-92b10df73b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.139.136.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a36d21da-8c0f-4a8b-aac5-bd26b03e91bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.154.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f350c554-6d46-4b5f-aea1-a1fbedd13022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.171.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee93402-8c4a-448b-a9bf-1edc324ae3ed", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.177.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8951cd07-e856-4a2e-80df-86eefc7bdb4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.197.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddcafb50-3d57-4fa1-a23f-d38a9851259d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.202.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb22704-0a61-4a90-83f0-4e1ce16748d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.225.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21499eb9-02c6-4554-9778-e389ed5c0326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.241.81']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20378a5b-12b4-4276-91f9-33046168304c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.247.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50058833-488b-490d-b1b7-682e9c0d880b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b777f802-500f-44b0-8dce-c044c0c28771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4932d21-89c4-46c9-a321-0db56dd1dfbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e32aaa6-6278-427b-b49b-d9cc3597b8ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bbed889-8971-4ec2-9c16-18877fe03f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e455ef-a6bf-416d-a545-daee4dc75a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.111']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0ee7b3-0278-4abc-afc7-753cfcbcab4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a0af06-434a-4fe4-9853-b8c7e85d53a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d34fd77-c2e3-417b-b107-686e23334850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f862c6-4a3b-4c15-aece-65ed48d4d8db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d23c7b8-3af9-44d3-a9da-c148c837c8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b77254b-ab2c-4dc1-bcb6-87697e27c954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebbbd2b-82dd-4069-93e3-427077460dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a087c94-af88-47fb-a2af-db178c798b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.119']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557398e7-8bde-4827-859f-389eff6ba3aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9adcdd0f-0df2-4272-bedf-acbdf736b8d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.120']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65fd49e9-82d5-41e2-ab0b-3ea7665e3058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d593fd-45e7-4e18-b704-b58b33552dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.125']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854a89b4-9a80-47ce-9afe-b5463696dd3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6868e54d-95e4-4970-b44d-e2ae73084e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.129']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12fdd6f3-5309-4718-acba-f2889aa26ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07a12f8-f327-44b2-88e2-9ce73b60c3e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42044b93-4bba-44c2-913e-dc6adad5ab1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce064a57-8567-4741-a851-a9cc94f9d923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.135']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee9b7de-707b-4ed6-8604-c27650fe32b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0bcd32-4762-4865-b22d-d36bd051ff48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce01f870-0bbc-4979-9b4b-e2c0b3467ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.144']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64fa2683-678a-405c-9f6f-f0142306d67f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.147']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5900fcb3-dd0e-4cb4-9549-711d170c2637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b541c0d-b340-4c87-8706-9bbc8f3c91e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb284f5-254d-4894-977e-1e02ab3f84dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.153']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b4bd42-d3ce-42a2-9960-d73f314e79d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1e5eb9-195c-44e4-8a06-83bd5080a322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa0a692f-83c9-4de2-9825-c67a2b12f99e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.160']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701979e0-925d-48f2-954b-72c98baae163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--297c90fb-3efd-47de-9e09-b49ec6d20c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.163']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a1ab66-abe6-4672-ba53-6b27eacf594b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72fe8db8-80fc-4fed-bba5-5cd3c78d04f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b540f7-af37-4249-a4c5-b4ca451e0c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.176']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42dab2d6-222f-49f6-a744-0bdbae105549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f77cc2-ad24-46c3-aad0-fdf781bf283d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a10e83-6ec8-4030-be22-04abd4bcae5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639599d0-30f2-4976-b5a8-cc3113c013cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b95394-805f-4a95-8181-684943ddf8e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169ee267-1682-4f8a-94c0-9f22db2ace63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6cbbb31-5110-4b99-8a45-7221e01323be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7212fce2-cc3f-40cf-ac3d-011856a890aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b058dd1e-c527-4705-ac2c-6fc3fe4a18f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90fa26f8-439b-4880-bb1c-b745667ede71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d7f6fd-9448-4b64-9d09-cfa431622793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89493726-ebc7-4673-a6b6-3ca449205ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.199']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b40935e3-edf8-4129-bd1a-4e5bcf978667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08668ba4-ae97-47d1-8d3b-2134037364a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc221d40-b736-4720-85a7-6a11e2832d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf71a10-b816-45c2-99e7-9e5d3675de91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9699a1-183f-4bec-9e69-0ee9df38ceb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344f0ea4-a935-413b-af4a-f8369ef6a0b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8222b851-383d-4454-b035-be7ea0c119ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f7ce20-4647-4e97-ad09-3530da36440f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db786f28-8b16-4092-a1f4-8711e54efdb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.216']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d97b38b0-a068-4209-ab98-8ea046dd15e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a401c71-9658-489d-914e-d8735bbe8d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d157451e-4ecc-4187-9755-2a0a7b847c3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--987e0c6e-1a6e-482a-953b-9162319d6c10", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.222']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554ef1cc-22cb-4a6b-a010-fe1e18ffa243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab918f6-44dc-4fc2-8195-6c6a747a491a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314a185d-a55c-4728-bbb7-cc8ffbaea8d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7c8bd6-e212-4170-89b5-84e5d2eea789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c25b6fc4-c6f3-43c3-8e5d-78eb32c327d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a52c69-1673-4c47-b5c9-ea49a18b791e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.240']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ff115d-54ee-483c-a608-3ee62c6b19c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9d266a-2d0e-4631-a20a-c811d8934c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2aa0059-fc35-4f96-904d-caa8bcb88618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be38e8c3-194f-4116-a203-45165c13b775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.249']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c479e91-3b43-4483-98b0-0c2984624261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f20b132-131b-4033-b9f2-51577f3839a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.251']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94894585-22e6-4007-8ada-75ac242bf66d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a738b60-dcdb-42ae-8da3-62050c09cfef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.253']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0efcf632-9340-4b1d-8dd3-e51c24e3932c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9255c264-7ec6-4b6a-8a70-c4a961887ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbcd98b9-71bc-4192-9acd-9e6111019d3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a55bf01-aa42-4f41-838a-b1f7adb67a6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb2ac42-d00a-4342-8752-b5db757f5e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e637db9-2694-4550-972d-a2f1def96953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4db6a7-f51f-4a2c-a886-6217b44c7ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb4659f-3588-4e15-b379-79592b32429f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d026d62-b31a-412c-adef-bca80cba9c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8854041-9249-4be7-b004-12407587c88f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b272f892-eba9-4141-ac23-a98673215c13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e44aee-8fe0-43f4-8996-dee54db41047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b46da4c2-34ee-4b9e-9937-1f97054506c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d7d351-bc39-4f73-bdc1-bb8ba1c9e0fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc0d1e7-6ab7-4079-9cad-b42cf34bca39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.48']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85d8e81-0b7d-40bd-97d0-6b13093b7b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.49']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5dccac1-1a9a-4928-a3f3-d007a6eb6973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00797ead-1066-4412-8443-0dae94e5fbec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--745de6a9-2103-4d0e-ab84-7de76dc97d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.55']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8661f67f-e892-4551-8b35-4bf539bc7f1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.56']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294b56a5-0d68-4495-a6b6-405abf81eca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e89c255-f1b7-469e-a64a-c46384fb87ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa59bb42-e482-4fe6-855a-81fb2f1b5e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d65acc5-7cae-4790-8cc1-5c88af3a36a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c018dc-db42-4e71-9cb7-fb39b34f8f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b9984c6-2a60-4396-90c9-d23c055f8a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.63']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d88b8481-aa7b-4d52-a75d-6019c7968cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea26aaca-8956-4554-ad28-d3aa41c6084c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16da3a2a-8698-48c9-afcc-22984e161b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf48fc1-eace-4dee-bb96-3ce022c94294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f66598-39af-49ed-8c11-d7357a032eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e161aad4-3f80-4037-83e0-f0adf1ddee7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f23bea18-1825-4b88-a9f3-90141f3dea74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575bad08-a076-41cf-8d68-173774031032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f341d97-6eab-477c-9c35-02e2af39eb35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed6ed9c-b19e-46d8-b530-4ea9006c2a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a584a9d-5b62-432e-a28b-1d0a44c948ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed8d861-3187-47a6-ae2f-2a2b20a6bc59", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a30a0ad-bcb5-48a9-a65b-d99889d55296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.79']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e41b0f3-5423-4c1e-9c7a-301da07573ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--161c6535-5d9e-4ef1-b05c-74c08fa39549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.81']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b0a05c-479b-47e8-9a3f-15457d7a0987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991a2e58-4e4c-4fbd-955b-a772e0240d87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.84']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f2e5da-e967-4c12-befb-0558f5a5e4ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913fdd91-f3eb-4618-88cf-6d94484dc304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe3c478-5d55-45c7-b05d-d7b01f6746ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af3e78d2-650d-43f6-b32e-571004cb161f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.89']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c95a4f87-1754-4a6b-af93-422e47c8abcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac7be04-564d-4ebb-9a9c-fd15d560c159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.96']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43130af6-7eee-4eba-8303-c933656c82aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244734b2-2c96-4ddf-a408-5f86f87974a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9188b8a5-0fdd-44a4-a5da-5171da198f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99d6ba14-16c7-4dfa-bd24-6d90f800f566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0cf0b3c-e608-4471-bfe2-2555a170519c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c8baddc-8913-477f-8e11-7832f03cfcb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a461dda-249a-4e55-8d61-469543ea6551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.111']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--074c5c31-2beb-4365-8001-0291b5e52f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--160cbee4-6fb8-43ca-9187-25c6f8a71c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a2d621-9f07-4291-81a3-4e79b1c005a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a8d251-3cc7-4e69-a00a-3e55d031c42c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.119']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc7dbc6-884a-4aeb-afcd-b3aedaca8cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95688412-42d2-4c53-9b7e-12df244d0a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.120']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac91b6d-de7b-4e48-88e7-c0e363a41985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ec004c-2825-47b0-b198-c558bc764449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ff8e83-30ed-4eb2-9129-e06c8dee0e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.129']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91fa1d87-0574-4191-b690-9afff0ba9acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594415b5-2ce1-4bda-ab1b-24bb0481393a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee52fd4-062e-4777-80fd-6e58bff20baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfac8a9a-5ff9-4b7c-8c53-26c25e62bd0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc065a8-9b78-4292-8240-f7f2d84ea8d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.145']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de070f70-941a-41bc-8717-4107fa2f68fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.147']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e69be2-af21-485a-aa3e-a9097b7df722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.150']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1982e569-5819-4b0b-9309-d795b7204ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.153']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe28f96-db27-4e30-975f-48fbe1a5562d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.154']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f25f2c0f-260e-4c14-b964-bf973b86f08c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.160']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0dd355b-b3f9-4826-952b-3ee64d74f39a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81bd1c7b-d0ed-4fa6-b77a-8e2f70af7c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e5f30a-b22a-41fa-baa5-213ee7666b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.175']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e1391fc-e586-4056-a1c4-3aaa38c22025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8e1522-841b-475c-aa51-2a96421f9a1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.178']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca3d03e-80d8-4e11-9e74-6874c1ebdca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad03c14-1288-4603-a812-2f3959cedbc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b575cfe5-1cbe-4c42-9a5d-9bcaaafc2b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.181']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09efeec-afbb-4660-b10b-3933fb486bc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.185']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0fdae8-13dc-4318-af05-17c2374fc291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1811c6-2436-4322-9d14-11939b89d547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ef8773-694e-4cd3-a61c-747cc75a7ba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--015e32cf-3135-405f-ac7a-4b95dc3448a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222682a9-a79a-481c-b047-b73f5fd5db11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfeef63b-4c02-4477-8b8e-af6d11851ca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5c979a-2ea9-4aa7-ba70-9160fdfa797c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333ad516-5dd5-4bc5-9126-5ef541c03f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.199']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37be6c95-1383-4398-befe-985968ab3e42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be780036-c129-417b-8778-032932c31b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad76bced-408c-4053-8bf8-b5b7b17bf1a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7203fbf-35b0-4c7f-ae93-82438dd96de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da3f935-1bce-46db-84b7-f22a6fd1ee31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994f5528-e103-4411-b773-967d37149639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--945038cb-f485-4a83-97cb-e8a30e338d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72abcbc-afa1-4707-afdc-91b37b73c1d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849d8cd9-ddca-45e1-8ab0-03fdad3a4be9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.216']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3249c082-6774-478d-864c-340543877daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf6a8d0-0b1c-498a-bbf8-91619ebf7ec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.224']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7acd720-d986-43b3-bce6-683a7bd8ceb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1966e321-af1b-4b9c-ab34-f96904ec8f04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923da41b-6948-4e2d-ba9f-7cf2b77ab781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48c3def-1976-4a60-9fd5-7bd0c56b19e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9820c95-7b4f-4d12-b6d3-3c4a6cc91e52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f273cb82-79a7-431a-b727-932208af7bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.240']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb63c7d6-ea23-4f6e-b006-77411278a6fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--530a4e9b-7848-4566-b9b4-ae6a7cfcc22a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fde4e0c-7c9f-406c-adda-5aedd61c697d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9857493-cb5d-4f5e-b4a2-bae1bffdca57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8627c50e-f659-47d3-8ac4-444e5ca6ee9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a862fc-7313-431a-92cd-70d27e8a8de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d815ea0-0a71-4954-941d-f56d0b5d7c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e778bb-2781-45cd-9e95-a2850a2b1917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3db57f-cdf1-4995-9844-8434f23a0a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ffff750-7575-4c8f-aa9b-cb77c63b9dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98de3a2d-dc38-49e6-982b-c966e8d88b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17049bd8-bc7d-467c-a28b-36c9130e561a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.56']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e850888e-b37f-44a5-9f88-aa5703564446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.59']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--633409b3-a124-414d-bcf6-c6268ed7ad8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc47354-64b5-401f-a513-a16b9a929828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a13c7aab-a6f5-4a6a-bcdd-34965513d048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c93f890-551b-4a63-9f92-bd04125bdd45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfdec399-a35a-4f19-b167-5348a4cbb36e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ddd210-66e1-4098-92ff-36f2ee5a6890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa7e450-ac2b-4a66-9037-8b87a4a0d6f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--955bf5b4-fe0a-422c-93f1-d707f6bea780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0ecec3-57c8-48ee-8d74-5248dbb7bc0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2da2ef-b482-4c6d-bb39-f554d83575f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.89']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea4bbaa-7153-44c2-8ff5-339852949059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23758da-48af-4dd9-9a17-646cc87ccbd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcab8b66-a7c7-4a3d-a878-b34ca54ed12f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54140cc6-5f1e-47ab-8786-049d997c102c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a50d65fc-e0a1-423a-95af-516c04bfc977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd95f0b-b47a-4d1c-b161-fc7063972149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca940f5-d757-4f24-9d7a-141e42f24d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.199.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d1b95e-a73f-4878-8e40-55caaa98127c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.211.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a82e0e5-6f40-49cd-9ba4-ed1ecb0d1cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.79.62.158']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d97d8d-375b-46b4-9d5f-74253422934c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.144.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c226a77-0f4f-46ea-81d2-a832abdf6fc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.183.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766de900-e04b-43a2-93b7-241a8a77616d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.171.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b29b2e-b391-43ae-8097-5f1d7c782ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.45.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6868febe-2185-4a42-9cf5-48553170a846", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.222.217.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83fd3777-1e71-4157-92d8-daa4d1e90042", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.66.142.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0817d71-8a3b-4e22-a13e-0eb9496f422b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.104.186.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21bd1fa0-6bf7-434a-8eff-a575b34dbd14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.104.188.135']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0606b5-7213-4a24-afe2-2e692b1d5bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.104.188.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a413cc5-dfe1-420f-8b45-76073d5be500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.104.191.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47fbd192-5e22-4c92-86d3-bdab80e4db58", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.202.50.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24275fe-dee5-4078-b8a7-7778b2fa3869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.157.122.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff6a766-c646-4a82-86d0-4b88b78353d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.157.135.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c678fc-f850-4526-973e-571b9c276c32", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.206.70.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3befb936-20f0-40ed-a495-fb3ca8f1e395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.162.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcebd976-68bb-4b11-a559-ebdd2ffe341d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab74edb8-5b32-47c8-846b-03fc109cbe8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.214']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8827658-2e0f-416d-954f-db8391595d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6702c61-74e1-4842-a1c6-c9d1163de380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8da0a114-7342-4b86-a1ee-f823a4ab1862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc64224-0b9b-4537-8b74-12c1817dddb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a43a9572-48bb-431e-911b-b27a6ef6c655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b18b1c-face-44d1-958d-3f7bee47fe56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.229']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34bf2c55-2c76-4d60-814a-e3d1480629c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3692b132-9f87-4837-8546-ae6d50b1effd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ac4633-508b-4c6a-9f3c-31ba85e2744d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31cd9cc9-51b7-4305-af7e-6f9fa23fd758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1bec776-4cf5-405d-b65c-50804df5755f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.71.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210829e8-1876-4087-ba1d-42e1e115df54", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.131.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf34745b-611e-4bde-b275-c82019db3caf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.131.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24abd194-fc3b-48ca-8955-1b40814733da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.133.171']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c545a45-0f37-4d05-9456-a21ab2718aee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.216.96.214']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e829314c-57c1-4aa1-a86c-ff80bcdf9090", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.233.147.161']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed5526a-2c49-4d9e-a6f1-17cb48da8b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.101.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658d9a3b-fb93-4f87-a1c6-f21f8f8fa98f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.101.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e6199ef-5387-4ed3-a2a7-2770282156ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.105.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f92eae0-a831-4e71-8c82-63ed80b6ad0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.49.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67c3715-e70a-4cab-a7b4-f1bbb14a0cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.51.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab967ab9-0298-4376-9771-0d7196448c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.52.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8841c6-59e5-4955-af06-6780fcb9ed41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.64.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77bac833-e221-4610-9071-0fe715819601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.67.129']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cde3374-6dc4-4c51-8366-2c3a20971dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.94.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aad15c4-6652-45f4-b6f3-66dfdd402947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.95.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42eae85f-add8-4a7f-922b-b270226c2bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.95.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc8f9131-f265-4995-b43c-a619c2889ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.136.188.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e98b0f-054c-4caf-a00f-8cc98dc6ce95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.228.133.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8dada2f-bea2-4949-b640-9132168875d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5ed8d4-a52f-47f5-819c-b5306babfb3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ba6a03-6d1e-4c4f-ab74-b353b6635a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.214']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6910e755-96ec-4669-b9b4-f61902108011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81c1783-76f2-4ce3-97f0-5e53b2b07d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.154']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--203ac5c4-0efa-46ce-b86e-3ff3e2e983ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7ad892-9253-4c9f-91ad-7cab603d87bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4009e8-044e-448e-9f3d-ec3b87b8b89a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.133.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953f53af-89cf-4506-aeba-e8cf530fb78b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94918eca-71c3-441f-9f79-88922534b727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c62d82cb-4185-4a28-9b90-123b3795f232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.89']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f31646-d588-4113-96a1-6aad4eb0ab6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.48']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ecc5a17-418e-4a3c-8c7e-545f3c8ce971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.81']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4c9075-56da-401b-8a4d-e2e19c56961f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.190']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8bb0820-de7d-4be5-9e04-8a869f0fe445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.96']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb5641f-727c-4840-9a76-1ac59bd79599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6168292a-e917-4bba-9150-fca9e29f0b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f474a66-535d-482e-8a83-c280dc09070c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd9ed2a-3b53-4baa-8546-6f198f2d5d10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eea4e55-2b21-44a9-9b90-36ceeee67080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f99938c-0d6e-49fa-bb51-cb31cdb38e8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.199']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb589edb-45db-466e-87ab-e0e4622a5caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b04f3b-3ab3-4e9c-9b7a-2bc8cc33959d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--060dc80c-0e11-40e0-b6d8-6245dbac09b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144c0728-3ece-46f4-b38b-c56953ae7143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c961b50-81d2-414a-a826-e9281f8954a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7a668a-1201-420e-9f37-ce32e8d7f494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8758db8-235f-4641-a571-ebf0c8d2dbce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.165']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa29727-4a72-434c-9856-5c679480e939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9629fcec-f6a2-45ce-af57-9d8f7a567084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc459817-27f7-4634-867b-038fe84b2cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c96ce8e-96be-4834-bcc4-440a8f3376e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e3a283-cad6-4b53-8663-51a819c66477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.147.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c8daa6-c271-4777-80ea-ac1a60274279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.147.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc61a18-55d8-46ee-8112-b8fc22d90ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6fff5c-9291-4257-aab6-4a2d646a4aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d9558f-c146-4bc9-a91f-915e8e2cf84c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c046ca-2924-4c14-b7cd-68de2677015b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6338bbb2-bd4d-419c-93d4-4cbf7b5be0ce", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e5e0ac-4082-49f6-bf28-73a218e903a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c18126-589d-410a-96a9-d301154975b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4581b1e6-f6ab-4b16-b016-3261b3161bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef942b69-eee7-4535-8988-bb7ee0246e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.153.228']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c77ecf-8dd0-419a-8bb6-7b9e47783607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.153.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e03eee-3980-4964-8c5b-6ba9d753b3a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4bcaa1-7cac-44af-b8bb-cb0391c38b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509f611f-9d48-4551-9334-5e6353431e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3dab6f-088a-40c4-8d37-33ec6c057ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.158']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f873ca-15fd-4cf2-8c74-d26a53231563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad50073b-97b9-4c52-b617-6e9657116d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675d4009-dd46-4267-9ad9-0bbd4342813c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13267bad-2717-41a1-bdb0-e8b1537a0a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7a5a35-ace4-4b66-9d90-0ae76083c9a2", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84bd916-f92e-4624-b07e-0a0ed3016e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4006e9d9-2f99-4f63-81ad-502be26dd10b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.160.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755f8a56-b057-42a6-b9ae-0565b1cbcab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.168.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808050c3-ea68-48e7-a1d9-b7e83972b2bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c4c3ad-4071-4153-96f6-b43b736e5e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2556eb4d-3dea-46d4-aa80-07bbacc3f03f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.170.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4211b0c0-beb4-4e2e-917f-c448702f9b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.170.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c64f7628-75c8-4950-a2b0-05d0091d1556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d1bc4a-84f7-4493-b97f-6fd8d84e53d9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.172.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb05005-36e1-4f74-a841-3171ca55f96d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.173.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29131d34-7897-46ad-af7e-449bc59924e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.174.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb57cc56-4d96-4046-9c34-9c35cb44b4bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.178.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19305b80-64f5-4539-b481-7384bdc9fe35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa6d015-608a-49e1-b3ec-50776f32a0e0", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.181.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a44c17-c279-423d-8498-3bd63c762e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.181.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9189669c-6bcd-473f-8cd9-9962ca6d175f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.182.165']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d1f9de-e5a2-4acb-9e14-ae38d85e4baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.163']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a52a3e-591d-44d2-a5fc-433519147093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ff456f-1ef0-45a7-a763-9a4103e81cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c256c5-d9ee-4416-8474-1e863424c33e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19838c22-432c-414b-ac9f-435ee20b2c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4c4e28-c41b-426a-9e54-1f34db2d75d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63957123-1ea3-48a4-89bd-24f83d4f4427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.185.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7215aac-7765-47c2-84c8-66b59d93b897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.186.119']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2b76865-ece2-4967-a163-5b7c01934ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.186.240']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a73bc71-ddcd-4057-9fa4-2e97b0e7c1cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.188.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89948ff8-1b90-4200-bd06-fed3423562d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.190.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b033e26f-7918-4d9c-8482-ab203c732d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.191.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597a0cc6-5e5d-4c7c-a58a-a4bdcb5ca08e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c96d2e-ceed-4fea-a300-dbd96d3143a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.159']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0234b142-4315-4b15-b7d6-b153e7dca16a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e6ecca-bc28-42d4-99ec-cedd3be8b01b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c916e344-062b-4d3b-bfed-5cb3ec4102fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58f2773-059f-47bd-853e-da252dddaf7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d359221-6ff6-4810-9663-eca2e3912a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104f372c-03a6-4414-82d8-f62bf31694e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b74c6785-582f-4c44-bec9-5453335db660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3983c529-5fcf-4666-8e8e-e5562e5ce33d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f0dfe83-ff7b-42ca-af77-f4ae3a561655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--748404e5-497f-4f37-8d29-93a33cc89b05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b9d2cc-fc4c-4f90-b9cb-4d18541042c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--668b377e-3edf-4692-a608-3e195d315c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e18a2838-d06a-4a8e-82d8-5b716208e336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d89c460-91c7-4a91-9ad3-49111d5cde6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a903b7-d903-4746-935f-1e02aef38299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e74f1245-909a-4212-a2de-7ac066fe6eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aabdd16-b4be-443c-9bcd-af871342b4f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.203.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107fabe0-7184-47b6-8e68-969b5c70abe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f7cbba-4012-44c4-a50e-edd2325c121a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db45aec-454e-4edd-8a78-b56cff170279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.228']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38a33e5-a097-405e-b30a-b569f4ac5d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0aa6149-1383-4263-b5a1-2248b8206657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9ad84b5-e597-444f-b261-ec6a43812fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91cd06f5-93bc-4145-92db-fb159ef2fc90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.49']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568881e4-1b1d-4f3c-9a10-65005c8040f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.51']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9a0fe9-78dc-4a61-974e-f1cb165faf20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e143ac4-aed8-4b75-8a33-4f25ac34e331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66dcfea2-f7bd-4474-b740-42392cc05bdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd52dc1-9b2d-49f0-8d46-92f2e3ac7be9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b020c899-de42-4ca2-8e4a-30de0a8d306c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.150']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06c051d-37c9-4b7a-be67-1e67f29c0e8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0a5a358-806f-4f72-98c6-186398d237c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97517ed7-fd9e-41ec-9df7-d15f54c2ec72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.197']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8d61b7-a072-41ef-9f1b-a7e725af370a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d08772-abf7-4909-aadf-2fa55e6d19b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.229']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d29860-cc61-4bbd-b7e0-9408be5d39eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03138a59-f18f-43ff-8ce9-19ad26246d00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4569fc-8baf-49e2-b605-202df3bbe11c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1deb480-38c6-44fe-b500-040c066e448c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65744677-a576-4e17-a34c-47872eb82c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85bdeb9c-3b32-4380-8891-1ceef3d75694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.209.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319461c1-6ae3-40cf-a476-d153b1294f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30223458-e1e0-46e7-99a3-b7e29802690f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99bbc358-792a-4c0e-810e-88cf0208ebe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.224']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d3d9f9c-3529-486b-972e-2d6c698b7254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1c2483-482c-4756-adb3-b9f4a87e2ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ac28b4-ed7e-4cf8-be26-da9dd774bbae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9c1c39-8be2-40a4-aad6-4dd945ccf711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.224']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb84b2f0-bf80-46e3-ba74-9cbc4b30db66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbea28f3-3c74-4f03-82dc-2799d6f9a494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db120d08-931e-4f12-8495-fdffecbceee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64429933-b312-4c27-a860-7cf5b33caaf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea03dfdc-711c-4f55-94c1-aa9473231132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ab5b2e-bc81-4565-b536-455225ff1a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac042aa8-bad1-43a2-9c15-00d2fcb9af23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.219.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74516245-4fb6-4353-8c97-965241207046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.220.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ecd553-a8f5-4d0a-9cfe-385aade820f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.220.225']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b384b7-2e15-4fa1-ba0d-6f7c0c197fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07532ccb-a0e3-48d4-a6a5-476f1f42d95e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac88649e-3d5c-46d3-a2f5-1be86347ce6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67b50da-e0ee-47cf-bfaa-17c9c483a278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d71c2b-c1e9-4484-b0c8-271e092f5f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a98a6e6-8fd9-407f-a33b-dab862e28c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d46be4b-d82c-4cb7-a5ac-44334553aa58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9103b7bf-0361-412a-b912-522b9ac3d32a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.228.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa9a672-a78b-4260-be98-c1adf3813b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ba9bf2-3c6c-490e-a703-f94a907a8209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.95']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb79202-e7a9-4b92-8b21-c9a6101cfda1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2631329b-7ac1-4676-8785-90eff6b6bf57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f79584-df7c-4559-9438-9a35fd656a89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b3f6f7-e5dc-4d43-ac77-f534a205aaf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.107']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac47e765-bba1-474d-8a44-39aa1d34effb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.160']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e900f8b-fb5b-4be6-900a-95652a14a4d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247fc913-9210-4e0a-95d2-866a851a580a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c92a090-a693-4adb-845a-2a4f2eec7e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b551b8-a143-4c78-b396-053e2a49783a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e9ad46-0961-49a3-b7dc-6bb521f4178e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.239.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b15754-eda7-411d-9ca1-9050bb1919fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74914023-f048-486a-9913-4252f8243b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fde1ac7-e0da-4f02-9545-32af0ed09b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--729514ac-f346-4da3-9dda-6e63e33448e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a581dd4-4cbd-420a-9007-935fdc833de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041ae8e7-f515-456e-b9c7-29ff5e64e658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a08958-e842-4ac4-84ab-d547e4c12992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c5ba27-7c28-4cf1-b6a2-0f6a4b3a5398", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.250.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded2bb10-d6b9-4652-8b48-f16ac5467471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.251.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d3233e-b8ab-49cc-8461-d3d0b657c4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.251.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2134700d-3aae-4f5a-a67f-b8a527977d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e142477-fa91-44f9-9d3c-c8dc0c3dd60f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.242.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad62d4df-9366-4310-bcf9-b3e709321f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.148.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212741e6-0175-4451-b2aa-a7faa4c0ba62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.191.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0ac414-64ae-4266-a329-1203da8dda5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.3.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6f30aa-b94a-43f1-9fa9-32f8bf04e880", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.70.29.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6173fce-0de8-4d6b-8c49-c04e07c9d39c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.13.56']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7cb6a69-c551-4b02-874a-e113fa004d51", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.26.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e97af5f-9fbb-4891-859b-efba205f42f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.143.165.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--573c59b6-db21-4e03-b205-c7d7d0a2c7a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.151.220.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60625a7c-5170-45e2-9b03-b92efdfea15a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.242.219.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f107067f-db62-4ab9-a7d5-410263da8fd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.34.120.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d9463e-51a9-409f-a233-8d24da1d799c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.37.173.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1646d4a-ed05-4d62-a65b-1a2a8b9b6a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.37.76.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e69553-b183-4137-b43c-0b464b668260", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.0.170.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66920efa-fb33-4b1f-8794-bac96d0b6caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.0.30.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4c2064-a627-46d7-9f60-eb54e9205613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.12.27.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6031046d-f28c-4785-85d5-63785ad66531", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.144.253.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9959d05-b941-4fc4-8077-e0de856c8b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.44.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31af38d0-4129-42b9-821e-8947ba7c90de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.44.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b81e52-81ae-4339-8013-1110839e4693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.44.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4965e29-2d39-4616-9726-5f7beb003f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.44.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaff0eea-df62-4c61-92c7-f61b36092bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.44.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242b5cb6-8847-405d-9a80-7839cf180aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.182.208.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68d006a-13f8-4e8a-b67f-f61fb41d2d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.182.51.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd33d420-3e7a-4cba-9eab-d81775bd42b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab85fd8-f2f5-489c-a60a-17920ebb13b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.209.4.214']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae94cfc-47c7-47c1-977c-0e0f6abb75ff", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.211.13.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70588aff-c788-4697-bfd7-d34f69682421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.213.178.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38cdb59d-8e36-4874-a905-4e4b7e946375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.216.47.165']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb70285-fa8f-4e5b-a726-725d3e885894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.219.96.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--878ba302-f127-42ce-9b36-ebdedfb1f1af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.23.142.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a38ae0-ffe0-4ae5-9746-06d1ecc6cb6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.23.143.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76678cb4-7566-4886-856e-99ea320bd44f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.241.11.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec0f61b3-2f4d-49be-931b-bf8efec5addd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.241.33.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351c52e9-85fe-4f47-96b9-2630db58545c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.242.237.203']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86dc4936-3391-49e8-8232-a546f2b64304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.26.201.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf2932a-434f-4c3e-89ac-79ae12f87f89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.26.202.107']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--263cde24-62a3-475f-b5fd-481929d667d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.26.206.111']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71ba001-97e3-4597-8f13-ab0bb01667b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.31.173.240']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e78fdde-bdcd-41e5-88d4-4adb2afb3eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.43.52.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f936280-361f-4081-80ae-8627daeacc65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.49.122.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a7ae639-d071-4a27-bf0f-24fb8db42f9a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.53.162.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2495b8be-4f21-42db-9248-b4fe6e8c39c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.6.110.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc67ea5-013d-4fff-936d-626fa6370f1b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.61.69.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a0127d-7ba3-4b7e-8820-bfd66731a225", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.72.217.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0b6ea8-bda2-4649-b033-30cc63a4abbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.73.53.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d4f2b2b-bf7f-48c7-9126-afd79ac297b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.8.201.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6475e529-d902-4f78-904c-88201b243408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5231183-b60b-48b8-9328-ed196715dc17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc97d614-39e0-45ca-b7b9-8e23625006d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49be2b4e-c5a2-44ab-8e2d-afd6dc8878c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2966a1d0-22ca-4e63-b1b7-0c94b3094c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9fd591d-27df-4734-b8c8-fdf55d99ce6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbab5298-6614-4bb1-a78a-b566c0845c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e79a3c2-6c8a-4542-ae18-e19ae5850663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32dd1752-122c-4d28-b93e-c1bea0a886f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.92.16.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f58680f-f617-4b31-9ba9-22785bed3528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.93.53.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e5b54b-26fb-471b-85b4-96f86facba30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.94.237.165']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4187942-fc57-4241-a8c3-a5555566846a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.117.120.190']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a78e09b2-8f65-48bf-bfca-2ab61bb9df37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.212.36.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a2f24a-4c42-4a82-aa29-0f822de4264c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.213.129.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16f37dca-2d9f-4740-8e51-e81b491ac0ae", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be25b3e-af0f-4e0d-a42a-0f249507fb7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9441f4-c92b-4ece-9c55-d7c57e0d4cef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3c05be-a45b-4163-96cb-fafc8f57d467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414e4b20-005d-496c-ba6b-2efc5fe17657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a614cbf4-e776-4b64-bdcb-b33ec613f1f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5e77e22-e543-4b51-856d-afd9784cc840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b877f6f-41c5-44d1-9d0b-91e422eb13f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.235.109']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9513e0e3-9eae-4c96-ac01-73bbdfccf55c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.235.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6074e52-e0a8-41d8-b9c0-c4c6b31c13f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.235.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b060445c-9014-4f48-8da0-0e0c0a51b0aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.236.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b5b0fef-dc9b-4fc9-8c51-da61a7120cd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.236.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f0a7036-4b45-45b9-85d5-eb3d507082bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.236.76']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffe49f54-79b5-4c06-9f54-7556645b991e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.237.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f8cf0c-9963-44f2-aea8-e0535b995544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.237.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f6f433-7d61-4eae-9958-657c3501d485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.227.237.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb4f680-f354-436a-bba1-2e6d61c898b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.228.4.161']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c512410c-abbd-4c75-81d7-4c3bea4bfbbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.228.4.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf5b1b5-dcb6-4f82-b35c-c96eecc0bfa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.233.235.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6c4bdd-8a36-4cc4-a951-9453f7c50a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.236.74.147']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8baf2b04-dc57-476e-9dc8-a677c9393b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.236.75.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c89c809-2d1c-4efd-9f37-28d8986cd1f8", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.239.235.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ffa0fb-d71b-4bd6-9466-78da22557859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.59.197.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2629aa8a-10d8-458a-9f70-a72d4c622d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.67.31.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0a6468-fdc1-44b8-89a1-144c0b640870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.45.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--178325bb-3253-4834-b2b4-fb33ce344f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.53.135']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f04876-2a53-431e-871f-e204f04a3627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.15.58.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2950f978-9c08-4662-a89a-64a76f801956", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.173.122.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d6ae85-0380-4b93-8f95-ef4b677404d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.20.144.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39013261-c6fd-4e5e-aff3-0a5b43751c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.20.32.158']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29987044-7f12-4053-ab58-945b0c0ad7f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.22.18.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be57a676-46dc-439b-8d43-abdd6c58f106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.22.75.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68eefbb0-3841-40b8-91b6-184686cda242", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.101.158']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1659506-a1b5-4301-91a4-c96915641c21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.129.55']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef87e524-4786-47a8-bde3-f821ed726c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.146.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a69e00d-8f5f-4592-bb37-562afbd7906c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.164.56']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a406cb2-cc3d-4500-9584-705485a55daa", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.57.183']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db773030-d3b1-4a68-8b58-68920e61850b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.136.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23cae64d-35ca-4994-8e74-c6094b48ecb3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.147.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f971c4c5-6283-4aad-872c-4d1fb8719c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.170.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc43c3f3-7228-4c71-8ce5-ec53446bafa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.184.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7b6f88-86ce-42fc-a651-0d68df3f4ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.222.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--346a3af8-af73-4f00-bc77-7025141c831d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.69.32']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02354c4b-1657-44cb-a06a-6992e3c2844e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.254.194.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f8b996-57a3-4652-bdc1-f5f8baf4784f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.254.194.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b442886-bd9b-4901-ba99-7d898e5268a3", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.51.234.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8bb198-9716-4925-b0e6-406fd5e96195", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.225']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--747d58c2-4ff3-45c2-90c6-3ec00e415d31", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aad8cf3-715e-4e67-95a8-336dbf92f8ba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf893325-8de6-4435-9e5d-3dd2af70258e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.66.26.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebfc633f-562a-468c-be5f-16416e18ec6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.20.109']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c929980c-d1aa-4784-8ce4-dd8279156cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.224.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83afa87d-c168-49cf-86f2-c2c24f5e46ec", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.109.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0159ffbb-cf5c-47e9-9fa3-2c993b774c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.86.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf21e0a-1ae3-49d8-bfba-5b0a58826261", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.23.48.109']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1810ae-c492-4509-b121-b4cb62757d66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.208.120']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2938fe-4008-4dba-acb8-73b9ac2c99b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.208.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02cdbf07-399f-41a2-a71a-dc317b4d550e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c73b49-3b43-4780-9ddc-d695667d1847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.211.49']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6509a4c-bf54-4421-ba50-00f4f582589b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.176.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f044c432-0fd3-4035-8bdd-62fb4a598268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.191.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af71107-af10-4cb8-8d8b-05080a477906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.29.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--604c1a0a-6c53-43b5-8cee-b39403f8b60a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.0.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba908f0-53ff-4950-9e5d-5c69d53a5ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.119.176']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c839b7-5024-4d65-86d3-1b770b839234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.125.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04cbe945-1e64-4721-94e2-60b85aed0d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.203.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79164b00-f8b0-44e6-99f4-ece47c0ae1d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.231.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3f877a-f6ea-41d7-a2b4-544d97a02b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.42.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a92c079-55d5-48b6-bbe3-516da0fc3172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.50.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5a4d2c1-cb68-47f1-863b-b28bae182502", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.80.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93eda90c-6e00-4df5-8b7d-78bc4a00cc29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.99.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1227ac3-257b-48c5-88ec-e07ed877f9bc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.152.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d56700b-dc19-4449-9fc7-62fb02f09f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.233.253']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769d64c7-c206-420f-9396-988c75046cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.55.228']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e09be6-fe08-48ac-aaef-988d5fdaf482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.68.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d62115-2901-485f-9a66-d48fe01ac8fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.75.12.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--865e82f1-daeb-4422-a2c2-78c16ab67515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.124.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d45390-2133-4c20-b85d-14f3852ee17f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.127.190']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4d4baf-d829-4d90-a2c8-810d8e2dbc58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.138.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0216c51-d27f-498e-96de-50385e2790a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.226.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ee46f7-b652-4da3-88fc-9bc7a31198e2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.253.222']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--826786fc-f057-4d39-ab5c-ffa39f5ce8ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0e8c27-f0b4-4fe3-84cc-9e9021a55f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d845573a-e6a0-44cb-a326-3b82cc831ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d267da21-8007-4ac8-b267-dac768b98e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b19da5c-8ae6-409e-918f-e0477549099d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83abee6d-c4ab-4732-903a-b252e9d7968d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc9eb5fa-821d-468e-8267-3d251329056e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.124.94.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8752ec60-a456-4234-b66c-fb6b533e2616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.187.146.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f394cda-c4f2-4bd3-9e56-7cd60b4585c1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.22.18.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae5ddb43-46c6-469b-b2fe-cc267864ad8e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.22.193.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c910cf7-223e-4f2e-af0e-0b0043c9c4a3", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.132.107.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9dd3d09-fd7a-409e-9419-d4526415d370", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.132.168.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6ef759-75c8-4076-ab5e-809016d0baf5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.132.243.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acaf172d-6194-4eaa-8cbc-a9afa810a0e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.132.52.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29cfd270-5092-421b-b994-9357876e5bbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.111.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5be655e-58c5-451b-9f3c-1be43a9f65ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.155.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb7dc96-25a4-415f-b85e-c4ae33d34a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.169.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18544049-7fb5-49fc-b4e2-c47da077ab5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.190.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac15451-9a37-4bd6-8b16-ded49d105ac9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.97.154.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e8a7944-7b2d-401a-bc97-56d2dc7d1141", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.14.66.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58d968c-fd5d-4e7b-990a-b4cf6c92221e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.19.250.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b880c2-4553-48d2-9886-96797f7deecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.19.74.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7827c2-ecc8-495e-b544-252c1c8446d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.210.245.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57613ab9-cf94-442a-9ef7-dad2c25cf3bf", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.76.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca54aa35-1972-48a6-ae45-334e503a5dfc", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.142.81']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327df584-97a6-4191-8f60-22694bcc0621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e843eb3-1762-4bb6-a775-2ceccb5cf899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9216a26f-9233-4179-8d8b-431df4fae023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567141bf-c0cd-418d-b7c7-3decf4fa4dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f335af6a-77dd-4237-8c6d-e482d0c6d0c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--701fdb20-0dfd-4aaf-9e44-5fa2f7b6f1b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af182175-c29f-4778-9347-fe40da8d4414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61a200d-3abc-4cb3-b86d-85ed38ed21c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101eec15-a768-4c1f-98a7-8e9d6f466f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12cf934-a801-4dd7-a670-59d6c1027da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3528747f-6298-4c36-9cc7-4e7caa29965c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.120']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9636b27-f74f-4ab1-abf2-729b81087c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af49b74-08ad-4306-83f0-f363df0d9d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76cfbdce-c44a-4d55-adbe-a226b2197674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93007409-c5bf-4c97-987d-81e2242b3b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c22fd9a-feef-4840-9c6f-6b2c827e67c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--807d7e71-e93c-4875-bb05-629e49ccf654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e810f4-d318-442e-a503-4b84e044835a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b512650-7649-4e97-a6b3-6e9e5b35be55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d193978-4dd8-4e42-8823-ceccd773ccc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.147']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2edd2039-5988-490a-a01c-34b717a887df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96ad2b7-9d12-4501-bd71-f65334f3f01c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--930b26e0-0faa-468f-9f6c-c93e35254cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.150']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23abb6f-b0c7-4733-afa0-09141bc33ef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d956cd3-e05c-4eb4-afaa-6a7912bbf9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564e637e-2bf1-4f8b-9073-721aabaa5972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.154']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ffe082-eaa1-47c3-b91d-4541f06cd84d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.158']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1cfaae-53ad-4b87-865a-a370d7c7e844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873b8ccf-5709-4a44-b380-3a376e1670cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.163']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f8f1fe-d688-4f4c-aa88-5f98af7d2f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.165']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4330f9be-d248-45b8-8123-d93b7c08ebc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d268b07e-bee1-4bdf-b806-d58fdfea9475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68331c46-24f5-4bd4-82e6-7a54d2b41696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210c9d52-67ff-45b7-b995-546461c76925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cfee896-3882-415e-bc28-1f9a6e3999bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.178']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1f82ec-9c88-42cd-9c6c-c817c34757c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69cab112-9d52-4a57-8914-0b1dae2d6d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.181']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f2556c-2593-43cb-bc7e-f3e30824c4aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93905183-12e8-453f-a3d8-2cb57358f5be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8c213c-444c-4156-a5ca-1b41afcb1c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.197']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2498d8ef-63a0-44a4-a5bf-1aff2b07974e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.199']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b37fce-2c3b-421c-a7ad-ec17e661f08b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a2d178-09cd-4c44-ac81-b051c769ebc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--023cf1d3-e1bd-4c37-ac77-0411d8e3a3e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe253441-29a3-458b-a89a-3c552b928991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30de9465-f5ea-4b59-8193-1cc79a53b2e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e45ff332-b3b6-43b1-83f5-61bf1d790099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.214']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f5e3ffe-74cd-4860-9144-9d8d5b1dc919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.216']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927f8274-5a38-46b9-ad67-40b53b2d2f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00832db9-c7ab-4ac1-99c3-b3e1d5cf7044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5fe682-111f-4902-be1a-255322230380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e16da4-857d-4564-a0e4-740dbb5ff53d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d06e61b-9754-41d9-a10a-38ccc1f668d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80554685-9742-4d0b-9307-044cc826d2c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e1354a-9eca-4a83-b522-b82b6e0ec655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707508c3-f732-44a6-8e0a-ef4b906d3bac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030cf512-c358-4e9a-8413-8973c78d30b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66e913f-5381-4906-af4f-57eed2c0062e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b01c8d93-a853-4d07-ad8f-76165b7d0319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e2f380-eba4-40a9-848e-c53665cde8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eadc168-3e78-4c05-902b-35d347daa00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c49dc1a1-3fad-406b-8345-f6cb6011e877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc22dab-37a4-4a50-ba7b-0a7a4fc35e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.48']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceee8065-980d-4685-b61a-9866f53ce365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d8d004-83b7-4def-84c5-49a1043c9a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.51']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a34a6b54-da38-4b33-991e-72668e3e6dd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.55']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a2a0ca7-441a-4a86-b556-9062fcf491b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.56']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfe41f7-de99-4795-8c98-f76db233dd6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c1ef23-b413-4e43-a135-451f9d3e1d70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96735ede-3992-4a37-9eb1-086b4c486a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.63']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43fe2c9-f101-4880-af49-fadd1c8b1d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b89fa1-1a6c-4fdb-a2ea-85efd2b63b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5368d074-d9e8-406a-b0df-20c1baffe650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f32a758-3940-4226-b3b5-51e124410da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5557c3-3243-4721-9037-801864f2f304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b469367b-8c22-427c-9741-5bff1887d1cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba973f2d-0a6d-48a7-8875-536915aa4fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33277402-ef3d-4b7e-a456-c709dff5e682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f1a472-16e9-47a2-b8ae-03e587c58e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d67128-ac11-4bec-aaae-4b12a7623860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe3ccdeb-2971-45a9-a075-1cb4c4e1c8d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.95']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb81c2e-4699-4632-aa29-c897fa940ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5e896f-9e65-4ace-925a-4db5768f9abd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.109']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9424a3b-db8f-40fb-8216-6f2276bc5fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f039e9-cb52-40b4-aa12-02a27c3faef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5832875c-f881-4311-a4f6-bc45ac82ba67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11301517-9b7c-4ec6-9387-5310896a1ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.119']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43cff1b4-f695-4a28-b673-1ad6c628120b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4480acad-ae11-4f7b-8087-76ef8809b1ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b3ced88-7cf8-4020-8041-c1230d77c144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1600417e-9f40-4990-9f28-1cb47a55a615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.129']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f574bb48-9ac6-4072-ab31-a6283976c0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ac3376-371d-494a-90d9-21d75d9bf194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2a41c2-897d-4841-9ce5-0cedb6362b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b1dd47-39e8-4dfa-b145-8b2a532cc614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03abc1c1-ba86-46f5-a9d8-0f282c8f4e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15c09d6-6bbd-431a-bc4b-891088947149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5be4828-ab6e-4a4c-bba2-eb4288e3dd78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.144']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5aef97b-e0c2-401d-99d0-a7b6cd60d26e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d309fe63-afd1-42ee-9651-21a5cd70b059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db285755-87be-442d-8475-9fb673f89bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd4c0df7-8702-414c-bb35-e57dbb3f9629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.150']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f115266-b44c-4b02-9587-6831c4f7815b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390e659b-14a4-4501-a2e8-1e6bfced62d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.153']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e90a46-0ab0-444d-94b6-48d69de1a88e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.154']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9418e924-33cb-4149-9c4d-80ef0f2e9b94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14981a56-b2c1-4587-9be2-e4c745d62993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.163']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6660ef-c750-40a4-b998-7a35732bf353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0beead2-9d1d-42f8-ad7b-0cd7c4698f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360f234b-6aa3-4d5c-8877-060321ca21cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7403ff1-58fb-4499-853d-4fd473baf732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314c1cd1-5f62-478f-b690-f435404def90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e342a6ed-d836-4302-826e-9c81542f9d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae8f54e3-8ca9-4142-9258-c889abb21ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.181']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b80d9b-8203-46ea-bbdf-2b6f3f7edf9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d43f831-a631-4b34-baa6-4d9fbdf36ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b868a4-cc53-40bd-8f61-b94cfa168dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8566bd-e974-492d-b096-3eaf4295f783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537fc317-94be-4b2e-bea7-3e1beaf5a30e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39b5fdb-290b-4788-873e-ac1e8815f852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--695ab191-bf0f-436c-b6af-13b3580b55dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fafcdf3-ff60-4564-9e5e-aa3d42d95873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2af69c-a41e-4399-8c65-89db655254ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9fe4b3-eaf4-4a3a-82cc-3253abdb6e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a4144dc-7b9b-499d-84f6-596fc1e48eaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.197']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff268f6-d650-4601-886a-ea668256116b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.203']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59350dc-808f-4073-9c29-05e450f0a822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c69231-7871-4555-8e77-b20c3e9562e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b09a8e-2aca-4bfd-b01a-4547e80112ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d329a261-9b3a-4b97-ae50-d61963001f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f36bb9-a3c2-4089-b2b7-2353e9a0b5a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.216']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18769b46-485e-46f8-a445-393e1a379792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb426cee-9f8b-4be9-9eb0-0e520c767646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69869c0-77cf-4813-876d-d1a55719f3b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15f41f5-4ef6-4648-b815-248c19073dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.225']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d45f03b-0fe5-4dc8-a76f-48744c7bc1bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d6c212-0dba-442e-9768-e23ff892cc07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff73b29-888a-4f0e-9fd2-8871ea0914ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7830b75-7213-4759-8d94-3c49434e0358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842f1199-79d9-45de-9e05-bf2bbe50ab78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fcbba35-b977-4e92-a1ee-f0b403acb9ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b346bfe-20b9-484b-9a03-ebdc9ff8cce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ebd130-0367-4934-ba1f-7cd91ca912ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c03b9c-284a-40b9-a51c-2aab04d9b9b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.248']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b3b790-703a-441b-b93e-d49b1a371667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.249']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b6609d-86f9-449e-9ba4-cee2ca95c5a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7146db14-2e9a-43fb-aec1-19493d1b1caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e4f1e4-bef1-448a-9641-ad4008b445b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.32']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d291f1-d0ef-40a3-8285-b99103436c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4031cfd3-3edc-4549-8b7c-8a53a593b2f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aedfc31-4839-466e-a295-17b3d38a5228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c788e159-2ac3-4cb0-9d36-adada7730885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.46']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3d74d0-8708-44fa-ac6c-9fd5fc5c5481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.48']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bbb8c9c-757c-4874-a08c-685be93e5428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b40897-5adf-4ad6-b47b-c5eb5ee37132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.51']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7143fe-007e-4ece-a2fc-62946a9c5335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdc1a7d4-2c3b-4aef-9561-460c19cb3806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.63']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fdb3814-5d13-46cf-b20d-636526e84448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5af5702-8bf0-4808-a369-e1db391cfff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0980e7b3-4587-4fb3-86fe-644b67ad1985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.79']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a95e7c4-2c6e-4f06-928e-196ee7e2f89a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d744fe25-103c-45f5-9afc-b3b0459057c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.89']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813ca483-4a4c-44b2-a78c-41e00159cbd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.96']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c0539d-ea0b-40e3-a387-b2882035d7ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff0d6aa-8444-407d-9f31-7eaf08193a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12901e36-66f3-4d22-b0f5-27862abb16b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.100.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678b0728-cb34-4196-8c20-9b55c09452d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.100.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f760b888-2224-4053-a625-9ee3340c64d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.100.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a365697-f099-4a18-beda-a115ed424a36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.100.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501de234-3b60-4206-b7b4-61c58661541f", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.103.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d97bd670-2462-4f3f-93fb-0f115ea7dac1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.8.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7907e28-3bba-44b9-a4d9-abd10c4c46b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.245.189.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c299d4-4cee-4fb5-93f9-17e425dc1e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.33.179.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3cc8bdf-0b8c-4a0d-a1dc-7c89436d7e5b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.132.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed55a0a6-8b8d-4936-a378-e910777d3f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.213.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe5b759-5827-4790-8a95-2f47da24b3cc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.128.56.49']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813811a3-060c-48c9-8341-65385ceb39f0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.223.191.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d191d626-5bdf-406c-a8c9-7b507e852a59", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.47.40.147']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3987de9-25f6-491f-8226-deb21e2eadb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.61.91.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b9a454-a5b9-4aee-a4d4-bd3cdfd5f8e0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.5.147']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef5ee69-ae36-45ce-8a5e-bbb1c8550e80", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.6.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb37759b-a443-4fe5-9012-b44985117de5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.9.84']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5160129d-991d-471c-b33e-cc14b3f36d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.52.24.181']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f887317e-f1e0-43f9-919e-2a4e57c051d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.52.24.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--488e38f2-9138-4a02-9ffe-84db3563a037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.68.120.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6903a480-4393-479c-8c1e-940a91f03560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.187.225']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d08cff5-d131-4645-9f4f-07db217d3955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.106.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--704a6b2d-5803-4ef4-8704-a5ef1783b522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.114.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68963d00-bc29-43ff-82c1-484365991978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.117.229']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef58f465-588a-46d1-8e68-ef3df2896c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.159.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a8e56b-ca5f-404e-9422-45dcfb3597d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.161.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--479c394b-b643-4791-b4d8-2f36d44c8e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.82.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93c1147-fc69-4c92-a96b-85d09cdcc283", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.1.64.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ccf6df0-6e46-42e0-8a63-9ebdda1afd61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6825da2c-0e79-46dd-80b5-ac28755c156c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.56']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ce78f1-72a2-44c9-b6dd-2e5fd58792a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a9358f-3d80-4b72-a506-a80d20579695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.104.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5821929-312e-4ae2-8f2f-e939913d2bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f488a578-fc07-47d5-99f0-df498f64dd85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91416fa7-98a6-417a-b67f-7285e516ed7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71677a73-49ba-42c0-b3eb-9bbaf61d1987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.225']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a8a3a27-2044-4989-bc10-8837edb5bd19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--983c2360-a6ec-4ba0-b456-27c72ff0b92e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.48']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d8bac8-eda6-4813-939f-38e42c3b1e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.119.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0e5196-cd53-4d5d-b34e-b094619c89a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60a499b-ff26-4a75-b40a-fee842ea2383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2360d159-63c8-49a9-9bfd-1df485e3a795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893367a5-4ad5-4b8a-8d81-a3e20f8a6511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6eb2b0-e848-46d7-8f7c-c4e044f68415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d806f36-93f0-44d5-af42-c35d4d3300ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f75184-e668-43ef-a7aa-a9c3e99307eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.253']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373b35fc-e3fd-4de3-b363-a428191029a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6b95b4-c8f8-4335-ba0b-060b76a914bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df87bba-ed21-45e8-b028-749381f7d850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.89']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b172889-33af-47ad-b0d3-906dcc87fa68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd1d2d0-1877-464f-9336-5ac0f0da09d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.199']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00cdf518-f67e-43a8-8d67-2f47d5f013c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d55b71-9d91-4f21-8dd6-7ea7bc297668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43afaed9-63ef-4751-8482-828d6c4202ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78945510-11ce-472d-816f-c677322c5cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45c924a-9b7b-4f27-8a26-f392f34ff5ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf5f42a-64be-4888-b38d-ba3b439ba646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ee5e5f-5709-4e08-bf0a-b14927414ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde0d60d-9f42-4685-b676-5f8f5846d069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7efb918-c2c9-42a8-b882-c8c2e2f02d70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.203']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68048065-a93e-44d0-b263-36dd34f37b4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad17a0c-c47f-446d-9abe-2141931075c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a534d72c-b42e-4b0a-b14c-772030bd9780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74bb9c47-cfe0-46f7-8163-aac38b25cb03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.119']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9b593b-d07b-44bf-9ddb-fb846664ce3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d899c4c8-5aca-4dc8-9fd1-61703708d1de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.161']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c21f86-b7de-4bc6-8f0a-233375db2bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa1d8cb-78ef-4001-bd16-f38568ed91fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.222']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--596ad901-4427-48af-9cac-91202495689b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df61ff5-50ac-4fa3-b571-32752c3fea51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39aaf050-1418-410f-bf60-56b898c58fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd9e397-c6d1-4a29-bea9-eb7c1ea5c103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c3b57b-4704-4fd1-89d1-465e9ccb3013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d167e1-8c34-4e79-9beb-35e816c2e16d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e2c12b-0a7a-4c4d-8966-d86558854f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.147.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5aaf53b-b412-4806-8d62-6d5b09b174a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.147.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c967ec0-4aac-4936-b6fe-35f3e433633b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.147.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d90bb7-b66d-4acf-9f55-a3d95c572389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.147.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584fc37b-a7f5-4860-81be-64e4ffd5e38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.150.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5606c370-5442-4f75-8362-ceb0fb940d45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.176']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d595dde-b077-431a-b961-0ae30284ed1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7022c309-7efb-4d14-b88d-ef9592151af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a4bcfe-0324-4845-b361-ef729b39351f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4fb51b-2377-41a8-8392-a3c4a408d3e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.81']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ada0829-fb89-41ee-913e-adbd4cfef420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b14f8f5-56cc-4d86-a983-48c6f2fa7d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e72929-8c86-49ac-82b8-f74cb2f8a55b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65ee9f8-2d4f-435e-95a1-217242875f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92de750-9360-45f4-8bcf-c94fad0d7335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc84bc27-efc7-4473-b9cf-bce34fae8293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.199']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da4d66a2-9137-4e31-aaa9-bf1798a242f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec6ed28-eb76-4d39-8c66-21ca0090e522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf2438c-f3f6-4426-88d2-a2061c7d7147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da9c551-a4d4-4555-bcea-52ef5800d157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d41d51eb-5a02-4729-bbff-024960c59b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae35587-843f-4f49-897c-05cf2fb481be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.111']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739ec999-80a2-4b01-9f01-02a9565e2a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2620d46-337e-4dae-969a-9297088f50bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9f5826-48f4-4114-a6d4-6730ada83077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8951d3a-0f35-4e97-8460-2c2b48570807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d810942-00f0-4420-a059-bfd8828d55ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f65e10-1948-48cc-a175-c251e0707ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273bde96-0caf-4275-a0c2-95e0e4e0c037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c994ff9f-4d6c-41da-b4db-7a864def93b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a162b63f-e771-43fb-a814-99714a3c751c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35fab9c1-777f-44cd-a8a4-252e343de76d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe2a511-bddc-4f6a-9e56-fef02144a4fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e89908-7d33-4229-8a39-bf39af403f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60919dc-906b-4108-937d-faab1752475e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.120']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64859493-a91c-4d92-b115-e40eb1a49406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e323ecb3-dd1b-4d0d-ac0b-6c716ac0439a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a7c2e5-1ef6-4da4-8bec-e88b9a9ec2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cba7e2e-0b97-454f-a69e-fbfd1d4455be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--491877f9-36d2-4ec1-96c6-0348abe2c855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5935fea-bbab-4ffc-8cd8-2fc193774688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a3f4a7-7177-4ab9-a6a9-323255f87b3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de55351c-bd5f-498e-b0ee-5fae98ea481d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.176.251']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--217e1c69-4d9f-485f-950a-e617a5c33539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.154']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd536386-3b94-44fb-b3d6-2c17c073c317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f609fc47-748f-475c-9e6c-461f967ed4ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28099ce2-9f76-46a5-8367-967e0c4fd407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19fe0c9c-7cb7-47a7-9bf4-e4047c9db5fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13033248-f7c4-45e2-8e24-3d6fa4cdeea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be202ae-274b-4d0c-8484-5f3ed418166b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f51c48d-5203-449c-ab96-5bbc4e43d6ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455ed163-130a-4a30-887a-7a99fdc5d779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d93131-9f1e-479c-9e33-6733c007a370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28fff7e2-1335-42fe-b3fa-5a962e964470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ddacc5-07f3-4b73-9f9d-ab246799bde6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.187.159']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--492a714b-57fc-4cc5-b504-ba3712933769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.193.135']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1cc504a-538f-4649-9e15-782366328a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.193.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9b1b16-a45e-4e87-8032-bab54dee6bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.193.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15863596-e703-4c90-a8d1-f9cd7900c7fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.200.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f1e3bc-ade7-4ca4-8a6e-0a4d17125616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cfce75c-ba8f-4c63-8a92-618731ab50f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c1d5e4-5902-4913-9088-152fe9c9dd44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1891f52f-7306-4ff1-b440-2e4ce87d41b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5f1ded-b9ef-4730-8994-898382857cc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e471b244-dd82-444d-9abe-47737fdc3dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.222']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c0399d-bece-420b-8905-767a68d92ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d4028c-5094-4df7-b353-7a5d32609135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0273b7-3fe6-4167-8e37-4bd832703099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848e83e7-0017-4f04-9188-7ba1e1d33d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316b49b5-5679-45b6-8a70-b59901e4fc02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.23.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2939d2-67f5-49b3-8f7c-6a3c3b0416d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.245.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c849309f-bad5-4eee-9695-c12504bec4cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc42baf-cc77-47fa-8305-28e8c8a400b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.144']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1e4f269-7804-4e69-abbd-ac05487d7a7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0310986f-f8fc-489e-8cff-00a498d32277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b1bb965-b408-4faf-987d-81d84505a6c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.32.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ef8334-a28f-478e-b8b9-43604543ad43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--486dcf33-a33d-42c1-bf5b-c66928b971be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242838b6-c5b8-4cdb-a265-65e1a5658486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.107']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc3482e-6557-4040-b1d0-1c026db2ec5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--863b0fba-fae3-4fcc-ba94-105c4ff87efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a58dd4a-7807-4a8a-ad75-7646534ce496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f40c7a-0e56-40d1-bfb0-584a6c9200bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72a6746-0fec-4383-b1f2-5c8d04bdba56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19626e8e-b631-40f6-9dec-072d7f86caba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ced43b5-803b-44e8-af4a-f52379beb9f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--980a9446-1aa4-460c-9e2d-ce6be72eb4a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c5d48a7-3172-4c24-b87f-aa1e381f3df5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77224fab-095f-4602-86fd-355b4be213db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b7ee1e-bd3b-43b8-a086-157db7aaa6d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa78045e-9b84-4dab-af46-0675388b83a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8b62fa6-7fe4-4a2c-ae8d-707ec2367fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1bbe1b3-d6ea-4b75-816f-f68371868cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d1678b-1b6b-4465-896b-18ba7320dc4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11028f9c-99df-47e8-b84c-0728634d7abd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aac3e04-698c-4c47-b9cd-5a21dc1b38b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1149b8a-f70e-4530-9448-11ed2f8e7d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5197a36-f0b5-4ca9-8d1c-62e900e4bfda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.56']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b17b78-7292-42d9-8166-447a7d623546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23adf21a-dc28-4d4c-be3a-59592eb3122a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93b611b-632e-4cf8-ba01-8ae2c5d0a7d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.42.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448f2254-a91b-4d67-a2d5-da84275c9e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.43.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a3076c-d024-4c14-9bef-f58a22f676ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.45.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b797af5-ce3b-49f6-9b4d-485427e2342c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.160']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffcd88c5-a452-4e78-91a4-7a9f50b0c179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f7abca-9f89-427d-afa6-136df1b478af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c557ae9-470e-4435-96bf-90af8c7f476a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21821d35-c76d-417f-bda5-c85848378a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee4ec94-f633-4d9e-b5e2-293bdc281010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.58.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b3c6240-954e-442f-9000-eb5fb62232c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.58.251']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db324964-0261-40d5-8b21-25bdad32db64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.59.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18fd3d55-e91a-4d92-b04c-9e23063158da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.59.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2665906-de80-48bc-8b7a-1b600767e134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.6.224']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf43dd8-eec8-4c27-b08e-eda5a3aa568a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.172.165']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669b28a5-802a-4f3d-a24e-ed5ddf84639e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.181.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb87005-6d5e-450a-a027-1d0a186fc226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.224.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e0cf5e-6fd5-48f6-add5-e26edea1cc01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.60.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54628dae-4313-4ee9-bbdb-c719667b4c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.110.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46bfd862-67bb-4b29-9443-1361f18c2c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.16.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51e79ff-1965-48c7-9b9a-b8747ec215de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.172.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d15d2e92-26b6-4b4f-863d-4879a614ece5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.188.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac6fe05-efe0-4557-b3f5-2898023a7242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.194.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de0eb5aa-5ccd-47f3-a097-0da47cff5bdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.21.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14a5261-d56c-4801-9a33-4e39b2b20d4f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.218.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cfce4af-4056-466f-b4ca-03ff4b1b99c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.231.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21daa58-394b-4e09-9f3c-c41f8cd3c33d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.26.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3999028-32eb-40ad-8ced-465fcfdf2c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.47.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5f3cce-7690-47ca-be7a-466d2149c5a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.55.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38c2c6a-7afe-44a4-9266-78b4d2827a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.57.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c30af4-3f2d-4596-876a-6d926c9d5297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.62.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d32185-2ba9-4ca5-8c75-d552b11811bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.84.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b505ba-2678-4222-8517-69c88f9033a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.9.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a85653d-93bb-4e08-bf68-3bb7c8cdf109", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.143.119']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728bcfa1-5ff9-4b5c-ad7d-34cd48474d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.73.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--795f0685-8e9c-4cd6-b551-db280882be21", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.189.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72bfb186-67bb-4e10-bc7d-384ef27746f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.241.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a868802-30a4-4cbe-86ce-5bb0a4599471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.243.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b0a5b1-ee80-453a-a7ea-9f4f9d03d5f5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.99.21.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--633df143-acc4-4e91-9d73-5d02c87fcc02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.223.63']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97472b60-4fa7-4206-81bc-ef640323e8ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.38.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4730956d-7728-448d-b8fd-d69c2618cb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.28.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f53f71-f521-4d4d-935d-927b099f09e6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.72.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc6009b-edfc-47b6-96d8-53f1678adfc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2082dac-019a-46d3-9737-584f4a52142c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9848865-3cfd-4373-b8db-dfa677f9582d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ca52aa-b412-4898-90d0-f1702de77bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f79404-4d75-49a9-a5f3-d86b43c8a42e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--092e0702-578b-4504-b39d-8479fdd329d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--089e3d97-c13e-4ef8-8ae3-46b337c40ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e59b6b-7173-43ac-85ea-5cf74a326cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac1beb6-eae7-4da9-9eea-e15e3fff5648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27d5cd4-2b97-4c2a-865c-d3f5bb7eb9d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa661531-2835-425f-8da3-4a8f92cf9b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f96990-8f79-46f2-a428-344adfc74ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d79adcf-5c23-4f88-9abe-721c32617966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ed82fd-054a-4a35-9a93-3ef2928a5995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6061459-abf0-4e9b-83df-35f0acc57bbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02dbc8a7-8ab1-47e3-8645-0949c22e6f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842c16de-55c7-4a56-a0a4-16a475787098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--119f4fd9-047d-4b1b-a5f5-5f7c398796be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.32']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcca90b2-d8cd-46b4-a660-b3c286e75f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad21a898-9807-4942-b1fc-c996930f0334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e4cffae-c178-4bcc-ac31-4dcc83d359ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff6db20-1558-4ff6-b1df-a12be5bf0e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7564c0f-a97f-40e7-8661-7006919a689c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f53d74b-367f-461e-90cc-7c8cf9820195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7aa4bad-9b89-4eac-9d52-ce65782dd7b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc08813-047f-4e87-b0f2-1f36ba75940d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7112d611-7fb5-4341-91f7-4a9d53e08144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ef9369-45ea-4680-8a03-5141a3079d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbfb287-2c38-459c-b0b2-49b7923f5357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f504515a-d6a1-49d2-bfff-084bc32aa1bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b72333-bf1e-4915-91dc-3424cd8fe1b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e5f453-1095-42fd-9ab1-f4ab4fbaa3e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.46']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dabb96bc-e5ba-406f-9b55-eec9f314c9b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b063b91-7322-4f5e-8eff-7cb1cedfb98a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.49']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1bc504b-0618-4f4d-ba5e-a48b2e177783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c87569-a078-412e-a4d7-3ff59a4b0256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0248872-159e-4f62-a822-36cd7bc1a027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a2db75-ff0c-4e01-bfab-c7e759087f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.56']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544417d9-30ca-4193-91e8-c9b8bfbceb35", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e2aea2-5abf-46bf-8b02-76abe70f28fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.63']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--977c3442-f559-4610-b3fa-1041f86c1490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ecaeab3-7b2a-4234-986e-678433665e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b178a7b-398c-4c32-822c-21922be70d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a7057b-fb0c-429f-9e27-ea3566a4f49d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc7914e-c37c-431a-8e9d-144ac041ac70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed89ff5b-cff6-4461-ad29-4ea38e0559a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da5a8e0d-9dc0-4552-b681-8299dc780975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.76']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110a4c2b-d7af-4a46-b561-c0e565c02b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5930ba45-9afa-4ad9-b5ef-b8724c49e0f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.79']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d55f3a66-31f0-45ab-bfc4-6a0b50ec2b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.107.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6d32aa-50e7-4f95-88ff-c6c3d4e45dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.109.228']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be6f99b-5c64-4c4b-b4f6-dd2fed3bc02b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.13.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38d02fe-5bc6-4897-bef5-cd4c1025e4b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.131.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4b90d0-8c36-4062-bfe8-8bde2cb9e121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.188.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c5891d-b375-4140-8cc5-d8da0bf5b30c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.211.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd727b49-f3a3-4078-8f39-efe1cca566e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.225.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc01463-a868-4701-84ee-3e798aa2db38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.227.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e495b9c8-8fe1-4971-9eea-2420d91e5bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.107.36.135']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140b60af-4deb-4e91-8905-fdc7ed4a0730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c18604c-7126-4f26-b4f6-8fe15725883a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.145.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c862d5-0988-4291-8723-70de46e69e9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.171.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65167829-94c0-47e5-81c4-cfff593b7081", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.181.64.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b888b7-bf9c-469e-9569-bd5c8aaa03cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.206.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcce812d-8984-406b-b6a3-db7000bf2e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.220.234.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b0d3a8-8264-4faf-91a3-039d642cea9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.76.20.229']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff94f05-0ee6-45ce-9614-a0bb9e2859e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.211.128.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97cd1ac7-544b-43b6-a55b-deeb73f15750", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.0.53.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c0d30fd-e949-4fe1-92e5-19687113f766", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.0.62.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86052b7-5d9a-411a-9b10-7814b3614b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.180.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea502c5a-58b7-439b-a051-b72d1f65d6b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.72.178']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ae951c-70d8-4d01-81b4-a3e61e7b4728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.168.31.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c491f306-1a4f-4ee1-9a50-e901db2665b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.145.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--676506a3-9b08-4885-aed2-4dc87e52e5ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.145.229']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce59eabf-ebf9-4a51-a9cb-ee751719747c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.145.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce7aab1d-3e79-4dee-b31c-a77a904a489e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e610ee-226b-4362-bd85-88ff57999c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495a83ff-25af-46d3-ac21-9fb26463464e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8a1c51-13c8-46e9-b182-5789407f229c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9d9baa-5f2f-4d3b-a763-3e90b5a7d19c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae4fcc8-d240-47e7-a5ff-f5f7697f3b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1fdca7-c83c-40ee-832b-8d2aae029eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc2a606-7b10-40c9-8be9-8ab576a8d448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3761019e-57b7-4d56-8c26-ebf0211bf6ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.203.148.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fdbf9c6-6f14-4cb6-9908-1828f44efa36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.205.31.154']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17bd98fa-7383-43d1-92a4-547fc6e56bb0", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.209.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0dfcac-a458-428c-9c9c-c59e0c61a5c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.39.184.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e866749e-b58a-4644-b7f1-34ccd700be8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.130.197']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce102640-1d3f-4218-8c7c-09e955aefac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.154.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c32e2d-2526-45ae-bd5c-51bd1d3507aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.187.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd1a96b-2548-44cd-b11b-443212382563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.210.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a77ffc04-e7d3-47f8-b569-9145d23bbe94", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.83.36.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c842023-8552-4f7d-bca8-95d99c068ecb", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.103.39.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4329f12b-87c7-44f9-aae8-66bf40a8b01c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.104.83.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2848599-5fdb-47a6-b2db-fdde2ee1dee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.181.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fdb5758-0ba4-49c2-94c9-42f9b15ded00", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.244.27.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1465fbcc-c486-4854-9ebc-9e7241dd489f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.25.158.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f041f4-a682-4553-a82e-639725b66e31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.83.20.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d5c2d6-14c9-495d-b128-2a7b914c5add", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.96.136.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f5f317f-17e3-4749-bdb6-bff2c14992c0", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.99.132.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e092d65-2953-4f2c-9656-a520fb72d93c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.13.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49e7b44-271f-4ff3-8e56-2679c9140f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.141.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f69c4fd-7db5-45fa-b82a-9e57288f1789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d974cb7c-42cb-4cb7-9807-9eeb43029ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.208.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff71f2c-5979-4c58-8648-c4595ffec274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.210.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e4b42b-ff8c-4b65-aee1-a92ea0becbbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.214.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a029329e-24b0-43ca-965d-656f35b616ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.215.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4cd5d5c-bfd2-4948-988b-3c514613724b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.215.249']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b942100-a119-47eb-9d07-8e4034da1ba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.5.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31d639d-3298-4445-abe5-a00013f1dc9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b26ed9e-b06d-486a-8936-c8f3f5203139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.196.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c931a257-e078-4f34-b286-182879606aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.199.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c3219a-b50d-4f89-baa5-27b7b6ff2ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.23.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e453d509-2424-4522-b8b0-49eca07eeb67", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1ee60c-1c23-46b5-9cef-07d1b8c732b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.228']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dd23c61-3e86-4cdd-85d1-2f238274b8c1", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381197c8-9051-4532-9205-db7fa694a597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.30.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1256d60-0dd2-40a9-8283-d1e7621bf873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.132.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba75d91-e0fc-481d-a01f-44290ed51041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.211.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03452abe-3c7f-4936-9464-37aa56ca1913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.211.225']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9878e21b-87f3-4b91-bde0-9b949076d86a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.237.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1486719a-577b-48b6-bb01-c3e5fcedfcd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.244.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f01474-7586-48b6-9910-d103c8a00e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.104.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d8f035a-c51c-4e25-823e-5c3373241c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.113.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20cf377-3574-4467-9a9a-c65eda378819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1dc17f4-390c-4ade-b46d-c1734cf60e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5002f4-b1b5-4588-845e-cdf9e6734e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2289859d-fb68-45ad-835e-12cbe2662aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4816c777-aabb-4c3a-b661-70fa355ec291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24300977-3af7-438d-97b7-e2a0b3a7f98a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.216.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d260c4e-be8a-483e-9fe1-ac58249ef5b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.234.251']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ec6832-45b4-4052-9a7b-3ae672a4d9dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10daf552-e5c3-4c21-96ed-6c371c23261e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.251.111']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db91094-361c-462e-af7f-8b0bf4663241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.226.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb18da26-e2e2-4878-b687-89ecbbf69424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.49.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75670c1-535d-40e5-b3ad-9fa131680c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.49.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2da00fb-3a8f-431f-9c33-9cfff291dbc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.9.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78dc06ab-fd62-4868-a00d-0bdeb192cad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.106.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5c8295-1694-4a16-b69a-a3795245d123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.200.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e42c75-a773-4b8e-bf2c-6da07bc5286e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.200.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5eca80d-b09d-4afc-8a51-44582194048a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.212.201.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb9cd551-fda0-4ca0-883c-33acf353d8ba", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.214.2.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--459a27a7-e9ed-476a-bb86-5ca59239eb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.215.145.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea771e1-8a07-4106-b91a-7c990ed3fc8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.215.145.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d86def-a4f9-43f3-be2a-995b439f2c30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7533450a-f3c5-49d2-b1e0-ef4767f16c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127b681d-aa2f-48bf-b77b-b0259514c4d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec34a934-027c-4277-8331-bbbc02097c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649041d1-af57-4067-89ee-eeb5d1725fad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e876ef-56a8-40e8-a80b-caecb8a0516f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a937d1-7d86-4faf-9fed-936ee40f243a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.113.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3538dfd2-4fc6-4bf1-bde4-08199d964eab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.113.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1344ed91-650a-4923-ae12-aeff8bcd9fbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8151a388-e5cc-470d-8f8d-e6ed5a45b5a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585a903e-4372-46b2-b247-457feae45e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ecbe97-e221-4647-8b45-08bb72eff2cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a54f51-8e7b-4f3f-a6e8-66153d9528f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de97169-19dc-49fe-aa6a-c20342d1ebb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f3caa19-c2cb-4352-b2b5-c9ed0deca097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d6fcc8-7b09-49fd-a6cf-3ce555def260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8697f87-4970-477f-a70b-d383c3200a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030cf547-28e9-45d9-8f56-a275af4906fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e914c7b2-521e-40fc-bdce-c0259a72d0d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfdc6437-6ea1-43e6-a18e-1087b63ef700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f574d692-a1da-43cf-84c5-344abd5eb328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c8b801-ef43-4c63-8284-6b6d12f25bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c688de3-211b-46c7-b15f-09147a623e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea59b29-d687-4be9-bcf8-5a3cab259be3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--661a3cdc-40ed-4a0c-b488-b8cc1a8a25c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969268a4-8b12-4c57-aee3-811e930581df", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.68.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b353f4-871f-47ca-ac09-9b747eeb34b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e411fbc-fd00-4291-a117-4c475e75d0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29b33a2-ca05-4377-91d6-cb9a5cc19130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5711acf8-fb1b-4f97-8147-8ff6a4827080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98361d9-3eda-472e-a5f5-aa5d84087b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a2d4482-5141-44bb-955c-6d7c3c59f44b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af22a5e3-bca4-4673-9812-5bd4d1791328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e8c086-2837-4eec-81d7-7a31b8c8127a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5170690-3f1a-47ad-8cb3-18468ad02c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.150.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0894fb4-b880-4aef-b3a5-294724f7b851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.224']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc9a9425-6c89-458a-a468-99a4361d3d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac67ac32-16d1-4497-bd83-e5a33da91662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8888ddd3-ca4a-4d75-a1b5-5a131f6ae47f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c413654-87fe-4fc6-bcbb-f8acd3d5058a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb6cfa66-0958-4406-acfc-6d83a68349a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1de1a2-bb37-48f9-b4fc-8d71300bd4c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9131c57-5686-4eb8-91ad-5990596ab6ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dcd2847-7ae5-422d-924e-1dd5da472b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3587758-2843-4f56-bcb9-0b47728fd741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0f727d-8184-48df-8d4a-9a6ef89e134e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9faadc-1ded-47fe-8c07-c102a0be7ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e97070-7768-435f-b439-37c58c1564ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b35d241a-f9eb-463a-b6c1-716eb3bc7471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70c447b-e420-4308-847a-04125c485350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df8d95c-65d2-4d7f-aedb-cfc8f1bd7c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.246.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf2e5c7-0a0a-4264-9c68-eb5cc364d16d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.19.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--941cd733-0a09-4b0d-81dd-bf132d6dc66f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.32.185']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274eeecd-857c-4f72-957f-e711dda46f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--472aa061-a940-4a70-911d-46069b55706f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed07cca-291a-492f-8ca6-af467d726711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b97666b-0264-4f82-9416-a5eecdfe2177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.112.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e06242c-0a90-4f1a-a4f3-38803da22e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.16.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9901aa44-90a9-452a-900a-b2ca60dc52e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.21.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a198e0-1fd5-43de-805a-8b33746b06f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.225.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eabc0b70-46ff-40fe-be94-b1ac8d28c7cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.9.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e66c979-efc4-4f5c-8765-b3ffb1d8e55a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.252.13.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa87faa-ac69-4fc2-b765-37c86a908e44", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.86.126.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827cc233-107b-4a38-83a9-feb1ebb0d1d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.107']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7fe96a-f798-4ff3-87b0-4a0b4c0eb06b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230ef21d-0a97-4d37-82ad-f86e03c3bb68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.201.46.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d1ff1d-a60f-44cd-abfd-98f80c86e535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.217.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c5f55e-32c4-4c14-a8ff-30ed2abd5824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.237.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4069e8af-ecc3-4c21-85c3-77eae15d5b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c917bf5e-e554-449d-814d-9e8376389445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.254.153']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733739b0-ce11-4265-b34a-be32643768b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.254.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94083b9b-01f6-45c0-aefa-922a03d790ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.254.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad982fb0-efd7-4f91-bc28-f8ebf85b6051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.254.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3880a3fe-43bb-4c5e-97f9-01acb20d7f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.254.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e369a45e-17a9-485e-8e61-5ab82270ddc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.239.254.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f96e8ba-2967-4352-a865-e80fc2b9e1b0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.247.226.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662c0fbf-7f39-482a-a4f5-b424902b6b50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.249.10.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a967c49-2481-4755-95bc-53241d6ba00c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.249.254.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564ca862-441c-43a8-819e-deead0de9df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.249.53.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9db7233-6e29-4d61-ac3f-88403c4079b0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.254.212.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90c30ab-e3a9-42a2-ace9-f15a49110765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.192.158']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8af4ab-8298-4bb9-af19-35449e8a4025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.192.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58115acb-f7ec-444a-846e-58a427f85385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09e7de4-e7bd-4960-b9df-27dde25b9e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.214.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7326f9b-5af0-40d7-ad3e-278c0b1a35fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2c2c0f-d6a7-4566-9e4a-9eb37c64efd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ad6ceb-2c0c-43cb-adec-31aef0953a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43741342-ae3d-43a0-a725-733b807b9889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cfac06d-41ac-4d54-bd1f-6c85f8038d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d98015-282a-4288-ab97-80c6cd649f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c951f78-4d2c-4162-914d-e07598f9e954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0422d07d-b221-40ea-9474-4ee8ea5b6c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89250b31-6b06-482e-9bae-e211864fbda4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e76c580-b21d-47b4-a5f8-0f9299fe579b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c06f7dbc-a001-427e-b98d-b47a7e7fd3d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aab92f2-7cfb-4f74-98d8-346e68094338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.227.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--690f6927-20bf-4add-9211-fc05685af1cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.228.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f735f6-9a63-4818-989d-ff2272af754c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.228.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3155282-2b8e-4c3e-bc0f-83616d4a7eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.228.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc6e02e-74a6-44f1-a0f9-828e76494c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.228.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60bc3df5-d70a-428f-b2cb-e8a46586a916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.232.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb389581-6e43-4acd-b399-ae14b5ccc641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.232.49']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c06bd808-6dea-444b-9b2a-9937f9c525fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.233.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c0aa59-95a7-4fea-9301-46301c9f53f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.234.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d5b2c1-936a-45b0-9dcc-027a51d9ba41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.236.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--233f472d-beaa-428c-a42a-42ddb7ae16f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.238.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0836f7a-2677-4c00-b028-4aef356b7f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2610eee7-a63c-4574-92c3-23368786703c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd6c6a5-b295-4a17-b9a9-317943ce46f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.247.171']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4bd3e5-0aa1-4b40-8c48-40aacf7e6462", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.44.224.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe411784-f374-43f6-af7c-760445f498ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.73.62.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3db3da-11f4-4280-8761-6e0c5e80b78f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.49.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf282922-3c63-4d88-baa5-daa01d97de75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.87.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--478f9912-f5ea-4cb6-a47e-f7e34f645247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.66.113.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e76835f-6582-4665-af7c-bc0bb10e2f47", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.97.200.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dafa1ef9-1271-4aa8-9c8a-b1cdde97fca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.11.170.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4cd7cd2-e032-4c56-bfcf-d847fa9a8ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.110.112.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11943aa-45a6-4c4a-8f79-dd608c6711d2", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.110.204.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--171ead1a-f374-48e3-b53e-0a8a3c5d3bae", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.158.160.81']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37576f62-1263-4aac-b312-a5c68ae74ac5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.178.110.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f660fd4d-1dde-42f2-8dd0-f81e947ce0cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.194.244.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd9561d-e30d-4639-a005-bd1e13eca2ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.195.238.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61763186-943b-4357-b9e7-cb1ba89b340a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.27.136.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f651535-7f87-4d83-b21f-0b3617d23c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.29.21.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed88dc7f-f773-4eea-9ffa-6dd9d492ad25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.214']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--356f1f2a-b441-4b09-ad4e-8a914e3b08e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db53bc0-7090-4418-8c6e-4d28220e9997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66bcb52e-c437-47d9-9ec9-c3523c50dd46", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.115.147.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0dc596-ad45-4e93-b80e-536a5292454d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.119.185.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df800ca-d91f-4bd9-957e-3254afee23d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b1f58d-e448-4339-aae9-ff7b7ba38365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e624d4d-35fe-438c-a111-8207e3d72c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.123.6.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66840794-0b2b-4bae-ba48-69dde2f6e361", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.193.0.107']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f4e24c-cc8d-4f0f-adb5-07efca7ff39e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.236.27.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac9c3e9-9d15-4b25-b315-ae5bd466f6c2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.29.153.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce1ba53-2728-4aa0-96ca-de591a665567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8d1af3-fcee-4802-816d-15040b116043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.39.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24adc8c0-bee6-42b4-aaf8-44f22c1a1f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.44.25.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb470d42-eccc-4b85-80b6-8eff10a5619e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.159.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d41ff6d7-3ba5-464b-b3f1-0093c261a86e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.159.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75492521-29ce-4f1d-ac79-00d0eb72a2f8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.86.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80e059af-3bd5-4ccd-9f66-aa3d55a92a36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19beeb34-3ff4-4fb8-bdbc-51dbdc667f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1336efcf-829c-4736-ad39-55e5b6347ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.144.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54768b6d-6441-4da1-bbcd-59cd437e3749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.144.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22b2827-9067-45ab-989e-f4986cdc4cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab200796-4176-48b0-838c-fc6833fac278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.144']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e58642-4321-4860-a70d-a641db90b1be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc0825bf-5cb5-42fe-b2ef-22506869bf7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438d2e8b-595a-4193-a32a-81a86a4976fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f64921b8-020d-4663-918a-ec141304c863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1195ce8c-f2b7-4cc3-836a-fa4db84c4e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2afb5c5-1817-43ce-999b-b913459c732a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdca7f8e-ab42-43a8-a0a3-b8dafe47a276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b60368c-0605-464c-81d9-d428c4538164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e692c88-059e-43b8-a45c-78c69541caad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427d36d8-9702-494d-b91e-223ad5b852ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2f5434-6499-4fe3-8a83-2a00e4607cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.224']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b87496fb-5fe7-48ec-8684-9c280655dc3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b4d279-7e8c-4571-936f-2f034f05b0f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd26cae-ab84-44ea-9fa2-324946cba1e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--525f9ad1-f9c1-439b-847d-3086fd446347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd09288-d47e-4da6-8a46-53ef92881f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ecf394-b985-4484-8b0c-6fb037a72435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.55']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924acb20-4a8d-4d0a-a80a-9c882651036c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efcc3c60-7857-4c4d-a8da-6a1fd627c619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a96cc6-829e-43ca-bd8a-8fc48ecb72ff", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.34.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c59163e5-31cb-4019-84e0-2e2da00f247e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.97.122.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066c0eb1-0787-4b05-ade6-8fdab4ccc0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.11.247.111']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--637f869a-ae46-4789-a1ef-14ce65a36f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.126.110.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64816eee-b00e-47de-aacd-cb7ff6da06dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.140.48.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73fa071a-1296-475f-8992-c759f1ba2655", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.222.109.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28398bfb-a2c9-4019-806a-14a7b64b26b2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.222.109.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--918c7116-fb0c-4b27-9a1d-679650daeb23", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.222.36.120']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--556f831c-081d-493a-b4e3-e13ebfa0fe6c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.25.58.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b490af6-9c33-404d-ada7-9510919c7a82", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.39.199.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f8f971-5bd9-44d1-a1fa-3ca1ed217f86", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.52.27.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70dfa750-fe24-4f46-88c5-3c1d65b9f9df", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.53.247.76']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf181d3-9e77-4256-8504-f060b7069086", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.55.61.255']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c139ad-7eee-4096-9cac-5e0bc29b0eb3", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.71.92.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba2caf7-0118-411a-85ea-637167730532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.212.46']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96eb194a-6eb6-4161-8721-00113f410cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.250.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a004dd24-3ae4-4760-85c9-8321d06a1b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.32.203']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36445a5c-c289-477c-8ca1-0b3b11aca6c5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.15.143.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52a4c01-3463-433e-8b75-ec37fc6db81a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac7955e-f771-464a-8e10-6ea97f40a9f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.55.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e8d241-bde3-454f-b75e-c97f4314dd03", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.176.50.111']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7700f19c-3257-4796-9b01-5713a7449330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75704a2-3284-4d58-84b2-100cc2358fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ddcccc-d0be-4667-9e82-9de3e5ca8ebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.28.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3977aa9d-0a68-4eb2-a738-eb60c085df69", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.220.118.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363e43e9-bb9b-4ba0-9d40-6c281dd53475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.236.132.185']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--105cc083-b797-42ec-bfc0-ffb598f8255a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.33.138.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54eae058-cdc2-49f3-a684-d5ecd23e25e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.79.133.79']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99cffb2f-e754-4d0c-9352-5443c4620289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.79.183.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7fc57ff-94d7-42cc-94eb-169a6f7b2fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.125.155.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6acc33e7-2f4c-46ca-948d-da9d2148c036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.168.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a05c7c8-e9c6-47f8-b69a-883541c17735", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.60.127.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6243e0b9-b7d9-4620-bf3c-056d9282c77a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.60.149.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fdc023b-b813-4255-ba7b-f25471ffd35e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.147.55']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9814048-4302-4b5d-866c-a3832ffa8cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.68.236.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca66d363-86c6-4739-bf99-d4dc0c154942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.116.101.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c803f4-ea27-47df-8fc8-a1d38234d6b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8cf5c96-5dc1-4ace-8ae4-d4df8164a1ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.133.212.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69ee9c4-2a65-4da4-b43b-f6e9ae8054af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.189.74.1']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6a9c29-87a2-4517-a910-6c1b11ac5fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e500b5-8e33-44f9-a35e-ba44044762f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.205.245.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2383c62-f463-4a4f-9a7b-d839f659f0fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.206.211.59']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a13ef235-5f72-4f51-a859-90544ceb7da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.206.38.153']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7b322d-3e05-4716-86b9-ee0e7e67a875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.208.214.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a15170-365b-4b37-a6ad-62c62fa02197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.212.208.154']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b589feb-b328-4903-bea5-e275cb69fcdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.212.90.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c688ac89-8f64-401c-b996-dbbff12584ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.215.152.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b19139d-cf24-4320-8db1-425beaee2f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.215.234.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c341cdb-2ef2-4560-9e59-7cc6c2a65cef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e6925d-135c-4f99-9f92-96987eb0d1b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.218.118.203']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fab301d-66e5-4da6-98b7-d8010a36921b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956681b2-f64b-485b-9bd3-b9e4d699e6f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.234.77.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d86b5f-50d8-4d5d-b21e-97e26e58cc7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.97.5.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--875bfb1e-50e0-456e-a224-ce223f0bc884", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.115.165.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aebe0334-a890-4058-a7a6-c51072a53704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.149.125.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--773c1a18-20d0-4e03-b37d-94ec6921c830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.149.125.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f79206d-6330-4562-9bcc-2dadf1bfec0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.149.125.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f6c4fc-246c-463c-bde4-7cc5af9179b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.149.126.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a27abd-c629-4d7c-8ed6-6490615877aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.158.88.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2e046c-c9dc-4118-9bb6-ba3d567c7515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.165.53.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a122806-7280-4859-aa91-46841be94b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480b997a-16de-4fe5-a9ad-f7cbbfa8d211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.203']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5abfcb5c-c981-40b5-afa0-768bdb2dcc2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.182.245.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97efd8c5-f21f-4189-9eb6-f6403281e226", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.213.44.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c27bbd0-4210-4fc6-a946-95ca92b0cfc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.232.31.158']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc89fec2-dee8-46e4-8bdc-4da8309714c4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.244.187.150']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d182c08-9aaf-4b36-ba6d-52b5141f8c40", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.73.157.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05a19df-5d01-4042-8e0f-301504c940e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.176.49']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9066ba68-b781-4cc0-b3bb-623904c25cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.255.222']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40daa900-f3bf-455f-abd1-bafc834a5052", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.114.105.107']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a0467e-51bb-4015-850d-2c5a92f66d4e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.114.105.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e8f6a7-cb29-4cff-8ace-5ef9184789a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.117.10.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a27c41-e988-4dac-9938-3d40de2831e1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.188.176.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d05c86f-a598-49bb-be4e-e253ba1036e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.190.12.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe338d57-e029-443b-9edc-acb8dd96f988", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.216.220.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18cbfea5-1439-40d5-af73-61c5f93703a4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.23.61.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cafe401-4ccc-4c0b-8386-eba919bf3e9e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.233.172.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c11fdf62-4e09-4400-8887-3a15e3ee2368", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.59.2.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0aac97-dc9a-4437-99f1-665bd00475c0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.111.107.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2e00c6-9fdb-4793-8300-f8b652a3f952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.119.228.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db877fa-a1c5-40fb-b5e1-09ce03af93a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.126.90.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65bae6fe-cb2e-42ae-b9c8-873dd6c2b887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.150.115.56']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f7edbc-d79b-47e2-ac3d-5287c6597280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.180.103.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d44f5b73-f9a8-48c0-a0c4-8c4adaaa7d72", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.180.61.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb7b457-793d-42a6-a33f-6dfd81c4ec2f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.188.47.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e442aa-e67f-4a40-8b28-aa3bd9af08d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.190.218.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb7206c-c49f-4ff8-a017-5acbcd2e2399", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.253.55.190']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f0857ee-a863-45a1-8d9b-c0e6cbaa77e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.53.102.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe604ac9-c5c9-4ce3-9ef4-44f4cb72c286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.53.145.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e14b6b7b-d812-4f77-a1d3-07ac6d8c3b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.53.172.229']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a90741-6b22-491c-b88f-e3ef9094f239", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.53.178.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae4a3f2-b2d0-487b-a9fb-c2e5efcdd941", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.53.190.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21074011-ee56-4f79-ad38-ffaf4a202448", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.53.69.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59b1f2e-7bf5-42ec-8550-d960d0dcf5ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.53.71.95']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b7804dc-ac7b-427e-91f0-f7e958603c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.54.23.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d989854d-3781-4db1-acb7-d20f2f4f87ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.88.136.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--366d4d20-070e-456a-a52d-ee945dcebf02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.88.93.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c270597f-96b6-4f05-a8f2-92bf2cd5facd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.108.248.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3598e0ad-7b33-4197-906d-995e9d41016a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.134.217.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1c7824-ffe2-4886-8d99-d551a7a81edd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.135.18.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6953b7e-ef6f-4ffd-8a52-7a1bbe7a53d1", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.147.32.95']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c854c2-d864-4d0c-a12f-798d778ac865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.147.35.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc40c5c-428d-4439-80a9-42442748dd42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.149.93.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd7c239a-0d4c-4eb8-8911-3dcdbf08a3fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.151.70.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827bc28e-cb1a-481f-ada0-a5f0ac5d5f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.157.22.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68060501-fedb-4f48-bb3e-757e06088128", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.158.132.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d8a0de-6a2d-4dff-b5ff-1fc5475d976a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.201.208.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31e9db6f-5599-4101-8f0e-900ff22ef44a", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.23.138.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2268df4b-6586-472c-98fa-7ceff7bc13e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.241.55.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--941720a2-9eb3-42e2-8c36-5fdeadad73e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.34.170.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a4d066-95e7-45e5-8613-2d026b5c215a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.36.126.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c913eb72-b987-427c-ac49-9a1577168b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.6.64.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58e1b12-6e57-4eb7-8435-0bd60318748c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.81.115.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--614867a2-38a5-4f88-8cdb-60d847a4e650", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.83.33.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b338c187-a71b-4455-8949-1bcf269d4508", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.88.229.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91df6cd0-be00-44f0-af83-e6b34d173fb1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.90.173.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b693be3a-5b67-4846-9094-34eb59426f18", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.91.11.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da1799a-b06b-488f-9a93-98d05fde3bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.94.33.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ca42f9-b6d3-490a-adc2-bfae095ff43a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0eac88e-2720-4086-9ae2-960a7e420b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3217f4f-c47c-429d-bee9-21b5f7a1074c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.107']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a50631-4a3f-4e60-8562-a7e184faa4bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb58c679-4eba-4e0d-a5b9-36a41baefa09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.109']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f799e1-c2af-4562-9af2-2d88c406a8a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac6769bf-d2bb-422a-97e3-dc80f547a082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.111']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d419d4e-be94-4498-b1b5-2f45a5fd8586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e497c7a1-ccfe-4827-8c1a-57ddeebe8eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944ec33f-86c7-4ba4-95ff-da1cded3d939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.120']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469d57aa-6091-49a7-bece-c98bdad7fc5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ab4884-7c78-4584-b369-96f5c4213d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75007cc3-a711-482c-b806-2848a44542d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.125']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b5e4451-f5a4-447a-b1f9-166a56d56c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5af8ff-0f36-40b6-aeaa-dbbd796f64b3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b40d9f-f113-434a-88dd-d2325d169172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5bd7d7f-46c1-428d-b775-8649408ce5de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d0ca73-35c4-485b-bc50-d9d40b5737aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1aa38c-c146-4b8e-9502-8b0a9f2f270c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8cfe9f2-6ff6-47c3-a2a7-79a84b3d354e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a431478-eff6-4bd4-a02c-797d2d43aab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.79']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c52231e-0aae-4a7c-81d6-bf8e6dfb45f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--499ee05c-870b-471d-8544-939c2279a558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af1ae233-a3b4-49ae-948c-eef5d6b2ccb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391fb2c6-1f50-43de-a87c-ad7d4c0e74d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64d63da-e75a-410b-912a-b62a687cc2ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--091f6e39-fccf-423e-b1bb-3ca5e2b168fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8cc50cb-4c35-422d-aced-fd8dc1c51918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0814e70-3609-4615-b262-4dddbd88df2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6bf8775-7ed9-46b2-a381-5879105d229b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8bcb04e-bd1c-434d-a15b-5c5807df943c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62520430-f46d-4eb5-90e4-5232cb0dac70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86078214-79fd-4c38-b783-d380a39b3072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e46a3e3-90ac-4940-aa5d-a92f1a12bdda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04135ce5-8148-4d11-a8c8-84e90e2cf049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da79180-d885-4312-8dcc-338df1787011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.216']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c015c9-a73d-4064-8a89-e2e4547bd7e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d0aeb7-445b-41f3-a433-f76c01d56e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54909cb-ad59-4e7a-bcfa-29d086b898ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77272e36-f603-4268-b216-411d10755ff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.224']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80216b20-28c1-4944-a551-dacad5ea902b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9abc72a0-f8aa-43b3-8b1d-c9683f0a2989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06401b9a-1d9f-4fda-9d7b-399d75b642a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7dff029-165d-407e-826d-43bd6af0b627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--763a552c-371b-48c8-b9f8-75aa1b93e5f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa843754-9b11-4dce-9267-633d2d4f0025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03f7c2b-275d-4867-9b97-94bf78f42d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7343df-1d23-4bd4-ab06-a2cd63dbc940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f03fdf69-2a9b-41df-b399-48d54bb29046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.251']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a070e5-254d-4c57-b7d2-323410c5db44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b6ce6e-3f31-48bd-a275-d058ef013d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.100.87.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e1fd71f-b6a4-487b-9134-079b7b632400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.103.24.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dc6001b-e74d-4235-bb02-530d58bea25d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c689b16-e103-4ded-9c16-213684616383", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.108.209.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ec5c28-758b-4620-a07f-c30078f5dfcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f7a903-45c4-44cd-8216-738095a33a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327d73df-06de-4730-9fbd-db1bdb5d582b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.13.179.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca184310-548f-4921-9fd6-a5123cf118b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.132.187.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268e2503-d4a6-493f-b76b-4cc50daa0360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28842f44-91d3-4df6-850a-0df0383872e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.143.228.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ab5993-e515-49c6-bd21-b68f3a0b3240", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.144.77.165']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d023dd-4830-499f-8800-7ac62c93befd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.147.161.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a020059e-5c67-4664-b130-53060e983451", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.153.231.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d12a7c3-a4a7-483e-b7df-919f1dc6c965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8172eb1-26bc-4876-bd93-c6170d508491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37f2074-0bad-4817-8b28-3b9252ff9fac", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da065c95-1968-48cb-abb7-2c33b9c160b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e80109-ff62-4f42-909f-ae72282210ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecbf97fb-eb65-4a28-9e6f-ea4714449171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f53c17e-0e3f-460d-bdf4-a091bcb8b3cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c64b0c66-8e39-4025-9498-a10c699c197c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.186.82.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0482c7ce-b962-40d9-90cb-4dbf59dd7dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.187.169.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92380fcd-f605-4f90-81e4-5b6007f4b0bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.188.217.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a433a7-d91f-4b37-85d2-ac5f4afbbca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.182.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13192d00-9e37-4a71-863d-3102350c2d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.190.25.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5efecaf6-7fe7-47e3-b097-3290ca47c7a7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf0ad19a-6b1d-418e-a352-af24dda64376", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0b7096-759b-49ad-9ee2-0aa391c0b3c8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c10aad7c-abb0-4c6c-a159-b0cf78c5983f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d5a963-4c91-4167-b96c-9655ce2813fe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89a074b-8e47-4d69-af2c-a0779888fc74", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29237a81-143e-4dbc-b92b-0e34f4822c5f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c887ee16-bac2-4791-8689-2aea820793e4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4667014-db42-47c6-b199-d3f61d9d21ed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a465e756-5362-4333-8c03-3cdeb74a9dda", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f4d238-ae7d-4781-b530-f5de8cd35cc7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7346fe1-fe2d-42e0-95ea-88d2871c6c33", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47872c51-0184-467d-b2cf-ae59b925fe31", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f23d42-a104-49c4-97eb-350c79a383de", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8cafb4-7d3e-4a0f-a77e-3e390aa14c1a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54a6a15-96c2-4eca-8205-8af394aba06e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3606293-ed98-4f28-9c76-bf29b6961b40", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf5f60f-23e4-4f12-8601-784e9f792e3a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f79b70-5ee7-4ac3-96d2-71c002e3c858", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1692b28-8788-4472-bce7-c8304e2bca63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.2.80.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0693ced4-d9e0-45c2-8ace-f0af8a0d2cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.2.80.253']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9546dd7b-15c8-4364-9b8c-8998cba4ca03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f88f2a-c172-4c88-a3b5-f0b72fb965b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb81578-5e62-418f-bf1c-1e599460c269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605255c2-4637-4a7e-b2e7-bebd36284955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab778052-046e-4ecb-8d52-7ae6208b4fc3", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.205.210.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61b973b-4c59-4be5-9d35-2861e7c9c1d7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.144.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5540edaa-20c3-4191-9cfb-937746efb588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc4d87c-c58f-4968-8dd2-9668cf5e8d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.163']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f9bae1-b22a-4eb1-9bf4-3764d50b057f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3656de-fe01-46df-8b6d-1a5c111be55d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4dab01a-08c9-4f4d-b76e-fe1a2260c08f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9f88bb-3260-4855-aaa8-4da2db396c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeabff84-50b3-4d64-a0cd-16f08bf56405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb603ea-6355-4f1a-a210-bd1eda8ec8a9", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c715bc9-2aa3-47e0-ab19-cf5427d8db81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3602fa8e-c1a6-4541-823d-1115e69f6f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.138.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04733f39-35bd-4ab1-ab14-6665d0006b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.221.237.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93231f7e-4c93-42e8-9065-12743f3fa476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba50559d-f372-410c-8303-ed35027da033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a29a96-d51c-4a83-915e-5da0229bddde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd0fcde-8293-4760-9c0f-10cf8e3fb40e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.235.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd1d533-c9e3-4dac-a123-74fd55a3205d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2204c612-39ee-4002-bcc2-193856cd80fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10dffe60-23e6-4f22-9b98-ee018bcffd17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873c7b09-a90c-4bd8-a80b-8b9a05d32f3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069c3dda-97b0-4115-b75a-e10fdf3c42ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83860f2-a816-4403-9c7e-726d01e43fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74f42b6-f35b-483b-bb25-e7eb589d83a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40109837-2cda-4abd-a747-406d34231a25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b9e907-1cf4-41ef-8926-9d78dc969789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f89f36a-0fa8-4077-bff0-e94af9229974", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.23.72.160']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d7d2cf-8c7b-4872-859e-50a38baff0de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e3d82a-58fe-4d40-84c6-730db4bbd2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf7caec-743e-4a46-8af9-35fa174da812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f66274e-aa0d-4a3d-b47f-5ec3f62ab45c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ea06d0-2122-4e8e-b061-7dd5cb3bc0ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62be9e8f-e1da-4c78-b2a4-c0f31fdf4f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93f76a5-e114-44b0-835d-b79ab52cfd7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10be852b-d435-473d-bc20-8a1388ab7495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13385d6e-4753-4ad8-ae82-a2a908712dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57124cc-5ba0-495f-ac12-b760c7f9e9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ad869d-af5b-4d2e-81a4-1deda7661bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d0af92-21da-47a6-98a9-245164ebb63d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9862a6-6f41-46dc-a638-245fb5380662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b411ef61-f751-49aa-bdc4-108c78c1b5f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.81']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb0fb90-a453-47b9-8c96-04bd7c3db5e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c03cadd9-6610-404f-9b7b-b2727e2a22cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--237dcea9-0dd5-4410-a63e-99390504c80f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521ed1c8-29f2-4f77-80e1-b49d3aebd5d2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23442caa-a11a-475d-abe8-94f5403176ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec524e1d-e61b-47a2-abd1-ea48f8edb628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.95']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8340bf-d219-4db2-9e1d-a246185e3b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0829d2-25ba-46ec-8cb2-e42a46328f32", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0572c578-2bae-411e-aecb-a7d1b905b1e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9665c9c1-5a69-4245-a57b-ba952793eca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1dfe815-b0b7-4964-974e-5beae03fb5d3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.216.109']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac53844-bb9d-43ed-9059-864655392794", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59815205-ac8e-4118-8b5d-14e286ab4b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8bd2306-7363-467b-9d2b-c3269a96e806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.158']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76fbde46-93b8-4e43-9745-26d8f05815f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7125f8da-7c97-4616-a847-8080b507196d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e043893a-881e-4f35-996d-8ff0a58b04ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.176']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41dd8c9f-1ff3-41fa-859a-3d87414b0176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226147e2-78d6-43bb-8c5f-f563bc68e7be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310b6402-e0a8-4a1c-b34b-9d1de187b45d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfdce371-9384-412e-8e9f-d61c0b2fc50a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.59']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a1b9611-df16-4e3b-b349-fe8ebe0e2772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.96']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7163d41-4d37-493a-9ed5-b72744000485", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.44.120.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74242b4a-d987-42d4-8adb-f3839e582f82", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.5.254.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19142ac-0632-4fd3-bb64-dd2ef29179e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.53.211.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e65c1a-f027-4b0f-86fd-af5153520602", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.7.242.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e2bb48-0002-466e-99bf-17f3d8e249cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.83.89.161']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ace5160-db21-491b-8972-3d2e046c2678", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.85.205.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4deca97a-0e9e-4304-bb14-4976090b4e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.91.69.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--877222cf-c403-4268-b4ff-93d01af48b0f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97987269-8eba-407e-b255-66c7c44a9d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99ed785-b93a-4b9e-8ac5-b151b101a1c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c872b01-70e6-496b-8db6-1ee560b90cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17564991-e6a5-4833-a82b-419273e57344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2106e627-a678-4ca9-802f-a37b266cbe80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.94.111.1']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5916969-69eb-46f3-bc87-2d234d99093b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.103.169.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3ff370-8473-453a-9461-620f2f76ecc2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.121.223.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373c09d7-85ad-434f-aa8b-b259d7ccd65a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.131.195.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd0b658-bab0-41d7-8f5c-dd09c3602494", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.16.213.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ec1a66-5b93-4602-8724-dea44264053c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.16.59.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9dfca7f-9eba-4d21-8efd-2690dd56a03e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.19.45.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab05d55-766a-42db-b1f1-321e4c3ed31b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.22.19.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6980fdf5-5010-4461-818a-74760b796e2a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.228.152.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8227df-4205-47c1-b264-dd4eb11fc13f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.231.22.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6db5d11-22a3-4217-b6db-34c2d5e6f679", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.31.200.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d52d63-da71-47b1-abc6-97f0bdcaf283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.4.115.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8266b364-742e-4f8c-982c-461208eb226c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.4.216.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9443849c-81ff-4cca-8071-ec47496ac401", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.4.255.55']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b97ffc9-b076-4378-bc4b-be649d7c782a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.55.226.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5d011f-0c61-42b8-bb8c-ce3059f042af", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.1.181.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37142a09-e79e-42a4-a61a-36cc85f4969f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.189.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8862dee-3a9e-4003-bfe0-f61cf27c2f25", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.188.227.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9a1c68-38f5-400a-86e7-b8183a176bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.189.28.163']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1bf6b62-7328-4c02-8489-67ed7bbb9605", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.21.13.161']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b652c68b-a42f-4172-83ce-97d73bd23b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.251.108.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d1d940-12d2-476f-98fa-c9809c60152e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.4.68.183']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a7bd1b-ffec-4050-9e4e-af70406bd3fd", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.62.18.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc6393c-6c1d-4cbb-be9a-56673443d0e2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.8.45.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da93d871-4308-4109-bf4f-30ed98c2299f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.113.248.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9740665-9499-47f6-bb47-308c39ebdb41", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.114.50.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af3550d6-e78b-413e-a5f2-59dc925d5ef2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.132.128.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63940b3-a83f-4e3e-ad74-598a262cfeeb", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.132.128.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ac1cf7-fe70-48d4-bbd5-ac4f2598b071", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.17.148.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73470c04-c5b1-4cf3-9c35-d64be59dfaf9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.187.147.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934fe85b-35fd-4faf-892c-a1a131ade0dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.210.236.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12278dd6-9ca9-466a-bf97-8bc460e9f626", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.213.202.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517b8e7f-705d-4b8a-aacf-3d05152c86a3", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.236.171.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4efe8d91-1075-4fae-b0b5-683e093c19f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3fdb1e-ea5c-4fab-a61c-335f2732b108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157c1886-6d7d-4d5c-b21c-94e33f114c7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7149545-4dcc-4b82-ab7c-0a48f1d2bf6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d757fedf-347f-4ea8-89b2-c1c04d3c39cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968cd380-dd88-4f4e-a593-702dddf44c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a24daa-b8e5-4f0b-823d-0b0920883f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ee6485-4917-42d2-85f9-5e52d6208000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f89f977-503a-4682-8f51-c925d753932c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.255.156.119']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ce233f-150d-4289-8ec3-e87031553dca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c33efbc-5a6c-4cf3-aab9-435982589042", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.126.121.107']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e53326-9b72-4b8d-a7c7-20c4cc38f438", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.126.4.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0466e9cb-3238-4fbf-9eba-75e45ddebd4a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.126.64.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7831e0c2-24a0-4aa9-baf7-4c4563dafba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.131.36.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59ea818d-646d-494b-929a-76ba2c92fbc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.142.69.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e08aa1f-2cbd-43af-98c2-71eb3d96add8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.150.9.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1fb0e7-9baa-45ab-bfc0-f93f24cde4f3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.204.230.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9d18b5-bb17-4fb3-afd8-fde32a11666e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.226.13.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8247cd8e-582a-4b36-9cf5-44a4472ceedc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.235.226.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05fdcd88-2b7e-4185-99a6-2af5f84810d4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.237.94.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f013450-3593-416a-b5e1-ebddf71d8f82", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.112.191.222']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7d88e5-f989-456c-aaa2-62d94ece2765", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.129.122.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2f3324-c6fd-491c-8323-5d673dc7000d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.167.169.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f56167-9971-44cc-841e-d5e240ced8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.181.27.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f52ab1c-cbf5-481c-a369-65240c10550d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.181.4.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee44fc2-d117-4570-a8ba-bc5640c452a8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.186.69.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63564807-7bfd-4f1a-b5b9-fa1eb3a99af9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.57.140.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68cb10ab-1af6-4ac8-b8f4-427818f31197", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.83.139.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad74fb32-2d1a-4499-a3d1-dc8a03995fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.145.125.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f7bcf02-6973-43ca-b036-e1c305023fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc92601-3825-451f-b84a-c755f22f0300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f151dff8-69bb-4952-825f-d3e99c458280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.88.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df70af1-df4a-481f-9955-effedf982a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.89.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc8a5173-1b0b-42e1-a80c-f888587be2e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.89.199']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0705e6e-3aa8-4cbd-b513-b51e8ab36e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.89.229']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec7f3cc1-521b-427f-ba52-3d5043d5c06d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.90.216']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af570cfc-f67c-4897-a6dd-bf54b8c27047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.158.140.144']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66deba07-5b68-401e-8155-913bd753283c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.158.140.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9dc2bf-b96d-4e3f-a95b-26ab0ce8386f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.159.99.144']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260b3ea4-e585-4190-8203-8b8136a00ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.161.49.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c7cf564-c9f4-4180-a601-1174dbf89445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.157.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc55c80b-56c5-477f-abf0-2cdfdee374c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.175.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc3f658-d338-4e30-a7ee-0e19f299aeff", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.223.122.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad260525-3e1f-4015-9ba9-99a310ddd794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.179.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0f00d6-e047-44e3-8874-22088a3f5134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.248.150.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--844a20d7-0913-454e-9ea4-614f28aa1d2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb3333bd-26f3-4e72-8e28-03147cafa8b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.59']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb4d159-06d2-43f4-9bcf-a6c214277a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.35.222.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d2ea366-92e9-483a-8062-e58a9151e72a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.131.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e876d6f-0bf1-4b9f-bbe4-a5b7f7898969", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.112.35.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc6e90be-491d-4ad2-95b0-bc36839d4fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f937b50b-245b-4c5e-8fa9-95e93bf09922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d046b830-9985-4b7f-8a3e-99ee303c38b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.228']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c80237-01f7-4123-af12-c3f78cb326bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.229']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ad5dbc-80c0-49ea-ba58-54c8b069880c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7cce201-3e8e-4115-82c9-fe8649fbe7b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1673c74-35c1-4dc3-a1e6-8640239e91db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e71fa421-ce5d-4852-bcc4-012a0c2ddb12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--546b6242-89d6-427e-870f-f8527a89fd15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6996ab18-48e6-4d07-9ebd-6cd42baf8622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20fbaf5-6046-46be-8f84-b66654c3edf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca2f608-b53d-4cf0-8c02-0874fdff6365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7075a084-3e42-440f-8029-977b5ed97cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe3fcf2-e321-43a3-8ed4-82f9d4f7e8f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdbc3445-630f-429d-a3b9-580eb0bd566f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c27469-7718-4779-bc7e-1240c57c2e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.248']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8da007e5-5f3d-4fad-8a54-9221a7bf4524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.249']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ba9540-cca3-49ba-8d5b-f7299520d4d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7a4136c-e054-4592-beac-f46fd1ff10fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.251']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b68cc5-8f78-4db8-a842-241ed5924edd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7f7fb5-9c11-4be4-adea-a5b70bf859a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.253']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23211dd0-26d4-458a-be58-d8e8616bd0ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6c354fe-ffaa-4492-a0f9-25be34920c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.138.195.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0354e104-1b5f-41b0-910f-909bfa067bec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.143.1.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f445a6-33ad-4175-b388-4d1f95d0bd36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1347ad25-a61b-41d4-a9f9-1659ae16eb6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de99d6c-a389-4fc6-b563-2b88a6e91bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d3832d-6a73-4fa0-9b29-f74b603c3759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1e3ea5-a7f7-43ce-8a66-ab841de3021c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07fc3fa4-ded2-44c1-a459-b6568240adba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd07708-c828-49f0-a8b7-83aa99ff76e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.147']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf7cafb6-c498-465a-b901-22ffdb3154e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c44032-041b-4148-9706-b4f0ae10fcff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e71aee-4f70-4f8c-88cb-300fd2f534fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b88028-2dfc-4c70-ac8e-59503d8be91b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.150']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6225f44b-3d4b-4793-8091-48c968b3da7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef705aa-dc48-4341-bf91-e2fa7256ea0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d836c15-e6ab-454f-804b-a2a2596b7666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.153']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d0ac16-e4e3-4081-8962-f3a68cfa29ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.154']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a51829a-d922-467b-bcfc-b8279fdd2a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02649547-99db-48cf-b797-1036050b7f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e58522-898a-4438-aa82-7c03b69a4334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b794cd82-8445-413f-b827-890c8db8ca7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.158']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba3c81a-9487-408f-8e69-f2e6274e1cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.159']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b85b90f-f25d-4276-8f8f-5b293ef6aca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8221d745-2ba1-43c5-9b78-620145a32df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.160']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--899b7df4-e46d-4592-8c9e-54c2daaca284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.161']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ac7200-04d3-4fe0-85d4-c6e97cbddf2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7639746f-34ff-4d12-8a7b-a7beaf181d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.163']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5b2847-7774-4e27-a9b7-77edabd731e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e2dffb-49ce-40ef-be8a-cc8780107fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.165']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605622dd-b487-4420-82df-0be3b49143eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a0e4954-1083-4fc6-9f12-1e6d9a7282dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaecc689-5039-44f8-ae85-363cf65a322d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6033f8f-671c-491e-9441-0eccc59079b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68a29aa-ec1e-4f07-bb1b-cab1a485f35c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02a5757-3b5f-4d6c-9fed-ea11fa959c13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b6d4cc-9f39-4724-8564-6a4b82e12c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.171']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b1e615-5e00-46c2-9ff5-74a9d6f1f4a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f4f3d4-b835-4555-9e9d-4dac1b179139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56323de9-5c15-4469-9b6d-4ff473bcadf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b79079-9bd9-4d66-8e55-9af534f4b3f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.175']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--880eb4da-5b08-4e00-9599-9ab02517c11c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.176']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb1cadd1-acdb-44ef-8f7b-0ed284679f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45d0df9-a7b9-4176-a456-b850c887ce78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.178']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57019f06-09ac-49b2-9010-3abb73060392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5671c8c1-7826-4b3c-a019-2a9fcacee777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbcfc199-bc13-42b9-9eb3-934ea5242d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42329333-88f0-4a32-84ff-d285a4876801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.181']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b581ab09-97e7-439f-b663-f2b61bf53b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cdc4370-34d5-45ad-83fc-bab2ba7ddb9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7edaab2-264c-4816-b2de-20e38a1c5c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6738a850-b9d5-4c5b-8879-76e7e33f0210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c18d1b5a-2e0b-4be0-9a65-a5e6012a9ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7cd1f9e-383c-4863-a1b4-3ac63b15e93d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b41be65-0ce9-4da5-937d-5a93be237350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8f4150-ed9c-4b9b-8dcb-c4cafd241100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a276ed-be7f-4f90-b520-fa3fc17b24f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830f766f-97c8-4be2-ba6d-02276aad3e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8f1623-d279-49d9-a4c8-da40fb0ccd79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44311fbe-4325-4d85-b48b-b10705a27160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28fdcafc-e9ef-485e-9567-6c010ccb8a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d72e18-83dc-468c-a847-0368c5162a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c4b638-37f6-45dd-9202-51b844acfa8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a393aa-46cc-4dc4-b0f2-ae0e63a41103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e850ac63-093f-4633-9623-311e1e85041b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.32']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6318ff7b-236d-4659-b5ea-ae1ecde7bb16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ffb2a8-41d9-4065-802b-4ae926495b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1677e3a-1f4a-4d4a-8d86-29c2ec9ccf5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e0ec5e-5f29-43f2-a91f-f45c0eea2c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474e9e81-8369-42e9-a16a-360baeb29475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b52209-e18a-4a4d-b0bc-71453e00bb33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97082b13-e6a8-4587-b310-edd89052848d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be942b2a-1e35-4c28-ae57-8966b0d0ff90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eee6363-dd6b-4ac5-9c3f-46c8bd339083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443a6e93-48d2-409b-9eaa-4bed809574b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f0f4eea-3837-4b65-a226-f7f070b1a89f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90230a7b-e15a-4013-80bf-63967dfd4e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec3085e-b0e0-4012-ba9c-d5c0e5a01010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93df3d78-6665-44d0-b3a3-81c7dfa987c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7beaf797-a8d2-4a04-b1aa-9ef9afdf9aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f627cf1-3237-4e4d-9173-4c8694a1424a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86289041-f371-4e20-a5de-3dab7b53aaf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--947d9734-f77a-47c1-a55f-79b08c1ca23f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8fd806-70df-4319-8de6-621d9d148614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aeaaf9d-5a30-4591-a85f-c29538180885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fd8dc7c-a199-4ec5-a4e9-e40717712e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.31.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e46e7e09-b347-432b-bd1d-d6c5b4490732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.19.109.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6045698-ca63-4a61-b1e1-0e26360d626d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.19.109.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5681b4d2-24ff-4cc7-94c2-ef2c6f972d61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.19.109.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92a3f61-41ac-48c5-a026-491521cea3c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.19.109.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1dac903-b41a-4795-a5ae-98cb14c71f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.19.109.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6daf978a-5c75-45ed-af39-e97d122c1f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.202.83.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe158494-a585-4ba0-8f3c-ae7f1af98366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.202.87.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef3ca517-c1f4-4f55-820f-1ebaefc0908b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.224']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64e5cb0-d6d1-44ab-b315-ae72522748b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1919780-0c08-41eb-a478-94976e55446e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4e5745-4654-4a8d-99c6-c235d3ef9ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaafd4c9-395f-4768-bba9-341d64e0f0cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda31cce-6a33-4dc3-8117-b8a27369d256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.76']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e5b35a1-cebb-44e0-beb1-fedc437f8564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.248.222.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116187ec-cdc3-4631-98fe-38c4593c7c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.26.115.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3efe39eb-682b-406f-909b-441c2afb4a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9028b16-15de-4a74-93af-c08d48eeee43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ca7d04-480a-41bf-b960-659a77befb5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac618dd9-da5d-4840-a73f-a6775d5096e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a38596-a823-464b-98bf-ba63ed673909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--380fd1bc-f6e7-4dfb-9011-e81e69f40b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46868f7d-2b39-4263-924b-6e7c38f189ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38997a81-8372-4f17-ad4b-867cc25fedd9", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.30.240.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f6a806-aad8-4c65-9286-ce8df494d770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.31.126.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d1de1b-7a53-4d0a-bf5d-46a550c7e331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32c8fe6-c3f1-4cf3-9a1d-c0005d9ec7b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5851480c-b54d-460b-aca4-1c36a66337c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c19011-5a9a-418b-97a5-f95b40831f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce50448-de6a-4ec5-b4a5-41fff573f411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87a8ced-ed45-4bfc-a4a1-900945203d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a6cee1-a927-4358-a0cb-931be8afe34f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6318c5d9-9f10-4bc9-9bf0-959ae962ba5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e5a52d-7480-47ec-b09c-6bbcfda65ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf11391a-8ded-4724-b138-1fbfed17c1b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.37.33.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673db28f-34f5-43d2-ae15-29aadce9db16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7ad251-2aec-4ac3-98ef-2cb204248d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28195b13-bb77-4f32-b376-6da6b6454d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8122c730-6d5e-451c-a152-24173bcc7892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e63e8c7c-82b6-410a-9123-46e773912361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0006033-cf08-4b02-b105-4a6914777702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9475c407-90ae-432b-86a1-19e10be7d38f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2ad6de-9918-41da-9b13-e6a9c2e21773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea23552-a8f8-47bb-acfc-02702ccd6e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.135']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9648d38-5137-4d31-bcd4-4977c2b3716b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a830b7-3089-441e-b64b-883befe664c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9b5272-1f76-41b1-a984-b0f6a3d75ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.144']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--768eb67e-c8bb-42e8-b5ba-1c4293a54674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06816afc-18df-4f6d-b9f2-954a2091e422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a791f513-cbbe-45e1-9289-658906388029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229eac28-d88f-4e31-ad32-284e6de07c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e6edc8-984f-4e03-91de-e35d44bd9226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.158']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79070812-a155-4304-b30d-86a9bd41711b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.161']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60e4d2c-f4cb-41a0-a269-3e4ccaf4263c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431a1eac-1707-44cf-9fa2-cf286b861cee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59632327-a190-47ca-8f5f-de1453a81dd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8de5fc2-95c6-49e5-b097-bab9e2d0b180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.175']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7588aa-36cc-4455-a579-d64cc6dbbfd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d142cc-6980-4787-8f9c-b995d13c66fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aedb990c-1ed0-4913-bc69-04df09d8c195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.190']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89013bdd-fcf3-437b-a1f1-2804b83c193e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5e7f83-3d95-447d-9e40-51fc1b71fc6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f089ca-210f-4ff7-bfe1-4f4b51f5f8d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56c302dc-4f38-4b5b-8799-d24bb3296215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05bcdee3-c0f3-4413-b524-1ce65eb2c963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93abd9ec-ecfb-4cb3-8600-894c2f65d146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa3932d-32ac-4b09-a2ea-eb6e311f93fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2376734f-fcde-4939-a5fd-1601d3e91c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce1d273-0587-40e1-87dd-1eccee6e04dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7175af-6fe3-4011-852b-498c7af2d5c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e58ecb-83c5-404e-8f0c-2c8579272630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.248']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956aa7ad-b22a-4454-af1c-1aa82b9fd0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e5851f-2987-4a22-9cfc-599089ea66dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55a8220-5103-4a75-8813-b5dc8050d61f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d199bb47-71f5-4218-a41c-a8ca22c13839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b43b5d7-dbe3-4292-bbc5-ab33267aa1c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a34cdd2d-9dcb-474f-a8e5-7707456680ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20359782-7eb4-452d-8b8f-69dac7082a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73eb177e-ad9b-4e8a-80a2-89d74f1dab95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5784118f-013f-4d94-9e1f-a44f57a582c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e1aac8-22c8-4acd-b505-d4afe091ad2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181a491b-536d-42e7-8d27-f6cdffc5e580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079ba3b5-64f9-4cb3-b729-e32c9e079fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--153abf46-3b9c-4d74-acc5-82f04a14d11c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b86fc0-f445-49f2-ac65-79a2c1caad6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.84']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f247ba4-653f-4167-b69c-d9a655abeb63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.0.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ba6d41-17dc-42d5-b562-943d5f50263d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1860d6b2-9c5c-4719-a346-5503f52c85b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.93.230.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6e4ac7-2e96-4b23-a567-c1161c1c3b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.93.24.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2607532a-432b-43bc-9d62-30dc240405be", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.0.53.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b2f28c-0ba3-439a-82a0-dfdc9803d88a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.233.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b6a5f1-19ec-423c-9a7e-541e5c47f474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d636c4-4d90-4571-b9de-709ed5125c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dfa5799-bfa6-4a89-a49d-711bf860faf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caaa0ccd-2864-4005-9a2b-1c8b9087902e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.59.59']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2b4039-0b10-4f5e-bb95-6cba14ece0be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313133ba-c915-4f7a-b11b-c5055f0ec1c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.175']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c2b134c-3d02-41ab-b36b-e08c7fe48234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.183']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1817ef-b676-4175-9a46-516d65ee729e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3a5536-8e47-4881-b047-a54a1f061d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c54a30e-5fee-4af9-b78c-57cdd310d717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.228']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e39673-4271-4035-af64-8a71d982f639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef9232c9-d978-49a9-8c79-a4dc40b7f7d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c2b1045-d196-4532-aa50-a0feda95d8dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.208.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2a555f-af58-4b3d-b205-52edede91b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.208.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d50e405-1e64-474b-93f2-e3628780922e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.233.69.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232f9efd-fa1f-4f7a-b2e1-f08e24ef1889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b67335-3d30-4799-a77f-dbf66c1a02b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7a8b59-f95f-4d54-a985-af748bad8145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9a97eb-8827-49a3-83db-4f95c18b3d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.135']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7716548-5ae3-4c51-af2d-3d8566ded629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf8da9c-aa9d-4383-a26c-378f7b49f224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007b23dd-c7af-4275-a07c-5bc3fcc383ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a22de3a-cf9f-4582-9794-78542c1a158d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d146a8-ddcf-45fd-ba1a-bfb9c0e824cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ba9768-9ea4-4a97-a265-64293804bf0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59521f7-8d58-4765-aefb-31019df30b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.87.126.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f5ff58-2356-4da5-82b2-7b4875ecbe6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd0f2bc-5b90-4bb9-9e33-bdee7888081d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f6d8bcd-c80e-48e4-af50-131c06213abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f3c056-6b74-4a52-b459-1fbd4b5f8067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe853576-4ed1-4624-b4e1-9df9c2f58a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8160ccae-d92e-4d55-813b-cbc3cf8de6b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.107']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c6b798-f3ac-4f94-ad3c-701dbcbaeeeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d22bf3e-d138-4adf-be4b-eaa60ab3ba7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.109']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a818297-5786-43c0-be1e-142fdfe875c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.111']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6792d296-d8bf-4b69-a3f1-b6666a74d2f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8479ef08-d0c4-448e-a733-df21893eb8f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0fb6929-6c07-4634-9c1c-120de69fef72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a799837e-64f8-4781-9a88-eac44c834c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ba644e-8ba2-44fc-ad21-4056a1711af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f0a469-f816-470b-970c-537ab4c639a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ecabe27-9281-4f4b-9e50-5479d8ab00f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--484e4880-636a-48a5-9a3f-082ff3a69f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.119']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a430e07b-8458-4432-a579-22906ef7b634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1362adb8-0b95-4768-8efd-cd9ee11062e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec20eef3-6178-497b-8dfb-9f421dfa6606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff16f4a-610e-4d1b-a043-bc4655c411da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09f265b-a6c5-4225-a9d4-0a18fe5bf6fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.125']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d6118a-dccd-4932-9d90-2866890de01b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be401f56-841f-4197-b278-16bee5415a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89dd7ceb-dcbe-4fa3-a2d6-0c2aa7ec3d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.84']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb0f2ab8-7bf2-443c-9728-7c67de9e2368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a0e8a1b-023c-4c65-a2d9-5a195507c78a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c7f8c48-6192-414b-8e06-a1708dd5be65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--204d02fc-2fe6-40a6-9bc6-90c5b56ecf14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e249f5e4-623d-435f-86e5-786e351d9f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee93641a-35fb-4f0a-9aba-0048bba0f2f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b01d4fbd-1f26-495d-8a1c-30cd455f8b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92f2239-8b65-4552-9e3d-d8181fde6b1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.154.211.56']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562bf7a1-5d2c-44c5-b06a-caedeea46fe9", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.154.246.253']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c43345-927a-4253-8063-f4fd067736b2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.155.108.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e25191-326d-4f90-8061-ff3b1a9c81c5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.174.40.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830b9dae-a769-46b8-91fd-a05e6303fa0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c55b922-8959-44da-9b12-50035621455f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c7d461-074f-4c8a-867c-a3819f8cade8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f785bb2-ba46-4c0e-b6b4-d729958dca6a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.228']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8459e7b4-1600-47c0-92a9-11195da2efc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c852366d-ffee-457a-bab3-e5b2e646d116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5eaddd-92eb-4420-8d24-b8be524e29c6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45cee5a9-b426-4407-8a27-7555a5a591c7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--706adad5-94c8-468c-abe5-e7b1253d99f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.182.16.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f594456-a7ef-4d85-8209-cab1c17c1cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f296374-91d9-4f57-ba25-1097d73b8076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d416729c-ca92-4d40-bf49-5e02398e54c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf83874e-84b4-409a-bfe7-8ba06c09c8e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d747c15-1325-4345-bfb7-e9d77a3a9c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--589b3e59-08e4-4146-8618-33cce1c1143d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb44e1b3-8a09-489f-abba-c8aa11ef4801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6453a601-1432-4daf-bb72-7a4a5d1ec06b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e99328a7-95f6-4518-ae07-13a9021f3db5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b373bb-775e-41ce-a4d6-6dab4e92641a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.119']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--092c7d13-b61e-4b64-9962-994a7cdff63d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e2211a-f757-4499-b046-b9136aa8c144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.129']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab768ec-a333-4821-aa7c-50fff9a77d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36eb0613-fc7c-4f39-8340-50ce0f9fa0cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d82e97-19f2-4847-818b-be5e8b9395f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8fb4bb-37fe-43b2-9126-192ac24f7470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7634b780-7d50-4e76-9091-9690ddb32f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f742c0-00a7-4f99-99a8-b402ec417a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.135']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--153d7956-8843-4c5f-a9c3-0a8111ce4b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d3cfde-8157-49c7-b703-a67d5973b54b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54834e45-09ac-4703-8812-f99de3482618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc508d6-60db-4d94-8beb-ade5848529b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d68a66b5-ac18-4a98-b561-18dcf337e530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68730b2d-0861-462d-8aa9-77d2843f4e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c98bfa-5ea3-4a54-bafe-198ae7fbd52b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bade380b-87cd-45be-b99c-42214240e76e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50249124-dec9-4a75-9b7f-f126579934e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eea50af-f369-42b9-a517-d77c3c268367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd54873-58fb-4d00-bf0a-ee30c2864fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.160']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760b79a5-78cd-4565-8cc7-9da004ae8ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.161']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdedff56-481f-4ae9-b2ce-7987f842f356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f44d1a55-e065-43fc-acd9-dc73a96bfb0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.163']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a448f8-7013-4874-924a-827cbafa3bc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d1e1d6-2994-4a91-a885-4f76148b6d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.165']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02cbd22-10cd-466f-bdcf-aa1017c4fd30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--008e88b1-95c6-4628-8693-5617564267c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ecd021-5547-42a7-b2eb-e647a315fe88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e20fafd-6bbd-40fb-85d4-94a16a4c52f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696d0157-b018-4ab4-a83b-5623c8ecc140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d81766-fd42-43c6-a8e1-4968ae28dca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a2ab36-37fe-4e0d-8ee7-f101fc07b5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.171']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2656a6f2-5517-4bad-85af-62b53dcc51d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f37e9528-9e21-494b-865a-92c79fd01007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f78dd34-f8fb-4f7f-92a6-d34da64f393d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9410aeb-168e-4f9a-9417-adb3c2c55206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.175']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f6d5cf-b87e-4405-a5e6-a20f8b4813ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.176']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d06a8b-9c87-4606-ab64-be19c40f77a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a22255-906f-4a1b-af33-e816bc11a168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.178']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--154f6241-2c2d-41bf-b73f-1fb9e13220c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c60415a-6247-435b-912d-99094ae5268a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31cc492e-a125-433f-9f98-72282080129f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f47c62ce-3390-4058-9510-7eae5bbd039b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.181']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee87d9e-dff4-4262-bb45-e80f7f84af7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee6c806-eedc-4ebb-847c-f0d6ad13ad31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.183']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c6fcce-5699-4dab-abf1-909ea05607d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b60f1c4-8048-41e8-8e85-0b3770f93a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.185']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a4a0703-9733-43a0-8593-f3ba77ac32ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d50582-3b6a-48cc-a59d-14b841c63d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99fce17-7980-4d95-9874-ea138a3fbd8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc87a5d5-7a46-4dd3-9432-355bf351ef9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--753e8639-48ec-4ebd-b311-cc0ee77d4a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bfe36d3-6e68-445c-a8cf-ddf3cf5ad09a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.190']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5415f1-9024-4595-b1d0-1b9686a8f76c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27898dc1-6884-4f55-a8e6-e2770d843110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6ca9dd-11e1-45f2-a97c-2fd44a081799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917ab156-75b1-4b7d-8f0c-1445b350f34d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d74d17ec-a6f0-4e2a-9284-ccd8162ef179", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9e3d1c-5a84-4131-8d78-56e4f987e4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e99bb6a-7608-4ad1-ba0d-20ac1b88ec0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.197']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1142b9f4-6858-43f8-a93c-155b6ecd9d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc78359-0546-44f8-af20-415183d150d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.199']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49fdc82a-4722-4ca9-8d49-5deb0a47f74a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa4385a-9196-4669-80a7-bf96879e1b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a878b5e-ae4c-4a14-9777-827526e65536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1511ca3-da17-4ddc-b469-79c7f3ac0b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8549d67a-f731-4945-903f-575c0d1361ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.203']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de01abb-1736-431b-9805-ca5efbb563b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c9019f-f942-4aa8-8e9d-34b5a9f0a72a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87c55c6-8cea-46e0-92d8-4bd39da9ef33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f670d0e-e00d-4f7b-9fda-8248c7e5d09b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f645fd6e-6afd-44bc-ae27-62a2aef2b55f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff46851-c2dc-4f74-ae37-461eb0189350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541ca9ef-728c-4dcb-8e8c-586429a027e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5246d0-0ed4-477b-a042-4a6e341f4bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45aac769-743a-4fb0-a907-51849b5891a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52006cc9-90e3-4138-877f-2b29f16b7205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3eb5f50-5245-4b60-9380-b6e371e4cfbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a9f4c8-9df1-48a0-be9f-ae967b2a03b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.214']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8cf004b-d816-4fbb-a7c9-f51c5627eb6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0051a1e-2b48-4852-b2b0-c0383da5d43b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.216']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5af48a-bffa-489c-b0cc-a4f69ab673ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b30f64-da62-49b8-b673-21333490fca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2541a245-9fd3-4c64-868c-c8aa1eba99e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5553b34f-c8b6-4248-bdea-98d9bc4f8a94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6de909-7d38-4b84-a017-9c2885a236d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6caadf9a-194b-4e11-936f-7327bfc7c089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc00254-f662-437e-a63c-b02dcce1336a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.222']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16513429-d4d1-4cf5-8fcb-4ca2923968b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0d2b51-8415-46ad-82bc-450103c8729f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb4b938-426e-4b6b-9bd8-1ba3b660dfde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.240']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7f6fd69-a330-4abb-a673-841d15b18c10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b2381e-602d-4cdc-932f-c138cafc917f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc5650c-0034-4db6-9c98-75c76a51db05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265c2203-4398-475c-b959-3616752793b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f1c282-8fbe-40ec-ad37-2577df58dfaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a7d2fc-7b7b-4ae6-962d-652c1b4c44ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8a5627-889b-4bf8-8d17-f13f57605ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5942f134-2c8c-4adf-828e-14dc9a4922d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c710ae7e-ead1-49bd-9bd5-fffaf1bd75e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f237cd-58c8-44db-abe3-3e99dbdff918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb010222-14fd-4d2b-86fb-53d17d3edc4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.32']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0993cdd3-6655-47e9-868b-eb6fc103d65a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989386d1-8200-4bc7-ace7-3e0a38af5853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c7d6817-f6a8-4021-b342-17f44374cac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db232edc-b6d8-4dc3-aa4f-ef882b8e9a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c65a9be-2c35-4a74-b3a1-e2dbdb5032a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a52eb750-7ae5-473b-80a6-159bda6099df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a610a580-f9c7-4858-9cb2-82125cff685b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--875d8121-df68-4529-8ab2-80fc6daef48f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.48']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b2d6e7-615e-4852-bd26-01f821fb0565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.49']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b5a5e8-26f7-4ada-adb4-a4d46f888c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e364cf62-0888-43d2-bfe3-5d38769d93d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.51']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef6e1a7-c14e-4ad4-8c15-c91bab8ab058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ac4752-70d9-44c6-aa6d-deb3a617e95b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4660aeb7-337e-4e6d-80b5-07bd0391e881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c983a1cc-7fff-4335-964d-9fe245a081e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.55']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c831f176-20f0-4e67-b261-add77f3567fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.56']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85838e83-6d57-436c-8129-63a5353efa69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6325efc9-5bd8-4a6b-970a-8b6e7f58e60c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1767874-3b86-4f30-a516-88481f007a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.59']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad77c50-58b0-445a-a487-b2c25c6b6c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25466f26-9200-4af4-98aa-55825e84fdc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77922e45-0bb6-4560-80b1-6ea38948434f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16419ac1-b904-47b1-ae60-5192ec5a2ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0378d365-37f2-44b3-aa00-dbb3f45867fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.63']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671e0290-cee1-4a2c-b253-3dccc138cb7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7dc1c94-2a2e-46f4-91f4-42bcf90ca1d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c91272-241e-47f8-a6e6-32fe2a0a7cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b758877-e28b-4eb9-b658-efdb6550e912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6370dec5-edfc-45d3-b151-b1eb5d75e25d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56dc36f8-3b60-4b79-8856-6d9e4d8bcd88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3912721-b80b-4091-ba35-5fd2b9364900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c16cef52-d5c0-404e-8784-9211a8cd0bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df42062-2c87-4e27-bb78-d13a6628793f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb65603-448c-4762-af9c-bba91bf1ee9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.89']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c98f8b7a-d97b-419f-8353-7a3097c3e61b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ed0abd-60cc-4c64-8d5f-80e22052ba97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23771b4c-a0c2-4d7f-b990-0e5ce7f0b9af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0071a6db-3815-499e-bb30-d916babbfcd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--734af897-e891-4835-ac50-f62a3639048f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82730cd-6da4-4f17-a5eb-15c68b42244f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.95']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b0a854-9f14-4a5a-b38f-769ff13395bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2695e699-081f-4e74-81f7-bcd50d034023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.201.217.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25de9b71-c17d-461d-a178-9030904962b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252ac272-41fc-4c91-84fa-925c3c58b7e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90b8f37-a935-4a87-a5bd-fec0b199da0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9ec25e-12f5-4d92-b183-5aa6c628f827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.197']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1dd2603-99e0-4066-aa3d-300184dcf296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c359db94-c091-43eb-b967-0f4208be7993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ce6d50-1de2-4f0b-b83a-22cbe9418e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41e25d01-2e8a-429f-9734-b513e33463c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.203']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336b4f13-7159-491e-afb5-3605e62bcdd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9badfd8-5ec3-4a14-ae56-3f352879163d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9021bf3f-7367-4234-be7e-64e485a4b1fa", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.229.126.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a206d344-e07b-435c-b21e-340193598d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ec988e-96b1-4e86-b7df-e7a345a34666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab316d70-b1aa-4f86-b9ed-cccdf2e71f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--078d9777-313e-4be9-8e04-d7a68633a6f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.248']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e9c9e1-26fd-443e-a74d-d4faafd84d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.79.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80be45c2-36b5-4b64-8a27-c6238f06d04f", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.138.107']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42963c99-2276-46ce-9549-0ecb7b3e4438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08058c6-9e74-4458-9333-d6c463da76b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.175']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22844413-45b1-40a3-9347-927951c12a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.185']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc547f4-ff44-44d6-99f7-01aa5a6f6986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf4a367-cb17-4b89-bd76-e123032d0390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba5d61e-41dd-411f-8405-8777a83e90be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa1b5c9-da88-4d25-869c-b96491470e2b", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ab773ad-450c-434f-b4df-28b24f59acf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.138.158.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3fb9ae-f0da-4918-8a01-482703cb5a97", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.196.150.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b056eb5-4351-405e-b043-672bf9da3d1d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.202.91.150']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1784655a-922a-477f-b08b-5a6b69d0ab9b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.221.166.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7430dbc6-a511-4486-ae8e-3395c1d7b6f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.240.181.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec0c7b0-d790-4825-a2da-f62c62250c94", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.65.127.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd966b0c-8cca-4f1e-be77-66acd90e70e5", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.164.196.251']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0ee1cd-aab9-4cac-a51f-eef1a8075460", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.31.48.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d3a03b-1cd0-4980-8c9d-f9c189ff2528", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.44.60.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6796dca-7448-44d2-ba36-08680ea6c17a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.5.145.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df9e215-ad15-4a55-9f2f-44fca150bf0d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.50.44.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f18b182-990b-4cf7-8db0-c5c402a9e520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.67.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2275d8a0-e65c-4ce1-bf4f-095c2ded4114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.249.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4c5a46-4ad7-4c71-a88a-02b55d9b13e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.249.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad401c4-19a2-404b-b915-cf3c0b2adbd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.249.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff2b87d-772f-42cc-8e15-a5e3d53745be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.249.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4344cc40-13be-4138-9bca-a5e48d87035c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.249.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b705997-b032-4d2f-a825-2b6e304134de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.249.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08f67e1-72a0-4eaa-847c-744797c5cb55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.249.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64b9254-eb9c-4ac0-8e0f-ded8e90bed7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.249.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e30d41b9-42a9-488f-aff6-6c53f0f420a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.249.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e1df0aa-d9bb-4b4b-8e5c-ec41cdb5feb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.249.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38224da0-0bc3-4a6e-a7d6-38c8c63ba905", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.249.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2e4cca-be26-48d9-a8a2-c1bc9f310a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.2.249.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2737cbb-ca00-4413-baf2-7553cb4689b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae117e72-589a-4a98-a57a-ef4c39738c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec6a5f03-9649-4eba-bfa7-653342d7235f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f62e1aab-6957-4879-b12a-2964502d5641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.107']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b24ec5-504b-44e4-a301-a03725bff41a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5260fad9-6d51-4c0c-85cc-c2c5e8839d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.109']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b40b68-77e4-46dd-81e3-37878c2d0246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5981195-d95d-47e9-beff-05defb13d554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac86564-edba-4990-970f-0404b881e3b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98ce2fa-fc14-4785-adf0-7e0263a12786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0200d511-319d-43ce-b89d-aa75f13d998a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70446913-fd69-433c-9134-11a0c01b2779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc1cb28-675d-44c4-98c5-13aa562a9c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.120']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf72edc-2fd7-43ff-b788-a96bf98bb231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb5cc2b-7034-4a43-bbbe-604393f743c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84fb9ca-d623-4111-8360-0a32d3937bed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aee650d-3515-4d7e-8a9c-b4bdb1035b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.125']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9850b4e9-bcb0-48f4-8385-e34faccf4a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd72a997-b2d8-4d96-99d1-24a959fa0ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8592d465-0c86-4191-8d16-6cf94d3418f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d2d03b-9ba2-459b-b36c-fc34aa739fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.135']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f7c318-e0c1-4ef9-a707-92c5d5cf3274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62549bd-50e9-4ee8-b983-605f8d47a414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff32e447-cf0f-453a-b11b-17cf24ab5753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e877448-77c0-4307-85f7-203726e80d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.145']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade041cc-0bf2-41fd-ba0f-24d102e887bc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7625f28f-8f56-4baa-ba3f-5bd5317ade8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4fe7d70-3d71-4ab4-89ab-d67beb7fdd3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ef85d0-7b1e-48e7-8063-abde88d55e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.150']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abdc286e-fca6-4a34-8a47-16535d1bf360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6edce5-c5e8-4f9a-ba9f-6af990d67648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.153']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb21754-8bdc-44c6-bfbf-1b08d75a13ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1607924-c7e9-4ec8-8422-0eeaa09c5e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.161']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a1c2fde-a479-4a18-b7f2-94052a33d523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc130592-fe37-4c4a-b023-87e0def0882c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c07fb8-7aba-475c-8666-5bd20d5bb27d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.165']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b8975f-ffb9-4b57-b902-3d6e90f25859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b47f5bbe-b5ab-46ec-89e4-4896743159c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--763c3ecc-593f-413d-8fcb-ca6d5e223d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--710fd228-a3b2-43e8-bab4-c95c6790d8c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.171']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11cf0643-fa5b-4217-bf53-d9cf00a538ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0746773d-e665-4c77-81d2-47c43fcc8c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a52efc-4e32-47bb-8121-be16f51a7feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.175']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9f4e71-2275-4fd5-add8-a8ff089ef611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.176']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87546da0-a8cd-4628-be1d-036df15af6d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f58478-0e55-42a0-86b9-54c1f94dc38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.178']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06255344-afb1-4494-8f92-321e56ccdb58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f4a6e6-47cf-4730-8e35-d007fbe23b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c6edbe1-a56b-4cef-aae4-d8ace5cc158d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.181']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e703d568-ae9e-4b1b-998c-de15268517bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e39272bb-e30e-4e9b-875d-0d6677a254f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ac1942-2326-4845-a46d-cc478805c36f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.185']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f240100-e024-455f-bafa-97bd77c8e806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75dbaa9-36e4-448e-a710-288d940090a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d3a9eb-580f-4df8-a5a9-493548e8dca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b6376ca-a852-44b0-af8a-cc264a8b2d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3fc076-d213-4bb8-a233-53fea066e83d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.197']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e9b551-e843-45f3-9032-4d2b25b24af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5960f9-d8ca-4b28-9606-48c1eb8d5383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.199']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3344f0e7-8a8a-4b03-9096-b738716db616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f9bfd0-0795-4671-badb-b31482c7702c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ac0911-fe69-4ceb-982d-55b753130e21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1443a0-f668-452a-b4dd-25e7d146fb88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.203']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea7623b-48fc-477c-874b-4a64045cf85b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41ecb5b-fd4b-45bf-baa5-5cef61670324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b35f263-8e81-418f-8075-816d071e4ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d6e070-e30b-431a-9cd7-c37b3fc2d0ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f68c65e9-a58a-4ab3-9e7f-cfd5e9431775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3235b4f2-a46c-40f1-b44b-f34ebf0d0aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b02ea530-5ce5-40ca-9f9f-39c915568777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d241a112-b45a-431e-8fe0-127ff216b8d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c62099af-d810-4e3b-944e-4f64a4e80fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.214']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a5fde0-6c68-47cb-8158-22570b53817e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a8e11dc-bf0a-4648-87be-3523727f2176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.216']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec849be3-c584-4c1b-bc46-c7a85ca93517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa73674-2a88-43d0-8444-29c246e702c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8b365bb-be4a-472f-ae67-5d9ad68f66c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b36b34-efa3-404e-b21a-3d85a1313ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2df773f-bfff-409c-bb5e-cdf01a9f7194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9810bc47-f00f-4d0f-a2c1-d10193a73921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.224']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9145c64-ca32-4496-b8bc-6d36e3ac311b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.225']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc1a2681-d141-40dc-8c27-0f7d80ff9e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.228']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a25957-24b6-4ea0-a105-fac2c2aa6c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.229']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9cf840-7914-4cc0-a01b-46017a3b2dd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec529442-f1b7-48c2-9d4c-a7965d31fda4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716a5c6c-4802-4951-bbee-868d4ad88a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184928a7-ac54-499f-96c1-ad3dd19211ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c2101a-eeee-473a-847a-92c6e6f9eae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a7e8c1-81e4-4627-8b64-2e4e7a2e06ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03dbd382-86fa-40cc-8440-b25abeb3b4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3941f509-15b7-4a33-825d-1cec90d40bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.240']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec6eb7e9-6f3c-4217-8590-b3d8a4f36150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007bf06f-822e-4763-ac5e-29bbce04be6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2025d4-c351-40ee-bb17-60642cfd2c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6beaf6ff-0a93-4352-b56e-6abe72efc433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c01734-3be0-4ad6-b6d9-b5b201e599ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a3c030-e31e-479a-aec1-c39646989dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71d97ff-0faa-4961-b5a7-ee45789e94f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.248']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e2d4588-c586-44dd-a0e0-604770d50842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.251']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef37c30-0d7d-4bf6-8d68-b1f91516c412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c07bbb2-153d-4ed1-9142-2899a265fda4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.253']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4dea7e-17cc-4da5-9b60-8483c5e38dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c2a185-9f85-423a-9ddd-187eec7e8bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.255']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caaa0910-b280-44ef-9815-dfcd9a03367e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e18d617-9198-4814-9d49-e0a5f60fc7d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e24320d-2d94-465f-847e-a878c1528a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ae4039-bffa-4a57-9779-c5c4f6d77a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea0cd94-3df8-4385-8698-4315d439b868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3a6d47a-95bd-47cd-9b0d-6b00f516a275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0712f9a-ec9e-499e-a4a5-614cf8de010e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e13cbbb-566c-426f-a5a0-0f74a807877f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2003b641-1747-47f3-8d12-fb313ecdacf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bfce413-b254-421c-a409-c25c54f379fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.46']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd58332f-0c04-4d70-8f9c-cba6f1919026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e372830c-6e4e-48e7-a290-ae19f9b529b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae89e60c-39d1-4d2d-929f-01052c84e723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.55']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e72864a-7959-4603-b4d6-fc4ce47f51d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.56']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2615f86-b173-46a1-ad78-b4fe8cb22c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8bc37d-2ac7-4570-8bed-abae32544681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.59']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c01628-4808-4774-8726-b3ee87ec6868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf6bb60-e96b-4bb5-9b12-cd8545cdbfae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a506ff8d-837b-4dc1-bf8d-10d3d6e12091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fb1d51a-b78f-467c-83b0-6435db461f76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a7e859-34f5-47dc-91d3-f79b8eb9e1d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a021538-45d5-44ed-8754-2d17303a8ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0716e329-ea6c-4549-a19d-b6d9ef5a45e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f389d80d-c8e8-45b2-b31f-410a032ee8d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3cbded-ebf8-4101-aa71-ebf360090481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c65ed5-3fab-4b40-a12f-c02873fcbb7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.76']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd48bfa-52a7-4f1a-babf-2c7a49a07ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f033c7-0e2a-48f4-b2e5-d417b70806c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d9b2ba-0ced-4cc9-ab2b-73dcf30b0a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da78e006-d0a2-4c78-8e82-53b971080272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.81']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b70e46-d882-42b3-963c-b4b5ac48089a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20f4c90-1feb-490a-969a-7d841e5e77a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.84']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a77a08cd-05d8-433e-88ef-925a97dad872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210d2ec9-9594-40a5-bc90-cbfa3159c0bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a7a2c6-70c1-4859-bb66-532b7a2218b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b16b6102-41da-415b-9041-d933cd97f323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.89']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d448c07c-e3a2-48ef-9d04-37adc44c1e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e89c49-b7cb-4e3d-8c97-3a5977694976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33db245f-4a36-4610-993d-867657b24920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ca3890-518d-46af-8609-92fe7c8181ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50055e7-8ba1-433a-9afe-951e3696618a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1202f497-c1a6-4ba9-b59f-d4b760923970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0524315-f09e-47eb-89ab-684d0d33a646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0800a78a-182e-48b4-8562-2920fc95b66f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a98761-d647-4bf0-bbbd-83057f9c7d3b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.84.160']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b599a8-c3a4-484e-b74d-e35cc41f68c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.58.111.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435a0ca1-6aa7-4cd8-ad31-735383f21c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bad06da-622f-4915-9d92-a77654f2689a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.57.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbaa029f-d087-4523-826b-796f80e096f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39719fc1-ae61-4fa0-8313-a30bc2ead745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.216']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2e3b42-d125-48c0-9e1a-a981a17acb64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1771191c-9411-4a91-b34b-f852b37ae9ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.62.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a189c2-0f96-49ca-8b3b-36980311457c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.62.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7880c8f2-b70d-4215-a0b0-cc7c09f98c4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.50.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03dc2b67-ea14-42f7-a3e1-bdd09c4f239b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.53.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3956b44-0d9f-40ce-8903-10a8bfe20af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.54.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b00801f-bd30-4c5d-8983-19abe24556c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.195.249.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58fd090-e002-4a14-9a74-407ff6469f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f381938-732a-4ff1-a446-e1ebecfb9904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9bff035-31fb-4551-b3c3-9657e66019d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d78d315b-bcff-4384-a78e-56377463894b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63382bf8-f1a2-463a-a4c5-cc8550b962a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.129']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--775a24bc-8f6d-4ff8-8080-90168737377d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294d0c95-370c-4d99-8802-87dffdb873de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e9643c-eb31-41f8-8481-76d9d30b93dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b57314-d207-46c4-8803-c1640fade781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d2b110-f954-4536-b450-b030eee22c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5374c8a7-3a47-4cde-8a72-2de436c257d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eaf8b40-7f2b-42db-9cbd-2cecbe6f4319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982a2536-d185-4ee8-a933-6f43909a0d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c11bd89c-5be9-4f3a-8fc3-e641e83b0e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e430eae3-8549-4277-85b1-f1319a94bb09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f054a9f4-4973-4e52-bc79-c6e2c4b92c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e14612e8-328d-4d4d-ba16-661bc8a259e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675fd6bd-3bfe-4f9f-a81b-3972ce5b2506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6e67fb-d99f-481b-9460-d02a80e5032c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df98c3b6-b2f5-4672-befd-5911ab959845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd824ca-1c07-412a-9325-2e48f69bd3e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38cd170-d376-4ea3-988e-aa63a64df658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8edbd95d-4b40-4332-a150-75c05f2bba13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43cf83a-5f6f-468d-bc04-d5314483e4aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4a60fa-182f-4b5a-bd24-4425171775d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.32']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e9dc96-6ec4-4d53-9a32-c79730c6a3b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73538d93-af36-4139-bd24-abe54d03f2a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.107']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624f53d8-353d-433c-84e2-21a08e8efd00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6dc72f-dbf2-445d-b784-35f6df39e69e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a9d46a-4957-4ecc-b1eb-4a570d755410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2444a765-4f7e-4f3c-a9df-d6326277ee50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12695abc-dcde-4784-9336-2d50196a47f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea69f84-c0a6-4ce4-8b0d-bb7796691621", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b350b0a-7ce6-4bdf-89b3-84330b755afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.89']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc8ff88-a275-4e69-b513-fa1adfe77978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bddfc6ed-ab02-472d-989f-7cdb948464bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b5f109-24dd-4376-8a89-3971e41f7c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa52300-2aa9-40fb-bda8-d131b01584a4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.180.173.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d63ca70c-fb86-4893-a2a5-d9ec180201b0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.180.200.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e4d716-4c8d-4a22-9952-ec3c0f284c49", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.180.202.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310ec5c5-c4d1-4bbf-8216-215b0171499f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.180.32.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a036259d-bfee-4ce1-815e-d2e49a95ab42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.181.63.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9fcd51e-5fdf-4632-a031-f82f74cd8d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.27.248.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b41ab30-27cc-4505-ac18-614a3c30a7e1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030500c7-dc20-42e7-879f-b93cda0fc766", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--613b3ee6-ea17-45b5-9433-930bf6eac6e6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b261880-1aaf-4458-bfea-1b421df0d748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43946bab-abc8-4864-8db3-5fe834904d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.17.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a81bc7-702b-4456-855e-cca7d083cfc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.17.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d3dc83-0f06-40b4-8050-59c61529e5f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.17.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33627f25-b2b9-4bce-947f-fb7332838990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.10.189.95']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e44d27f-c068-471d-bc0f-20a2864f8d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.116.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5718a3b5-5064-44b2-bca0-c0ed8546ce7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.40.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acba297d-f501-46d8-a916-dfaa11cbb586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.42.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd73162d-24b6-4eeb-ab6b-4c64edaa7e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.98.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ef7cec-aa69-496d-8d4b-68f861562660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.168.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dabbf474-3881-42d2-8b44-1815bae22a82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.17.55']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9aa6b55-d657-4d49-9f13-384ecad39787", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.195.185']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8653c30a-3084-4422-8053-86793e24abe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622262d7-e271-4374-a56f-28896704905a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22f177b-81f2-44c9-9831-2cf0803ccf62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.56.125']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1979887d-d361-4743-817a-70fa0eec6ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.56.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51f6450-b79b-4791-8d8a-12f329ae3873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--829fb003-d304-4d4a-8b90-488b9d897b14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.112.233.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d6eacb4-443d-4db3-b352-bce6e1b0e2d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.25.240']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c938c83-ef6f-42df-aa8b-8d994f7ae732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.159']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa81cbb2-9cb9-4bdc-8f17-8b1b51d5ed8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.228']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d02dd84-8539-4439-8f96-e04aff683715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.202.145']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9fb2d8-8665-4803-b4bb-cbdf7e8e37de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.217.181']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8528e5ce-ae11-4f16-a4b7-1e083a5bfba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.227.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af13d93-a984-4f28-b23e-234a55eaa8b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.232.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d0429d-1cc7-4ca0-b2cb-62924bcf0bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.24.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ced23b-2354-4ce7-b1c8-cdeee848df44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.240.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87261f6a-3215-4329-8234-04954c79df2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd7ca02-92be-4de7-acad-dc5b03a07ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.99.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee97fb9d-5bcd-49aa-b784-30627c72c05b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.178']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a6d14d-ef3b-4f67-9b33-1a72f44b926d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437a5536-24a9-4c59-93f6-f0898bdfdad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83e4471-a591-4a4b-86ad-c26b99ae6fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.138.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d246bd7-2668-47f1-a739-6c1a7f1fd1d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.49.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230b1b8b-a7b3-4421-af87-b18a9b662545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.87.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc0d955-d357-49d2-83d6-846c104b74ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.153.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f48ef3-9480-4235-aaed-6936cd2cf0eb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.185.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec4cd9f5-db6e-4031-b505-1e5ade7e816b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.187.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd22401-b554-4212-88cc-d4703d0811be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.208.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1eaeb2-d071-4ef1-b176-fbf880abd07c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.210.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6265aa7a-0c05-4764-8ae5-d4b5b06d9322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.220.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b6d555-d6ae-4569-abf1-21fc9357bc90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.224.63']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5325f59-97b0-4ad2-b922-b80e28be1000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.244.253']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32993d37-8457-4360-9f4f-91082045991e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.244.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aaca178-9dc9-4375-bd95-6b265df62018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48dac1a4-1cf1-42ec-9945-6b464c90695a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.74.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f93d9ea-9dfb-4fcc-92d3-3b5a74d125b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.75.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d5350b-040b-4aac-8ad2-e9f13c80bd12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.87.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d78679-46f8-485b-90bb-b49abd0aef83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.88.150']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baede8bb-7b7c-4f1f-9f10-f8147cbf600d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.88.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea72349a-4f7e-4e58-b97f-d8681d1d5e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.95.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55632348-5a92-437d-8c70-1d2d139983de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d74468ec-9d53-46a7-bca5-899a9d90576a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2c1784-daa0-4a0a-8673-e8239646eaaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3853824-a73d-4834-bfe1-019654c2ad7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc2bdc8-7e33-4c95-b59c-95b0d37c9f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.51']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6617b83-07f5-4450-ad5a-cddc756a9e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.201.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74ede954-2de4-484b-83b5-df6d3783acdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.201.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8365d4-6c2c-4afe-b31e-ab10e7c65b67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.224.135']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505ddaae-a68d-4e15-9a29-549ed875449a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.224.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989f6f49-0612-4468-ae03-62c33965b46f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.224.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c47a69-f6fa-4c68-94bd-ad1695b959cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.192.96']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b139800-fb15-4497-9a02-9072797111f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.194.49']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f7eeaa-9aae-44f8-a4b7-f04297af7142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.16.124.190']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6ef4ec-f32c-4a6e-b486-8897f295c42d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.1.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b170a49-dc2e-44eb-a477-bb7a981583f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.10.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c18c9ade-96a5-4be8-a3e9-955d7b53b870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.13.222']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf58dd9a-0a75-49d4-a5a1-6dcd2258fcac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165f9b41-feb8-4550-b7ff-85790e7247e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff50fca-e8cc-4aa0-9e04-c3cfc71a5a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e717251-b288-4795-a134-63be757fa153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca133d0-590b-4618-94de-43a4987cb47b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee0346d-6901-41f7-8d0c-2a3019bc935b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aefd0eb-7a90-492c-b9e7-7e438ed229b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--204becac-eae7-4164-adc7-95a709928c75", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--918a69ed-d651-4311-9bb3-26c3417506bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdfa98e8-d0e3-4bd7-af6e-4ba9a0344728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c9b34a-2a2f-4de7-a327-680003230670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2320f24f-879c-4801-a29f-a7ee7eea7302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74fed43f-034a-487c-8230-83d294c53a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f3fbe5-e300-4ab6-871d-ce501b0e410d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5da5cc-8b4a-40f3-9aa0-468b74124232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff1cceb0-6ac1-4ef2-ac01-02ba0b464923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.3.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17af0fa0-5e33-448f-b938-ea58b70ccdc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f7d04f-8dcf-4344-aee4-e36af7371b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e84a39-8a95-42c7-bb4a-0eb80f8666f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c87653-1407-4e91-b2a1-609b39058c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e76fc29-44b2-484a-bb85-eac054838eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.37.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--984d1703-16c4-402a-98c3-1cf66482c232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.5.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b63246-67bd-4f12-a139-8fa192b88a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.58.125']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02bc5330-8011-4a0c-96be-4912f9610110", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.6.253']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9790a4a-c3ca-47c5-ba0b-1db7b3c180f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--022cf27f-98aa-4195-8a45-c3a20948faec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4475b0ca-1719-4104-b68f-174892a786bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.119']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ce59b7-16ff-4f86-a2c8-a6905f6ecae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.61.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc1f1ec-47f9-4d99-a077-863089ceff50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.63.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2cf2371-cf5f-405f-94ce-637b8b0800c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd4f60d-c933-4861-824b-adefecb45257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea12a94c-874b-4098-aad6-2ae25bdf9cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.12.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e87f9f-ac15-4f24-831e-556635cb0954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.12.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d3361b-13da-4ed0-824a-7d660304c79d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf032ac-b000-4a68-91c6-aa31bf235077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--872f6bd2-2740-4bb4-9766-d79cc4bda8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4dbf93a-af0b-4471-9358-23004bbc76cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd8f426-7957-44d7-a284-bb7574f302e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2014f84-9b27-476a-a7bb-2c679b9c63da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b645c69-6b8f-40ac-b421-bdf291454b76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a488535b-ed7f-45e8-bf87-8294dcbe24d5", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eced03ec-624f-4757-95d4-071d6ac596d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1cff4b2-10eb-40d5-8941-a11a9b4b4a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cebcce1a-f374-44fe-bbf5-3c20e77b7a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.0']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f7fa811-b5aa-4aab-ade6-8b4de23ec181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d34dfc3-721b-4c09-b74e-74b4595246d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.125.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d074a36-0ba3-4496-83c3-e3a5974a0c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490cfabb-beaf-48ed-b5a4-1f2e255a7d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.13.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee97a300-60d0-4215-8fbf-33706bc69e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68d12b8-b7d7-4b42-a63e-dc0563400834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a38b00-ff02-4d2f-b6f4-1f28f39e831d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87dd5d9a-f8d2-46c6-875a-e2d76d131e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7791f569-86bf-4d2d-b4da-ddcb612ed4eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3d942c-7aca-410a-87be-eebf5025839d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--044b0c57-105b-4b9f-a06c-4e598b3b0610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23850c0-51a4-4b15-bc02-12bf36205f89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c242f59-c7fe-4dab-baac-f8b2dfde6b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--552f53d0-306e-4890-8846-1e429cce9dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b03875-465c-484f-be2c-5d68104c8d7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3cacf1-7184-4b5b-8646-e740c64e2869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e2a2f2f-eb4d-47b8-bd66-0029196a8563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd65c80-f33c-421a-ad1c-79ab4e4824b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d52877-23a8-439a-bedd-318e8b12efe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ed7dfe-dd7f-44d5-94d9-03dbad79506d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd3c0f75-49ed-4983-8caa-5e7bd8fd7b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6bfb9f-6741-4089-bf1a-24f6bc95d788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ab3033-0ab8-452c-8f57-37817314f2a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.181']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fcd1e4a-aca0-4581-8d0a-f255436494dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a30769-37e0-4325-bdbe-b1ac217accc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.81']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03156a79-6d2e-48e5-8d17-fe800e17d0b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa471e3d-29d2-468b-ac54-c27be3e7094b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8168c913-86b8-4620-8107-f80d758610f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1331887-d2bb-4f0a-9dc2-0b19ab02cad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6449a94a-2cda-4b1c-a8a7-7ee6f7daf1e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4eb2de2-2174-4419-8e08-ef2d35b45dad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.214']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064363f6-3504-43f5-bab8-69b2cd915973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.249']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b9a2cc-c5a1-4e2d-92f8-e523bfccb05d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5d8998-9dff-4ceb-a6ab-0c316083778e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.49']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41fe364-7d27-480e-a788-05e2fa50d9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1791e22d-c420-42f7-84d9-a8bffa5b82ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569436cc-4bf4-40a2-921f-f77b5e25f7d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4477659d-bb99-4dde-9c2f-be4bbd7d00e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.154']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3d82b88-a1df-4f0e-a0a5-21f172f2ab53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c86876e8-c8ac-447e-b33a-e2a631271fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.80.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc0c1856-249a-471e-8960-9a0cfbfca849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c4a7dc-d950-4d9e-9444-0ac2db6d44ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.85.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f79e2f2-93b9-441e-8368-7dcd7e2766a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10caaed8-5992-407d-9530-bdc6c05795f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d1d767-c8ba-4df9-92cb-4f30f09d5fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.28.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--606daf1b-cfcf-4137-90e2-9bebfbc0b8bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.32.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4a94b7-54f2-44a4-8001-97eceacf64c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.32.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91edeaff-379e-451b-82f3-35f3f1bbd2e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5cb46cd-17b8-4a13-8d64-f05e9f3c377c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d94971-419e-441a-875b-a7baedc7cc5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35449001-0d9e-49ba-8874-2874ae7e5cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.70.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971da28b-ca47-47da-b6cb-8f1bc2d0e5df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.174.184.111']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef901b57-122a-47bc-a20f-f82c57be4194", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.192.31.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5b76a7-7a52-4f89-a3cb-439e6f7eef8a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.220.150.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--476859c6-c5f0-4ff7-a901-8bb3093a59c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.56.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165c3be7-e535-46e8-872f-6d770083746c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.66.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c035ce56-bf12-4f6f-a60d-2b129945fb8a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.226.60.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e90525-af86-4898-96a5-0a076221b818", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.228.149.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49481b45-6bd1-465b-be6b-0455bdd98937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.244.21.255']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22f722f-3536-4db9-9637-cfb9c93285dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.19.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4e16f6-829b-4371-9acd-f069029f3783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.21.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f506845-145b-4da0-a2f4-407426c7b25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.21.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--285ce48c-84a3-47ae-92f0-dfdc5ebf76c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b0a54f-4b86-4603-8780-8007acc182e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.176']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df138472-05c5-422f-85a0-0c5f67992bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.57.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9296501c-4a1f-4cf1-b48b-42bddbb30b32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.58.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fde55ee-77d1-4a4b-a311-0f0a4615036d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.35.154']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd693ed-8d20-4fe0-8f14-35de7c84ab31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.45.150']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4cb442d-c466-4e70-b465-1697581b289c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.210.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a42a10-9229-496b-8883-139e3e631ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.216.95']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19247db7-02c8-4f87-9fad-2fe8f2d7eeb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.218.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136c21f9-73c9-439b-a5b8-83406dc9fafb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.218.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e76e7a9-6d20-478b-87c6-9cad1e58974b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.250.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4992b2db-230b-4cd6-b6a9-c707873fae34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.92.153']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769a703b-d141-482b-bdfa-7c8ce57f7ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.95.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dad8ba7-dd00-43da-bc12-ddafa5ca4f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.231.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c66818d6-7c30-4b1e-9f7e-0e0575cfd1e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.232.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2533407-a54a-4210-a38f-a6908000a614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.245.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c938d9-7383-4f7d-9fd3-eb9b7ca4545f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.234.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5348826-0d5f-4d68-8fc7-bb9ed860f942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.241.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89253797-f864-4d7d-a1c6-9c3603e44f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.245.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc41ae5-80b7-43fd-b308-31cab2bcfd3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.2.225']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc1126c-8d1a-4554-97a6-27e4465b12f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.3.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b17bd87-c56a-4a89-b318-d35b11c0fb91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.35.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256343a7-bc96-4ad6-ac30-feed67126e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.36.63']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b96c54da-82bf-4e26-bc86-047c48f1a6fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.50.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3f4204-c18b-4a84-b8fe-c166fc538f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.72.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a404598-f02f-46de-b3cb-2169bc9729f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.84.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b40841-d8ee-4370-b10d-86cd8db89f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.90.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dedc3bd5-f046-441a-89ae-4230650af7ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4052a28-87e7-459c-a3e3-3b47d9860ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1528ca-47ff-42e7-a5bb-2d85b934e7e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef6bb3e7-85b8-40da-9494-4bb2c29aa9b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccad5456-01ce-441a-b61b-5c2c60c1fbda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82236e81-1f30-4e70-814a-4b316cf8e460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5903fcf8-5a67-498d-9b25-a1f322ff820d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62bef243-2675-48c4-af10-7db51a70c6bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb57902a-46a6-4c82-ba31-7c6af2d68449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0837ec0-d301-4ca6-819a-43e8c9af90da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eedfba60-2004-4ddc-97cf-dcc214cd4a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a27b3abb-5351-4748-87f4-bdb537791b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.79']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--787ae905-3a28-4f3c-9d99-5ebf129d238d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46dbad4f-c3ac-4b6a-a186-c5c3cd1388fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.0']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b078562-50e5-4c3d-897c-941d0a6c5789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c08dfdb-a679-48a5-9ee5-36c1dcd5642a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb636749-441d-43ec-b7f6-328404cd5305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9f8a09-4b09-4a96-9665-3ae55badeb2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f685e0-888a-422b-ad05-4f4b5e134c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e2871d-b48f-498e-8e67-59b3b44b9f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc8e0b6-1cea-4d60-a74f-6896e22c81a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3020184-5d91-4cb3-bd6f-3e9890bd16e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516ce569-8081-425d-86d8-24c43d172949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--324e118a-7601-46cc-aa43-e47e906ee99b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2592117-b1fd-4c27-869d-abe52430200c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22a3eb2-716e-489f-a1c6-91b3373efb86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b981723-8f52-4c63-8210-1bdaba164a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593180da-def0-4195-8879-78c3ebbdbef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--013fc537-e839-4cc0-87e9-f8f8c9fa7b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f68cb8-cf27-4d6f-a14b-31209b2d415d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454ae465-f56d-41f9-8c23-cfb7a36146b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917c5da0-f4a4-4c4f-ac32-c7cc1645446a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac81b2ac-129d-4d27-9d43-7d38c74492b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66081053-2cc3-47e2-87ce-435ff35d7e7a", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b723279-c48a-44d1-8acc-f9cb3be63b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.96.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d6d625-dbf0-4b4e-938c-a2043121e5f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.137.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e2fcf8-4c68-4ff6-bd5c-89d1acf1244a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.152.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f162771-150c-4e20-b61a-071f8311ec2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f43294-9688-48af-88ce-105cc09ed9a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.178.1']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cfa5448-7ea5-4ebf-a227-2e7d12e9e67f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.184.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93ad94d-2865-46b8-bbe0-2440b9db77f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.185.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1629f430-98eb-46f3-8cb3-adcffca3bbbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.185.255']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf37e4e-19e6-4916-9a4b-3f9f6495b58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0d24df-45af-4ac2-b5f1-68691f3899d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5029678-2d59-4d0e-a49f-8e5c41a60780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be127a2-3e38-430f-97f5-a8ef814e677f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.0']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ec439c-65b1-4fcf-9d32-7ed75e050ade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb5be47b-8822-46fd-bc7b-2f9c8d634b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--105b820d-f5ba-45c9-a451-a9cd2a3f497d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.129']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a047986-c64a-4b5c-b6f7-543e94133f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3ff0ec-74e8-4090-a138-74f023941735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f73c92-6ccd-4f9a-afcd-7c244209912c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed16c685-0f9c-460c-a4e7-bcad5404af4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5a7f94-ba52-4b29-9a5a-2496eb9cbf85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ffb923-a2c0-4929-9ef0-920dbce735c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.199']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2683b3-42f6-494f-a0c5-877df92b361f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db14ba97-9468-4431-a90d-68089d980673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f111e939-1b83-47f6-b0b8-5ec88ff879cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.225']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e893d71c-d8e5-4dc2-a6c7-1a2d4ccf9da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb1ada3-9f37-4776-aac1-36d09259c635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c84154-d58c-4dc9-9cc4-1535e002279f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d0e251b-d73b-4776-9144-886ca3173562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c1e56d9-dd4f-4cd8-92db-0b7269c3712b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c49e3ce4-cd83-4969-afd0-68b7b1ec8239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c42afc5b-784e-4320-8df4-d60ca6b3c2ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45858fc2-a069-4ffe-ab38-397bf70294a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.76']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--802edb7e-9fe6-4837-9c47-281c25de9d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c42610-4e4a-438f-8032-28b3656054b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5c39dc-2619-4cd7-819f-a07b18d77c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3035b14-a12d-4b1d-afa6-02ce5d2f739a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97b1def-9a0b-48e5-8014-532fa1119a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d50a82ce-69d8-4c1b-9d6c-78a7cd9c86d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db5567e-13cf-4328-b986-626eb8ee718b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.129']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6706975-94d8-478d-ad02-504f6bbc0a47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7573b9-63b2-4321-bdc7-109ef7a3db7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f474117-d604-473b-8b6f-880e03b71bee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9e34d0-808b-4069-8e8b-e11ed676c87c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a6b906-f32e-41c6-bdcd-9cd81680adc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f4bb052-5343-4f58-ac46-6bc0d377d304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac8fb30-dd6e-4e38-b88b-290bb87f8a21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0b1dad3-3ef8-437e-a9a5-788df1e90c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd308744-6c0e-4dc3-9071-e6d42b7c0a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e71e37-b22d-4094-b7e2-e7c0ce657d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.175']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b871bc3-daed-4a4b-a133-4976e9b2a78d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.176']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7d3208-41c4-450f-a35b-91e02c73b75b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--864dc525-8c66-4aef-983d-7fc606ac7a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.183']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8fb5e16-2db7-4e9b-9825-73c50167bd94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f1c1e73-4271-4ef4-81f8-080b11afb106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc97ff8c-6937-486c-9165-b514d46c095b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78c511d-57d4-43f4-a024-a907f7cc0ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f096cba-0e4c-4eae-9c84-f7eb9c35b0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbcc6782-e8d4-416c-a1f7-d0230fd538b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64243a6c-1d24-4b81-adae-ea059d49e08b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17899155-35d9-4d57-851c-bfc608df086d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a423df9e-e258-44cf-9edb-a277d13405eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ee86fb-7d1e-4c7e-b31f-2fd8fd01c2bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cccac452-db54-4249-96a8-9fe90ea5209c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72965a9-44be-4aeb-b93f-2e8dd8da00e7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c984691-c7bc-4059-aaa8-be5b93d7cfe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49045cf3-61a5-4c27-9a7a-5660a239f4b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9502ebb6-8222-4dbe-997f-e53cfbddbead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97c0206-a12f-4869-b24d-e800edbd0b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.96']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--077f28f3-3780-42b9-a787-785bd32399c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f115e25-2ac0-4147-bea2-26802517006f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.201.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c7439e8-af1a-43bd-bff5-89d3c81208d4", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.81']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99594128-c775-40b1-a240-6ff4584debd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b5fb6f5-224e-49d6-84ca-52ad7f70ab52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.224.144']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ef5a35-47e5-42fd-a010-40e491f6a0be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.226.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8878eb1c-241a-4671-a489-d3519fad97c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ddd1705-d92b-4e89-a6b6-dff89bd07e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1c914d-c28f-4556-a812-8d68b8dcb2b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.82.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23564c51-09e0-48ce-8bc5-c07a790a0230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88bcd5cc-b30d-49df-b8fd-a882f55c65da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.47.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0973cbde-5327-4921-a648-a75a0283f24f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.151.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c5b65b0-c2e1-4956-91d9-19ca6de0fc4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.167.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a32f9c-ed6e-47d5-9548-6c197c06b7f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.170.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd06738-5173-4311-a80f-66c1fadfe314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f496ff-02f7-4dc6-a8e2-f11a74db6c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af87f95c-e8c0-4cb1-9129-cbcb902f67a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a0e69d3-2fdb-45c6-b9e0-777e4d3fa3bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.32.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d31581-3136-43d0-9a76-4528b1591b6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.48.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2917f25c-15b4-4f0d-ace9-2d231c5758e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.118.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c205fa8e-415c-43d2-87b6-e1641477e554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.144.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141f1e6c-ceee-40aa-839e-8d0efce67e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc0186fa-f9ce-498c-9969-2e6fe67804be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1deab4b-59d7-4a86-973c-b326965f15c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.84']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad0cc93-079d-4b63-81f2-2b1c263efe12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.152.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7720ebf-7ead-4d3f-a9ce-c52bc78c4272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.199']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--006f3e52-f419-46af-9174-db1ec8063dc4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.9.82.255']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2f589a-9fcd-4ada-bfa0-2a569971b3bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.128.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37767f2d-48d8-40c4-a6a0-d7f17c659191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.136.63']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c7c542-cfa0-479b-ae42-5bb495ae4e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.137.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e0ee71-47ed-4e0a-af65-2ef782d2d3aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.164.46']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a665e5b-874e-4213-a2b1-0334931523b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.166.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582d2955-be16-4ee7-b5b9-a44636717055", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.1.218.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee8b5f9-f710-4499-b8e7-9cde810a2363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.143.72.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a77e26-591a-4135-8f8e-95fa30fb2303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.152.80.255']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a60982f-50ed-4f26-a14f-5d8ce93e6e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.174.180.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934d6b57-08af-4d4f-ace0-2a3a9118e04c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.77.12.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da51c68c-0a70-4130-88e4-7049a9a422bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.105.49.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8641a3f5-21ed-4ce0-a4dc-96a6d2646288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.140.123.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1761b99-9799-4684-95fe-aaf1ffe484d3", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.184.105.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c832bc-66c2-4831-afaf-3a1ff1149387", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.186.40.161']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdafb71e-e145-408b-b629-e10c1f1ff686", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.225.29.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e840eb5-735c-49b0-8287-fe6960d482d1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.249.192.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f17389e4-b7ee-4b7c-8a86-a2a3cfd63e26", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.106.54.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8ce4fb-d020-4b79-b232-81281ee99a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01cfb968-8796-4a62-af8f-1ac2141c8595", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.141.251.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffa4fcb3-7970-4b95-96f4-bc1d7e389504", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.162.198.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af741bc-ee3b-463b-b767-3b772e00b936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.4.105.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1377208-b2ef-40d8-8bf1-94f54b05e5af", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.51.214.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7066f57-fb9d-4c4f-b638-52d56a238087", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.53.15.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5bfaa1-a027-44b9-813e-b031d0ae5add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.63.202.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2a1ebb-dcc1-4e94-be57-9819a82ae6d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.76.137.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--802a12ac-ff57-4bbf-aa50-19adfea0c2e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.79.172.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7aad779-1fb7-4ae6-859c-94dc416803bc", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.112.209.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590ce9db-1d71-4cac-a8de-5167fceb7181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.135.57.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a828d22-3cf2-4386-9fed-cbbfd0dc6d7f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.150.121.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72efce6-fd6f-435f-bcf7-da80ad084c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.153.108.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4707a7c9-c0af-4b94-a4ad-c0e1a5e46e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.156.108.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd30a33-582f-4c95-8f16-cf0223450257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.162.234.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2099997-1119-4aa4-9da3-8880507c7797", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.171.29.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f0f2bd0-c4e6-43d7-87d0-7dff74e7d092", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.25.208.145']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c98355-fd04-41cd-8e97-45e9eb46552a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.32.69.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6071c9-7e3f-468a-86e3-9174f6a2b6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab97f2f8-2778-4b26-840f-8d32826a1c59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--610ee34a-d3b4-42bc-8af4-bf2a43c23df5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.57.235.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01fe730b-6e6b-4621-8d1a-b5d0fd537017", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.76.222.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2660d0c3-f307-4d28-b2b5-e25c2b66d919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.83.11.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be8ef19-3318-47a2-8db0-5f446960d1ad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.51.40.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb907abb-6b6f-4f1c-90a2-4c64c1519d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c737b2-dd4e-47c1-9433-cf899a54bed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f8c572-2898-4eb7-9a10-d546092f2fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e4a614-3b29-4bd7-a09e-053b2d927237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--094f228c-88e7-4bd1-a6a1-ba66ea08350e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec22bb70-ff89-4b7a-ac2a-204c05440fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f0ca76-0d56-486a-ad7d-13cf1359db10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3373f4fd-9856-42b9-929b-e78faa74c5e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.109']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e39e6c57-9cc4-4a88-a32c-2eaa964b4276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e7794c-d939-49ab-9e3c-63ce50965fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.111']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a76dfaf7-0b75-4690-8a7b-3b1244900522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29fe28b1-ad73-46d5-baad-a6f4416295c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1ad645-42ce-4920-9271-182df4ccc360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be48211-11c0-4aa0-b5d5-151a20785af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc37187-83f8-4b40-a21e-c820598220be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c858791d-f531-4441-9085-e1d20d8ee91e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe8cca4-e93b-418d-9ccb-807aed38c180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e8613a-8e09-4556-aa1e-eca189559054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76cc421d-6438-4249-b047-c73016f779e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f9e402-7100-4d77-a174-826acade3dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496f1fa2-acee-46b6-96d4-828493a6fd68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.145']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa0a2a1-add8-4c95-979a-92455bfe85ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.147']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a44459-6b32-4fa3-b2d5-0c75e54c2a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2bbd88e-92e9-423f-9c85-139638130196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d8b5441-1379-43c6-9c98-c053b219ac17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff660f4-7ec8-44c8-9b17-0aec019a45a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.163']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fca9909-277b-4343-bcb4-4d37d0492f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d64aa4-b922-42c5-9ef9-d9204f61933a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.165']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de94478d-50f8-46bf-904f-ec7bfb454cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9babead-0a38-4b52-941a-569f9816da75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db17a04-82a4-4f1c-af0b-77eed120022f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec2554a-68c5-486f-a33a-ba0a048a29c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1bc2ed0-87f3-4cf2-9cf3-22e5595beeaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--621bae67-f93b-4ab5-8255-7e02a2e55f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31bcbdec-438b-4c84-b0ab-3c5a083217dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e22ebd9-8127-44b1-9bea-fe6dd1e84a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e0b781-22e1-45a2-850b-5237b97dbf93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.176']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6455958e-ab2d-4216-b4bb-b3de623888b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aefa50fe-0480-4eec-9a1a-bc9f62dc1812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7ed645-5806-4652-9de5-6a8ebe7a7d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.181']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830db814-7d6c-4c4b-a64f-fe74d7439524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10685d78-5efe-49e0-9178-6d8c3966e9e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.183']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29836311-ed3c-4071-93b4-215aeda0d43c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5604bf83-fea3-4965-b2f8-17cdaf70f94b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.185']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41fb8b09-ed02-4606-a405-b4cd111aaf9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0be1db-496d-45d2-b033-f8f28f24b425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50720427-2202-40db-a500-315771941a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce9575d-7da0-4d64-9f42-1f83e9992633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d4d53a-ff0a-49d0-b67b-f18f1faed53c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46b995e-1cd9-49b0-8e0c-8b6a975d978c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--738d63cb-5b66-4b57-aedd-b6e350d5f253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1be7a2-88fd-489f-a456-6105fc47263c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670a572e-16a9-4e99-93df-1f2b8215a749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f872a462-dab0-4476-a475-ffdcb406a166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.203']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--371e6afd-35c0-480d-a51d-e35564fbbcdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a292de98-04c6-4250-9616-948531816d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab2c2984-ee5d-4540-9c77-8dbe5e64bb8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38eb019a-719c-4137-9799-c74e0021eadd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--947a5c47-c226-4989-addf-1597360ebead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1197e879-3033-490a-857c-2184f8b26346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b22ee4-9976-4793-9176-10c4b719798a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--506e8975-1b89-4f8a-beec-db812f56700c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336b422d-0eeb-45f1-95e3-da8c52fac474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f478932-ab50-4a05-8634-ca983720c6c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c730f0-e148-4bbc-a17c-1692f62fb4d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d802f7f-bfde-47a7-aec8-e5e8e26ca7a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.222']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4346ab8-3b3b-4c95-b11c-d479128f6735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec79224-f904-47e4-bcd2-01f0ddbe233c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.224']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42174a00-d6e0-4e93-bab6-b268032255d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.225']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279a8cfa-b853-4c21-bc84-34bd68993e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8858a76b-daf3-49a1-941a-87b7b27df205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.228']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf000eb-5b58-4bb8-af53-ef0f09d38d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.229']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a8be5e-8eca-4b64-b08f-59a38e3a516b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91f8f92-3942-4cce-98db-744ed7b2a4e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b4941f8-9d11-4cd2-b78b-ab8b2c3ce09f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db30ceab-111a-45fb-a037-97e3084dd0c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53768337-14ef-4038-871d-57b6ed8c4c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11491229-49d1-4e91-9173-54f023f790ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--945ac44f-c90b-4bea-940e-bf2f8939d0a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c82b33b6-2f1d-4616-afdb-e71234da8bbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.240']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87142024-886a-4c70-851f-f0f2a2fd26e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cc590fd-4f50-416f-a107-49d61c3dc82c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ade599e-cdd0-4c2a-aaa0-0bb0e35cb106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f69f1c-07fc-4ee9-bb8a-e94c822b41df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532e68a7-8d5b-4ca1-9620-c2e8fa30d674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c26278-4cb8-4773-b4db-2dd48a791ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.249']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91ac68f-8839-4526-8204-4824f4fbe2b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b310576-7f0d-4024-8ae5-1ea04582573b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.251']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--484f4310-cb87-44ae-93c5-738116078311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97cf8ff6-2292-45af-9076-6455682eece0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.253']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897288db-afb9-4a10-8aa1-4b63ad5dbfc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d414f4-a007-42e6-a45e-b5cab8e1f4a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.255']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c44010a6-f2e8-431c-9e73-9af2ed5353f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb43b535-b9ef-4494-83bb-e3a548372f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44522547-a307-4373-aee7-642060546ed7", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095d148d-e3a4-48ae-b45a-047d5f4ffa1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c960743f-89af-427f-a46a-43fb264f7535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe00e23-4bb6-495a-b0d3-39a0987453ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18782f2-960c-4f18-835e-9d612a700b5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e930828-b6ac-42bd-8de1-fef8523f1b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31ed0ec0-ecb2-4563-9e74-247c9de85652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f14863f8-2829-410a-ad2f-fe86f333665c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--947a2e30-f63f-46a5-ad23-0a7e1f31e295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e034ea5-9ae5-42a3-a3e5-191c636e14e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a504169-a78b-4f71-a448-2304b738903d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.48']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece51596-0de5-4a72-b1f9-9d51a4486ef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.49']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0ae5d3-15ce-4e78-ba32-895abdbef90b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b47a87-3972-4f24-b248-2a0a56245909", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9116b177-9f47-4aa9-95c6-118e35381222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.51']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593fa358-ad5a-467c-b0d0-fb19e472a19e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c8bd7c-a2e1-43db-8ad1-53e6d8b71f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624ab2be-7b48-480f-9016-527bc9cbff4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.59']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d772a4-e915-4bb3-845c-c8bb531d21e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7cbcab-486b-47a9-8a74-33b313379ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2eb993-813f-41a0-a55b-590750f90fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8e82d8-7950-4d8c-a0c3-a07cc09e60d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e281fb00-8778-4b26-b5ae-4310ba371ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3cfce82-858f-4ab9-9de3-1b8bbdbfeb0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a86926-fdc1-42db-919a-90299cbd7c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf26d77-8518-46a1-969d-3a4c4d377420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b4fe06-7e45-4d4d-b3f7-4ec85b4f15ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a8d11c-60f8-4a5e-a598-8a0b44c439cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2590d963-4146-4cd9-8a44-98214a80ce56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9454277-f85c-46eb-9af2-956e6e945e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb5b4df7-52b8-42d3-accb-597a03169c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e483244-9fa1-4bd5-9bf1-2f829afed6bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.81']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404c3aeb-dd43-4c47-b331-7589bda1ef75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0786a2-56fe-42be-ad50-89dfdf6edd49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.84']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5f5184-1ae6-4b70-81f7-75a3234dfe08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc771a5c-a8f6-4cef-aa35-3978c4d519c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac201e6e-618a-424d-be03-d262d5994297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be7376d-6d62-4e60-9fc8-c4109ccf3ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.89']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b174e2-b3ba-4f0e-bdda-a20f321b54ff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6fe8a8-82d0-4847-a49e-c1018a4b21cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46de3d3d-cba9-4858-87bd-07cc7e76c6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75acd49-ba77-47d7-a345-40b848b305ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c1c32ad-4af8-4e9b-b301-c16cb96b39fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--637b29bf-2086-45c4-a5ac-4697b6520f54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c1b8b80-18d2-4b94-9589-c4bba78ea772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7892ef51-5ed7-41ea-81c2-5f8b23f9aaa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.250.39.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed1c751-ae95-4fb8-a965-12defbadc60a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.0.24.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726f34b2-d983-4766-9bc9-30d02182f205", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.183.111.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--684a9871-64c6-456d-baec-f66664f87083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.120.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add1cc7b-f9ff-45a3-9908-f3ffe074b3b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.133.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d409567d-e73a-410d-b3fc-6daedc2b6a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.188.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6574b044-65f6-4327-be89-73fc7485d9fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.218.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ad2931-1b3d-4dc6-886a-76c21b9ec809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.25.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd59aa0b-faaa-4a19-a533-9cc3ae53a21f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.58.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb2b8dbc-b60e-4e9c-8635-63537188af97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.7.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a8d2e85-89af-460c-90e6-a5a055b9e460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.71.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f67f0bec-3cc5-4950-83b5-d46907531c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.72.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb15e70a-3831-48ef-85b1-7eaa79811f36", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.42.55.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a44e886-246c-4d0c-af80-16e5db7c38ea", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.62.136.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff8a37c8-ebbd-4f3d-bbe4-d4b7d22a68d4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.62.174.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f255bd4a-d59d-459e-aac0-f99a4f75eef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.81.28.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333fdf10-686b-4d95-be29-1ee2284d4d73", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.84.81.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907d464b-3908-4f1e-baea-390f930d5c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.200.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973f20c5-0fed-4dd0-9a75-0c6caa48a8c4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.209.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e672f9-ef62-4b59-b490-f4f9ae874e03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.253.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e40c5d-b5b3-4481-a767-13be77524a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.100.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3861cf-3122-40b7-99fc-20a96d204b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.6.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975690d9-d2d1-4198-81fa-e5cf25cfae0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.61.240']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9fb1905-f472-4a7b-8316-f3e497b768ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.66.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ff4051-7c12-4350-bdc3-db9cb4cc46c0", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.89.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4cdde1a-9245-42f5-9aed-e3d3f431a299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.180.195.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ab8bef-6480-43cd-be3e-a2fe08cb2eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.191.158.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87962e62-7b28-41a6-947e-74e84935e251", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0318d467-37e4-40e8-8752-2b264e4d4c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.89.18.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f493ea-f621-450f-9e95-51b68e154143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2782aad-a840-4a2a-809d-fc5534eac4bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb9da9e-a7ca-432a-949f-3de3d1059817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21b8e1e-91a6-4c1d-b27f-63683884529d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689288ff-ed82-43fa-8fe0-6d726ccdf11c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1906346-a86b-4c2e-80d6-f663fb799752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a51996-48e8-4dcf-9c13-b2aa33a2488b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dad0668-e154-4744-9069-1a9d615090f7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76266268-dc87-4795-8074-bc5d7026d8c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab12fbdd-1944-4a23-af22-78f527c5ac06", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN, SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a873b75a-8014-404f-ae4f-c278f619cb15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b614d7-05f2-41dc-ab30-989e0b8caa59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1433dd3a-e4f7-4d90-9187-95f64db68793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad24dff-271b-4af6-ab71-54a79d576076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d4b914-e2d8-437a-9854-45b47394a271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f95c5e6-a37b-42f0-a728-5924b35dc378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f738ff2e-817b-4521-a096-9d3c65c300c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58dec4ea-076f-432a-aa4d-6fd06f05816a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5da631c-bb8e-4854-b51a-a9f763a2d21a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.109.11.76']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed833949-6862-4886-8797-2c76a524a11c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.109.212.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--553d3634-4041-49c4-91d3-27b5ce4cffbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.140.30.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc64981-e495-4807-8c9c-e1853fb6071a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.33.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00e9327-3807-4a89-943e-a432341259c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0427b411-a6e4-4a2a-8e1e-44f82cc86a89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffbf836f-7135-480b-bb3f-4e234a3d3187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.145.51.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59f0527-a5d9-4909-a35b-129189cb1eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.131.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7927a18-45da-4343-9544-d537e23c028d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.234.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51df657a-e326-4067-ae7a-e4dceff47998", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.70.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe5df78f-9bc6-4a80-9d0d-8d4dca87f583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c39e62-f898-4f8d-a4b2-1125499d1db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.186.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8787041b-5bb7-4808-8848-b276d01ed754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c67a82d-dad8-42ae-85df-9191da045bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.190.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed99393-9c40-4a90-9128-4e1eb9c44bda", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.190.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c18b7ca4-9a99-494b-b805-441b5e8bc89f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.245.20.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b9e286-d695-4937-99ab-c670f3134d25", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.106.133.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af0ff54-ded6-478c-a963-e2e0a438a5b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.107.217.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e9f9a0-3c60-4aa8-8c09-3d4a23c5e906", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.178.247.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3867b5-7423-4ecc-a5bd-2127d2a80a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.184.29.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d90df7f-6691-48ff-a315-0b1bbae72dc2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.21.227.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc50391c-433a-4000-bf27-9d16e1708167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.23.246.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f466864-c0eb-4a73-a0ac-0efc3ef51398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.25.241.153']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc20892-80f4-460a-ad66-026291c4e57c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.33.122.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db51a341-3602-4ea7-9c77-57778071515b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.54.31.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73814ea9-9d70-41b7-9e11-2b7c916458d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.100.184.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec76ede-8146-4984-94e0-9012922e98c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.102.40.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0139bd-1f75-4d03-9d3f-fc87139996ff", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.103.187.48']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247b36bc-80e7-4e43-a345-e2f79fa4d350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.104.141.32']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965d0665-b353-41c9-bf0c-92aadbcf4551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.111.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e3d852-a4b5-458b-a1f7-ac7e067860ef", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.154.12.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b05b8cb9-3237-42dc-89c6-171ec746e60a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.174.57.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eda196d-cfaa-4c1e-a471-6ee93f90315e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.216.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339b8b79-6897-4844-830c-fd504bfff804", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.252.119']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5c0e6a-29d1-4dcd-b75a-0847ea23d056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.199.242.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36bd9d62-2267-47fd-b04a-bd33dcd3e7e8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.253.124.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f46a525-f9cc-4d94-9736-822e70fd27a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.53.236.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d154090e-1505-4430-8a3f-d1746d0e3723", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.56.40.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5fd937-1210-41fc-8e28-17a1664d1bfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.0']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8000fc0-f95b-4a1e-b56e-f2b5539bd6f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.1']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ff0b4b-d45a-4dab-95e4-2bd581de2a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390c3ef5-1149-45d8-9b70-c805a3e59a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d134ec-29c6-456e-9c6e-1e2e2092c973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14280da5-af52-4310-812f-f21bf833a37d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6500d8-ac59-4e5b-8347-a89d73aa4207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d366b7a-bfb2-400d-bfce-3bd47468fa91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c33a144-0d9c-41c5-bbd3-a6f500e3da38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--060c60e4-c0b6-4caf-8555-35cb95d15a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c561f09d-e0ff-407d-8abb-5a3e5ee32d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1441a2b1-604c-4110-8e39-518db54fdad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca09a5b0-bda6-402f-a42d-0c966e191ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc38fb3e-0166-4ff6-9d2f-cbbc3890d9c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2f9ed94-2849-45e6-b180-f6644ac67b41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30375228-9550-4094-9940-cb40ff398073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23f8c27c-b457-4382-96f7-7fe0ca7512b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8ab2c6-61a6-4080-a738-6e9a0120ee4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5872632e-3a81-4602-ad59-cfb4857ed1dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a419f5-78e7-4438-a3e3-94be2bb5f7a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2d547c-c273-4b9c-949e-188124b8c458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d710c51e-9b8b-47dc-bb5b-e38198ca253c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d7d9d9-345c-4d23-8e5a-9a939b4e2562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa9c2ce-03a7-4923-91e1-e98bf3e90f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9faeedc0-8bfa-4c3c-a356-eb50a6e2e64d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4d2b4f-3258-450e-becd-b5b20d177627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.32']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ef78c3-114a-42ab-9a94-b1674c314d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9091b7e1-56b9-4c8d-848f-f6d54ac2fd38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057bb201-6372-4c46-be14-c0954db862ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a3434a-2a03-42a6-b730-9caf95d51e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f55cec2-8d73-47e9-8b55-ad2be167f8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d03b2541-aec0-42ad-a4e2-992d7df0ca12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e43aec-717b-45bb-b842-3db647168b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f03749b8-44ca-48ee-9da8-11de9dff2c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28190eb1-d976-4573-af24-d23342ff30cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fefd13e-1dc5-4918-88bc-cc8c70f7f16b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b69113f7-019d-4fe4-ae2d-7800a796cb0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2180edc1-1e8e-4b20-8be3-3e487b427223", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.8.242.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--211f36a6-32a1-4f1a-9d43-4091426f138e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.83.140.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f37f52-7292-4867-8b09-daeae1ae0d68", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.142.151.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49245de9-c716-439f-91ac-5ee2108ff127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff35ac6-0713-4d1c-af13-b35baca37d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af3015bc-5ce6-4707-8c63-744d573fe69c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc3e3e3-ddae-45bf-96c2-277884c76679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e2b9d1-d92f-49f4-ae3a-a38bfc9e0466", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e99b97d-2953-4552-9440-c458ec096c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6f5519-af94-47cb-a532-35124d5ab36e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5abe782a-84c4-4bb1-8754-7d8f4279a825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06876833-d9dc-4e3c-8bc2-51c588a13ff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5613d490-7c45-4ea7-8bcc-78376cb0ea69", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1efdd808-def9-4477-9d66-f5db7b6a420b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.154']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2a1019-64d3-4320-94ef-c726299fb714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bdeed4e-5c8a-469d-ad32-dab04d19b20e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134754cb-250e-47b2-a215-5950a7272562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5fc5c15-efba-4371-93ee-03141da5413b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be33cb0-08de-4283-852f-f2e85e3b30e9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.38.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276e940d-2aaa-48a7-ba36-3039235ebbf5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.10.245.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2032d608-b136-4b6e-8500-8cf96bab9353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.225.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d81adcba-e871-4e4d-8c00-bb5a378150f6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.144.249.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc14b167-2101-4e37-80a8-c6b72752ca37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--376d9459-dc3b-4af7-803b-ecd03701d715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6896c356-f3ca-4a1f-a793-a4297d54bc77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e0807c-01fe-4b13-96ae-e68f80221abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.32']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea652bc9-2283-46a0-ad60-3d6fe83c0495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07d2dcc5-b42c-4abd-9dbd-bd60ffbd8b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c9f36a-9ed8-497f-9d80-af401e30ef9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a65a1d-88d1-4151-a571-d0d89ebdc0b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--983c3cb1-f3f7-46c4-9dcb-bcfdd7e8a931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5fa8af0-8f2c-469e-a94a-d76d619102d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba0b187-f311-42c7-b66c-a4520bc8f2f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4864842d-5aae-4279-987a-083accc310d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.107']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9186269f-3c7f-4897-bf30-ce1028d8a727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dddb5aed-de1e-4268-bcb0-89cef0fa0ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68bac1a7-5ced-4269-b97b-1ea1579f88a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4d24f5-c7c3-4b7d-8191-9da2c4766881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587ad6f1-1b45-4908-b3d5-f6af51874bbf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c0199b-0c4f-42c2-9215-53326cf1ae5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f640a9-2a29-4182-be82-c43f105aef37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a26061-3768-40a6-a140-0f136dc6f9c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07600b1d-2b42-457f-bf8f-e3510add00bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.76']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f8aad7-b247-4bdc-a58a-279f10868b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769cc44f-efbb-4f85-9e03-a2dc04295088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--206fa3e4-7bb5-4fdd-85de-3f00b0a4c3c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.79']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--922afadc-0ac0-4706-a024-c0e2b8538dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.81']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e254f5-f0bc-4453-aa19-068cf913077e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15a691b-5bee-414e-b612-6cf30260cb94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fc70e2d-f6fd-45b1-85de-32dae219baad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--389d8d5b-96fb-4247-94e4-ec208a8ee304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.89']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeababc3-52a5-4179-ac49-49b76e267a65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b713c957-46ec-430d-a06d-67cf193e4865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e35111c-b9bc-4013-a5f5-31cd90b78c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed9c3a1-ee50-4b0b-8b53-5cb217354d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00edaf0-5928-4566-8b3b-b4434ac17dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6122be38-7f15-43dc-914d-50604ed1840c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a02700-3649-49a4-ae19-140233996373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79eb6ebd-2ae0-4ad0-a4c3-f05c63b9fa96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5636cb-8ffb-456b-aa55-30fbb0f9559f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e1561e-ad03-4637-a6ec-106c7a523d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf5fa1cd-7045-4e38-aab8-a17a0b688810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6667e267-4ee9-41a5-991d-26f2ed08402e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029b26fa-7bcd-47ac-92da-932780bd5b1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c4e244-e189-440f-9f2e-b79d85a77963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d1db88-6e24-4615-a136-8ba091f04428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1d3c8f-8c4c-4148-86bb-f354d7e34f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dcdea51-5814-43cb-a413-b870131fe6cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be57e04b-dea3-4842-a2aa-9899df7a2c77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.119']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0044cc87-61f2-447c-8f35-7ba8154b86ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e30cf143-26c6-443e-962a-8df223f3664f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a78c36-3a3c-4699-a18e-61c47f286c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--284979fd-2c0e-4c4c-9dd9-9fbb453f88b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.125']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ca76b5-8d47-4934-84b8-322dfd8bfdf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73b6314-56d0-435f-a64e-d72d1f4c3ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d46cb2f-227f-4437-a90e-43fbcc316cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02cdc510-6ac8-42d5-afaf-be498313aa5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2178c89d-fc08-411b-990b-1f5af8142aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5eb2415-5161-4cfe-8177-439e0042a90d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d4a18d-94f6-47db-ad9c-9a6868c47b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60eec24-ab64-4146-a068-8e6246d53d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3329b93e-579c-4f59-bfd5-e3c098dac1a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.145']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c75e72-4054-4dae-a2ec-3b717f271780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d35cd8f-fd77-4155-97d2-44c76697238f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.147']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d31af9-2069-4c63-8a3b-6636c9bb2c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3528d4a2-4930-4c3d-aba7-07bd12266c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a54fcbc-2ac3-4f6c-bbbe-c08acef653ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.150']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e25ed9-b569-492e-aa5e-d589e6c9bf8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.153']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d553c2-433c-4ad8-90c4-66a9182e7459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.154']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61ea71e-e6a2-4e29-bb3a-a7a07f5632f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb00431-6476-47fd-9c11-d7a232535fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b20e615d-c12b-44a4-b257-df13d396bff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7b477b-31fe-4f76-a331-85bca7a4715f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59138f4f-7da7-4c5e-980e-8698871189cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55667e74-ab74-4742-ad8d-a451a210d17e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c0b1f3-a28c-43d8-9ea2-f867192721e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d7d0da-c39c-42cb-98d2-4b95d2a74c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33a4af7-8314-46e7-8286-cc34ca56523f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.79']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6c27bd-c2db-43e0-8fc9-c4e98d56a92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d29ae8-25a1-4016-ade9-fa85696c8fb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.81']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86231332-07cd-474d-8fbe-67f6e3dd49e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6a7901-8a2f-492c-a464-0f7e935376b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89786fd0-af99-4820-a402-895bf3797145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ceffc1-2081-4e6f-908c-3b98f4ae778a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--829e71ee-2cf0-472c-8c43-09af307a57de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f770bfc7-7e9e-4cf1-bddf-512e84f26280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a52f04-f9e1-4aa3-a8ce-cf26873f363e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.95']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb6b039-ead2-4f91-a415-9bc6f1957fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd81917-03fe-4de1-8144-17e6945f0ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff43730-f4e2-4160-b374-b6f6319eb805", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.57.110.81']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5926491-2588-4b99-9208-8b5264ecd62e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4607230f-3d17-4c6b-a57d-a5b924a3f6be", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.153']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66609c3a-09b7-423e-877c-773b7434ad60", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3886516e-e8e5-4563-9009-94e4fee4776d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa0fff6-1b4b-4481-86d7-6ec47bbb21b7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c179c0f8-1ed0-4cac-87fc-86e67638cd3e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8252c1a2-ae4a-4f5d-a14a-47d763558eac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1372b371-6bc6-4d38-aeeb-a8c7b573b793", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f01f6da7-e666-4a4b-a1b0-579d02f382e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e9fae7-320e-441e-b164-66a3ed4e57e9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85235ef4-3e0f-4765-b597-dbb93f92f86b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a583d5-0293-425b-af5e-9de407856e73", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4887ac4-76a0-4dca-8fa4-7234253daece", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebbb26de-ef8a-4af6-9708-b5349d9659c6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9909e3-2140-4a1d-a738-643246f8d965", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a061fb-b887-4592-a2b9-96e028d53821", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101021f8-4329-4f73-8b64-9be53b13d650", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c18df3c0-ceb9-4a75-b53b-c27b98eae037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b5cc500-1f69-4d16-b2c3-98cf73600c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd4526f-40f1-4adf-bbd8-3c2d7f1b195a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5846dab-8dbb-47c4-b3c2-7838775ebc25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8514ed97-4dbd-4ad7-a816-9f6cbbc286ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb26acbf-790d-44b6-b736-e878ff8a1d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c869b1fb-d3eb-4cfa-bb97-3124598fb3c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75fd3881-c5bf-4c1b-b21f-dbcf061bee45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.95.163']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d0534d5-c1b6-4476-be31-fe3202a61f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.15.161.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc3e234-0f66-44b3-a953-b2aff51bf22f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f1d84b-e7d0-4d70-bfad-64821e5e98cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78c34489-ca04-45b9-9ef7-20976f2ecf41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5e787b-f545-4755-afe6-f23530467f97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b5eca1e-7010-40df-aa94-e9d4ee00ed9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540f3a95-019c-4fb7-a18f-5e649baa35ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11870dd0-eb8b-4000-89fd-53991df222f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22c3bfe-2979-4dfc-b419-7d2ced5c6ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0cf53a-c640-4dad-8e17-68f793a679cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--338e757f-a8b8-419b-b6b0-9cd889ab8fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52273804-85f7-48ac-bcfc-39ca1e0e85f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.145']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79fa17a-23b9-4bde-a090-ba5339a79da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14be69e2-c93c-478f-aa49-032784b29d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.154']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5087fe82-0225-452e-a37b-612fe67a4944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39a6c7c-8724-434a-ab11-4192a77b07ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487f97e6-efa3-470f-9e12-d0ce9dd04334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24867565-e6cb-4de5-98e5-177c3dc595b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43fc870b-843a-4a5d-9f16-cd14f4074d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85979c61-0410-4019-ab72-385f779843be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274ba297-b978-4116-8425-98ecb67f3b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ec0093-3e45-4ea7-a219-4b06bd70bf40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c207ea2e-dfb0-4ee5-a56f-f17387ba3e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e651566-ed96-4596-b6e7-6fd0b8051a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c87a0f-9e16-4fdd-bba3-4f437bb092df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a51fe45-cf3f-4c5f-b8e3-388bda0ec379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7afb2a6c-7964-40a7-ba62-c9319a9c70a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22e141c-5166-460e-9252-614847c97799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e103302-c862-46b9-b4d9-e0c0ad4ee69f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e4e384b-1e7f-499b-a716-837d383b4a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc5a9db-7496-4fdf-85fd-bb24ba3f7f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a9215f-9e15-439f-8dbc-0e71e8cb9f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--520bae19-3ab9-4dd8-ba9a-21860b05a19e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.222']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ed74b5-0283-4cff-b81e-51e636b01182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb03dd53-69d3-4e68-9046-04b744dca1b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b3dd6e-a191-49cf-81eb-0f5b2158f165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.228']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85dec35a-9cdf-40a5-b400-bc39e3ae15ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.255']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71f234b4-ea84-4e39-9a17-a3b5b481a5bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57efa232-fbab-4752-8ae4-d725d025de98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd06cfc3-fd07-4df1-91f9-31a2d018d55b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d9b2072-cc8d-4c85-898f-ba04ba9b726a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91205825-1999-4d4a-b81e-9e8c5a36107e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.46']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2a6478-8924-4a8f-8a87-8d47f367b3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21800cb0-11bf-421e-98ca-45cb6c71d222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.51']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0915ffa0-ed4e-4c38-8b26-d258045f5481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60b4fb3-0f88-4281-9c7e-34bd2df9dccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6c3c12-572e-4689-b3f8-5ea26f3ef63f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d472787-be3c-444b-987f-0d2428d23911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a882ad-b5b4-44a8-95f0-82be27a776ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8441edda-d616-46d2-be61-c8d61093ab7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91bb3101-16da-41d5-a3fd-f2e399666952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d5d30c-93d0-497c-b7cc-4edbe7374577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a3f4b72-328d-4475-b60f-5db0034aa130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a96eb1-8124-4dfe-b86f-8acd3fd3399f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8e3d74-9623-4b45-889f-3e1fdf685d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f46c299-e065-4e57-a4db-ca5ebc56abb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02db289-9ae5-4287-9e22-57e25872082c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208658a0-6a92-4783-9d01-666e62ec3c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.18.209.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--955dbb99-d5ae-4c9a-befa-7715de691f9a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.24.137.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2694791c-229b-492c-8785-96c288958761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.17.184.95']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d40b79-7d8b-4e2f-9ccd-b1f0ed1704a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.185.241.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8036c2f-1796-4428-b6fa-9672108934c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.204.166.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcac7c72-9dc4-4620-8864-0944ba1006ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.22.169.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eee96fd-8d30-44c0-885b-f2fa6336bd96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.245.1.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--446f17a2-add3-49bc-9ef9-348e0af65c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.250.188.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e59c997-2b38-4ab9-a95c-209495285091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.72.54.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c87fe660-aa95-447a-ae09-7aa17f8ee77c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.74.3.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d67c9a2-e76e-4755-a5a4-824d789ecdbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.75.90.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2828bac5-36ed-4471-843b-5a417b685d8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.81.73.32']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe2025d-71ce-4afc-8181-917c394418fa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.77.5.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd358708-500e-4c20-8ce9-43baa30cfcd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.123.71.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54492637-4aeb-4438-a900-6793e2633ead", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.125.120.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9113a9b-a8f2-4de9-8edb-8662c4da21d3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.130.205.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fdd1f37-0c3b-430e-8866-f442c7303929", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.154.130.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ef8e7e-2664-4fee-9573-4ce2a2dd6131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.232.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc8e059-b648-4f32-803b-466ad7f1330b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.176.165.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b8c107-3a03-4c1a-a25c-4367a199593d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.176.98.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235be31a-40c5-4242-ad27-2bb69e1ec394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.1.163']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355a586f-01f9-46c1-884d-705be1a1bf8a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e188bc-f074-4b7b-834d-568c91090ad9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0da78c7-37be-4995-b9d4-a04ccdb1abe6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.176']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c813ea07-468f-4933-a86b-0979553de52b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5d1ccd-9dfa-4611-84a5-2aa1d922cce0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.84']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc10c90-2866-46b6-96ee-d2b9b9bfdb16", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba50e539-8a02-48ff-97d6-6e32acfc07d1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555803c1-2c24-4feb-936a-4e99057161ae", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.184.197.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08465c9-fcce-4708-a5f3-031edc7ab691", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.187.42.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd6cebf-0d47-48ff-af08-d3d75d865fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.85.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c9565a-6e02-41f9-9f75-36e9e1b5bbc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.85.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a30aad-96d6-4450-9842-7ec1bcfd2e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c86ba9-88a5-492f-94de-1e545d40eebc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.249.151.228']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--809f880e-b01d-4be6-9ac2-5012e08cb83e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.65.219.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a07c9c5-427d-4eea-abfa-83e23603efef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.72.160.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375290e6-8cd2-4f72-af22-6c7238def9f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.10.187.253']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc9b8a6-9f9d-4db2-bbc7-6a4e4b703c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.131.139.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b34c20b-ae5d-4a7e-8ba1-8278774fc7a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.159.119.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86608dc-c5e2-44cd-b19c-6431abf3f67b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.167.192.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e842377-abf2-4bfe-b422-35cde0901444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.178.143.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7459feec-9153-4971-bd2e-dd9d21bb4073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.198.82.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e9b8f3-358f-4004-bf4a-8b4fb87cf6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.213.129.46']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3b4f09-bdd1-4081-9309-0e598942b68b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.222.16.229']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333c8193-9812-41f3-af91-fe1e9a510bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.233.24.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--721324f2-acb5-4c2c-a107-789387bb54ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.103.92.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3ea059-348c-4382-aec9-966c3836f3c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.134.147.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a877007-40c8-4c38-b199-151bb6d74a00", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.134.85.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8be45b4-3603-484f-b6b2-227cee9d8798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.176.200.160']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3aaf0c3-3c81-49d3-be53-59be811001d9", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.186.140.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fcc5768-8a5e-4fae-9bac-d1d3bd20540e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.212.83.51']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a1a219-7a7b-44b8-80a4-50b28067e2af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.74.27.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1913447e-ce73-40ed-8ede-dceadf204d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.99.31.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f542c083-1927-4e2c-a726-afb693fde994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.109.143.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c756c83-36cc-4630-92ee-cd58d9be2667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.112.111.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270c0d2d-ae28-4ad9-a0c2-1114d15e9669", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.124.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716a4c07-cf56-437c-a891-cc59a85e24d3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.125.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--711dbb6a-8703-4eed-a7c0-59c6cffdebe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.16.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdcf748f-ceef-4b57-91f4-eae0a65935ed", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.35.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--371a8cee-03fe-41d8-9b66-09976a12ac3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.42.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6108f3f9-063c-4739-8026-d22a6630c55f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.166.206.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b6b249-9dc7-4f04-ae80-3cbe64ee010a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.176.61.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc27259a-a105-4dc2-84dc-602d44f8741b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.184.214.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--977d3bcb-9dce-48d0-84ae-bea19f2a9064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.199.162.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d615ce86-ec3a-4764-b3b4-c25a7e73c97b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.84.239.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8b1d2b-8688-4ba9-9dda-47ede4e8736d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.183']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db673317-9e89-48f4-a560-73d543600875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57a055b-d51e-40a6-9e05-e4225a738a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.185']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--829559b7-1cb0-433b-ac1c-b976e5a7970b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c518ae-d920-47db-ae7f-43ddb3972b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3dd202a-0f22-4187-a573-30bc54a345a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d395cc-05cf-4d46-ad46-37b06aedf598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbcea3aa-63dd-4b20-902a-018ee86485e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.190']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a6166a-9878-464d-a765-85360f6ade32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4edc7f5e-188d-42eb-8d85-4cbed68f56cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1c75e7-1a7f-43d7-a05c-c1366aff5330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.134.76.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24497bc-ecad-4bb5-8913-65d03d319f1d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.161.169.55']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f384c1-6c9c-4443-9fd1-e1994732205d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.172.217.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a35d8e-a09d-4964-9176-d3333a9e5320", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.180.120.147']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--023ef964-054a-414d-907c-87fc16344dc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.224.93.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f280228-79b6-4185-895a-962fceab9105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.12.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e4af17-1351-4d88-b7fc-6f9ccd67efb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.12.81']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf1ef83c-7414-4d1f-96f3-a306797a1cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a16dff-9782-425f-833c-0a81ec0a688b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058198a5-daba-4daa-9d8a-87c39e1703cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8743062-463b-4c46-a938-5af136261ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e28dd2f3-de03-4b6d-b3ef-351fb53d4e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.16.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba08839f-51b4-4d70-858e-9a2393e7e76b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.19.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7373d6-bf89-4be8-ac62-2666710eb873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.19.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebcb3c5d-5c8c-4522-9c1c-110a2b0b712c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.19.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55238318-6053-481b-ad51-8f9208b3a50f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.20.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344422c5-d310-404f-bfd8-602f82c39640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.21.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c9e1e2-fc0f-4e43-bf47-630ccc594dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b12aad-cabc-478d-9b64-d17d50a5291c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7edaa090-bc21-4b08-a4f4-c1926fd3e043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.200.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb5a6ca-c8f1-436c-8986-87474041bb65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.92.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c33cbd45-f59e-4a6b-9f3f-ef3cf3e80eaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.20.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f68dcaaf-65d3-4aa5-b03f-bafaa2f96a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.217.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d15ed3e1-8b14-46df-8640-009ead40e27c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.96.1.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf7ae0d-cb0a-4a0d-9d21-180d9615a239", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.122.136.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1740035e-362a-4bf5-8460-93927de4447c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.84.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--098db617-a9d6-4bf7-b077-fba41b57dc37", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.98.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66064ed7-2c66-4007-ba87-e96c7d58b945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.126.56']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f2fdd0-c90a-4fcd-98f0-c27d976fc573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.110.164.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a006a94a-3f37-42dc-80ed-4741b013f9aa", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.157.218.79']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4b2bc1-e733-4988-bedb-6fd4b0ab826d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.17.197.107']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd1adcd0-903b-4c2c-a1cf-0799b89fe9f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.18.84.199']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea15bd4f-0a29-4f64-a38d-c759c641cb57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.185.25.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--138507fc-db1a-4b14-84ad-8afa566c011f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.215.179.89']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aee6cb3-b2c9-4a20-9e02-a3e6d25aa4c5", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.37.68.89']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31ac000d-a385-40d3-9850-a63c018f48e7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.111.185.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7455dfb6-2759-4ac8-93e4-5bb5df840443", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.129.187.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb9633b-1a04-4483-8436-8bcfc04230d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.130.168.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d1f48b-9c50-46b9-852c-c22552b4d484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd26aed5-a375-43a1-8605-2e2f2f93777d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.170.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9992aaef-b748-4f5c-a8da-0ba5f801b2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.213.226.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9ef40b-a26b-4e5e-87b5-f82336310da3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.216.210.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--699d370d-5b4c-4155-b9f0-2e854f431db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.27.23.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c198f900-db21-4bd0-af8d-064c137f59fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.74.234.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff439ec-db50-4389-9824-9ae001db45a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.76.217.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e15e2e-7b96-4400-a5eb-8cfaca49126b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.77.221.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--930e1301-7171-4412-bb41-5b0868058d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.80.146.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0a2eee-13e2-4363-9f74-5a189e1c63ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa4f4b5-1438-4b03-ac55-be0b8a7d2cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.87.196.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0a7070-d5ae-49c7-9f37-cfa366ac3d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.89.113.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57103c8-eb97-41e2-8434-764b89d53aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.91.159.225']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d93225-93ea-48bf-8786-0cfe230f2636", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.94.189.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dbbc518-2971-4224-913e-c4b7216a41e1", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.131.107.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc43e1b3-709b-49de-bd12-8eacb53795fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.132.90.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086e9473-2fc6-44e4-8ff1-29575e6880f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ba145c-9db9-4424-b61f-85294c17c720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa6cc0de-c044-4b1c-831a-51df4eefc3e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c5d04a6-e9c0-43ce-9c93-51bdd7520ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84168138-b789-44b6-8a2a-0d4dd6461917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c42eab-3e99-4b88-9f17-5ea4f7cea143", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d601a174-ca33-4cce-8214-744c1c873bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b41abe-3db3-449a-8de8-dad83f7b4f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.46']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0abc3c14-87c2-435f-9e89-0a2fe36d3438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627dd189-93ee-4a9e-be5f-13063bd21bc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08b3e8f-c972-4c1d-a96c-2d78f641faa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c00a7f-106c-4ae2-af00-64557bced99f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bace31f2-c0bb-46ee-9732-da01d8b3a1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2da1e5-71ac-4796-a745-cd29a466d1d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ddd180-0054-4fd8-aa31-9383de1fbbfa", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.162.158.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b0b222-726c-40c8-9d19-589f973d29e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.172.245.229']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f579b44-e9ce-4434-898e-052f61e8e4f2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.223.35.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d646ef2-704e-4461-88d5-49719bca735a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.223.51.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8531907-0466-4623-8eca-2ba6170c1dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.223.56.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c229dae6-2b3c-4c2d-8869-3990d61d20e8", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.223.7.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71123405-1ea4-4c31-b74f-4db7a345b6e7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.43.49.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209a68c8-d721-475a-9b88-3ac380cf9fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.249']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b391e41c-076c-474f-ac5b-9f7ac0a8592c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f4fa9e4-50cb-4de4-8f41-b0a85340ce1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--828f4b18-edc3-4058-beed-d3f9d5000fd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6841b8e2-de51-47ff-a765-ed1bb7a19dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f714c8-868c-4310-911a-598876d4ccee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.184.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79bbf09e-57d9-4b9b-aede-05647c64d103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.58.236.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1cf838a-0eed-42ea-be8e-71a2ef09222e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.118.158']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e1fecb-54e7-4ff0-b422-e808c67eec15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.160.32']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97fa46b1-3275-47c5-9aa3-051fe51bdea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.70.99.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f57f1f-303b-4900-96d0-be510d620326", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.76.14.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881b360d-402d-4c90-8ad2-59bc0e89a147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.77.148.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--059f6fe3-510c-4829-9a37-833c58bd047d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.77.227.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33224da8-4731-4518-bbd3-64c2653af630", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.193.54.32']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20cf8c3-a99c-458d-8755-297ae16cfd26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.199.191.214']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6f7093-7482-4656-8013-934538fa679d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.12.123.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ddf3ec-962b-4b4a-90e3-6554afe0d343", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.123.134.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66162d64-d0f0-4ce8-9cd0-49b02d840812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.131.160.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed1250b-7034-466d-a682-c0dc331b7eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.138.227.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90aa4042-9231-447f-bd69-f014741774eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.175.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8dfe4c1-640f-4350-9ff2-cdf75f505513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.201.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91377b1b-d3cf-4e3f-8cba-861c2a304626", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.250.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba7b104-05b5-4b39-bcf5-4f549519c14f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.85.81']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--621e5a91-bb95-4929-846c-74aa4728b9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.145.227.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8475ef5b-11a9-4279-81c4-ba4b54e5ea2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.153.150.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a0b12d-d28e-4aca-80dd-58f986462006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.10.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647ed3fd-a26a-425b-8d8d-739042449bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.157.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f5a023-1d7f-4e2a-9701-fb6e8eae1412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.169.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7835123f-e7e2-4534-8754-6f6fa24b8587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.195.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51548f5c-a7ef-4ed5-897a-2fe7a407df0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.226.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94294cc9-8038-4968-8ecc-a86eaa175e97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.67.147']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc87b5c7-b4d0-403c-a73f-f201b8cc5545", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.158.220.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d420758-1e13-4fac-8cc8-923ad07e1082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.182.143.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c664dae0-3d85-4eb9-b1ef-b08906bbd41b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d0445d4-b504-4a29-a12a-30f192b8d3ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.207.109.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d34b30-adf0-41d5-941b-ddd49b47a513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.208.194.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e8e0768-51fc-4608-8839-475893ee4a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.212.124.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a960aa5-3509-4512-a6ca-446c29962701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.141.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59dbd5e0-212d-41a6-afae-2fc6d14835fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.158.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9ee9c0-9a94-4607-8d1a-927c27f8f28c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.50.109']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce57ca13-71bc-44f1-9607-4b22f8758b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.227.30.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed202c2d-51c3-40a7-8b61-9c68cf999804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ecdf6c2-d372-471d-9717-83706d836210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.229.166.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b0d235-d82f-4a9b-9d31-f57bcce37f34", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. CVEs: CVE-2002-1149. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.23.132.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9b6dd98-e109-4a1b-b95e-ff4a0410d9cd", "relationship_type": "indicates", "source_ref": "indicator--18b0d235-d82f-4a9b-9d31-f57bcce37f34", "target_ref": "vulnerability--6226460a-f6bd-499e-ad45-722342f04aee", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590ab5e7-c0fb-411a-8f4b-e092e9937c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.230.205.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e12a75fd-758d-46bd-8b0c-799400b7af1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.234.160.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b713f92e-95c6-47f5-909b-d99f31a82bde", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.239.169.248']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa739c61-806d-4745-b393-233b4c4fedd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.13.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6340cc1-81cd-4c4b-ae96-f645ce127308", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.151.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5616ea6-afe6-4b0b-a3e0-44d363f21270", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.185.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953cbb82-585d-4841-b873-0c39872f820a", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.20.1']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1fb9555-aacd-4b2b-bc4d-0d4a3a43dbf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.255.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e3ac33-1ca5-40ed-99ac-d753e3f3909d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.53.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a032ac42-bff6-427c-bc23-05f6cb73b4c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.65.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e889c13d-0b08-4631-a3e5-7be29fc65a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.44.172.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--967bcefd-d175-451d-8da9-fbd6346bfb50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.47.51.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ac69d6-82a8-480d-a0b1-c02985e4a7a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.47.9.229']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a86029fc-859d-4482-a41e-86c84ebe9cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.162.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca84014-dc49-4b6a-bfa9-829ae0010ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.242.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d9dd6f-d8ab-4080-8bb2-77e6f3599ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.175.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--811aeaef-385b-46ee-b920-ed4f12ef0e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.216.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c1545a-9210-4e4c-a6ff-cb080db4c31b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.252.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2e4ce3-1b3d-42bf-84e5-606f1612220c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.128.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c65f2b-dc3a-4602-b895-bff473d72cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.175.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd21495-d86c-4539-a7af-b49dee7063b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.204.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e824c67f-1195-4289-a413-3e1e4fb0247f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.33.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8681a939-a034-4ea4-b011-f8d73044b2e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.37.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b33106a-bc0b-4eb3-8c04-dd6aa7b361a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.40.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e8c766-777f-4e6e-80de-fcc436d10d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.5.154']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13078075-b878-40cf-8859-9e7b7392aea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.97.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09565e97-7d34-4f46-9a9b-b76a1633cb03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.65.50.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b55a199-7aab-4e49-aafe-56abc2659317", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.65.62.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8308091-fca4-45f1-8a65-4ac13df86403", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.68.134.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608aff62-1901-4afd-b920-779cff3a875f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.7.158.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--598d309c-f9e2-4e8b-a2de-be2ccb0d54ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.28.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66d9f03-3478-4278-8a0d-b67b2a0f3ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.35.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--118222ae-3eed-4fab-bd35-2a53930bbca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.57.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64712ba-0117-4622-9f8b-b391f68fbfb8", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.10.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b03108-2d86-4ac9-b6a8-2b6b4c5c6100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.120.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cdcdb25-87d1-41c3-9c3c-d9ca0082f80d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.234.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dccbb11-97e3-4612-81fc-8dc04941a7bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.84.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39874f53-3b80-4bd3-9aa0-bfbdb0f6f8db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.0.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e26de6f-88a1-4323-b632-e3615d78782e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.102.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903e21b7-06f8-4a09-baac-be54537b9f08", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.105.0']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b3ac6c-4cb4-4b18-a0d7-1b76961bcc8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.119.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c9ee7b-8d24-43fa-9d91-0fe72b7c1187", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.184.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f35eb1a-d03e-4038-a66b-f37953b22940", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.39.251']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d130d7-5ca9-4c21-8339-f0fea4eb9083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.88.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0873008-cbb1-49fd-9f7e-0dca538b16f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.81.167.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f04284-771c-4119-8dbe-47783311c64f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.82.131.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5db103b-4429-492e-a334-4bfab8606ed2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.95.255.183']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d6e850d-f1d7-453f-a0b4-30a8400f199f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.97.175.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275f0878-ceff-4328-9050-3d9f1904cafd", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.165.18.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb05d48-589a-4b12-9001-ba4132dee21e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec5f40d1-cf4f-4de7-8231-d4ce45a1e8a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.231.181']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588a6688-f4b9-4a0f-8387-244d7643c960", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.189.208.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5499b105-c10b-42a8-9e1d-e330dc7b9869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.126.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0fe734-d60d-4c7e-bcb0-dfbee7443a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.26.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df07447-5f0f-4b7f-a07b-d2e58c73d711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.5.175']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea1ef45-3af9-44a8-a7f8-6dfb15a1ef67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.83.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c4358f-65e7-4c73-bd7d-f90a8b5be1f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.202.9.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f02432-2a0c-4661-a0fb-4c79588c535d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db13018-66fd-41d2-867d-cc7ec13066c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbfbb570-5bd8-4835-828e-e4c169642f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.109']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cad2fe4-c486-4efc-979f-ac59095562e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.111']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03eaf81f-cf96-4a86-8ac5-02f2fedb5b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b5d44e-90dc-4880-abf7-dc05962f1198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4adf3a13-67f7-4e49-a8db-b8b8568e7cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c842a828-43bc-4bb3-b2b7-59a7dd0ebda1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c9fc0a-8f8a-4866-b922-e0b399fda00e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe5ec787-0946-4b52-b744-a48e2f20aad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e21f12-bcdb-4135-9511-ff3065dd01e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a313f1-7830-425f-b8e2-7218accbd808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099bcf14-ce0b-46bf-b13a-bfa6660d5d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6375efbd-c6a4-48ef-a5ab-44afd96e233a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3347bb5c-c4c5-46a7-a90d-1fb8564aa13f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.145']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897b4ec7-b596-4f8d-b3a7-3e6fdc0439bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d457f7b2-62db-4abe-aa95-1e9cb561830a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.147']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f07350-19af-48ea-8506-9a0984e524cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e327d0d-99cf-46ff-a52c-a5128013da08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff057df9-b43d-4f81-9d00-6bdbc0966bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9963ec1a-033c-44df-a8c4-6d235470aeb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.160']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d885d4-bcfd-47d6-94d8-d36e9c190275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e050b3d6-f940-4adc-9324-67146d634c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1bb0abc-8814-4075-833b-5f00aee01345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58b5d96a-67a9-4916-bc38-343f26f7d6e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3540416-33a6-43d5-bf90-51f7c85b7b32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7549f55c-0c48-4a63-a2d8-3cae1caf8287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d4e945-6430-4a2e-9411-d2a3341a5479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1246750b-d3d4-451d-ae07-3103ecdef011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b26c3ec-275a-4823-839a-4b36da7360ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b08810-3718-4af1-aa03-2df39dd77cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0e7065-f904-488a-b89e-978fa36dc60b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f679dd54-7b22-4a0d-ba39-cc18ab1d512f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08bf2d28-5d47-40ee-be03-6498e9a7d9d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--019c7977-32e5-43b7-8158-f65afb5cd845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5570e7-0c34-4c45-a9ef-3942f9d2a2d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba6f197-7ae0-4fde-b12a-1b6b31907a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.216']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e1f756-bc45-48aa-95ca-b3f3c53a1d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17812192-be2e-43cc-aeab-e513e74c8014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a47850c7-0563-4590-978e-32e9b5825ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2702c3-ee2e-4fca-9002-d3c7f204de61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.222']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6d9847-b938-43cc-a373-c46a1a2c12c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8405c4ec-59c2-4609-9bf1-5bc2f0f7fe60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.229']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0616c8-1dd6-458d-944a-822fa0767a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79eaaad8-c8f6-4c3a-82b1-638d5b0c7a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe5d2e5-8bac-4617-b446-0ca4d614eedd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb064817-737a-4062-8dd7-e4f2ba402b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971ffe78-d4c2-46da-a1ed-2fb03dae952b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2ebdae-7497-4918-9c9c-c53e8bbe6579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4782973-d221-448b-8499-1c7ba81c705a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4dafa8-360e-4006-926f-10b95af6e9a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c9e9b2c-44b6-4574-b227-5ceac09c860c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7dc8ddb-066f-4937-9ef0-0110e6c66a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c17ea6b-46b7-4b0b-aa39-9923d32c878e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4238d61d-5f6c-4992-bb9e-e1e2b2722719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.46']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343e9c2a-6ba4-43fc-a201-135f4e7309a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.48']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--645061de-9441-42e4-93b7-e0a3f12683d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.49']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecaa547b-692d-4bff-ad4f-1c431db5794f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee36e6f4-c572-4711-9ca5-5d5b8f1ceffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.55']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028e1cc9-7424-49ee-a3db-c8920a5eac98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2613da51-c5c4-4376-bbb9-966d0636a1a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3304d83-aa4e-40ab-b76b-71ba9260df84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd78654-8de5-4c7b-b453-8a8a21c45271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d436712c-90ac-4370-a1da-e910827c9c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb18cf8-49de-489e-930f-59f307a7ced8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e64bbe-1733-4813-a4c5-97a93d194291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a79f2dc-466a-4252-aad5-6cae29f8b9be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78da18a3-1a10-4df8-9b37-c0a6892b4e52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242cac35-0705-4b96-80af-585cb2b6202a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cdaa6f2-e3d1-4df3-8048-ce00670310e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd202e4-8b4b-4729-a1d7-5d2bb4b14b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4e834e-a70d-4bf8-ad44-e9d9664fa643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.79']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ad9058-bfc3-4e79-bc7f-38eeb6ddce79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d57e82-da89-4004-9de2-539983fe2818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--652fbb7f-0db5-4870-b084-3f74c5cba1a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cae1814-dc0c-4976-aa76-9597c79a2e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.84']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--990d41e1-a708-4129-8c90-d32f2c0faf55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e51b3c-fbde-42d5-bd4d-01e0836d04c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79c36a8-2841-4e20-9574-e70f21f1bfdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ede7040-2dd7-490c-b6c9-ebf7be9d4d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60ffe65-9f03-4d12-91dd-64691aac4bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0178979-95e6-47cc-9d4c-ea5151637cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30546c0c-79d2-4b11-8d60-129e1b147c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e59f393-099a-435a-9db8-50ae85dcdd5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83fa3e4-cfbd-4a69-af31-830a5e8c2e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--432fed07-6199-4936-9c0b-d12e514f095e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858d6634-5524-42be-9c75-f223d07b6b52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7155c439-955d-45d1-9c05-786443229ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9c6c68-bb92-4197-9bdc-83d3fd0ecf67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8748a93e-5fa1-4e0a-a0a9-323571df25ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.135']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a841580c-d4dd-4b25-8eed-c0f0795bad49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4373d54-8672-4bd5-ae09-5128884a61f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f30f0f7-375e-43fe-b259-6924dfaef664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef3b3d29-e227-4063-883b-bb6155cbf72d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.144']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a378a0f-5614-4872-88c7-e5708b9328f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.147']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bfbc91e-f944-4e3e-a6a5-53f9cf7a2d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70807ed2-bcd3-48d8-a050-0ac43bd1abb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0bdf76-37a2-4831-b4b6-b6b699d3130c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.154']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc810d8-fdb9-46de-a051-c5723f6f3963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--970388e4-45ed-443a-9e27-b47fa4a6b30f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c27bb9d3-2fda-4863-89a0-9ba2013d606c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3380539-8cd7-4d52-bc3c-2fb577bb0bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06113abb-ec23-4ddd-97f3-262e57463554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e210078-238d-44db-9b12-d3608a82758b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec4c837a-2549-4c99-9bec-fb9e5fc6661f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed7a1a2-35a5-40f0-ab79-3feb0d9668c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0601236-5fd9-45b8-98b4-a1886d40304e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3bf617-a81a-4287-ad1c-7d0badd5b1b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.176']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41918698-9806-41b8-9b43-9768eec4ccc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92cdee46-59a7-434e-bfa2-ac8c1977446e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b924f05-79ca-4f41-9fd7-76a01b6a88e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3360567-6de1-40f1-bd22-51bbd93418ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.181']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e1b006-fdfa-4d83-9b86-8d52286f4dd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.190']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b71cefc-4622-4c0a-8fbe-208543137edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57971f07-f3ac-48c8-b320-d5e7170f1138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b24300-335b-4a4a-942b-9f9add89c786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db4bcb9-a42f-4205-94ab-4279280cb945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e143f19a-d670-458a-a5fe-86b487a9c87c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8e7386-3788-4350-a00c-bc646f4225ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6324851d-912e-42c8-90d0-9db7f4fe5b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff39157-6147-41c7-a9df-2fa9ebfb1fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4673c55-664f-4a77-bef7-adc7617572f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061a7b6a-3940-4a96-bc26-afb753451fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.224']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c48471-4d7f-4b04-8dfa-18c34ff29599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6af3adb-09e9-422d-abd7-98f621b4e579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.229']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfca8438-8cf2-4b08-b259-2d693720e68f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82f345a-b99f-4e04-87ac-ad5ebcfa30db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--024cc858-d89d-4648-9079-bbb82db0d40d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6642e027-4ea3-47b9-82eb-6f06224d26c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1fae0a-d260-45d7-8a46-7beb541bfef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1496a0c7-3691-4568-bd44-4192d8f89c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec3d4ddc-11c5-4f60-a449-7374047700a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a86d576f-2454-4cd2-9a88-15c4e683ea59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f74ad4-52d2-4950-9da9-d4f5d772f3e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.249']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a1fcb4-ec71-453f-82fe-ba6eeef045c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6952bdf-ce02-4e13-92d2-17d9d24b0aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df2cfbb-6f65-4a19-95c0-d9febcb66568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d97edf8-2b47-4cc9-8e13-1861f3987474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3904d718-ad0c-4cd5-8032-f87783f180ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30dec51e-0c82-4130-bb43-8bd4a9754e3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b3627e-79b1-4c4d-8c9b-aa18f8d304f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.32']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da04e75-dbe5-49ec-bf8a-3d8006255a21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--446aef0c-301e-4f5d-b7b2-c800ac83bed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752588d4-794d-48d9-ab75-d007b9d7595f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2530a19a-af5a-4a47-8ff4-277b21485f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d1ea2f-25b7-4784-8083-a731f747c816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.51']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d16c7a2-f253-479f-9127-c671348e5983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ee2155-15e6-4b27-bda9-9c7c6f067f40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--130d6acf-20d9-449b-9361-76e2faf4a9ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--411be9ec-9ac2-401e-9632-e1b6c76f6cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9065f53-129e-45b6-8325-714361de7b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc3e8a1-6ecc-4ee6-a180-764bb74fdbec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--394be3f1-501a-4a08-a0a6-07e373401072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4482e9-bbeb-48e0-86bb-3e2d8722b8ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344945fb-e90a-4cc5-ab26-fb7d0bdecc10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a4c051-353a-4989-aed8-a2f1ce36df07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d39c2053-15a8-4d44-96f6-e6c3ea40af99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb3560b0-e99a-4e24-8f70-3c21064904d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2deac80b-7346-430a-b8e3-0b3b50883faa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95442655-f91d-47a4-90ec-140c527a27e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1f4905-fb0b-4e72-9208-eba043d51796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.84']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9a7b75-5a68-4f0c-bd75-eac3d9aa7281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bcacdac-5b90-4978-aaa7-9261e0010cca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66ef084-4369-42c8-b943-830f54ba3767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.95']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d53f918-39cb-4462-aef5-0b2f3dece395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.211.51']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45e18f0b-b9ee-47fe-ab18-c34d46b1bfbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.63.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e4c83a6-2d5d-4d9a-8558-5080fb84dcaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.227.26.185']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbadedab-6f68-416a-8539-51e036ef11dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.228.20.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ad07bb-08c0-4a6a-8212-ff9a15addb56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.50.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0f0ddc-83be-4836-bd28-f6426995c102", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.53.129']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f556d9db-62b2-474b-b797-891a9dd2f44a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.69.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a36855de-1f2b-47c8-850a-d6ea98b9bd37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.105.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a4842d-ffeb-46c8-b9c9-19ce11637788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.3.145']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c7db4f-1e86-4ef3-a321-a71d037736c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.160.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90ef6c2-4748-4fe0-ba2c-6b80643c400d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.197.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64128d15-566c-421d-9fdd-e88d380f121e", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.211.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61896c13-d12b-4d03-9c44-308efe37a5af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.246.131.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1edb4fe5-7776-4e5b-b324-b111cb2bc284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.247.241.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad0f8dc6-9115-43dd-afd4-3c77289b5458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.167.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed8b982-2734-4810-a64c-e425d9c9e919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.167.229']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1414b8b6-bb50-4306-a34f-dd04e0da5a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.111.45.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09813d92-8795-45bc-9841-3620816dd890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.112.134.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3cee2e1-1911-41d8-bc6d-faac11466ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.134.36.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2eca9f8-83c6-42e0-beb5-c7a79fe87a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.138.159.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5abdcf62-3714-4c80-ab8d-cc47f90284d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.139.175.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9650c986-0787-4028-929d-3fbf39288ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.151.151.185']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71225c59-55ce-41b3-9b63-deef03a5727c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.212.169.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19c4bc8-5e39-4663-8253-e2117106f1ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.224.35.165']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c156a50f-1af1-4c81-9586-5baa40704a00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.237.134.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04b6a256-6c4c-45c4-bdc1-8f63d19ae723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.24.246.56']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066a89f6-f38e-4c8b-b413-3d1fcde8f3b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.250.220.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a572fa-8927-4c25-98a9-f94f9effdd7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.250.221.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6633ba85-1e90-4a8e-b845-8cc2d8051c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.223.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fdc14c4-534c-4bed-ac56-e80621b88bed", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.95.109.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--facb3b35-59f2-49da-abe4-dfba85ffa7c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--442cbcc5-c146-4a5e-92eb-ba3e170552ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a70e15-57fc-427f-b5f6-a0edfd10f278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.214']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9c174a-3def-472f-8899-0047a9558129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537ab66d-e416-4b32-bb10-f177bb6f6d22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.216']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58d9c6a5-1ec0-427a-abc6-b777b81eb489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8abbde-2f6d-4b23-b89d-ef8644921c1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b2fd8a-c720-453c-b3a5-edac52114eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--666bad34-eeaf-41b7-a50a-e0c58e4147ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.10.113.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3757ab1-cac5-435d-bd63-0802b4a75173", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.113.40.171']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d0bff6-7c0d-46e7-8898-9b89b67dd11e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.120.162.199']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c5b4234-c6e6-47fb-a799-5b908babc8b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.139.53.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c482ca-57a9-4680-bafa-fa431f548370", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.140.242.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3566447-bedd-44e1-b432-2fbb2d68a10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.195.19.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b7b6bd-0778-4199-95b6-318ef6435b4b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.211.73.199']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ce5ef7-85e1-4e00-b251-2858b262a5ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.221.195.225']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d24c6cf-821e-4f5b-8a06-be7071ceb87a", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.235.18.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--160dc313-ea54-4e5a-93bb-6893deb79e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.59.123.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed7cfc2-40d0-4853-8735-53b0a1a7dfb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.72.140.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b116082c-fabd-420d-85e0-e566bfcb1284", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.76.125.1']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8670d491-e16d-4ff5-a2b2-6fb264c11061", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.103.170.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7099e3-34bc-4c5b-bd72-f683eed25003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.132.109.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1175d5f4-642a-4047-ad76-e356bd59dd56", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.146.25.109']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0405c47-6440-4706-8c57-ae3e58ff3c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.182.192.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6218bde6-feb7-4d3e-b062-65c238b56b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.182.192.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421f059a-e04d-45d4-872d-bbd7a07399f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.182.192.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17bad6e6-3013-4b14-a705-f4e0d5c0dc3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.182.192.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea94a05f-dd57-46a6-a901-f24b2ac599c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.182.193.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e24484eb-49af-484c-90dc-9b4e62300a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.182.193.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0fa9339-e69b-42fd-b7da-c6ee251b775b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.182.194.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab589ab-f291-40fa-b137-1f8dda988468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.182.196.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2892f22f-aa08-440d-b8b2-937910eb0546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.182.196.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf05dc4a-7ed1-4415-a5ca-a3c68ba724e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.182.198.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6813d773-e7f8-4cdc-b3b5-3920f751be2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.19.156.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744390e7-599a-4702-b394-09272da0ae00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.19.40.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4001f913-afb8-432a-83e8-aa211b7a4c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.191.236.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8ff3c8-318a-40f6-8645-be3a925f0e03", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.224.49.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--227b7a8f-9ee0-41e9-a3e9-30bfb9349bde", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.224.97.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ea35fab-1b58-401c-8177-5c9ba1e90fee", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.242.140.150']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691f02fc-7683-4673-b005-6de4c933e9d1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.25.35.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88081670-3cab-4c88-a59c-189de7eac4e3", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.25.35.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c33cfa01-eb96-4b5d-8366-9224ad93cddf", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.250.146.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4fce0f-f93e-4bd2-aab1-15a6644640af", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.253.183.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc440ed-f26f-4676-a8da-1124fd24fbc2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.253.224.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a816e76f-0132-49b9-85dd-60288e85315e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.33.73.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8e30c40-2137-401b-824f-2e3b0f1e351d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.55.215.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a859147-75aa-4f56-bff7-f3ecbf8d4b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.76.211.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8613ae8-f1b4-4179-8cc1-23d04c2ac53a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.105.231.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1afbf01-2db9-49eb-8f06-747829bd952f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.107.136.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61284942-e0e4-4e7f-a4cd-58d27cbe0451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.109.104.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd50a012-a0c5-49a7-8c21-0685591354c5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.130.240.253']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f954058-75ce-4849-aad0-eca80d7407c1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.148.147.79']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25fdd3f3-c36c-472a-93db-504599e4131b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.153.252.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f47edc-a27d-4a30-9cf8-796e6bffa1cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.34.189.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c488bba1-4cf2-4b7a-a024-eb34937d404b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.78.137.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1ee8c1-f37d-445e-b7e8-f8c0415d2585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.179.79']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--824f78a0-ef37-4c23-9107-7dde8be8e6e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.180.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9b9012-cfbd-4760-a1b0-0085b9cfb55d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.228.106.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0c3392-0a21-4e25-9f4e-3c9f29ab004a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.40.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0579008-05ce-4b0a-901d-c1a79e0ecd9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.114.161']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c53864a2-3e14-4ba2-ad78-4e65af4e503e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.117.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c89c28-c3b8-4473-b6f4-b1dffe76af0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.120.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ae7222-c52e-4ff4-8265-daae84dcaa2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.168.253']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5403c809-8bce-4e57-afb6-4d38f97b1744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9747512c-2e90-4d1b-a3d9-e2c16385c9cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.171']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b81fc282-64c0-4830-89c1-dd3516f86c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5b485e-efa7-48cd-9bc5-e665b6bfb1f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c54753-374f-41df-99fd-2ab49a7d7c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f05adb0-d6eb-44e7-b0c8-e04463e463f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.248']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6187c941-34ea-46e1-9856-30735d6fb7ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175135e1-2d48-4063-b65a-0fdf3528e1be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b3fadb-3f58-4b88-928d-36fc2aa8256e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d30280c-8547-4e96-acae-4f04ce0dc7fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7369158c-acca-4dba-b377-bcdd173ce629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.251']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323b1f7b-330c-4fd3-8d41-0f11a4e3fed8", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d169188-52cd-4922-a8a3-99cceae750c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3220c03-96e3-44ae-beb6-b45ff7a61ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d283f88e-168b-4a0f-9473-aa7ea7828081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.179.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--304365c2-4988-46be-8edd-8fe931da084e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb23775-df07-4862-b124-5be2c289dd7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.154']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a776d32-9b51-4649-a344-9f29a6dc1cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.160']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f6c7f1d-2f2b-4b11-861e-7cc9f1bfb506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.80.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851e6e01-a517-4f17-91c1-5041848799a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.80.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0bbf37-64e9-4b14-a78b-f5f48065fd87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.178']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f538be7c-f9af-4d3d-b12b-6ee550a58b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724dffa4-5dfd-4447-ad8b-78fc3e8c1304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.117.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--320c5dec-d5fb-4c2a-8b65-fc4c34828f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.124.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2780d7e3-d2b8-4000-b8f1-1836964fa87c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.139.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ef992c-7dc4-426c-95f0-93a1b0dc2665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.248.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cfaf99a-f0f3-45de-b6e9-ff538b069450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.250.51']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d580bc0e-4ef6-48eb-a56b-3116824d9577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.99.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78da1387-1c61-4e63-880e-93b131c54378", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.1']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b5e7e8-1cb9-445d-878d-ee1a21f9c20a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a151f2ea-55db-41dd-8de5-0ec0ef1a914d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cbe253b-9f45-402b-8cb8-17923ff99859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.204.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0dc036d-d00f-44a5-a6da-6445237ad296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.204.175']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e63485-2901-4d31-bd6f-8ce3d18c84ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.206.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f37a0f94-5c89-4ab6-b085-2993c6c96ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.139.139.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810de0ba-1d1a-4492-aca4-db6ef6b39de0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.168.10.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac4133dc-1b3e-4739-8563-d299b8a0c11c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.181.156.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64d55bc-5dd8-4bc2-8f2a-6696bd3d34e1", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.33.55.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04268afc-d8f1-4326-8163-5cb5a7478c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.37.90.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d25999-b8a4-44e9-b0bc-9a79b305a0bb", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.60.145.161']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827e308f-6f05-42c8-94f7-e39a3989a965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.75.114.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a05622-a7a1-4659-9a71-9371b92d96bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.1.65.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1549f9ec-26b9-4a0d-8e0c-cea071ffd6d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.113.153.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d7b488-19e9-4835-ae2b-cf1786f52d0a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.194.241.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412f9e04-f737-453e-9982-6106a7c29f70", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.225.79.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b28d2ad-2ef2-4e99-8d4c-452875a6a480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.234.233.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a216c9ed-0dcc-4706-8489-fd384e6d9468", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.235.98.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6fd6bb0-5016-404e-a959-3040f2ba6db1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.51.49.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31adb491-e5c1-494e-b2cf-33f81d423b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.130.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f479beac-f7a2-4685-9f1e-7656c7016a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.238.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4676de6-400d-44d0-a352-69c19cc297ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.129.172.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a7595a-f09c-4695-af8b-b4a94aa75cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.131.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb9e86d-c707-41a1-be43-932159a19e00", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.141.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6e6af4-95e8-47bc-9142-52bbb701450a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.3.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4302dee0-00d5-4b5c-a23a-06f117ad9f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.34.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a2696c-51eb-46a2-bd75-2a67c6773f3d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.57.76']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4846a5ab-9058-4aaa-b562-9984e1f4f841", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.67.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c06f51-f550-4dce-befe-3a887bdb594b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.45.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b1f077c-5fda-474f-9d55-93938e994ef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.132.184.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8988b603-59f0-4c15-aa6d-a234856cddfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.195.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5d419d-8687-4db6-a797-86e2a062401d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.61.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa85ecc-e48f-4993-b26d-1a75cef560ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.11.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81057f9c-8bc3-4f49-863a-3063ca6d5f47", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.236.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bdad5df-120f-4a30-b2bc-6e0cf2a92fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.82.46']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ebf2dd1-3e1b-45aa-aec4-2c5d8f939d7d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.94.96']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a2b788-7993-42f2-9940-eee7cb773ea9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.139.165']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b0390f-cd24-4e80-bec0-b6b96763f521", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.144.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4675d9-7fe3-4e6f-b8a6-993dfa031e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.148.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b646e6-953c-4872-90eb-b5c467fc96fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.186.135']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b118a437-6967-4f78-b822-dd13a89a9d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.216.49']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--447b17bf-b87c-4b60-a710-4ef98ab84644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.26.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a2f7e34-e43e-495b-a5c8-e3d9cde4af41", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.138.68.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--112481ff-75f7-42da-9a08-ff531ab57d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.142.113.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d31203c-d6b4-4647-8814-262c0c19cdfa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.122.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d664ec2-5bda-4bc2-9021-da6deece8d81", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.123.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a8c75ac-84c5-4f86-8cc2-49f40f1d83d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.15.51']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505c75e9-af05-4245-893c-012eb973561b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.154.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208ba507-e70c-43f2-b0c1-793ded0f8a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.182.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a5808db-731b-471c-a828-d59ede42c5e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.75.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc879373-52da-4ce6-80b4-560e61581e2b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.154.140.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a76e8e9-a64d-4907-9500-1251b0631ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.155.218.249']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba80249-2ac5-4619-bf4c-7fefe77f70f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.145.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--152a1c0a-8e91-4a42-89e2-1561d6bd1cee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.155.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dfc4eae-e284-473f-aa03-95c5284d11a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.166.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ee0605-1d69-4157-b87b-e9d656f0663a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.204.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6789d7e3-215d-4d3a-a6d3-1aec8f23ada4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.232.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--539e41d7-50c8-4495-a272-f938d391247b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.240.178']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba04af2-51de-45ab-8768-5f15d3cb9d84", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.71.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02beea16-acd3-44be-9f73-2cfe3f9e036b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.147.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83bb83e0-b631-450e-9494-b81464c7ab0a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.149.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3ccbdb-c684-42bb-8d20-88297c87ff4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.158.178']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc170da-51e7-49ca-b259-409a603d9651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.170.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414a88a3-7d90-413d-95d3-f49e614dffce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.202.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0731cdc3-1d7c-49e7-88fc-743fd68dd377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.32.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727cfdf4-b66b-4c2a-87d6-5e5800131749", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.50.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:digitaloceantoronto", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54bbde3-e4ef-4852-9be8-926d50dd2244", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.53.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d06f61-0f7c-465d-a231-601e2d75b089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.135.203']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--362bbd08-bfaf-4463-b6b5-54db31a26d2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.145.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df4dcfc-ff25-45f9-8368-01acf94f7321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.192.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c30633-19b8-4152-bfac-858fcd4c9c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.207.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a4f965-afa9-49f8-ac16-d9b4faabea27", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.219.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cff01ee-3d43-46da-8914-978fe6d76507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.225.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fbcc291-34cb-423c-99e3-bbbdc4eacd7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.161.246.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8e1439-85e9-4c69-9b00-5b4055be7639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.162.103.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d0cc23-9985-480b-85a9-98bb5f005b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.162.109.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e229a7de-ae71-4f12-9505-5bdb1bccc2c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.162.95.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa51424-b546-4dd5-a293-6f8d7b6c9708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.113.160']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3e0855-d3d4-405e-8c84-e7535f12f82d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.118.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4cde250-ad31-4d65-ae64-c559d8ee1829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.232.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f3d743-ed95-450a-872d-6f5be088d114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.86.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31ff3f31-9537-4ee9-9cc9-3b35e551f81c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.197.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c22d3c3-2e07-4312-96a1-e600d0664aa2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.3.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c445bd-5deb-4474-acbd-3c650a28abaf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.125.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302c63a5-0e24-436a-ad2a-340193c973b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.167.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425a9299-2dda-44a1-8cb5-dc22a24c886e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.190.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b45646f-a679-488a-b0c7-0eea8284d4ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.191.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67393c16-8e8b-4c6b-93e5-62a00263ee50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.197.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--038b7b13-b874-42a2-a580-d8bc14ff3752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.65.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b4e59d8-b6f9-4fe3-9af1-9ffd67724fc1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.7.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91e0e50-1838-40f3-800c-8923741c6659", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.7.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0bcd29-5c30-4a70-9cdd-95849fca3213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.128.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c59e72f0-9575-4157-9c06-ea4e16f4ad6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.134.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c1bceb-4f27-4189-8259-a807971e5155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.172.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ddf93d-af3c-43a1-b588-09410b7f5735", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.187.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c53efd2-dc7b-415a-8fe2-32a61ec6303b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.238.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8969716-2bbc-4a9a-9804-513d90202d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.239.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6194413-fbe7-47fe-bde0-8e6767fffcd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.246.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf6fb39e-8003-4b3a-9cd0-ae51a2704850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.255.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab85f31a-2377-4de1-9ba8-3c83fc0dbdf5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.7.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f7b8c68-b6ae-4f86-9d1c-02f344cc9d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.70.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c837a1-3399-4cfa-855c-d2829b8e49f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.76.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bc56ad1-6bc5-4e55-988e-64b29dbfc9bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.176.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf1e8b1-f0b4-47b3-ad79-a07283f0f4d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.197.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705f241b-1c7e-4552-9dbe-b5299ab98473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.203.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3717afa5-3ebc-4cbb-a074-0f3d31c3ab2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.241.46']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0e42c5-b32d-4608-93af-9526dc07c19c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00eea18a-387e-443c-9960-ce5497b3f261", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca646b8-4129-4bec-8901-5acfe8c636a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe25423-5ea3-474c-b7cf-ef2a81ed2978", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a283d4-3f42-4e5e-aea1-b0a5d43a37e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.1.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a2e53cc-f1cd-4609-985e-09fd66cfeb0e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d2d647-2863-4aba-8635-c044594bb905", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8a3da5-5664-42d1-a06a-7a71c34037b7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--becc06ea-95a7-4834-8713-b5d57399e718", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c077a6ee-0d51-466b-a08e-6579ab6e3bee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42eb225b-59a3-4442-aec8-3b69aae1ae46", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580d1231-9231-4bec-9ed2-4cc699bad908", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.76']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205bc2ae-bcf1-4556-b985-1fce093ae04f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db65f9b9-49ef-40c3-a03c-f0ed576da39b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a88024-c9d2-4c61-a51b-0111247fcf04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.224.116.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0256a35e-f7ed-4bde-ac37-c5abbd27f427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--911be4be-0771-4cd7-ac1f-c85eff44aaad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7754a5-5b5b-48f4-aa75-d191c333c62c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f73724e1-6294-4919-9a13-bcdef5f675b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a29023f0-00d5-49b1-9f03-03cf4514ef51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.217.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20027c6-d521-475d-9026-9fedd3b0b100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.240.193.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e140453-2757-4e4a-a5fc-59b1cfaaf3e0", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.240.64.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6727d4-a830-4a7e-94f4-8e313cb0d6be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.246.217.160']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0decf7-21c5-4141-a667-6a5845b4ee08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19bbf9a3-8abb-4840-8344-ef45cd46be76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6bc8cbf-1c7b-432d-a044-71ccd433ed23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.201.127.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9690ea40-8111-4c52-a624-3f3dd67b659a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.201.252.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13412840-c511-4aab-b433-088396cf0b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.202.7.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1394ea09-1d6f-4c28-bdb4-6e4a37eab7c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.203.253.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0657a02f-9cff-4307-ae5f-488150d2fdd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.211.62.153']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd70e67-0af9-4e40-955c-270b91f43f87", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.225.53.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb318074-538c-4b81-960f-d326f6de221d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.229.98.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ce10aa-3293-4595-9866-9ecd0dbf8319", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.11.96.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274b6f46-4ee4-45da-a5fa-4a6908ad2b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.112.149.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d042511-afd2-48e3-b517-17a5e0682e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.113.224.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f19d63e-9fae-48d4-a402-c65c88315d57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.117.74.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5132ff06-cf0f-49e9-8d1f-4dca8f92da04", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.119.212.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317f5040-44d6-49a3-bb9f-e72f5c4a88c1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.119.84.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6342dc-3ee2-4415-b3de-4e9dd36b66b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.120.126.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe22788-acb3-4917-9e70-38850469beac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9785ec7f-3290-4ec3-9a31-d45d942d301c", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4015fafb-9660-4495-8837-3ceecfa75471", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.197']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31cb51b-df53-4950-b1ce-106d589abd4a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02cb4812-d72b-4223-aede-f1ee1f50f81c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f934f5-0b2a-4ef3-875b-9a788a255b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2065fd-2b32-41ce-bd14-8fc8b001be82", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6978dec1-1a79-4556-8d24-0d5d9b56b4e0", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--619a9a6d-459f-4791-bd54-22a301684b39", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa45385-679a-4683-8f4f-5bd985b075ce", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e85f3a-9b94-42e7-94d1-1f1e5f588ee7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7bfa44-e3e5-44aa-bbe1-f4f06d1ae21b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1125b94-352b-4ec6-85df-55c14452e62d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ddc50b-9e60-48e3-a208-bb5a22eff87f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.216']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd7483e-f4eb-4535-91fe-a5143ea34eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a6d32ae-74ee-4a0d-a6bf-cbf0d1c0ebd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0806ba31-65be-4755-9472-d994ba20d2d2", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e910d4-154c-490a-8022-0a69f260a7c0", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e117c22-700f-4b63-94d3-d2b7e95594cd", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eed9db3-4d69-4e09-bb69-875218c10edc", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f4347f-fe5f-42e5-ac61-c1729e4e94c2", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df27a28d-f739-4141-8e4d-b8a3b9184933", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8999ffb-46dd-47db-9202-9fb8fa886e29", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a75d2f8-bb08-4f1f-bef9-cf4f0686fc48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dcf9843-1a8a-48f9-8252-b4ee22cee943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7899907f-0a1f-477e-86c8-4e8fa5f86535", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00cf09c6-cb9f-4f92-9e49-fc7d64c2e29a", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.123.216.251']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26755175-f162-42ed-a7ce-6c90753834b4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.130.137.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c94e0aab-21e6-44a8-b558-c6ef75201430", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.1.183']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db4f626-3ae5-4fe4-a502-19d0f0011db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.173.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad728b2-f476-42a1-9625-41b2dcd13c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.133.173.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814bbcf9-4be4-4627-9820-35ebd10edacd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1d022d-c7a4-4d8f-abaa-6d3b9489b798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752e2176-c3ed-4dd1-b93b-501d056e15de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f511dd69-80eb-4613-bd7d-e8b0f9367b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7164b661-8cc4-4470-84d7-f3bca7cbb9e5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.204.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f0e3a1-4290-4df3-9817-1d7eb7e72d14", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.136.255.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b972a3f-5449-4225-8a75-6fdfa901da62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.137.126.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55301591-da5a-4cb7-a0f9-5631fd209ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.138.16.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07e7531-bb39-4a94-b6f0-a9127d29e62b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.14.109.144']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77492c17-d5c3-49df-94ab-26209dd3eea1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.140.192.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70c9140-46ef-466c-8c76-a57dd0dc1091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.215.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc360bb5-ec86-4499-9fb9-9ee91041ef8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2604bba-f159-447c-a162-7fb8d7c9a8ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.27.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32fd4070-e657-43b9-9a2e-dd065df2334f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.145']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0438068-5bb6-4a5b-82c3-18734a864a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d4b994-c141-444d-9fbe-ee655586c899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ea28a7-df82-4cf7-9036-533c12ef63e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fdff733-d025-4aae-aa17-d79c4bfc3460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e03498e-58df-43cd-94ee-36776573b349", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.198.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c1feeae-0de9-444e-935f-0af8beb9b99d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.199.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b16fdd-7814-4579-9134-116f19f69b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.144.28.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94dcfdb8-1085-415b-a63c-f1dc4c643876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.146.252.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ee26564-3e27-42a9-b67b-d8a7847441b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21862e84-db3d-4425-805f-2673113b2ac4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c381c34-64b8-49fc-a9e8-a2b0e7e60020", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.147']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f3c15d-696e-4621-a65e-b0153e605845", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b530b518-1cc9-426b-a77e-7ee3763abce6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc086f55-c502-41c8-9791-cdece9c39b97", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63720cf9-34ad-4a6d-ac2b-5ead4baca6df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a009ee40-86be-4950-8222-3120993b8a8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953c5d12-9b5e-40fe-af0f-bf1a5e88b03d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--050a14ba-085f-4c17-aef9-a9c6a7bd3188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af08ebce-07c4-4b60-9408-d9c5bcd53562", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.240']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad79975-bcbf-49e1-aff9-a592cecbd889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f23ef9-4d72-4c45-ae23-ed010c9010b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.151.139.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad15433-5e4a-49db-b025-e771186e0719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1eab75f-2a65-4425-9fdf-f158d76e3273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c362b3b-516d-47a0-a504-0ddc0def5d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.165']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad8f7cee-5e92-4bd4-83b3-779e9f97257d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e88557c-de40-4a7a-999c-2413eb1d75ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26bff496-0519-4103-bf48-56ca07ceb1e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0915dd6c-53a5-476f-910c-9048d1f9c541", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4123cb2f-bdf2-445b-8952-dbd528d0aac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d22a2e-f1b4-47db-b401-0b8082db1c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a9238f-1a8e-4a55-9c97-379cc5096618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.244.222']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168a72e6-af29-4874-8a9b-127628b4d001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb138693-0ef7-424e-bbbc-dd484bed3822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50e80d7b-5267-4c22-95ae-ab2e4664f505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ab2226-fe2d-4486-858b-2ab7fa80095b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--174106a3-dae7-4773-bc69-af48c3adb804", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24aeca32-92ea-4387-8178-0f4cf3bfbaf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7cd5c67-7bf0-4fde-8f73-74311e953514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fadcf2f5-fbda-47ab-9259-f5579aac9a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af29d974-29f5-4a37-a3b9-c513aa767b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070ff830-25d1-4337-8566-a9a57db3130d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.59']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2fcaa57-3e33-49a8-a690-fddca9003eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b048d6f-7677-43d2-9f4b-03b529abba3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--721944bc-0c9f-4054-8f5a-6b4afc3f1cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7dad56-f0fc-43b7-8390-4f90993658f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.76']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c609be-56e8-4c02-8c7d-ce4ea7251f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf4e19d-b208-4483-aa6c-11141cbf536f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.79']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7a3e28-1203-4cf6-819f-a535197f2906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ed735f-e2d6-42b1-98a1-c3305a1a2e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a00ef3f-2b7f-4807-8d2d-7bac999279bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3912f15-11e8-4126-9da9-9ea23ff46654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.135']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f06120b-8e22-4ab0-b983-b01796b29ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af7c70c2-ceb3-4b68-a343-79a06d57bee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.159']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58968172-c97d-4fc2-8213-8f00f3d4cf53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029e117e-32a8-4a74-9954-6f4252b5f84e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2750f599-5414-4eb2-9b7c-bae9ba102c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af49d5f5-4f07-4001-8164-3557e962545e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a14b53-5ad0-4053-a0c5-0c32a1c11c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3ecfc9-574a-4228-9a16-3449618c1f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.63']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c897b5d-62e6-404a-af48-6620e1b76868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97d99973-0e78-4b74-830c-a00a89d606a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfaa2150-6dc2-44b6-a5b9-d3ffc9554cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0615c66-11fb-469a-b67b-f72a6e554c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.81']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f9eca9-82e1-4527-ade5-2879bf6705b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168174a5-7cbd-4242-b9ba-0cb86d905c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e4ad83-e0b0-4c5b-b7e5-d6e57cb1fd9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8696ffdb-1c88-44af-8ce6-1fcbc316d2f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a44f97d4-34d2-400a-bc98-7863af6c7341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.161']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fafd1c52-76f3-4ab3-a717-8f9132ba0dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3af914-1ce2-4985-be6f-bb58ba5377be", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--460d1e96-9a1f-4eb8-9837-9dae6f3024e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b09cd8d-8a5e-4a3c-a3e4-3bf0fab65eb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bad738f-1ac3-41a5-b815-eb9a40d9f16c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.159.113.190']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4769ad4-7214-4ec8-81dd-913974435812", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.172.152.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf696be-181b-4e51-a0ba-177a652d9e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.172.198.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45714af0-415e-4c93-810a-b5bdf0ae5b25", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.181.127.59']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84f6779-f365-4825-bec4-a534579e26ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.186.18.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bfdac21-3f17-49a1-976b-aa7e9ec76324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.20.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed01205-4600-4900-a34d-f7c1212e9180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373d08a7-355d-4178-99f1-40c16cb22ece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656f4cab-60b3-41ea-a050-b42020574abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50fa7a6-4d2a-4741-be27-7bec703b3545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60204225-e4b0-46f8-a659-a34e71e2683a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84433d13-8052-48d7-972c-649a0ffe9d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466233a4-f6cd-4815-bb0e-a72a1176c1f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.253']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4242e297-1876-4be1-af34-33a95c698eb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a7ca869-06ae-4d21-91e7-28c95ba98294", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.195.221.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325468b6-d9bf-40e2-8834-2e05b982bc53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.145']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f516069-a71b-40a2-83ac-d40415ca7797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bed3d28-e80c-4567-ab99-08063881c494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98d2eeed-2baa-483c-9d34-7fc08b914ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.240']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac3ae40-72ac-4c22-a254-de0b8bf94ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ea212dd-cb91-4d14-b856-fa16eada79f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e447d814-c14c-44bf-827d-6baeafc1d4dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d7b5ea-9b86-44ac-a99c-6bfb0483962d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425b7180-1351-4ce1-9424-994626f9acd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.240']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5c3e78-c328-4afe-95cc-527088cd9326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32360386-0de3-4b41-900b-af81d5c7924e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c378c16-7a6a-4070-9ead-0ed7dec5a9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c62083d-6270-424a-98b4-2f467097eb7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88174363-dd4c-4344-949e-3e5eb3f07c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d7ed54-6e23-41ea-85e6-e76ceda066e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c50457-6e7d-4da1-bdf7-008d7a3b4312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c276347-194d-4767-bc81-403188608e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75dc0353-a87a-457c-b18e-43fcb70afdf5", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.225.135.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59b26e3-0ab4-4ef9-ae87-2fb40ab93149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe628ca4-f59b-40e5-a1c9-e1c814be2d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.235.229.96']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fcb2e94-88c1-4085-bef5-b575f990cba7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.240.157.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93bbc418-e6a3-4bab-acdc-bc2be5b94401", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.245.216.49']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e50464-0f39-45e5-a730-744631930fbf", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.111.125']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f49d2e-d63a-4c45-b08e-ac3054a2106b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.244.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d03a0414-ef83-4a29-92eb-5d91fbfa08b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c27e885-5367-4a98-b0b0-f17806146fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562c9f72-93dd-4b4d-a406-db17567cf9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab6b3c0-9ac6-4304-9286-4562e0b304d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78d5430-178a-432d-ae47-9436e81024e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895db0ae-fbdb-4d47-b72c-353539e5799c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82602737-6272-48a8-8077-de8dc3ae80e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f57ead-9622-4d42-b7de-f05e3718c05c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.46.249']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c4a8e1-a958-4cac-87ef-8ead36880876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--845795b9-a3b4-495f-84d5-5b5e9fc22eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.60.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b7227a1-c932-49e1-8ea0-b15925f3a1af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.68.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7194bbc6-4fd6-4b78-80fe-450d0853bed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.70.165']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3fd437c-569e-4899-b916-adbaa10400e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.70.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dede728-7998-4032-8390-b6ef7881a692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.72.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf9eaa3-e5f8-4a8d-8600-7b7a7a826a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.73.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0c6c45-2329-4f66-8bcb-8ddb7f3a982c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.76.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377b94b3-bfec-46f7-92ef-ad88e6ec3626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.76.165']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e61c4fd-9555-486b-93ca-e6075081fb14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.76.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62210cf7-35ef-4e82-9afe-eee48faac617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b30fe22b-6d11-494f-a896-c579f6d2970f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70d4714-8214-445e-bb2b-4329a9cc3a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7279e5f5-408b-4df9-83f6-6d1c47f61c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e08402-ee89-4a37-b27c-b71f37d3c5ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b52d02-f4a5-4dcc-93c3-5a3f47b133a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.90.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a1f1ba8-b994-43df-81f0-a140273379f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.90.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--708be3ca-2fde-4927-b369-68e9f5afdc78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.91.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--359a9f45-e4e1-4a2c-a269-3962b46297d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a63f67-af1b-47f6-bdfe-84ca220ba365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12a0a92-5055-4de7-8f0f-98dbb429abda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8e5ca5-4325-4747-be4d-f6eeee3c6876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc846c24-e81f-4360-bd14-f5b45d520728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.98.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5efeea49-fdea-49e2-9e09-58f96d9c64a6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.38.249.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df163e7-ac50-4daf-9b31-d2975600c41f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99501fc2-9234-4f09-851f-60239f10e5fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0269272-9b1b-4a9b-93f3-ab20dcd7689b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af5ebb1-0da9-4eda-899f-a7631dcf9ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.37.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b1ffb9-1d25-40a3-a6fa-79a56ebab89d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--284913bf-3538-430e-965d-5621a5f4165a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.60.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8f9513-c7a9-4a71-a359-e81c66543856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2696f4-e1d8-4309-9160-1987da00c892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--577c39b7-84fe-49dc-8c8a-80536de49433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13889fb3-06a3-420a-89b2-8c6ff04fe151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776d7b85-00a5-4beb-847e-bfdc7a82d7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3772c20-c737-4fe3-8429-6b4812e62f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a5f65b-8b97-4ebc-adf3-5bcb09a9c131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.5.102.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e372924-1557-4555-95d6-bf57662e2f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.103.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d609db7-1b41-4e53-b683-8bca4c2eba4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.103.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ed7813-2eb8-40d7-92a2-519e38f131d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.110.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50ba0c51-aaa5-46e6-93d3-630c0b3bd19f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.110.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4077605d-9135-4ca4-902f-016f743879b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.110.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a133864c-b930-4175-abb7-e58ff2a26d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.110.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956b67b8-42ca-49f7-b78c-4f0283212318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.110.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f84184-0145-4471-ad1d-93268fde9568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.110.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17cbf6b3-1fb4-49df-b98a-0c105c01eba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d9f7cc-d12e-4760-a63e-646a28a66e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163707f0-c3dc-46bd-9582-4b81f880d2ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5afc7a33-05a8-48d0-a610-7fc67e6a5452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4b7ef4-51f3-4c19-abf0-63df82f9c37b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.99.59']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3ad221-378b-48dc-9d01-7c6bdb93eed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.59.224.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a3723c-ef1d-4994-97cf-2dcbb8f9d280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.151.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9869647-41d7-41e0-90fc-c3e22a2a0b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.163.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e6a339-4f94-4c0d-ad35-6230e102a87e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.187.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f68f0aa4-1efb-4ce3-96c7-384c6749177f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.63.4.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f226e90-9e34-4fa1-abfb-1fee4cd7e8b4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.70.164.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f265af3-2b1a-4b89-aff0-98d5ba873fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.77.22.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62edcc27-43a8-4dc0-b7b6-db370868cf32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.77.61.56']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0fd5ad-76c5-458f-8d5b-4033caa33c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78f3e4c6-2cfe-4462-a78b-1d2b538626c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0094284-41a1-44d1-8746-5c7e640755b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fbe437c-ae06-4878-9961-cf119df67fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7208a622-7955-466f-9900-65a872b3a803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3819b9ae-dedf-4ff1-bdc5-d14a6aa939a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af0ffee0-1e86-4cc8-a35f-2f26c5ebb31c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c79f5ba-c386-45cd-bf93-706344d652cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51528d19-078f-45ff-b0ff-7d2f3b4961f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.150.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc36bca-d186-4a77-a272-604ab073ab09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.151.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eaf9b24-12d3-41e1-aa25-0fb58f97a914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.151.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e1607b1-12f0-4afc-a3f4-dbe2eaa34440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.151.251']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--123a5dbc-f056-4947-84b2-5261d981ce07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.152.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--054c2673-81af-4f86-aea4-57b2b555868e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.152.240']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8fcb6e-bc71-4a5d-a356-175fbec95968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9b25b0-417f-4018-93f5-eaa39a3fc67d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74d8c61-5ae1-4af2-bad1-6b5ed22133a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.155.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e8a4fd-da6b-4bdd-8553-580da729099b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.155.248']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7ebf2d-f464-4c50-acc2-2f160a14396e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.159.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c6acff2-ef9f-4c61-a62d-41b72f5616d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.160.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--227c36de-75b1-4594-98a7-5270b1ebd561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.162.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b022111-87c5-4e9e-9f1a-8a97c4874d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.167.129']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73fc1482-2966-4d8d-ba1c-1d21afa670e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.167.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5fa2c1-12f9-49e0-920d-eeaef6e3165e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.167.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af97765a-5780-40fa-8a62-460510842b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.167.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d03843d2-a5b2-4498-ae9f-7782588486c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.167.176']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18cf688-4d94-4120-b709-9dffe32c7650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.167.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d52b9b-7428-4744-827a-056bc08fdd2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.175.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a67fde-bab7-411e-a10f-e53ecc19264d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.175.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c959cc16-9d7e-4099-b121-d4e687b7dc0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b8b48b-d4c9-4def-8d73-e4270e96329a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cbb1b45-a26a-476f-b617-7175cddf523f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.180.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c45cc6a-9b7f-4163-8cff-50def9a02e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.180.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc079c7c-05bd-4c51-bad0-29e0608f4eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46dcf234-7168-410b-899e-ff7c57508c21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff04396-6a0b-40d8-92a0-81d8e824f901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30631136-0591-4d7a-b5b7-c5cb3453d035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.190.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ecb7f8d-7668-448b-97db-3787cae170fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc33b45a-b7f0-4cb7-a64c-7012478afd88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.192.145']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e100a0d9-2edc-45d6-ada6-294b22175450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.192.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e5a75f-8e46-4d15-b27f-0a450d3e447a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.192.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2afb57f0-ee88-4575-b18f-9f14204f0cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a06aad8-7913-457c-a9a9-aa00f3e4690b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.211.185']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9315d5e1-2f04-4e21-bcde-55f492abf29b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.211.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1034fe-43d9-4a52-84ba-e6db329aa2ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.219.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286942a2-5f51-4826-9f13-abdda270297a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4dd0684-b432-4ffe-a2fb-59359bc8587f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.40.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9322e790-4533-4e78-8aec-b26b6a0949ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.40.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8769d72-e925-4a20-96b8-351cdd2dd536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.40.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412a43fe-de66-48ac-a253-45861a8419fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.5.120']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f2b17c-3925-4423-82fe-ee18b92ffbfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.5.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--283cbe46-28dc-4839-82c8-2d426046df1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.67.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb32941-515b-4f8a-931a-f62e3abe9e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f00fce-b9ac-4840-a18f-15af201388ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0749729a-05d9-47c9-91c3-f21362e4d664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e249f062-2c45-4666-8fa1-b437ebd86f40", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.56.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b74d3417-0edf-4f1a-afdb-3e129449d710", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.56.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccdd0885-9002-409d-953f-9af4b0fc7b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d30cc6-84cd-408d-a973-a7fc73480657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99508eb6-1573-4d69-a48f-eac7a23668df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b087ba20-fa1f-4d08-b40d-98fdbe0cb83b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242d8569-8a32-4381-8356-938f38015351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a5dcdf-dc90-4e0c-80ee-99043f078d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f7bc759-3ac8-47e9-9a38-60cf14e3ce5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d58fc21-ca0f-4e2a-a5ef-5168cf43ab7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d6e9c9a-1311-4162-86c6-879e3e9a8300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.109']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--592014c1-07cb-4410-a510-e946a566f105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21f623f-0e4c-4fb0-a341-f5ae130625b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.111']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ec5a87-8ed1-4f06-929c-00584977cb47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf23ba9-e0ca-4a6b-a2a2-c578aff89de1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a7f995-dfe8-4aa9-b321-958dfa6bb217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe1bd5f-8355-41b8-b6ca-cb67c88e3cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff0cf48-1761-4419-93c6-f39ac2d19d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73476c15-c852-4f79-96af-2600a1742e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9438fa1-2ea5-44f8-ad99-7394e715c7fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa1750c-6026-4549-a21a-c501deed8425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.119']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ee5055-0ac6-4f6c-acc0-3a0b911b07e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.120']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea197c6b-0caf-4684-ae8c-0dad9d374ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681039f1-51fd-46fb-9016-167b79daa301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81906c27-25a3-4589-8816-647fe321e6d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21ae3f5-c77b-4a17-942c-e8aff0a87ef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05753aaa-4c44-4a2c-a672-07656b98fe0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40889855-ea8a-47f8-9789-320ba26ca35b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3659f4-a031-4def-9903-518c36c3b565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f634b1-0664-4296-ae47-d4f662613b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9767495-b02c-4cf1-85c2-d02864054270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.129']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2629d268-ae10-466e-8b0c-8a748c0c6d07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6c0078-09b9-4b11-87ca-0270ed369ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b523985-b239-4256-91b4-3d6fffda7855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a497f4-084f-48b1-95e9-fd50077f6eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e105dba-e6fd-48eb-9e09-fb93d05ca32d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.135']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7115c9e7-dce2-4a79-b6d9-f4b1615f7cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3c9a5d-53d4-453a-95ae-5d8105c92ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf435c41-a68b-4d38-9b21-94b46f9fedcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.9.168.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226b8666-583f-4878-87f3-b7d21677b99e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.90.163.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9ef592-6121-4f07-a1ce-7ed708805015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117355d1-13a6-4bb3-8173-7cc330c127a9", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf183113-03ff-4891-a318-eb1941901f16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.1.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afec033f-d7e5-46a3-a64e-ae5ad9721ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.94.31.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39bbde73-a38c-4a68-ba73-e709c8654295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.161.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b984db82-1572-4aee-8747-defc9511b8c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.165.249']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8edba5-f5f5-4f48-8137-45600cf402b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.240.160']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b7825e-66bf-48e5-a13e-6248e3773dca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e58d4ea-6006-48ab-b8d9-8eb354c9cba3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.48.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fe21113-e74a-48d4-b1fa-6811f2838431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.191.249']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a2e3c3-5dc7-4f65-81fc-d9b512267de6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.178.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced60488-3e20-40fc-95ad-c597bdba9b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ff6fc2-2b98-4fc2-b522-c9a38d86221b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.161.50.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--846484e5-4181-49e5-a5e5-1fc7fe5d2a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.163.144.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f2eaa8-d9d5-4781-bbe6-d009ffccd6c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.19.67.181']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25fab7dc-424b-4df5-8e63-b05f4adfc91b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf98b9de-9918-4e0a-b847-7d308adf7e19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.153']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace5d376-ec78-496e-996e-5dc4a7d5a769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6391797-fa67-4ba5-808f-242c7c0e9553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.171']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6732120a-59d3-4105-92ab-b909593eec3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad3a4650-0e8e-41d4-92cc-1f7c37989169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526b07fd-bb5f-4225-a505-2a47a1a478bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4659e2ec-93cf-4d31-8300-6c84b8fc0b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd45c656-ad41-4d9c-aaa6-ee63ea365161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da8a99b-02df-4002-9d96-e88d7bf2eb8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9302dd39-cfaa-4ad6-8704-4524ee37e7c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b30c78-478c-451b-83b7-ca84801d9c1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.251']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a450b31-ad75-49dc-ac1e-6986b3334663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64fe454-0390-49db-a0e7-cbd72f4d223f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e6acb5-6321-48c8-b8f7-16d44750a566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29795767-5a5e-4c91-9e61-8938ee2c8845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c160bc83-c902-4d75-b679-4dcdbf0f5205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.76']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469c4f8a-0d99-4afe-adac-899834edd031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.79']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93d3704-26be-42c9-8553-04c33a508009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e41f1b6-4398-4166-b8bc-3d3467161fd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a45d71d7-6ec6-4c9e-ba1b-9dc9753673cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea19cdd-ba07-477a-ad4b-2a0d8e189ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.95']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead6d41a-f0b4-480f-aa24-883871484b94", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.32.102.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db335072-e9ed-4d07-ac03-af9df043948e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.4.193.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b77029b0-cfdd-4bea-a15e-5275554809bf", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.4.253.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd3c363d-2a95-46fb-a74b-98d2c8e96e5a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.42.92.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a25d76-4d8f-4d54-87ff-bf3c914e2f5b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.43.78.119']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392dfb07-af96-4757-919f-deaa0822ef79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.44.26.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4673861a-be61-4ac2-b657-c70a9f55d9ec", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.98.186.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322a518a-664c-474e-be15-3a17ecbaa1d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.101.206.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f431a536-b244-43ef-84c2-913dae83f411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.105.85.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec4bb75-6e62-4f6d-b1fd-40ecf5d0ef69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.110.155.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9be29a1-0a00-408d-91a6-8c618a5e8889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.113.107.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88e2ac3-4719-4f6e-a6df-cec79c2f54f4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.197']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a0ae17-ab00-4537-a47a-3389ebfd36d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bcf9058-27ef-4d18-a153-a3f2783cf691", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67feb84e-298d-4287-b69d-fb0e41915852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.161.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3f4130-f1b8-4301-a0e4-3ce65bf8ebb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.201.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe3ec1ef-858a-4af4-9ada-312941448673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.206.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14218d27-a5d9-49de-9cef-92028e6cc477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.244.147']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--450ed700-af1b-4af2-a3d7-fad8bed85a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.87.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e1011e0-5754-4e8e-9524-6caea78b0da4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.10.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f345f7-5d0a-4fda-92b1-28542a68815b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.105.222']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc856fb8-5b6e-475a-92a1-2a6c904b9202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.128.248']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b42741d-ad2b-4255-b8f8-5889702a471e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.13.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98be2310-a507-46ce-a0a7-d6c00a17f5dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.132.125']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d83ea0ab-6a72-4342-9f6d-af9aca901761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.132.255']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e2951b-01ba-4dd3-98f6-3c37f9e3597d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.133.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228682e8-579c-4ed4-8f19-e6a68a140ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.1']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1899f168-13ea-474b-b8db-e56c493cd344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c53714-27ea-4090-a1d9-c2a8833a17c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.139.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cec072d-1e4a-4273-97ca-2ed5d4a3cdf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c4ab17-b550-4a7b-84c4-7ec0c6518c77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.253']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca90862-4e67-405d-9acc-9652ca0f313f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c558a9-0e09-4edb-81e6-714196bae464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--254ece2d-10c7-4d18-9348-95fc2e7f91a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de2a80e-9055-45f3-8713-6f5fe3cfcb90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fd823ef-7812-4cad-a7ee-8a4e83d5e0f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f4aea0f-6f03-492c-9452-92949b0b37c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90fdaa3a-bf69-4c23-8434-c4cef0424652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.161']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a06f95-1af0-404c-a60d-21f110a17021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e4c9451-b1c9-4965-b52f-eecd0f2f10a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9d0fcb-14fe-46e5-b220-304af471219d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c829bc-d7ec-4ca0-bf81-912926db3f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.176.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb51fadb-424e-46a4-a270-3c09ae1aa160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.176.214']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--552b7725-a02a-45f9-b5a9-50336abefdbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.26.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425fad4c-5aab-43ff-af6f-63a1c0779a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.56.147']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38659a30-a133-4e94-ac30-6af060c30bb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.99.240']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b725e047-95da-4d7e-91b0-0b4a7684977e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.112.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d50c72b-93cf-4014-818b-669510d637df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.118.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b5abfa-ffe9-47c4-a529-ad950298106a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.12.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c89b9e-6095-41f2-94cd-8173324fb849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.120.163']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e9e728-2d72-4f58-8951-b871dd93e2eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.120.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57eb49a2-4370-4f3c-8252-c05a2343e045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.124.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c11032-3e44-49c8-a8fc-4ad84508040e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.124.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b8d315-e34f-4e08-abfe-3f90e7d5f305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.124.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52b3de9-c8f5-433f-af71-d25ac05bb704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.128.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c95217-0756-4022-8622-f2e5de98c438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.145.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1161f5cf-e2f8-448c-a693-58af65f1a844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.148.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75803686-763e-4aac-baaf-44844a4d9b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.155.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c9be91-de89-4c34-90fb-8f8b753b202b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.158.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a761fe-367a-43c7-b4be-4beeff5fbb3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20ea646-4a18-49f1-a1d7-382ea682914d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6553dbbd-df18-48f8-b341-9353d4dd9ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3890b627-1f9a-4613-a278-09e56e4ede10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.161.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a65d1fd-b8fe-4977-9cc3-126d86789317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.162.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f62b89fd-9994-405c-8f8d-300aeee3af03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.162.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e97cb180-38a6-4f6c-ba72-087fdbd657be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.172.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bdc183a-b356-48e0-8a3b-4ea0a9ab4f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.172.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70f6db9f-d3c3-4575-a3e6-f1dd01675927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.178.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08cb2ee7-f816-4657-ae5a-5925111ea569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.189.46']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f210b6-fcfa-4564-8ca4-99d27b8fe772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.36.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58099bd2-4f88-4a15-88a0-37a3cc0e1eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.37.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e4e0820-da75-446a-a3c1-c9b99eca14ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.42.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed25a95-89fc-4976-96a5-0d2f213f3ceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.45.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb5c9f2-5663-4bd9-a359-a2f272a7f707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.46.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c46706-5173-42df-8a9f-cbba2c0820bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.55.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b10682-81db-451c-a137-1ee8b7a29fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.80.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d848aaa4-30ca-4bb0-8d4f-3cad2c2a1f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.81.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ad2de4-2419-467a-92e4-a18bff335d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.82.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9979a14-b929-493f-8369-d1802e27581b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.83.248']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ddb611-e333-41d2-8395-c9b9371a7d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.84.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f59492-1796-4747-a20f-6b1587d3dbee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.85.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954c158d-f614-4b89-9c68-609f258d48d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.197']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee358e47-5aba-460f-8c44-e7905f84ff47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.154']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e1a6c6-1919-4ed9-bade-ff248e0bcf5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3a77cd-461e-4ecc-ae2a-e6b74fad8845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.100.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93760dbb-1a4d-4290-bd15-e40a3e1204f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.104.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d880e37f-cf8d-43a6-9b17-7e4fffcebe63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.116.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1192a6bb-72fd-4b04-858f-25b8b19138e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.118.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea8a56c9-73b5-465b-bb25-44e7449513f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.121.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d471c58-2ece-4125-8e44-93b6c8f09461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4ae5ec-a089-4a42-a06e-391e32f1a4ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.123.181']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c06924-6ad1-458b-9e0c-8af040993472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.123.229']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c0ac5b-d2e7-4548-8b2a-ddf3a0613ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.124.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e315f75-9c40-4a3b-b6f4-97494faa5aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.125.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a0dac4-4aab-4f1c-b962-e4bdf3213e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.126.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881f004c-67fd-4092-934b-d75d407a32ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.141.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92176aae-777b-43b5-a339-531507b7189b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.141.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24bb0dc3-aa0c-4bc9-8a16-31efed9f5581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.142.84']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2dd14d-4e85-4301-90ce-ec10bc91a121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.160.251']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bafe20b-39bb-4878-884d-bab6c3c8f317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.172.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bafc423-0e7f-4c46-9893-c5c52ab04906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.178.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bbaba79-738a-4b9a-b0f8-d633da75200b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.179.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b7f1602-3e7c-46aa-867e-f58a07f3898b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.181.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956a0d3f-1e07-4e78-8c5e-ea809ab9a454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--359b708b-5c2f-4917-bdfc-71a23dffed99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16f426e-d8fb-49cc-9533-0adfb148bb46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.191.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e027e7c6-c2fa-4f4b-9e73-240d939a73de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.191.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1bdedf-dd27-49b8-b5c2-de3e7ba3e7bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.24.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d4eb28-7544-4c94-94b2-b648e56536b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.24.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b8138f-07bd-4c6a-aa18-1bb637b07eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.241.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4f25b3-a4f0-4461-9221-8a81a4a4e572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.242.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27a9a76-5184-4439-a3d6-a56382117fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.243.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed442e0d-8283-4c9b-9baf-5e27ae261ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.247.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47572699-8a87-4e46-86b1-5ee6380595a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.248.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee20f408-c356-4956-ba33-ea4dd068ded6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a98212fb-daa5-47f1-93a7-ae8b680663ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426160cb-5576-4a8c-bd7d-d5ec180056bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.25.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c9ae14-e932-454a-8267-a757c156ba3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.26.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c7b575-60be-4a93-a681-48ac3e6f3745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.27.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ed9b28-b238-4a37-b1cf-dbeade814b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.27.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c66f2a-61e0-49c4-8fa0-7fcc759a6762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.30.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ad8ba8-71b4-4d7a-b587-aaacf4132a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.32.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705c651e-b3bd-4347-badb-68f1427bd625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.49.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc5d45a-3e0a-48b2-8119-0f40f41db76b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.51.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe889de-b2d2-4a9f-9a77-2921a969efb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.6.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f747870-5733-4a96-9b37-d759eb96e74f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.62.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2a582c1-3e33-4195-9932-2dd0adf18541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.66.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a8f5df-ca3b-4750-b2ad-38c64b885bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.70.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb188197-5f90-41df-ae15-b30c17f1a567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.72.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f716ae6-d4cd-419f-a17a-9ef39f2b8f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.74.190']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c5d8a30-d3cc-4f74-815a-22bb84779de3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.74.197']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ce666f-47e1-47b5-9812-9985309467b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.75.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed8d001a-2eac-4679-b48f-10cf7fb32ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.78.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ca68a5-baa5-4b32-bca6-3c20b07f759a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.0']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43056a9f-e59f-48f0-a335-dbd95fc85f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--453fbe5d-3526-4d79-8a7d-afd298821625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.88.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0e7b09-2281-4fc5-8639-bdf058929104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.88.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38fa213a-7872-458a-890f-72feefe459d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.90.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd4569a-bc52-4ebc-acbd-51776cd0406d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--834e0207-ceaf-45b4-83a3-9109b5cd33a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.92.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7dc7288-619d-4e2d-b8d6-e600f189dcf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.94.48']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3deb0118-ed42-43a4-9b4a-dc1c0aaeefd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.252.16.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e11858d-c1c4-426d-af58-872d36265df4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.252.53.96']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cdfdbe7-fb43-4b6b-8e3b-0e7e3b503bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.218.190']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5477af2f-d39a-4731-86a0-e3cc3ab9e4da", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.5.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c49c41-7de3-4eb2-b65b-59e0fd59e1b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.128.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3876ed5a-7263-4dae-9c66-bcd0cada47f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.134.251']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--803799f8-44a4-49e3-a63c-769d39a6eca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.134.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04b08de-e8ab-41f2-a202-5e45cb20e748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.151.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--980fe162-9708-430a-bfd4-2a8f8fe458c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.152.129']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ddec21-dd5d-4fb4-9d4a-e787d157babe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.153.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d939b457-439b-4fcc-9e66-3985c9c5c4d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.155.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a5d8b8-6b3e-43ac-9daf-2cb2f2a2fdde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.156.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28483655-0245-4b16-80d7-5f777cb32c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.159.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531ab931-9c03-4488-b247-7e933cb3b9a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.169.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--380afe8f-0e4a-4673-bdfe-5aeb6fd254fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.173.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da7473fd-0864-46ba-8486-5e50a2c403ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.176.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfede355-0750-4457-927e-d093831a2215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.176.225']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d0a6005-9e02-41e7-869a-0e1a4c3b510e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.179.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f07a8f-5ed8-426d-86ee-a8455746eb59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.200.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a8ccb1-f2b6-4e27-a6b5-5f32c34b08b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.202.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c8d3fa-8b1c-457a-a703-c0a9fc256f09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.207.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6062b1ca-9b69-4a47-8f5d-dd4dc4e29b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.215.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5941de-f28c-41c7-83ca-76f4228255a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.231.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93934a75-36d7-4e8f-aec1-2192e6fa873a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.234.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61042ae7-2377-4d2a-80b0-aa300f8d4b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.235.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d3c19e-c0b4-48f5-bedb-8ca317f54d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.235.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8771c9-1164-4c76-80c8-420cee52f2cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.238.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2297ba2e-907d-4283-8f3c-da2dc92a4bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.239.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c66a46cf-bf87-422d-ba4c-c5654b425d07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.240.228']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e4b98f-b323-4816-8979-fded8d87f0bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.243.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a698044-3b68-49c6-aec1-036bf4c67bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.243.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c90ea9-6bdc-41ae-adfa-16c106763bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.243.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696f15ff-3db5-46fa-b1be-170e5253cc0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.245.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564cd989-5b2a-4790-9fa3-745d3f2f9ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.247.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7676f8e-c8d3-414e-b499-50c5aa13c214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.253.203']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b7e40a9-39d9-4207-9e49-78a37c5ad607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.255.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d32482-0299-40dc-9d58-8ddd994dabf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.32.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0dc6a8d-5376-404e-9659-8437ac605651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.36.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce447801-cc61-401f-87f1-b04a59ae3211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.46.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2122eaf3-0e0c-4c91-9ced-62a94295282b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.80.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6024af0-9305-4560-84be-962942821e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.90.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e31c067-c440-4347-b816-9c8937c0eae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.90.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a20f490a-f842-46c3-8db5-b6948b0fc35c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.45.19.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d4c833-95fb-4f57-8060-f2ca538d3841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.15.96']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e6c63d-016a-4bdf-9572-f40989ac4271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.27.55']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c2464d3-b8f8-460d-b9a5-e1bced1e788c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.41.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73bcb262-fe57-47fa-8caf-5b7830c015f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.54.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e701ee-512f-4e2d-a18d-f3fed021a32b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.182.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa8e64a-bf92-49dc-ad3f-40c7ae51f032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.210.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de84b988-574c-4eea-92eb-3187fa5c527b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.214.160']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b343314-a6ae-4fab-868a-8f6c3338d806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.215.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc388f76-88ba-4a23-a3da-4a4d80cfe49a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.215.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b773489b-e4d2-415e-aa7e-2f23db3c4521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.219.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519c40a3-efe3-4f4e-bfaa-3c45d4fcc76f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.223.125']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f687a273-f12f-4385-a612-57c4b088c53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.225.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6599d2d-9c01-4894-be07-c3913fdcb44f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.225.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--423cc330-54a8-4bb5-9793-fd34f2e212e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.225.225']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c06b79-d814-4ac6-9b6c-7066f174484f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.228.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8bf4be-86cd-48d7-9c81-dcabfd422e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.228.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7135c1f-0eb5-4a58-b307-0e8be21b6b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.230.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0722a3-c30e-4e1e-8c54-0a66317dedfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.232.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f06267-efbb-4874-a766-0bf1bb851a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67dbcf1e-6da5-4098-8cea-8b97ba535e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.79.32.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c076f6e-0dd5-4a92-9dfa-f7f4d6b323d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.82.122.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ff0c62-5dbc-4845-a17a-ef49b077a50c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0784994d-425a-45b0-b20b-45c9e2ce80a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.190']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f098fd26-472f-4668-a47f-63467930cff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1878563e-d6f8-4d58-a92d-130533ed2ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ebf8904-50a4-41be-983b-91a9f98af461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb0f484-d438-4ef4-b9a0-266d06593566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0674a3a9-47ef-4583-a306-7353171c186a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7102b779-e9d4-46fb-93f7-1a86304b2e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.79']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34cc17d2-267f-4d8a-a6f7-d30f5d7d1cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2734da-ca9a-45eb-beee-6db81c2c2f00", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5758e09-0c73-4b2c-bec1-5eb63d729bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb386e5-d54b-4809-946f-abc3ca5c805f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--721c5d73-4831-4946-b07b-ab0140bd50c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b3863e0-6d6d-4790-ad63-1f65f2a2d8e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c534b0-e420-4cb9-9411-2c7a505f02ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.108.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725b19b6-7189-478c-8c97-da72634c3fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.110.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f64211bd-d871-4a38-a4a8-75e997817bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.113.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35471dce-44d4-45c7-9225-be70c39efbbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.115.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ff17ec-99cc-4d2e-9527-2bf40b132e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf18575-021a-4824-b41b-2309d02f15fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dff26a0-644a-4a12-956c-ee8c68c2e66b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.118.171']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93798573-0b5d-4aaf-95b4-b0cb38afbe9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.63']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19639d6f-ab43-4659-81b6-57c88b024f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67c4224-b83e-4dce-a97f-bf959dd48cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.135.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef52bd46-6582-4794-b51e-6713cc577017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b224950-10b8-4712-ba7b-16d9abdc222d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.161']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb98e7c7-7616-4cb4-a4b9-29f2f0a18b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.32']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--856335a1-afaa-4f74-a32e-d11021e4ecef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9b6d9a-38d3-4e8f-85bd-e739bea56612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16bb20d1-7774-4bf2-b4dd-cc8e1cdbd28f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d37cb4c-7693-485f-8a26-39012fa3af2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53828ba9-8a1d-4ab4-9abb-16ebd8bf6c08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76cf30c9-5057-4032-bbaa-f68e8d24c48f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.203']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414d9888-ae4a-4378-8433-6cccd28bb9a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e16b96b-7fe5-4d77-b2a2-c3cb616ac7f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906c56ab-73f9-4300-b902-22022863c001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1868afd8-6f22-4fd1-be9e-4b3de1535ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2245023b-5296-4a55-b97a-08bd03541ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d98b09a-04b1-4413-b2a3-fe331bca3b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.125']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d754c79b-f4a5-4f9e-85b3-5efeff6ad077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00d528b-2a0b-45a2-88c6-67912a11772b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2102e47a-673f-41e6-b120-e34fed36ff82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef0e38a-bc56-4775-a6a1-da7ce5a700c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c07bac-f9df-4c1c-b01e-a87c2b432380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.120']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d3b506-9214-424f-89b7-c0029289eab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b09640-2d77-44f2-9fdf-bfe0363bb4c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.181.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae76d5b-61f5-4c28-aac2-37b3af9a62d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.200.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a263d44-6945-4145-b6cc-4bff7308eea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.203.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e582cbc8-708b-4d15-b1db-b35542b6e2d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.203.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9399b18b-3542-4030-bb6e-cf3dd01c49c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8a6a90-232b-4254-b585-e7a6388e1e49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99dac092-697b-43fd-b05b-12c96b3272c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.97.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af0685d-b277-401b-9c9f-9911f1a1316f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.1.163']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5266aea2-b225-4a16-ae40-636f374a14fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.58.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18482855-9d15-4aba-8c86-6a5e7473261c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.90.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d2bda8-52e1-45a6-ac6b-87eb90b4f51a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.93.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad6703f7-34cb-495d-bfe8-4d6f7974c9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.225.161']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b27ac8-c741-45f0-8d0d-d33103902635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.244.160']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdbd8756-80d7-4e40-a6de-e6456f3d4cc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.25.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9610a27d-5d74-4b8a-b214-4742e0181b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.31.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef3246ab-a859-4f6a-9f69-8459e0189945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.74.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32dc8216-bd8b-4ae5-b77a-9ff3f052dcf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.94.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a19bbbf-8cc2-4b97-a658-4336ef6a9012", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.92.114.84']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78280391-3bca-452a-932e-a9cb78c60e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.208.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0299e6f1-61b0-44ad-b8c4-6741f408ee61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.243.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884747f1-f936-40fb-b382-c8044905a00c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.233.154']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff464229-73dc-4f36-bfbf-88416f54c9cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.207.181.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82477cd-80a1-45b2-a1bb-d5a38c912fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.228.176.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca9cfca-b08e-4637-803f-9c84a2f23c96", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.234.192.248']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43aac588-ab1a-4522-9ed9-0d86341ccd07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.249.85.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74374785-2b25-47e0-8bf3-81c27c25115a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.39.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6c5d636-10d8-4ea6-89c6-c47c4ddcfcf2", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.52.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a4e77aa-5a89-4812-b1eb-9d2814e5facf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.73.183']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d9ca937-bfd5-4692-9391-28e45de9c701", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.11.135.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1556382e-67a5-4c2a-94f5-80d58cf10d86", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.130.204.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605a4f50-6658-4e95-967b-b9049377db05", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.10.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea2c374-af83-4f14-9857-74d913f533b2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.152.58.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d635ebe6-66b7-4121-a771-8e096ee9bcdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.160.97.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e99b1e6-1bfa-4fe8-9598-834f0a6a74a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.209.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eab9f62-9730-4aa3-b785-85f0a0ba6233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c423007-695f-4555-954a-3c89d0557a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6005949d-0113-4c61-aa1e-47a7b0c3166b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f3b8c9-6bd7-42b4-9eef-dd3a8baabe3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a2dcef-48f5-4f40-a3fd-930651e58957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.190.3.145']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78d5ac2-0191-44e7-9a07-9bcb983dc613", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.202.101.153']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0991c228-aa04-4dcc-b8e6-980813fc3365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1896e3c3-c697-4852-9946-edcf5874ea1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5fd995-3095-4390-a0b8-f0a7dc60e356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6990ca-6adc-4ca4-a8c2-c755e12c05ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb07760a-8fec-44f3-b5d6-a7d26ace5a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75149c41-2564-40f2-ab4f-8e1bc0c5f84d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a77c0bc-0e93-4631-abaa-589f8ab969be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421d9d5c-d8f6-47d8-8b52-5ab2991e35d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61129822-6ac5-4e4a-93d3-279164528d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0756b26f-fe2b-4c56-bc96-1eb453823cc0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.232.3.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58172ddf-3a43-4ebf-8ce1-c1d347ab95cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.83.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f3dbc3-e170-4dc9-8f23-f8be34fdacb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.83.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ece7e9-4ce2-4d4a-9ad3-fcf423f36d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.83.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1080aee6-3820-42fb-b7f0-0902a3dbae7e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.253.38.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a01f1cf-2de2-444f-acc8-ced736a6e4bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18fed68b-e85f-4a76-aa5d-b6af376ffd50", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.97.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b87254b3-2e01-42a8-a959-80bdaed9692c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d2c97f1-1fdb-48c5-bd89-8b8abed208ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee3f3a38-1f60-47a1-831f-4fdaacc3b6e6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.100.102.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33effbbe-c286-44f5-8639-57d242a496fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.25.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c485a71c-435f-4e9c-a562-eb7e3238d520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.30.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1d30f0-61d2-4a06-bdca-c513077aae9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.33.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183bc564-03ae-47b0-82a2-6a80322c1251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1260c836-22d5-4013-930d-20762266454f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.176']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd48369-6e75-4ca1-8dbd-9122c858579a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.55.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b8a955-52c5-45e3-97e6-25f31d183d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.57.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb92b28-c2ed-4b1d-8131-9fa55b4e2a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.60.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f25e8fea-a0fb-4dc8-93fa-9a48423d2628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.19.171.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c9c8742-fd44-4b18-aab7-08c451ff0352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.60.107.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066c4a0c-e7ab-44e0-ad59-0ff35151f982", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.62.181.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76fe61a7-39ec-4f7e-b8f3-d74f08aa9d98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.41.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e5da10-b681-41bc-9ffe-284204c85cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7590523a-90f5-4294-9606-962ecac6ad72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e54f7cc-e102-472b-aa9a-d51c4043236e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.105.145']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08afc2ca-60ef-478e-ae64-a054f0eff4c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.110.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--492392e4-6c2f-4a1b-95ee-e045a99e9026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.111.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57fbe993-682e-4361-a71f-1e1f3a257f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.3.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9db9b28-58db-4ce8-a77a-af0df50b309c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.128.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e104f8-f8d1-4656-9c73-c5028b23e509", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.178.142.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20581bfb-6891-49d7-8107-594724a43aaf", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.210.223.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17597461-98c7-4ec5-ac42-a2e1566aec65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.250.105.222']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c1a7f0-fdf0-424c-a124-f37c488e7738", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.255.91.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e0e036f-aa75-4bd2-bac6-3000d5c37933", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.107.150']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b7b686-ce5c-4c39-ba47-6911dacd866a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.138.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6db1dedd-4dc0-4751-a770-2410403e5b6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.133.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9b77c9-7530-4f4b-8694-4a3ab933c2ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.202.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a443ec5-ab3a-4ef5-bac7-173141282db7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.27.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eaa47cd-5fee-44da-8dee-e68cfdfe5a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.77.190.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--522b5039-cab0-4ab7-9874-19434653f694", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.111.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32123c1-27df-4545-a471-3ab8143e9e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.219.161']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b836336-ca50-4d6d-869b-c60e68e3beed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.77.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce33f51f-6c1e-4b2a-9977-3e3b53853b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.8.107.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a1ed2f-9ccc-461f-9b10-6089884bc231", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.37.150']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d158baef-77ac-4fb3-8513-60556780e5d9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.89.129.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5bd5130-c479-40bd-a4bc-932da9ad037d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.20.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13758c2-c869-4c09-8218-d34878fb78b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.21.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50eb4fd-e399-473e-8c53-bd6801a6f99f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.89.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--035ab562-fa29-4d59-8747-ecf283432396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.151.196.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3d7307-2c32-4e64-9a61-cfffdb14fb93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.154.20.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8ec522-b19c-4151-8ae3-bd1f59fca688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.157.175.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29fb75f8-0c1a-4b97-bbf9-05c11bacf454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.80.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--012f3d79-0998-42a7-8795-1f2ded0059f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375d8ac8-a53e-4de7-9341-16d2d1c09541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.137.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf20c4f-7f57-4a40-b774-0aa641a76d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.145.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ebb9a4e-be88-45a6-b4af-7f2b6d8e8081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.156.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db86c676-2df6-416d-8e1b-83143c60c8ac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.182.173.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e661f545-6c96-4ddc-9df9-e19e9fa1ae97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.170.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb10777f-d918-4e0d-aabb-25741ddc7c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.170.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05ebf28-9e15-4213-99ba-3e183f392937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.182.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9681331-9317-44d6-ae14-72051939d1c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.189.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13067de1-46d9-4fcf-b37f-9a923dc2fc44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.227.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b9ba19-e0f2-43b3-b213-46ade62d40c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.231.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a75101ea-dddf-4b16-8539-48f5cacaf8f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba7786af-ce8b-4dbd-8668-efa0c8d2a2f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.204.132.161']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ddcd7f-a4f1-4071-8080-9e8bc7d8ac9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.207.196.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d253b4ee-46f9-40d0-9947-1251595c32fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.43.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--effc052a-a717-4617-b7b7-67d89dbfb891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.36.131.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6510ea2f-c77c-4065-a4f5-3b60385d4d64", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.45.24.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d16233f-869e-4349-a318-7e37dd8f5192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.195.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7939a40-4e88-4b9f-842f-35bbfa08bb8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.27.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc58ce0-eae2-4f53-9ebb-a037dcf014ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.97.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e811e276-66b4-4de0-9c95-efac49de9c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.146.134.248']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b96455-1ec1-4638-9f95-b7f34885992a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.163.40.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1393417-e7a5-4e40-95e8-887feb21464a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.167.87.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32b6d07-8f40-472c-b4f0-37fb046f4848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.173.151.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2293e74e-4b2c-4290-864a-74038ac472c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.175.254.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d917cb-acbd-4214-b986-ce7bb6e46798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.204.58.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813e0811-f93b-448c-843a-b6753e249c0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.208.198.178']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fef442c-fd17-45e5-a4eb-a6a39893f5a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.219.130.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd1bb60-383b-4c56-9da4-48162dbb158c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.226.142.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c82e4e7-06b4-4e09-ab85-2c3c31657703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.226.29.111']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81c3d95-d3ef-4ec0-979e-4aa66a97f0fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.234.67.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e2d885-a0ac-46dc-b0f3-b2e15850dfaf", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.252.156.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db07a17d-c783-4650-9911-806491b0e89e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.39.203.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20130782-7825-4335-ae38-d7a98af56e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.82.54.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baee6771-e81a-4759-9136-813da314a6a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.86.27.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--558be4bb-a97d-40b3-8776-f951345bcb05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.91.134.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aebf9c1e-e6f8-42db-9c4a-ffcf3e339023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.91.68.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76eb0071-36a6-4e59-a187-52cb0afccd3c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.128.239.181']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f44dcc-26b3-4a74-8f10-1b77468f19ee", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.129.47.135']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9464c56-cfaf-465e-91e4-0e18ee66282d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.134.136.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee7459e-4fad-40a9-ae5c-61d9733c3785", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c866880-0904-4743-abd4-e481fdf30a59", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e445693e-55d5-473a-9af1-ae8b36ea240c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a32567d-c7d3-423b-930f-9ccb5dd4765b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df44208c-945c-48b0-9d2d-db7465f2b3a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.0.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--415d6c66-bd39-422c-9f26-243403e7bfb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.98.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5391e438-e578-48e8-95bb-6b093db42854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.98.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4dc7caf-4383-4e57-be2b-97998801ae5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.159.30.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b03d35ed-596e-4801-9d1c-804834040674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.19.83.225']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1880f2a5-3ecd-46e2-a66f-073d9a740359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.212.15.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25263633-338a-4c90-9b59-78ece72788da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.212.237.225']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e07347-02be-4b28-978c-c419a8bbf61a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.220.39.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb60c49-adbb-421f-9666-b91d61207ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.221.146.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe56336a-593d-41a5-902e-0b5ed6e27182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.34.42.158']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca4d2b17-0085-4a9a-ad94-252abe90e7ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.42.169.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6314aafe-e443-42e6-bda5-631cba1a4d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.59.233.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5353cb3a-7dc3-4f32-8e76-a88d22f92c77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.69.183.159']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a287b259-31cf-46f2-b109-057bee952155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.79.61.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f80bf1f-4312-4f15-95c5-6fde020ec441", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.103.106.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca2baf7-4846-4155-b8d0-2ad8696ac563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.4.116.81']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf7e8a9-aa3d-43a7-930e-4de29f625035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.52.100.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5531b0f-3d6b-446f-9fb9-4ca3c437f87b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.52.100.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc06c27-6ba3-47c2-84b5-7c7196d34720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.9.73.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--239a8cc4-5907-4024-a315-b9522ddf4abc", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.97.206.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70799c7-3297-4029-adb9-e4a5233a5526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.16.215.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ab364d-ca54-47c5-82fe-5cf600d500fa", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.182.252.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bfb1aa9-e357-4a44-a90b-28a166c3205f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.125.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba6cff0-7816-4ca3-b3f0-ff59b5d69a2c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.2.114.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7cf6391-ca85-4cd6-9d0b-ce4dbd3cee56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.205.209.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e93239-fcde-408b-a7cb-2a27f3e89413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.25.68.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eabfb2d-4f02-43e2-9e7f-d7840189ff2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.25.69.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517c766a-f7a6-4645-97bf-e9e0c3cc650a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.28.47.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5f3fb1-1391-4414-8f63-95baf19c6003", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.140.47.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c13bf347-b4bd-4c37-8c1f-ad73d79de2b3", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.184.13.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9353470a-8112-43e9-beb2-faefc298b1ae", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.220.235.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501d7575-a3a1-42dc-8b1c-fa2433eeec4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.133.62.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18b226c-6176-45f5-b1a9-8257da6efa4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.169.24.183']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d11c42aa-e1aa-40ac-90e9-87a9718d4227", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.131.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c1750e-d3ae-406d-aea6-c14e30f50893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.140.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96de4c82-8d15-4bfa-9cb4-9a391edde282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.147.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7001a1ab-70c8-4a59-ad90-b2b7643886c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.169.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f02534-e885-476b-8ab2-e3492c9e7867", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.173.38.229']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d264164-80d6-46c5-b676-cb16ac3328cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.142.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c65358-c370-4c8b-aec0-a2ee11ec5458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.90.214']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb6c5492-9a48-49b0-a709-268a6d652cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.90.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc2b27b-638d-42e7-91c6-42faabbac345", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.219.135.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac8fd6e-14aa-4168-96c6-acb9b8a5217d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ffbb4f-19b0-4511-a0ce-6a174e79e63a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fcc8238-aa24-4a47-b27a-86e905b69fb5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6842a202-64c3-4d0f-9fb1-d1c69af4f9a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.125.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a688683-b66a-45fd-adda-558d59776006", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.126.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a746325a-b6c0-4556-a46e-fd7f5d37f389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.34.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba972e2e-0dc1-4988-9cf9-cf1461ada0f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.56.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4da8cb-630a-4c09-a7ba-1b02dc30d5cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.74.178']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56caec2-86df-46f9-b809-b5601372b06d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.105.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126b9ec7-a35b-434a-8fd7-ad8179b17e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.118.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d158439d-edfb-4c1a-b2e4-5def4ea69a08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.126.224']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05681fd3-0d3a-4d4e-ac7d-22791a2a95ad", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.86.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8fbec7-86cd-4442-8371-e017a1c0b2ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.122.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c906b0c9-3c14-4d65-ac4f-66b165c6dd85", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.143.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77fe226d-5f22-4733-95e8-0f39eca4bf47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.146.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a00358-051a-42ae-a5eb-ec9158dd90a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.8.55']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6779d791-d139-4f2f-a5bf-f52a98c01959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.134.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf7219c-8769-4725-942e-684743fe386b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.148.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed38289-5152-494f-bffa-d3ab4063f101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.161.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b59c80a-4cdf-40fd-8d15-f3e24440920a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.214.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9429f3bd-981d-457a-9079-02b8849e2c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.217.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd06763-49ad-4f4b-9885-960c70788afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03144e98-37e8-4952-bc10-f15179992f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e54927-f495-4f00-bc5e-f3adc9efb84e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f3d5add-1b54-4a83-8101-f5036327e80d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.107']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba00f1f-e684-43d0-9903-0ee48c926ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.111']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb8036b-4f25-4700-adca-c9c94cfb8f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb9cb0b-f1fa-403f-bda5-ff17ca71f7ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e226919-cef4-4d97-8721-b8086dfa71c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2852d0a-fbe5-44c9-9d60-6351879927af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.119']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa467515-64f0-4210-a864-4f5e0f175f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b01baa30-ecb4-46ba-a060-77b7ec0c7e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fddd39cc-afaf-4b12-b844-2b65fe78b046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7dfa0a7-a2dd-41fb-9614-87cc9149e2cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da631f6-9db5-44b1-a723-d464dd09eaeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.129']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2cac5ef-19b5-4f53-9c03-978094d67696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6747a253-99c7-47a4-821d-f9be55de52a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf687fea-c396-44ae-82e7-f18e9d844707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b1bad5a-0567-45d1-9030-8c7c6f8116b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7e8438-0904-45b9-b1a5-a67fa8703aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73cd152-1f01-43bf-ae98-27d48db2c3fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3b7a16-3aad-4cc5-ac52-58526d59ad11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08583cf2-3ca1-4110-879b-fab40296f8e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.144']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7451d969-f8d8-4aad-a456-2366de94ecc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.145']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5298c2ff-8a5a-4a4c-8d75-b3514f820b94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86fc83c9-5b06-41ec-a3e3-f0799aa8d93e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83db3ac5-19ab-4262-ae98-049d52d1aba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f70e46b-aa2f-42d5-a056-db00ef4adf66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.150']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0747b1dc-ce4f-45ff-8af4-6e03c0197fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7241a56-2505-40dd-bd6c-63124ec46864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.153']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2032da65-177a-47f8-a0d7-ce37e2e8303d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.154']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6da4203-99f1-49e9-bf85-4faf5c065507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c7cfc4-48b1-4017-ae3c-e28900a2a4e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--492d36ed-4650-46b8-96a8-08ed19e7bf07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a317b61c-9796-450f-b8eb-42b9a1ff19ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.165']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eed7dc4-fa54-4ab0-a1c8-5f2596344af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09cc345e-552a-42a5-b11a-c61686327498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2737d5d-ea1c-4f88-8413-29775e4d8835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2593e7-0228-4905-a18c-05ed01244c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e7a157-70c7-466d-acc3-8df6ee0daf1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.175']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1afeed21-7bcc-469d-a6e1-4d9745fa89db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.176']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db4b7d8-73dc-47e1-8117-49dbb362f7a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65354c56-c8db-4889-b748-50422ed0919c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ac71e7-47b7-4e77-b7e9-ce24081103f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.181']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d5c9cf-e360-4f0d-a7dd-49b2a632d9a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe42aa5a-6099-4962-87bc-25c2bf58c671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c736c8-aa3a-45b0-bb25-6816be052d8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.185']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c95a34e2-345d-4179-b26a-a5b8492dba42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--845ff12d-b74a-4233-a5c7-1e8476bd195a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a8361c-0142-4f3d-b472-7c8096c82101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc182e4-5ed6-4d18-8092-5efd9ffc23a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d88a3097-e930-4f2b-8298-a842d55a6500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b0e6be-6e12-4d6b-ad44-2f2b2b9a9aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dccbe97-4865-45bf-b9b3-774897d5e0df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e989793e-12a4-488b-a154-d6d21d69763c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f26a22c-6125-4e9b-aa3e-5481c3a97c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cfb179e-63ac-4edd-9ae3-231780f3c5d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29c5fc86-cceb-472a-b017-9e22b9b86831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f80a7cc-3e5c-41ef-bd6d-6d77fff65987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3eb713-c6d8-4b83-9d70-d2c851faf2b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.216']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa5b3adf-f4f7-46cc-ac88-62e0fc5881ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f7b420-7c48-46ad-ab83-5165da29d554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a723b707-0e89-416b-9c40-74a01082c76b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--834a6190-0999-453d-a977-252ca59fa95a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f28200a-afa8-45e4-8f43-50443dd02ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--853fe05e-bd53-4ee4-9dd0-f6625ffdf26f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b30d8fb-71a4-47e9-a001-2d4f0bfec0a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a546f39-54c3-4472-978d-ec192f81ba98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42844c04-399f-4a29-a3d5-ba0d829f5cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561c1187-7567-46cc-bd3e-bbcb33a6ea37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16fc0fd-f034-4b2c-a77b-8bdcc695e7e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8da4934c-c12f-4d12-a21e-043839bc1136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebac3fde-c4a2-4155-a8ee-afe2d8c725a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.46']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c01db9-9221-4893-893f-bf341963cf97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0376a54-0f85-42d4-920a-201d10051deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.48']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097c620f-6c54-4cd7-bf00-7305ab938d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.49']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b400b347-02c1-44bb-b956-4e6b9c9edafb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bb5d7b6-f8ce-4596-bbb8-abcffca1c29a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a0d4d40-eecc-4c95-93cf-0db07b439368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d36cccd-af45-4393-8f38-d16182dba6cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.59']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c854da4a-0305-4f20-8cad-818288d2e1a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eecbc73-64d1-4440-b3cf-e7e1b5fe4db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24cf5537-a497-4e73-b427-4da610820f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0364a0d9-f386-4acf-84e4-5baab898535f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.63']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab8a3eba-9717-49a7-a6fd-f91b3d536b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f922a7-fd4e-45de-959f-141dcc7f4a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb0516b-1d73-4cec-a03e-058f2cac0fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7204af0a-cdf4-4be5-a017-46094e84ad21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e5d28c-611d-49d9-8e78-c6dc2ed53131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba40a6d3-b38f-44bc-b367-8f6931fa7708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be01a39e-9033-42dc-81fa-7048db57cf6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.76']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--009921eb-9439-44ab-a9f9-25397fbc9bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b3d5acb-401c-41fa-8fbc-87d391acc329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.79']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351d0ae2-1f87-4857-9985-3ef7fb70d843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d8548a-8b16-4e3f-8d19-81ac913d521e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db37538-9dc9-4734-8e31-d36ffe7d12f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d269488-70df-444d-9d6a-02f68b833222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.89']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33269758-e303-4bf1-9039-f67b5699e735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eda1f15-f62d-4229-90f4-ac4cb8d19590", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a4c274-2a31-4dc3-8261-264bbe921dcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e99a62-6dd5-4b93-b18c-17ef688469dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--630e3331-e85e-4df6-ad70-009bf560b0be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe11f35c-7da5-4791-92d0-19e3df1d822c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311c8e05-d3ff-4059-bade-08372fe703ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--533bc49f-d706-4714-8eb5-f777af6bb741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f306c4-359b-456d-b660-2b5caf5b24a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--100336e7-a17e-42c7-8fb7-2a377f747b34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4baba5-aa6b-4e7c-9717-36fd4bf9e8be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.111']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad41f4a-4441-4fe8-8feb-ce5ef2372d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04cbb66-3b1e-466e-856f-904947a44a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac24e96-a29a-4491-800a-e0366ed4a12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba09518d-c500-450d-8656-2c5890313594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689b0103-d86d-4e2e-9ad0-69a8d125cbf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.125']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2acd8f2-7e7c-44a9-89b1-16771687b3de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede3a2fc-0211-463a-bc27-efc6d659946a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.129']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41efe1be-3fb1-4157-8197-1f447b5fe104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--231d4e99-b401-4c21-90b0-a68626a311ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0995ff74-6036-4c6c-b085-8cc92ba92303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad45d2d-6f00-4a7f-8be5-5b552a3c500f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.135']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328260fc-9e44-44c3-84d8-e55cba5f798c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1088d84-7130-4adf-a883-93854413dfff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0079e32-76db-4953-9c47-f163acdf55cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96014faa-752e-4f42-982c-7de6df2c081d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba2e8701-90c7-478e-8521-7509fb91eb29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f03e43df-4489-49f6-bfa6-1fa5b71b0a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97698e0c-a34b-49b1-8d22-3b5014b759a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.171']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee64ff7-dd31-4b57-b8a3-51da7decd3cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.175']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0166e74e-7f2d-4862-81ab-791bd542f932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c6ba30-aa87-4f1e-aaa3-5415117aa685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae04eb8-a16c-4153-8b96-304fa5552d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096e92bc-1723-424b-a5a7-eb254d051979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ac4f64-2af2-4a8a-be20-8e061f3239b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.199']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7042360d-3017-4483-aaa0-ed871edb98bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e79ecff-d50c-4bd5-872b-a5f33778a8cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec236b16-fde7-4269-83ac-6b61ca616ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc0dc49-cb4b-4283-ad60-ad0132801a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f126803-134c-4f1e-8b15-8b8f0ef94be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a2a850-87c1-4dc4-aeab-122cc6d111c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b889e7ea-ee93-466e-bfb9-23aaa5a1833f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc4d0be-d1a3-4b20-a075-f88c5854b72c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656710df-7dea-4792-9273-c47fc14a0720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.216']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61826bde-13aa-43f0-af44-c569603eae59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0443e76-530c-44e3-bd93-237ccec91fe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3d9a5c7-eec9-4eb1-bcff-cd3beb466ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408a7eb8-3e9c-41bf-bc97-360b24a50f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7765c88-3f9a-467a-9bd5-252b6e4706a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56e49d2-7a4d-4b1d-a4fa-6cc6e8e384b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.240']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e82774-5348-4968-b830-28d18f660ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a7c372-264e-4339-9a99-bc6adeed9ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f60826-6536-4a9d-8756-cb88a945a90d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9202674a-29c1-49b4-a37f-b387c2f06939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.32']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0348707a-34a7-4d56-a0b4-1bf947e79265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1906ea5a-423b-4df0-afb1-2180a3c40bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef130e2-0221-4906-9a8f-27d3a537679c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733ca630-3ba5-4802-8cf8-038bf299e61d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fff1891-2016-45d7-81c7-16e85d834af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200087ae-ce77-417c-a2a1-81f017f0bafd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9799acab-171f-44db-bada-4200aeb347c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.48']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--864f1e33-b43e-44d6-af85-954ce7442823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.49']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa32dec-a080-4d84-8f2c-5799a3f31b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc875393-c5c7-492f-9ea2-65cbfe2a1c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c62833-17ab-4607-951e-ab04b28d96e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.55']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a505f0-4937-45e3-af59-7d63cffce345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72127413-94e7-400f-a06e-43a5dd3146b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.59']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6eb8529-d9f2-4b07-aad9-b44dc58bec36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f96ca2-9517-45d7-8ad1-064575517431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c7fefc8-06f6-46d8-92ea-b8e6afa662d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eccf94ea-a722-467d-be10-f97d59049ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e420a0fc-5695-4bfe-bfcc-a24c364f29d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a069611-c770-4bea-9883-82ef1071399d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c72d31-a4b2-4eb1-a3f8-1609cbd5e27d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68bba437-0b90-4275-be8d-2a26fd29c874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bfef025-4b4f-42f7-9f35-4b81f13e4165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.76']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d7b89e-6c3c-42de-b3d2-daac10b64937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf0889a-87c0-4f5f-83b5-f40a69af22c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e9201b-3067-4106-8808-4ac9c9b64718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd71a43-6700-43de-9c2a-db1baff75c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--651d5f18-b1c5-4d25-9de7-e4e77e2b02cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86132b0c-2b94-4fc9-b789-2581c7a505c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b7ea585-6e15-4cc0-b9d9-5033506500f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb96924-ab3f-45db-a75c-214a1743b0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f7c23d-542f-4427-9f1d-7c20e4fa3e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.95']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb97221f-770a-40db-9d85-fb206781db93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.96']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8d40ba-e30b-4375-932b-da859beeb90a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf3a5af-1cdb-434b-a425-ac30198f9009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.111']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c23bba99-04d5-40e8-a9e7-28a3c275b314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.135']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d34c27f5-45bc-48ba-ad97-5eae9e4ff4ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96771a8f-fa87-4fbb-bef4-b6326ee80460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--170767e5-dad6-42f3-9757-c427c38f6060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5083c6b7-57f3-4a23-a80b-9a41d81d3c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6807ad4-8f98-4bcf-895c-104671c9901f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1901dc3-2a76-42fb-a5a5-5e096ae58923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b05655a0-dd1f-4730-be25-5fe65f1fe3f4", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d4c2c4-9643-4fd1-95a2-6c604746af04", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.145']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a4941e-12cb-48f4-88df-e38ce65877b3", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb1a7598-b230-4fc2-9aa0-6d798536ffb7", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381c659d-e9cf-4dc1-8400-187023cd8e94", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b36358c-7342-44c1-94bf-3750e605918e", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24621aa6-cfee-4a36-bdab-2cbc71485de3", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4137ef6-80f9-4ef4-b7b5-2ecee23c105e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5245349-6096-4abd-be3b-705716a02494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2d9a7c-dc18-4b31-b5ff-24b000678ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2651a171-b4ff-4abf-97d9-3ed28dc23f51", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42410c55-07a0-4e01-99df-35c676a0913b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.81']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021d5934-4cb5-4670-8df2-c41e74d3b8c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dcd6808-1406-417e-9b5d-aa7671b3651e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d7bef9-aa46-4cf4-851c-7553e716a51a", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.89']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a61fc7-0690-4cb6-b7e4-558578c35ddc", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--479b12b2-c6f8-4f5f-80d4-db211d4c9711", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33edb46f-ff2b-48dd-874a-99b8afbdfd20", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.108.203.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d0ac7a-57e4-4da1-b2bd-760144e30dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e0dbe9-6311-4c19-bb86-037e700a7b36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198deba7-81bd-400a-a18d-41d4bf3b44a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da02f68-a4fa-46d7-9662-fe714cff95e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1a11c7-eb0b-4956-bff9-36fe7792689a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6c0cc2-49e8-4691-8659-ef939dc795e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d250c8-d92e-4bf0-94c0-64f32cdcc5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.111']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a89b44-6927-4550-870d-1bc4e47a15a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3448eb4f-0f2b-4872-a4d2-f8d3917ccfa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be2901a-d5eb-48b6-89eb-8b146d3711ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762e4e52-8bf5-41df-b409-817b94a84aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466bca97-9ab5-442e-8f76-dbbe5e8c0640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f571c64-5c69-4a8d-a674-12f2657b80a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c889731-9424-469b-979c-b1c21c5fa3c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061e6fc5-7d78-4fbf-a197-19c7670b24fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e5d7cb-a66a-4145-a701-62e85c287d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be90d130-ab74-4648-9335-110f622fa751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f67bd36c-25a1-4684-b053-b68b1d3fdd9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956ef5f3-68c0-4f50-8ace-b594f3310186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4abbc23-50ea-49cf-a924-8c76649ac223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.144']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a9f732-99cc-48ef-b994-caff15a51c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.145']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ecaa1e-0997-4149-a4a6-543428cde6dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a08f78-ad4c-465d-91b7-1c0f173c4d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e432bf2-b467-43ff-ba88-ae7860712247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec86027-072d-44b6-b82c-a666e91a4fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeaab098-0933-45a5-8e91-7d35c8d801e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2eac619-be3e-4a96-b52e-f009244c32de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.154']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b35807-e12a-4697-9b48-9dba15d08c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5e5c55-ad58-4cef-a3a9-5f4589978137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38da150b-dba7-4295-86b9-ddc706f4edf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a8df00-edc3-453c-9d8d-5d05b43b3de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.158']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c18376-08b7-4acf-8e40-2279553267f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.161']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfc8138-a3bd-4fcd-82fe-09e6136b63fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b70670-7632-464b-ad7e-bef48e7ab56d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c901b5a-ffb8-4485-bc21-69d9750b266e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.165']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564ff224-ab93-410f-8517-93019b2ae3d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b89ab6e5-4c7e-4e5e-97c2-5bbfa85c3a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ff825f-dadf-43ac-a6d8-f49d509d0890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ecd0c3-18cc-4d23-b1c6-14a89316bf49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c67fc8d-a07f-4ab8-b2c8-e0f59e64f5e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.171']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4152c53a-c934-49d0-8e89-de8f84b0515e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66fef9ed-eb65-47d1-8f41-b80e58b0684e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.175']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e30682-7452-4af9-8ac1-1fd368f8d512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.176']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d2d306-1e96-46e0-a6c1-1f7e8bd0b520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150f54a7-0e79-414d-adf7-913e2216a308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ba1165-53a7-4a88-bd1d-18b8f63f5235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90668bbc-67cd-4ff1-a459-83c4fdd16949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.185']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e594bb4d-9081-4335-bcee-4ad2cc59c046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4f94a5-5d41-4a4b-a23d-aaac1139d5c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30a5ef5-49c8-42de-983e-6580394c777b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee87f5b-d8e0-4057-b73e-a755be1d2d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.190']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9cfcfa-ddc5-40fb-a69f-d79f347d0866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb5ca8b-f460-4afa-b6b1-b07e445db42b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7762b33-5847-46eb-b663-98f7825577c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2491791c-bef3-4ecd-8409-33a028f68947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c4d5ff-a27f-43ce-b619-6ed0a7bead25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.197']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8926deb-7eea-4b14-8440-316c27133adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713c5555-a59f-4916-af61-ca82017c5155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.199']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c92fb64-1f8e-44a3-a68e-177f08a7acca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44d5f82-03ec-4655-ad2e-17ef2a3f1be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f6632d-622b-4b2d-b808-e9b5099501a3", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8259b53-1225-4852-a507-4994d9011538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.203']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286fb88b-b584-417e-b940-f687755ed239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f219722a-a222-4b7e-b98d-617aadcc39f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e50d97-1a31-4230-81fe-e2245a157613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1beaf1c0-777e-4684-9757-f293760f886b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d9c6aa-5f26-4b58-808a-d391568e68cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa30b956-2711-4ec0-ad95-eaa05630dd40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c027ac9a-1da9-4565-8b52-eb924fe7fcba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87bcf293-4d3a-4fe5-80fb-179d65fafc4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d78d2fa-6fd4-4f5c-8dc3-2d7693fbc607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3458f8-d71e-48da-959f-5731bf3bd9de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.222']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e539c6c-ace0-4388-bbb5-850938f5315b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fbe25c1-8093-443c-80ff-9224c5ace39e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.224']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26bd0bcd-d15c-4313-8c59-61e150776d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4c1b95-b500-41a6-a6c5-8d1bf92b59b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfca4845-a54c-412b-b932-48a62957aa6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a4e0cb-8817-4059-a71d-6d91bec5311b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--732b1b34-ecd4-4323-b035-ebbe84fb400f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a323a533-56d1-4b1e-b47a-2a2b9ecf28cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4519f1a4-cc71-4629-9bea-22a901abd47e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.240']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3651ad5f-1757-4062-a3c9-727af43b4b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7293d29-294f-4f00-a286-749daee6010e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b2c68c-09e4-4804-b84d-1f7a6488f897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12113279-e524-4263-be2e-a6bf59698a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb7134a-ba9c-4368-acb4-abd1fa7b3b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b92118-fac1-4c67-ba37-48238033834e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.48']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd531bb-c51c-4afd-aa74-057e3ff359d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5b29d7-3a40-41a5-9312-e3d141e2f7c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.55']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03927f51-03df-46bf-9582-187637dcaff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5425743f-c941-4af9-82dd-85cc23fbcfc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b3ee4b-cefc-405b-b43b-6265b6e99a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee05968-ff43-4afd-bfc2-f4659ad04a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0568a809-703a-41de-9416-520f9a1e9a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8759e3c3-f7e8-4d74-8e65-514c5cdc4ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97d3430-fb19-40c7-8575-c46b56b11912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1c29763-71d6-4e0d-80b9-a95e3666b985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.81']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c77062-c7b2-4c2c-a3a1-603e889a1fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d234e3-c800-432d-9cae-eb47f4e2e8b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.84']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beecbb32-b1e4-42a6-a6ff-9f2c3225b8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f123e8ea-0d23-42ff-8453-3045838c9a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a809eb52-3408-4b8c-8361-b9b7495a87a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba1d91f-8227-4504-9886-4a8993221c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.96']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243801e0-80e6-45cc-87d8-67e0917942ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cd13c20-e075-40c1-8d35-78b4a7d79134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220d46f4-7277-49b2-9670-ee4e2a1cdfef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b5d11a-e128-4f4d-880b-bd71cf763cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0264718d-e985-4584-8967-271a0f15ef0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd2ea77-327a-4627-9464-14d451d56927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb89085-b883-4cfd-b0ed-e6523a9d6ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.107']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a9703c0-83b1-4e57-aadd-27928aafab76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e45c1b-a7dd-490c-8d42-87bafb8f9b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8c8058-79a8-4cf1-b388-2571d7e35d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--022962e2-be7d-4d05-89cd-3d4a6864bd04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a7902d-dbe7-45f1-b485-b3b61ffb40e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8aefafa-69b3-429f-a3e1-a3e3a18974eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c871f25e-7097-4877-a7c5-015266577ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21bda7cb-9a64-4511-9236-4493d3b52b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.119']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972f3efb-ede6-4c9c-a7a1-88619a6f4c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.120']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c32e191-77e4-4152-94db-61876134ce3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5787be49-6c9b-4f85-a19d-59eaf520dce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e37aff-e391-43d2-b6a4-67a64f6ae415", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60cdf26e-ab48-4971-a103-22ca36758f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce4f968-e85f-4ae8-8326-1a0114cd8e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4ea2c1-df0f-46b5-99ae-cd4b48aa7cf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74ef8e8-afce-480e-a631-7baab3e9250d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7fa3493-ad46-4f5b-b39a-eea108ce0d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c909b3-ce6e-4884-87b3-e647cc0e9082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f342c1-cb1f-43f4-bbd5-b7ee39e53c4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.79']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a659463c-a603-473f-8ee5-177b90a19a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3975ae75-f3b7-499f-b5a8-2f04368d51b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.81']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--620a6a45-cfe8-40da-8fe5-a3f445d1bc7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99e281b-cb7e-47f0-b826-fbd76e5f3271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135664a9-238e-4b42-9f32-5b979c9607c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4b42c0-febc-45fb-b253-932656762544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e63150-bfe6-4b13-9c50-2b6205980b33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8954b536-f190-4ef3-a779-6e0cf3abc31c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582c35a3-425e-4a66-bf84-6eff38356c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da6b117-bbdb-4379-905c-5c7a600682bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.96']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d54ff986-997f-46b7-a84f-2a4310673c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a703c30-6f3c-4a53-8642-fcbf1aec3828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1059b06-3f37-4e44-9009-7f1ac9b6a8ac", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.87.7.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3087511a-18ea-4fc6-ae93-7c437494f4ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968eac2e-f1ed-4a4c-99f7-47f0c718de96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d54010c9-39aa-4bd8-baa5-9ffb85de7468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.111']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc80e154-bb97-4e77-a321-0f7f556de938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc3d453-43c1-4cf6-9910-792efee073ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98b90dc-e161-4d72-8d6f-dbafd1796b51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f402c9-31d7-485b-be4f-67ae779aeccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315b4dee-0ce3-4bb0-90c4-1d3de3706d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287054b9-2e96-4cb2-bcc7-b2aae1d38c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e681082-aa87-4f0d-8cd7-4574aa13a40d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010684d1-af85-4e1e-9494-017ac80f5814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.119']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53065999-c6ca-44f7-9631-670ee5b127cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.120']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3d6434-2495-4e0b-acae-6e860c8814de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2d557c-73fb-4731-8579-1117f2b0341f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc24b10a-fab6-45cd-ae33-c041cd667e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e121e2d9-c87e-4346-a35a-8f945bbc6559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21cd2197-a6c6-4c66-95ee-52d1ea6821e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da6b484-d55e-49da-a848-822f6c9f9d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78732d2-c85c-4eb0-aba5-23a2cfa5d324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc1bdb8-549f-4379-a182-8c769912d43d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c813ae28-9599-4289-969b-f071bcce13a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f43f92-065d-4920-946b-34dcffc6bc42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04bd028d-d44f-4f72-ba48-1a3b7516f721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--793d7bbc-131a-4f54-b12e-7f7da7bf6a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a509c220-515a-4b8e-9a74-0b5e7d687952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.144']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb5d631-aaad-4957-af88-910f41ff7d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.145']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2237b5-b7ae-4ac2-806b-3936068094a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc18bf8d-6803-46a4-b47a-2575b250d218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a7f3fe-3539-4765-aca6-6d878383a880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5182a3-0fe4-49d0-ae90-4ba5d31a5462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e63148-43e8-437b-873c-6e6e52619de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e18e7571-c504-497d-a7cf-b8369d18ee24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--562a2977-a2ee-4eea-a0cf-171918671b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca4925f-5947-498d-ac2e-7e4caf510677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.153']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be5293df-2065-4c90-bb36-1a70ecfc31ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.154']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13fefa2c-499d-4619-957f-bebe8b5bd318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eeb8062-7e7f-4cb7-ba63-19b9c3af6d06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bbe42fd-3740-4860-b550-1aac607de8ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9837277-b5b9-4791-be69-db80fbadc2a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf0befa-f05b-4300-b5b5-d9f22ac50d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef14dccc-b33b-4cdf-be81-0eeb2f9eef4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a45a78-b7e0-4794-9b24-642e2a013108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2d7a01-47d8-4ce5-b1d3-f53f2143b932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84fe7463-8c12-45a0-9c57-895880d611ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.183']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80fb495a-c9a1-4161-8e5d-ed50536e5904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86469c7-ddf6-41c6-840a-deb110800b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8043f456-bacd-4420-8a7a-86e1a303fbdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.199']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a17f6c5-e9e8-4c9e-9be5-3c7218e1cfaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0baa0294-af35-4e8c-9fc6-3cfc69f7784f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe4457a-4ccc-4acb-babc-b84a7b4ad6ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4716ce77-9ba4-4dcf-95ee-c48432e9f4f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d917058-9a8d-4428-a470-8144c321130e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.225']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8cc1167-029a-4cdc-9487-c4e5161ce954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c47bc7-0228-43b6-b547-250b80364ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508c1600-c687-404c-9381-518720beb4c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd703e0a-1122-4294-8822-ca6817737628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5cbc43d-63ce-423e-8787-a51f0ee21b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eefe27a8-9bfa-448e-8d45-ecb6463549e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee3935e6-c5d2-4884-9eb5-60c4289e056b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf76797-5568-42f0-8f3c-5ce72b930c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8c8d459-042b-47d1-9d8a-902e78b7acd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ac3ed8-7195-48ec-adf3-8c1965c7b4e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e25b9cf3-c1a0-4723-8fa4-7d015ad83cbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de304926-aa84-410e-aebf-b061d6d06b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b14505a-d930-404d-81b5-3a6d28f53d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541ccc7e-35b8-4427-91c9-a451cae1f21d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ea5a39-775a-4843-844c-1861dead5555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a912fa84-ce00-4ced-98b3-6696dd5edbdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86faeda5-f44b-4a0b-a575-ef035b78ff72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16c32ba-97e8-4764-8334-43588bcaf97b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b70399-108c-4d2a-a192-68f607b08e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0cb2ae-0225-4172-a3a3-e9cad28b4e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1178ccc2-736c-4a10-96ae-516f6e263fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f894eb54-a9f5-4aba-88c7-4175e6126f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2cc0086-95ec-4af5-8ad0-0fbb4ae00830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee23653-19e0-4001-b698-4b0f3be299cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c86e3c4-1a78-4a9b-a11d-ff277e182fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3a4259-7358-456d-bbd7-63a3c3f838be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3069d94c-b698-46ef-a02f-27775e207db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b6a2b8-4a49-435b-aa0b-2ab3398d1366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e080e2c-d4d0-4e47-80db-271962592c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798d389d-a42c-4fec-b046-76833a34ee20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b996f217-daf3-4da5-916d-7784fbc460fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb251f38-6e61-41f0-ae52-f50be81bf3d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a592d3ef-78d6-44cf-9e41-0c42512ae934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.163']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7836ed9-cd2e-44f0-9e24-c020be04e94c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43757390-f13a-4870-92b0-8ac3a1cf109e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.181']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a1263a-5b65-49c4-b84f-5991111e5085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.185']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--613c935d-b5df-4aea-8a79-3fadba38fa3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be81a38-7a59-4fe0-9c08-0da1d2a212dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20660ef6-940f-4017-ac8c-628301fccb25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.197']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca31649-c5dc-4fee-a51d-46345d52637c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--394d34a9-7c79-4979-82ef-29685e39b2c8", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d53c395-1131-432a-a6fc-b898ed070867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--981dfc30-8beb-4300-b315-2016face9ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f559cc7e-7142-4d84-a368-4a009e048f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e77f935-9a8e-4ea5-b820-e1d0a6b56e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c46fb8b9-5a67-4ce5-a0ec-8d1831106d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fab87c3-4b84-4ae4-a4e0-22ed34fcf26f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8c0725-5737-4cf3-aea4-a799b1bb9a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.214']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfe0e60-d485-4506-a4cf-58aa74e64a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448027cb-364d-4710-9e81-606ec1fc9852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de20f23d-3027-45c7-89db-c6d4f95656f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5084fc-24d1-438d-9e29-b8c48bef7e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb14fb66-c745-44f4-95ee-9bf6373a6aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7462d60b-14f4-4285-b9ce-29ca004c2f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ce5feb-a530-44f5-a17f-1a748246aebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ed8f3b-1544-42bd-a604-123a63bbc8a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3123bd57-96e6-4df1-85ef-ce3453896709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df4bbd2-d572-4b16-b338-d5a212fe3704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd8980f-488d-4012-a055-a4d5fe07b0e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.225']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb9577ff-89e4-47db-b593-39b97981f9c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2e03b6-6ee6-4b41-90bd-05e3ba7432a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4744d404-fd10-40c8-9b5e-8207cead86fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.228']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87649ba6-8412-44aa-8561-6ba9c4029877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.229']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b33b380-f373-4c60-871f-548a697708e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ff5fcc-c033-4d80-9bcb-cdc22071c0f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d44750-84d8-40e1-a12d-ea8a455d5294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54caebd1-47b6-4d78-ae77-2ad3f80dfd45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c950580-720b-41fe-9915-4d4bb6b6248f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0fcfad-ed33-4024-98e6-d83caad786f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f8dae6-0deb-43d9-a2e5-d0cce9cf6989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e378968-b7d0-44df-8b9d-6059c50ce77b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5eda184-611b-4ba8-924b-b9a9f509bf73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c820e54-5c53-4187-8017-0f830a641e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--870bbcef-c288-4941-96f1-39d165be3c41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e01b1f-c47f-46e7-9aac-52349fb33aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aabfc832-6baf-4067-a5c1-9592b663d04c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f94f72e7-3783-42c0-ac24-68f998166315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a60af8-fdec-470d-b6c0-29848deafe89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab6288c-6733-4a15-b585-b2f035685108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ce84e9-9775-423a-b93f-b66e706c4075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052b75be-31b0-450d-8f8b-c4695980ee58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.248']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0dea444-0d60-486d-b72b-4ba47ce18526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.249']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc43b9dd-45ca-44a8-b3da-e4ddead6b029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b934ca83-849d-4f8a-84e5-14ebbf85abb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a91717-7db2-4fc2-bf5d-790bee1b75da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--356941f0-6bea-4214-beed-e1b47c5ac619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3225fb-5461-40b6-af69-955ff3e0b747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f9eb6a-8e65-4a14-bd1e-03332a27034a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f73982f-aa5a-4237-b337-3a74ce316258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70927c23-2a27-4ca3-ad5f-d6fced291376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226c93fa-b25b-4c7e-91bb-f0021c718808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.109']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56cc0f29-3745-4e3c-b6bb-c80a3ec83153", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ba02efe-c55f-41a8-a2b7-90da349f1bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f88f349-a37a-42ab-a156-b0d56189814c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--206c61ae-8186-4ef9-ad8b-0692eea1cf71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd218b15-f859-4413-aea6-5bd86fc89ec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.144']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46111af7-5f76-4ca0-b003-12d60ffceb6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5946a8d8-6392-422a-9b1e-cb7008968d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5769a5-ad60-45fb-a9ec-e41711ed4f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e2066cc-9a32-4d48-b9d2-ea1b8b4d2c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.153']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f33faf8-6821-4ee1-8f4e-86417fc18a6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d06148-66e6-471c-a546-5d35c0aaad8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9365859-c5d4-40dd-acf7-d909839750ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a50ec7-c246-404b-a558-d93b1b9d750a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473c35af-aa1f-4ed8-ad98-33acf8ae9269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80cc0aac-5271-4a59-a98c-38f1fb730e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53d078e-f1fc-40d3-aff0-011b432d16b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98af0286-878e-47ad-825f-40d2ef91652f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3407b511-850f-4387-b9cc-feedb7313bf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75568c9-1902-4262-b97d-e8cacc48b1f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--599839a5-f587-4959-a6a6-9cf09beac5c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13645cf9-fa2a-4d7f-a3b8-28b84af1d55a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c78664-aa33-4e40-b44f-f37819678d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13bd106b-2f9f-4dec-ab42-93fcd2f34e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5ef130-6de0-4bec-b0f1-b759b521ef06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960aa6c9-97ee-430e-b0bd-28a73e6c80b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc9b36c7-7069-482a-bca2-a870860206c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79798939-3b02-49a7-ad1b-2ff5656e83be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2045ef0c-9115-4398-9b54-b683c7a3eb09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97cc439e-8ccf-40d3-b4e8-ee62aed89041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.48']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd4982b-5e6b-4af1-8432-4f410fee45dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.49']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12645ae-e3f9-4eed-88c0-fa769313212a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22251c4-bcd0-445a-9120-31c32c62325b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d515c637-eaf9-496f-93cf-9ff274f15da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2200bbc2-b733-403a-9355-7a363e11933d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f14b90-fe8f-4a00-bf10-81181531fb5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744098b7-cfc9-482f-8cb2-d9144f3e9b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd72a724-b96b-48c8-8d66-e7e2ffba1029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--389f9fe7-bcd1-4b22-a193-3aa558b1a334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b117295-3275-4722-90b1-f881cfa9a541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.95']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5c4bc0-4894-4511-8dad-ba5e8d991db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc2d2d02-9764-4ef8-9f48-3fe14a801704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba74fbd5-3fc2-431a-bfd8-4ac261a2d18d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e33676a0-2825-4f74-9342-abc6bd0fe514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61eba49-1c4e-484f-8c55-a5aa028639ea", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f26c96f2-d2ba-42c1-ad8b-530124c62123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74863ffa-dcfc-4d7a-a943-fd7cd9ab30a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097da6a5-73d4-4960-b2dc-d0cb3fa7a741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8bae4e4-1318-4efc-9553-03294aa95a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0875a1aa-054d-4125-9367-05b7ac73cfe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fd4422e-9a66-4280-b25b-9d03a57abf28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5958b4-2a1c-4193-86e4-5d596db42dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d15f089-7a10-4070-88db-7a7eb354b5b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e7c1d7-46a4-4e6c-8adc-8638c6324326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25733a30-17cb-4a8a-b94c-de234e818a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e5cb82-4b69-426c-92c6-95382937795a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6096f9cc-b9ae-4f08-831f-b769156281db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d83c419-8995-4208-a83d-67b9caa3fa0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5166387-bd91-491f-963e-3f671a8892fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22448361-259e-40eb-9dea-783d80d326bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde24732-20f1-4322-a53f-73f5a0436ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b651a9d-57c3-4e0c-adde-e9d1e305cc27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a95a8e-4461-4899-b0ab-8307e75a84fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7165f1-1649-4f25-94f5-1bf0a60402f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce9c601-4633-4ed1-ab84-7aa773efc378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.150.198.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4402326b-3f95-4bef-86be-887ed7ecada2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.209.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--172421ab-1a6e-42b0-8995-a5561ec66302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.209.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b32ceca-c33c-4b5d-a653-8902ac703a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.210.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--515650d2-6aa4-4bee-abc2-20fe3570f716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.210.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084007e8-3034-4ed1-98d8-2f5a6daf32be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.211.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0254ea3-c1b1-4152-ac9e-84aa70008d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.211.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2e2ef0-eff4-41ef-87bf-f6820573bcd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.211.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b4863bb-978c-47c3-a41f-ee5b269c45db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.213.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00afcdae-654e-474b-aa05-80deefbfb730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb50497c-dce2-4471-a213-77f6e4f18a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.179.10.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a70a86-ce15-4944-a872-28d9d8b1b8bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.37.214']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226b9291-d943-437f-a0cf-d98c3ac1ea0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.38.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2172d8d6-2707-476f-9886-a25e3b606282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8577933e-5d1f-44e4-9db7-6710850706c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a312957c-af69-4efa-98c7-f9f1632522c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de91b0f-6943-4f3d-a9a1-9fb3a9efae53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.42.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69246dc-8cc9-4247-83ca-4f250b9052b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.42.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a257c005-5819-4171-80be-dae003c0f242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.47.163']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd623a49-04aa-470a-b93b-a7f1cf11b5af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.192.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f86603ee-6740-4e77-b398-17f1b7598ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5edd4104-efd0-4d4b-83ef-66adca9f8716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.219.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e5a669-05e2-4b00-920a-1a2082bd34e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.223.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea3a33c-ddcf-435b-88fb-c0a56e4aac8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.119']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7502265f-aa2d-4086-8595-810b78f2ce76", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.69.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113ac2b2-4b1b-4082-b7d4-9c4f4579d38f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.93.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12065c57-501a-4c07-9abe-c1008466b37d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.42.95.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34eac6cd-ba3a-4fd8-8e2c-b040d8c761e4", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.78.40.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c7f59e7-099d-4fdd-bddf-7ee31ff720ad", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.78.40.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2502005a-c460-4f00-b23d-4870e961fe7c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.78.40.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e4ac5d-2ac8-436d-b9e4-2d6b5c0ff464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.220.180.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7513309-cb65-4c8b-b841-b4bc43c22859", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.231.24.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04e3ba1-1dda-40ba-aaf1-1463ff448571", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.241.132.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--800449e3-038d-41c7-87ae-ac05701d35b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.52.95.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ed2395-247a-4ed5-b73e-db73251a85c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.103.81']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b52da5-613a-4043-92a0-45f240e9376c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.105.175']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b33fcd4-617c-4b9f-91bd-150e2db175d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.124.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb95a455-6678-4d27-992a-cd19107945b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.140.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1bf3ecf-49f2-4276-b43e-3371b69eaea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.17.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df1b9c7-ab0b-40cc-adaa-735d15ae4e8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.193.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--138375d1-3c4d-4888-bb44-c7680de645d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.22.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60e674e-c396-4189-b1c1-fdbaea5a4f8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.229.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8862edcc-5088-4b4f-bcc0-42a5c36a73ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.25.199']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a5c23d6-956b-402d-87dc-ed65dff8b35d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.85.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531cd660-cccd-4436-b652-afb085a7028a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.67.95.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6062be8-7df1-4ddc-af12-f39aac014503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.192.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2332085a-9bb3-49e3-822a-348e33d8c38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.193.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48c69022-f888-4d4b-95a8-0634efc75c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.211.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2591c8c-50f9-4c91-b27a-7fd94d604bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.213.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf76f83-ab43-4ae8-adaa-4e3a4b080eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.213.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6edbba53-af65-412d-91b3-6af7f991d943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4ded60-17d4-4c93-ad66-fb7e22fb3130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.216.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f225972c-b04c-42af-8cb9-2f31fb75a512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.216.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d57e87e-282d-463e-a287-55a37cffff5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00175b9-df3c-4efd-8351-50a38add84cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--445e378a-f20d-42d6-9669-d89906ce0820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b752614c-6754-45ca-bf2c-fc6a17480547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19630e7f-7382-4a84-9995-5da1a6362dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9939b05c-aa69-4c17-8b5c-6e538ddaed86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91ef8ff-1720-413d-8775-62f685d17eac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7834bcd7-20c3-437b-800a-6a43d4c0c796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a81a10-ca66-444e-b650-ea4e60bac7bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b90505-fb4d-4497-98f3-32fe34ef3ac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.219.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e30288e-2e6f-4f39-aece-9258ac8e430e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.219.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021fd7c1-0c4c-42d5-97f6-f3c2bc7e7194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.221.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d4e15c-92fb-4eaa-9c32-89ecbe55b214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.221.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f085a14d-8024-4c7d-95b8-8cf7bf52f9a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.165.75.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3860dd03-5cfd-432a-b79a-95c6c51273f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751b598f-540c-4643-818c-02f58c75df89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733c6ca5-0943-4855-a510-9ca8f608d722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33d6be1-1297-419d-8391-49288839886a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2a66e83-c091-445b-be06-808283d9b8b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a265700-4596-45af-bc3d-c02c603b91bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f98717-96f0-4540-922f-dc7d03ca6eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6efdb90-c06b-4c45-a25a-bd9c94c0833b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.109']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c073c7-059f-4ac7-8d80-c3cfbe4ad8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c384e00-4eb2-4a25-969e-bc7128be100a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d595371-351e-4f26-b806-bd1da414aca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98794823-a778-4ecb-8e25-8e04a4907eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568b95be-4c8b-4669-b5a4-2bf91b65b007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.119']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f8d4978-af67-4c17-89b7-30449fbdbe65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ecae01c-ae2e-4870-9b85-8526b74f3d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3669958-4afa-4653-8992-0682e5c19160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a581d9a-d824-4174-b0c0-f8438247e77e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f44262da-b038-46a0-9738-41b7aa999456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.125']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e86d19-a51b-422b-a5fd-093e40f922f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3768171-589d-4b6f-ba85-96c8b69c8e44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f387a57-c56a-4def-89ca-d21d0f77d2ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7504c01-3f6a-4a3a-8d7a-aa50fbefd3fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c640a2f9-4d72-40a4-8da7-45ed074a6c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01af3445-f478-4e9a-8c25-56848efbf133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd489b9-e827-4547-9c25-efd12b8ad22c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.135']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7235b58e-0186-47db-8cc1-beaf76431637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef08a8e-1aff-4e6c-b822-0bf6046e09dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee6cf07-ea55-4bf9-90ca-d10a852287b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e619e2-8264-43c9-a69b-eba197942838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c330aeb-dc57-4b47-aac3-bc987c4a43b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77207828-e62e-4d87-ba77-6d1bd830b330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d53eee0-bf17-45c9-9fa5-cf06f7bbee33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e830b7-53fb-4d7a-a2ab-a44987e6fb0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.144']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f616c3ed-2ba1-441f-8fc3-20ce45347c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.145']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6119e0bc-ad22-4801-84e0-fe19c9432eab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c36cfd7-0dc0-4dd6-8e20-07df7bc84018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.147']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f54dfb2-a564-4039-a551-f3144d9aee0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f4549c7-69c4-4f6a-b691-273678969714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f6db0f-4583-4669-bf50-6603d969fdd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f6f81a-78fa-4f6f-b835-c38d8c2a6791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d56b80bc-01dc-4e7e-995b-6d32fc38f9a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.153']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8673ea5a-8063-4d5e-93cb-e27d3d29240b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895f0e41-ae01-4641-8ad9-baf39b37d22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32659209-c173-4f30-ad69-3699b53f0e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.159']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b35bbc51-5314-43e4-aef4-a974a0a1e99e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--191ebc01-271a-471f-9371-259ece5feab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.160']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5307d0d8-ec16-4c5c-ade8-1e6924291d29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.161']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7d3ca6-621b-416f-8433-8f1fb9302e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a643e4c5-a4a0-418e-821c-959d33a5d901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8cc2d98-d9dd-4ef4-a44f-155ef2d402cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5163b069-3d4a-4866-a2d6-b88dd3cf3547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9992d8a3-605c-479d-9ca5-dcc015f57dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c3a96c-d4de-4e62-9841-5f353da2f013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.171']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00bb657-9720-4122-9b4a-7301eb853954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27ff030-f7a4-4aa8-8e60-efe65627a5aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3716a4ee-b31b-4853-9ea7-81678e7b0e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.175']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a166af-addc-4d48-8621-a01cf85a78fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.176']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc26141f-60c1-40c3-8d50-8af6c1b0a5bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b38521-1346-453d-afcd-3a7ace30dc67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772dc25b-fffe-48dd-ac0f-a538f3d7579f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c39772-d708-42d4-bf41-308221e8e42e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.183']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50e4bbcf-6f5f-4fcb-b78f-ee814b11e63f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b1946b-2386-4ae9-bdef-f375a02301f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8ba44a-482e-454e-bc27-0537a556c93d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--664edc28-2e15-4a69-b07a-c1757c319573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87b1716-db3c-4376-a4e3-63ab8139db9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.190']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed748324-edf1-4bc8-bacf-621ee253d07c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee1cc8b-160e-4372-9546-85e98469a05c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dfe9baf-fcb2-4fc9-91fd-d720622c8532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc45c7e8-c098-4d71-9183-87dacd63a15c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb06aa21-900b-4a39-b37d-5154316ae3d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.197']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d825a41e-3187-45ee-9eef-cee46de166c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc3c190-c502-42dd-95b6-571bed5d91f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a6c6099-dc3b-4cc6-af70-fb5bced4d21b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9372c6b6-eb1b-4d7b-9426-edbc79627fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--432f7d3b-02a9-41db-8f50-14ec0a501fcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.203']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37699d1c-da93-46ed-a31d-ae13cdd5abf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6251ad5d-5b12-475d-ad8e-19a67c6ce4d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a86bf55-722e-4ee8-9e7b-e469cb9a1ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c07130-1f2a-4140-a3af-d9d3ae6361ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a92ab460-eaf7-4618-a5a0-e378d9d7bcb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d4044f-534e-46e9-b259-1fb5d285085a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b73c55fc-c932-4844-a459-022146073691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c62b08-00df-44bf-9413-d765ad3ef50c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e026a288-19a0-4c5e-903d-cc2bd789247e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c563f3ba-98e1-427e-97a5-1a35026b23d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212046cb-6e97-4f12-bf8c-4e341330657a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.216']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54541ded-008a-40dd-b4a2-3d87e9141504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87cd1929-6570-42e0-bfa5-b9d654846481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5fc9040-6b9f-496e-a70f-c2d169b2eda7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.222']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bbb1f28-e9af-4889-8e3a-95df7b1f554e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdbae430-f60e-4ebf-b3f6-be2aa5d804e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.225']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da07aecc-10f5-458f-b3fe-dc2050ef6f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f32b75-aaec-40e0-b357-d0d84ecada02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.229']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c33135d-821b-4bd3-8da0-d64b14f0361e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db90e430-d194-4318-b326-bac6678b7c12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b3fb75d-1bd1-471a-8d61-f4ae84c1dabf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a81563-1d29-4edc-a233-317296310634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef908f8-fb41-420d-aa00-fb5cb22b6063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9f09b8-ea48-495e-ab5b-674048303166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02bc0cd-b430-4567-8abb-fb40a6fa2763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5155851c-0d2e-4af0-a677-be1ac0fe11f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.240']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06923ce5-0e2b-47ea-81d6-f3c1e9385725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac80a4f7-e00d-4c7b-8bc6-35d91b6b188a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d5efb0-6b86-42d2-aeec-9c4e41167231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ec4001-49de-4ef3-a286-5ee645bebb0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97c081c-a8d0-4b8e-bf78-1bd1318e947f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.248']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f40d4e-afcc-4cbf-931d-a5f8e94ad46d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d65e581-dd92-42a9-b7f9-13f20653a585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.251']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4562eb6-fd6a-4f4e-88b8-40912fec7232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca8a4d3d-637f-4221-a7d4-d7b0fb1ed683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.253']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc22833-0d29-4a6d-b8ed-a6cfe932246f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e810a73-b840-4eac-9705-95dd6e3cf9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8a9a1c-4263-45a6-bc79-22f39de20e39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b482451-64c0-4dd4-8281-b83086ace05d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dccfccf-7626-4222-86ef-757f25680580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc9a66e9-3ef3-4efd-ae7e-8091df2c7ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0863bc-1dba-4aae-b7c5-f6e0d58c4d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.32']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e3bc39-6835-4af5-9bd0-b10eb118fe45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09675050-13da-4b52-88da-ff0071b23203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed3f774-10ea-4d62-9855-05068197db6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de0be3d-b06a-4967-be2d-9da6cc67d7bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1e727f-c831-437b-a2f6-9acb62e1aa8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4903c308-a577-4618-b079-266673b25755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b96b265d-5dd6-4b47-b8d3-3e85c0a1a3de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc02b66d-977f-4321-8d52-e2cbeae4c121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27585b67-fadb-4814-9b88-208e986ba5eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9764ce8c-cd6e-44e9-9f1f-99f071734b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c36cc1-ebe4-42f0-88a5-6a26ed275fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa637d9-6582-4475-a650-0a9536f80c41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.51']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab63e848-e760-4d3d-9b29-d65fd981397c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ccbc606-17e9-412b-83d0-19be70e96dd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba6138fd-6f7f-4cf0-ab95-6a8b8c6cdbcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef49dc7c-5a00-4d3d-9eab-4afc58ac5a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.59']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05241a6f-7869-4a8d-9d7a-362ba2753b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b72ae7-d647-429e-895a-34f942ed995e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da34bd6d-4993-4bb8-be67-0c7ca291cf9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4c5533-cbc3-457d-b560-e99667411a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28411a01-1e5a-484e-add9-2ea510bbe542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaead317-e499-4f42-8fe3-1f1562bb16b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a39e63a-4dfb-4886-9b3e-613d01fa049e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bcc58f5-7556-45e4-8914-adc2ba11bcc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d0530b-babb-43d1-b78d-af9d1b6946da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b651d86f-af41-49b0-9b1e-35c3ae1cbeb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ad34a2-60e3-4455-964b-9f707418ca8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--060cc9f2-25a2-4c75-a25f-ef5c48f1f5f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5509ab91-3920-4f2b-af26-3490bc6393d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6475115-f44b-44d5-be26-1ad16cde1de3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47dc0556-cd2a-4015-9abc-b109ecb7355e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.81']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34fe30c2-9ee8-498b-8534-8e776bc58d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68dface7-dc5d-4073-94ff-99286ee03001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca258c9-5339-411c-84b9-2b4b1d12ae02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.84']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cbf74cd-e1fe-4577-8256-3b667de3cdb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5b82ba4-7e83-4b56-b160-54c136e00806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b4ff77c-0deb-4f2b-acf2-7dc811dfef05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9936807e-4eb9-43ce-8c7c-5f370bd071e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68fb2e06-3bd4-46ad-ac1d-cf05d6c0ec66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.95']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd8b87c0-9da2-4aaa-8c29-4c2c3959b211", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.20.46']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0d98b7-2211-47ef-b38d-69207cc7ef15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.63.64.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f3c352-b9fa-448a-81f5-fb9c23fa3a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.87.221.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a35793-3fd9-4dbb-af2b-cd0c5fc4c71a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.120.203.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71fb0812-e028-4081-800a-86715de49980", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.54.182.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40bde691-2503-403c-8fb6-279d18e77950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0680b4d3-7d2d-4a86-b804-f880538b490c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.228']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5356f3-0110-4775-af22-192744da4cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.229']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a2dde2-d85b-4a32-9c06-849ad18fae5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89c9bcc-287d-4c2f-af30-12124570c27b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f9edc09-4632-4e20-a00c-b2d4f2f5e2d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4155f83c-fbf0-43b1-ac9d-3c3679edeeb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b9aa1f-787a-4663-b59b-da06d2eaca0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168a9eca-7681-43cf-b9de-1ec9bb5229d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e9e1b61-544c-4a89-87a5-ebedf791d8fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6236056-abe2-4829-bcd5-0bdd6fc4a991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e5658b6-4d08-458c-99ce-4795795a7776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.135.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709d1980-140c-40a2-a97c-0ff1aa58c6f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.146.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3172d797-27c8-4da9-9816-40749cde7056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.147.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ef28b7-090d-4cd5-b387-5277535e57b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.158.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9acbb7-f22f-4554-947e-32c349c354af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.165.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29eb83f8-2326-4306-bfab-8a205e0a01ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc3709fb-ec1b-4b39-8638-0027f6f087f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cffb07a5-28fe-4832-9e72-79836e56fc58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904b10a4-a7f4-46a3-9410-6982cdd332fc", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0002fa-0662-4443-b846-e60c77469a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dfa34af-f756-495d-b341-343e0eb6d45b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e37173a-b10a-4b00-a670-ce5d6b77b6d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1e03fb-38ee-4e11-bbe4-4aecf0e3c068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9177b7-7061-484b-9daa-1fbb314b25c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--206c8348-b222-41d8-90bb-b5487bd0d99b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.11.155.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a45b3b-1b69-4675-9de3-814eeeeb528a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.48.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9438a4c8-8284-4880-98cf-068d6362896e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.51.251']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b0c0aac-a06b-4df2-b2ef-e3b3ae74e76c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.251.5.158']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10df19e2-453a-4c86-85b9-228f1920e71f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.47.208.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3d870a3-c75e-429b-be97-ea693c830900", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.56.83.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6bb4a27-fe20-4fbb-a70b-f90a0c9b41c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.60.186.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e4ab6dc-ef73-4592-aa9d-c865bf7e66ea", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.132.105.120']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696b042c-b6d5-4b12-b9b9-e7927b065123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.204.137.84']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06011c4a-1726-4955-89d2-95286cc3a069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.212.14.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2181031a-10ec-47f6-81b3-0d7abddb6a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.72.45.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b345d7dc-adc6-45eb-911f-6e8104f90f34", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.115.172.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141f3854-d51d-4520-bff2-24f42d80df93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb6a4a0-27f6-4a77-8c83-cddcdf63c094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.254.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cfd7e6f-0a2f-4de4-91cd-c81a4af9599e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe767604-0a60-4b81-af9d-4e6898da176d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b89ef12d-ed4a-44c9-8c4b-3118a7cd005d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.100.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ad5d78-fcea-41d8-a648-c23f4cd83029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.107.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a224156e-9e7a-4585-93f4-d2d362b5d47e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.139.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9690fcb8-9e1e-47b9-bf2a-10cc8ac25e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.140.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e33f6e-35b5-488c-a3cc-17a7877a8e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.184.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e660f0d0-75a9-49d3-8eb8-1a708fc46229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.185.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--332897a4-e371-40a7-9b32-5f1c97af6ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.205.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e229ac2-0d33-4fb8-8b29-385785f3fe1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.84.135']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a78e84a-b69e-4640-a590-76d331c34975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.241.251.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dac7861-f1c4-4513-a2a6-8d89ad96c8ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.248.36.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7896638-01e2-49bb-89e6-f3665a94ada9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.184.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4471cfdf-c7d4-4032-bbf0-b3a78af26196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.192.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18bbfa38-fed7-4566-8a3e-7b585b846092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.192.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d175ce-4a48-4a41-98df-d188f834003e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.245.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a0bbcb-ca72-47fa-a559-01970976992f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.45.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ec715d-0bc2-47da-b142-ae654758b77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.50.113.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1634877-784b-4f7c-be03-5099cb3ddad9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.227.160']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb82094a-aa1f-4c41-b98f-d5d2d969b972", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.230.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9883c813-6644-4d62-bbff-affc497f4fbb", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.230.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e95cc0-3bd7-429d-b126-b58a9684482a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.242.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bbb7bd7-2598-4d3b-b8dc-5cec2dbe12f3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.244.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c64ea4-e928-438c-b6dd-40e1f59664c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.81.54.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73f14a0-81ba-4e2d-aebb-a0edac369ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d2ccc24-3031-4d70-8a4d-465c5bfaaf21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5b4aa6-43c3-4fc0-9492-e5a17a1b08a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cdf528c-b55f-45f5-bc20-670bff859fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef6033e-a5fb-4fa6-91d2-9b5c9eec30fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd962136-73be-4d0c-829f-b218e5d1866b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--429a6993-2131-463f-bbcc-994110cde32c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1faaec3c-9dcf-4322-9f4c-91eb5b14eab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3961d31-9d1a-4f0e-bff0-3d0bd7cf1780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11db041-0af8-48f2-a394-9c38cbca2c7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f717cd76-8eae-49df-99b7-884518e6e345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c18d94-e3ed-4fab-bdb0-da33088e45a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a514aba-7105-4537-b0a5-49dd78ce09b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99842a99-d0ba-4773-a3b0-ae788720f6f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--410b4037-20a5-48d9-bab3-44bec12b54d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.32']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b501e7-f75a-4ed2-b637-f1aecf48bafe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--883c17b8-f6d4-4255-9559-d8aef8d38635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac9f0c2a-ac32-4c2b-b955-5be53abd5f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7af3ba-0ae1-4210-b14a-8e76c9d69054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b9138ca-fe11-467e-b98a-50301801bf12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a551e90a-fcfe-4f4d-9f60-7ed9e69e5bdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e056ed6-d12b-49bf-936e-74d75e9853b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4493de-42c2-4c30-bcab-11c1d7c4684f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e98131-06a5-482d-b8e0-3d2f292ae260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6e416b-8bc8-4c54-90be-2762569fd2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9e21a8-65d8-4601-960e-01a1fea90e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.51']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db529cb0-7c75-4891-aec5-b13f68c1e419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c1e012-269a-4a86-a7bb-4b2c45e30de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed419bf3-46bd-410a-ac76-5e2ddb1fdf3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30fd9b8-8f6f-4277-b882-020ff0a5c77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d220641-ccc8-4017-907a-c57566f3293c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67170d83-9a23-4a57-9567-d97d2117be9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6ba8e8-a420-4fe9-9aa0-1c95e6113775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1741ff92-9e11-4433-a698-4e1f77d5f38b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.87.117.150']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b65361-a38f-4d82-9462-915a20b1b6e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.112.23.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d726a9-3869-4134-96bc-ceef98cd8f14", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.120.246.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597a214b-7d43-4167-8ef9-76c503453926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.220.194.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a1de1c-be66-4c74-821b-3e8671393abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e9603e-c8f2-41f0-b956-5fb3c99818cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.251']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae3e040d-2cd7-4c14-8401-34a4af7e5396", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.126.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58397ec4-e106-4016-9a37-2c47f388705c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.245.158.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34759d41-936f-4595-a6a0-a9df5e06874f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.74.199.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f3b1c9-d983-44cb-b900-fcc7b9c62597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.119']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994d030f-1743-4411-9df7-2c7ec8144b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7c52b0-8a29-47a1-b3c7-39f0ea6fd60f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6eab58d-d26a-4a5c-a28e-831aaf474827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe9ee54-c917-43ac-a41e-36293cb4108d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb5842f-5a98-46fd-9452-ebf73ee5ab75", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b875cf4-a7da-420e-8ac6-fbadbe59e85b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8622499-0bd5-49b3-819e-e5ab416f3dab", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0b0c26-bf0c-48ed-be63-91e67ad803c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.46']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7048372-2c1e-4a5d-ac86-99ae44eff795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95193aa7-2af1-43ab-911e-691dc660c55d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7daae333-2f92-4d52-995d-f35e1075a19e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.92.148.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7882696a-8750-4ee7-90a1-38b2fdea653b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.95.172.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--327130db-49d4-481d-a3ea-840c7625fc2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.111.59']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a19172-767d-42b7-85d3-1278ba8115e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.89.84']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568789ee-16e8-46f5-9ade-32edebe344f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3015f9d4-c600-475a-856b-7ce54bf4d943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73fff566-dea8-47f3-9867-2110199f4607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62819c9e-d06d-4975-97ef-c41e2a9fad96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cacf5c80-38ad-4abe-8cb7-f53eec855d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8911d45-3e95-4dbe-806f-60b8c126563f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffbd5f1e-88a4-4100-b1c2-34bdf48838d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09670ac-08a4-4334-8641-1e9d98b20313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d15677-f0a6-4756-a099-d97773eff472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a29972-aa68-46b5-9c39-29f0c79ffbd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3570564-2347-4eac-bc78-4c7a8bfbac5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.159']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fde3bac-ddeb-4f1a-ab6b-07a87cbcb214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b5def2-76fa-4dbb-a78a-5390d01d3293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.153.140.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bdb289e-8574-488a-88e8-2f9ac51612eb", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.186.160.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3507309e-631e-4194-bfea-cd37aed5d6ce", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.186.185.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f1adc4b-52e0-41af-8afa-761b34573688", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.186.224.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead292fb-811d-463b-9dc9-a6a7377e18e9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.187.166.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca3365a-50fd-45bf-ae01-c39c3ed9502b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.187.197.111']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f11351d-28c0-408c-8290-ddc0043f6c23", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.187.207.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c249e10-6f67-4243-9bc7-cf5f5f6c4721", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.187.33.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5556d831-34c6-4af4-8476-0c214acdc837", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.187.49.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebfbf065-7127-4e2e-9bc0-49e330b404cd", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.187.72.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1404d4b5-8f85-4d8a-987f-2622575f0349", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.188.176.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20923355-baf4-4484-bb77-e1b45f68aeea", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.188.182.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b50c3ef-dbaf-4971-9cdd-31b40abb04e4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.188.213.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d262e054-67bb-4362-b0a5-1e8a32009069", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.188.231.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa5ab33-5e30-4462-9daa-e6a916967ac4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.188.235.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9672855-ae16-4480-888d-f94d0e3515ce", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.188.27.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f727465-cda6-46b4-9e13-47e1de21ba64", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.188.4.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629fe5c3-8660-459b-9c97-3b01892564ce", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.188.50.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ade063c-bf0b-43a4-920b-16bd96276b56", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.189.10.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d301b7-b345-4b90-a6c8-ff51fe0efb01", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.189.107.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1e3d23-22dd-49f4-a988-614f0dfc7c72", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.189.126.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e2f7d1-1c34-4b1d-a8ac-4416922db941", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.189.176.32']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31937b13-0d4b-4a3e-82fe-834253041808", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.189.59.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30abe4bf-cc0a-4cdc-8470-7cc09d517745", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.189.78.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec628bd-36df-443a-98de-c83dca784244", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.189.85.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c365ee73-1850-41b3-a042-4b69e265281e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.116.140.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452f64e0-abab-424b-a65c-91c3618464e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be6900a-a52e-4b8a-8e34-ff47f2e10817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df7e7f3-2d80-493f-8b69-08484e6766f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9abd92d-306f-405c-9772-772907c3ca7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7d5d91-3868-4c8b-8c21-53ba63dd6ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f43247-5a01-4cb0-9cee-97514fcf276c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ffedaad-c526-4e39-8cf5-9185886e5dda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e3f8a0-e720-4b18-935b-1fe36bfd6320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6053ad6-9e03-4ccb-a953-cfd346221ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d093165b-87b6-4e9c-ae04-212f8d95c88d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c846cc7e-bb52-4b35-9056-2736ba8eba83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc0efa8a-5f09-47ac-952e-ffa0e3c8085e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc7ec14-223f-471e-b664-e5faab66a0f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5007ffaa-0d91-4246-846a-69838b338944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d1ba6c-3942-4db0-85ae-badef877eb75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fccc016f-00ee-41ed-a409-a4f2befac8ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48dd5371-edff-4bd0-8079-545fb29c714c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c0e046-4ed1-42c6-8898-eedfc86cbc6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.141.162.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad68ab80-5c68-4d9b-81d2-9df68099a323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.55.218.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adbaf926-1de0-407c-a2f5-821a7cce1f89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.62.207.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73aa34a5-37a3-4443-98f5-84213cace293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.134.159.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4fe62ff-53bf-465a-b890-362ad9e0ae88", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.136.138.185']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e643d9-9c3b-40c0-bb0c-91c2e4aa20d3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.136.155.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b5759b-2eca-4dd8-b129-58e670d1e516", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.23.255']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0017710c-e91d-4a93-8c2b-a25576218e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.208.44.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a39bd2-bda9-495d-902e-b4ac8bf2cb56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.101.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe9e90b-e489-403f-8adf-ea40ec825eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.110.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd2bbdc-1158-4558-a341-f692d0166fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.114.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deefa6b3-d266-43c6-856f-795914685208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.196.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b7e6c52-8a17-4340-b67f-87257a43a772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.200.249']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25a0ea75-c6d2-49d3-a3d0-ee0921970aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.211.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84bebb98-aad7-4a58-b16e-818ebf95f8e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.228.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a21eeec-9a60-4cd0-9be4-757bedbf808e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.231.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37f7f5a-e3f3-4def-b618-e9bd176ac3c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.236.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94542236-ae81-430b-aac5-27da10b2bc6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.236.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f1169c-3bc8-445f-bcfa-dbc5617a9ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.237.154']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4950891-68dc-4d82-b082-c10193f0b834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.65.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa9048e-50d7-48c4-8fb7-c89c411c7fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.90.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a21e3f-bf1e-429b-bb65-0b86853faa73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.210.89.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b12048-479b-45f1-b47b-fd9d0018f73f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.12.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d16bd0b9-4a88-43c2-80a9-f88f00d42745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.144.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de6088f-dc63-4b7d-99b1-369168642f3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.152.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--394e5da0-5381-45ed-8e25-4bcadb2e7ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.159.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf5540d-35f8-4fc8-a46c-9bf045420cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.16.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a80284d4-1de5-4832-9446-1648bd538a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.162.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--affff226-b8a6-45d2-adc9-7669c4d115ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.168.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b7276ab-e2d6-4c1d-891d-defffa109d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.19.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62496fa-ac26-438c-9bf4-bb5877e2adaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.25.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37314887-3850-4a37-88ad-04d50f719dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.26.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7fca5a-d84d-461d-a1a3-0bd0839341cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.26.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa2b60b-ec66-4669-98f4-3e9d292cee06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.30.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ba26c2-30e2-4044-b954-f79612ee67d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.32.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--498601ed-a0d7-4817-9c98-859d54aa10f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.37.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a298c072-9d84-4ab0-9d44-436b8824edc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4098f42a-db03-4545-bbc4-88eafee56402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--291b3b98-6712-4cdb-a114-418143aa62b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae18f62-59c8-4cf2-85dd-719561a47877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.47.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef85759b-7f69-4b04-8a38-da1ba25569c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.47.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c6d5aae-35aa-4d1f-b543-37e501b27850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.47.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e757bd0-0b8a-4a81-832c-b9fb25afe2bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.8.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98da130e-7411-49a6-ae13-988441895cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.11.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c748ee-b5b0-45f5-8c81-910d7aae1b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb5c164-30e2-4d0f-808d-1fb83b57f633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6dbb30-f0e4-4be0-9ba9-d30bc68b6304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.97']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a00da4-0ee4-4849-be7d-57d9e81faf4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.145']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f0859d-3f63-4880-a001-bdf4ceb70036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79fd37e-013f-4d77-a8b4-3e8256ade2d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1230348-dc1d-4914-bf97-fb7737f6cec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e949e62a-8809-415d-b514-f35261b0c024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.18.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588b6ab2-43ec-4ebc-8ef4-2c9b82987f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.109']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeaece77-5684-46b1-815a-4943e805388f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.147']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b16d550b-392f-451b-bad5-b3f0416cb35e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa800eb2-335a-4dae-a3b9-639ff651c422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.56']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b76e508-771a-4f34-80ea-a5a961b48041", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--441160fb-91e1-4bd0-ba38-7f36364cbb67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.96']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4483f70f-7e59-4f7c-a8ec-b80b10717ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.100']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40038ff2-59c6-4615-b52c-8a3094832bdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4e7bc2-2598-498a-a8e6-6cf2daac8a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c5e7f2-7826-4076-a279-b6dfc5bfc81a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f785b344-2053-4628-b664-cdf33ffd348d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8812062c-1ee9-442a-ae2f-0a7cdd77aebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1de34ea-d184-4b9f-8d8c-079c2ff3aa20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.249']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--081c75ca-28b0-4581-b427-1d8f3f4091e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.0']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daba380b-6633-4015-8896-5545e2f17264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff115fa-ecb9-4429-81ad-ab0d4bec2d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c405b207-d8ba-498a-849c-ce0d3702f8a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bfb364e-e2a2-4fd9-b066-8b845dac34d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.64.1']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04cba5b7-25fc-4711-bb18-f57d8147c1de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfdbc4d5-25f9-4e8f-be0f-c46765945125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dfaf2cb-388b-4e23-8a19-e10034fc7d4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa44ce2-4575-4398-add5-ff5440cf0abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0bbc610-683b-4cc3-9650-3e9e4df2e5e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e919d594-9da9-4a00-9166-b6dfaf653b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.160']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9b69ec-a071-48e2-8b42-be22583bebf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc5afe3-79f1-4957-9979-bb34f332df0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b63d5d-b14e-42b7-8069-85698fd21197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.82.160']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eabf05b-0407-4cfd-8408-037e5f5e6407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf00534-4d08-4ff5-b846-5e59b83e38e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e6aad17-5570-4489-9482-9c745f18e792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.125.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e979ec-fad0-42a8-81d0-f3e2a5aff50f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.142.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f68a26c-deb6-4c3f-8b23-06992aab14e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.223.160']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c231276-48f6-4f35-9c1a-dc2e47166f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.68.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b7e0c1-e36c-4d2a-b759-7e23bd06f94b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.136.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042207f1-d722-4a32-b7ac-1682c79c2de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.139.48']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83024cb7-12c8-4918-8c45-bc0770c40359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.221.140.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5c4ee0-6472-43af-b5fe-2ad36b972e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.230.46']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3368785b-b576-4239-a57a-502e127241f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.242.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6532649-24e7-4ca4-96fe-8ea5ec0c3c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.231.75.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c3f6f0c-74a8-4e4f-ac58-f99c3e0e4d33", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.191.192.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2186b7ce-6075-4572-a990-96982bf992ac", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.242.124.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79c0cb8-ff1b-4b66-a108-d589ab00e192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0979dccb-ed16-4bbd-9f47-ccf3636723c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae99b9a7-7f84-4ae0-b63d-eabdb6044ee1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.65.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44eedabe-896d-4f8a-af60-0419f1b5f511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a14e2f5-1252-4fb1-9a00-182bd1326793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd036563-8bff-405f-adf0-2ef5543a786f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced6c126-d0c0-4dec-8a9e-6b550e26dc10", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57c2585-1400-475b-8458-caed321a8514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e88df07-511a-4c6d-8b5b-e6f3d95e02ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f815fed6-7ca7-4c5c-abf1-5c1d3d9b8463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179f39cb-b3b4-4ac7-9cc6-f21f8aceae22", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d7dc6a-3aae-42e1-8709-ea0ddb09de42", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99c3f76e-7d0b-4661-a5da-5fe0e58694ae", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f6f5acf-63d8-4868-b844-46a899b5c928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5f99c6-3965-497a-873b-a94d8c19389f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e5b229-4b9f-4145-b1e8-7ed60a6c0db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d600e48-d7a6-489e-9e62-33809d1ecfa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d8e847-dbf8-4789-a37a-b7038ae35cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714852d8-5977-4f34-ba9c-e9514abe4f46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e519b0c1-f899-40b0-bd03-8df2ce4787a4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.10.14.197']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360d5275-5048-4b45-8546-aac345c992ae", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.136.223.159']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5779fcc2-db08-48c5-83ad-f8bfa14ec27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.161.239.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8016dbb3-7c95-421d-bdaf-1ae6279737bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.17.28.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba12325-9f36-4866-bad5-14bfb3563ba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.101']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2704865b-506e-4a12-98b1-024be4af2d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df6fa20-5deb-48b7-a6c5-a2687f4c38c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1e604c-47cd-45b3-8e6e-97bfe017423e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08613792-5b18-4c33-a22e-e81f7c646e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e2b599b-513b-4f94-823b-a78be64da622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.216.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16692c9-a4d3-44a3-9f46-9089030eee32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750b14e8-7666-4cf8-8932-a46116d32be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.197']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6528d7b3-e91f-41de-bb37-150384b1767a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.203']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03fa4f79-5fe6-4dbc-b7a3-6ba5b19f1de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef82771-30b8-4a3c-afd8-958e3a64c268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d14a309-dd60-424f-a680-bb58d2972484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06567025-41c2-4a79-829c-d791ace873d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.214']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c1f6f1-3e79-456e-accd-e1b81ddca370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b8e81c4-2fce-465b-8736-9bc3f10897da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.216']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3b0ff1-8e44-40de-a040-0d9a9d2df57b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60b1e7f-776a-42d7-9e0f-1690c2878dba", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.21.9.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1eefeae-b671-4041-a1ce-e51f9fe2e541", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.213.143.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4524661-5121-447a-889e-e385f90d0605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.30.98.144']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9410d010-ac64-413e-ab90-20551f3f1050", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.57.15.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c3dc13e-4824-4fd2-821b-1f2ac8ccd595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.68.179.56']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127dc5ce-6c05-4cd7-9562-687fe480c261", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.84.76.96']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554edfa4-7346-447e-a96c-e0cc070cd278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.147.85.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf18010-c5f7-4b09-bdce-7d09d9501665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.180.146.1']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32588ea0-da7d-4d9f-a15b-2a607f339514", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.208.127.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1a4d13-9791-4188-894b-16d4ce5d9507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.223.10.125']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00b8280-0b82-48f0-926e-e890e9f31d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.223.17.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3358a0-5de4-4cd9-848c-11f7fb594ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.223.33.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b50cbc4-4b3c-4a7e-b6c5-4370fd82e856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.223.35.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25cc0b8e-4407-4a7a-8333-85e9b9e662b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.223.43.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b0857f-efc8-4b44-b823-b4dfe4ba896d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.64.243.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8fad8bb-6e00-44b2-8804-885d2e8c259a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.80.249.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572ffb5b-1d8c-4913-9761-23d6858751d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.80.249.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bae54b2-8d96-46bc-9433-8431e1e617c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.52.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896f8541-c8f6-43c7-98f0-369e120206d5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.150.212.190']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d63a8ae4-ca20-4ecb-a405-e5a31cc73089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.218.189.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fabf831-ee0d-42d0-9e24-736502e825f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.246.209.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab9d020-094f-4126-9c8f-0ed05f847e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.139.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe59093-b425-4d0b-8b58-c1bdc29ec038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.32.109.216']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353b894e-06b6-4653-9c3e-8857f13d49ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.32.48.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf9ae24-9731-472e-8416-a9e57ada62f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.32.70.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a2de24-6aa1-4438-8a2f-6eca5042fe4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.71.158.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bce4215-a201-4024-91a8-3950f5412057", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.100.123.51']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6beb2e-1b0d-41f7-b1f6-482aea451607", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.104.111.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a3a099-ede9-434c-aa35-f239760011ea", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.105.11.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff3aaf2-e3fa-493f-9d36-c0b94cc490fe", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.105.129.171']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a3f304-ab71-47f9-9b25-86d0895793d6", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.105.62.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6a88e8-6b28-4df5-b814-8b8b4cb1c1ac", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.105.8.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0676146-0187-4459-b33d-f3a7b0ce9ab9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.105.96.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0628b494-4959-4d24-bef4-7c941d31676e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.183']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d54bc937-e172-4728-a5ac-bc5d8eaee8f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.185']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6de581-c0af-4173-92f8-acb234295532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c5dfd1-4af4-42e4-9af6-21f72fe37b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.137.253.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c471e619-b5da-44d8-ac5b-a856cefb4c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.143.114.59']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6641da-26ce-4782-8209-c2ee51d132b4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.159.216.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece36585-ab90-498a-8e90-73af2de9edb7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.159.216.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2acece12-4031-4103-b901-15ef836ebdeb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.174.183.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c24f98-9b14-4f46-8788-a4eb453dc6cd", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.185.127.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5584637-6b9a-4192-ba59-7d5de4d42212", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48afba16-c449-4ff8-a7e9-a95151dffcec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--977e09b8-5d4d-49df-9685-bb72802af394", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235fe557-720e-4acf-ad2c-f22e22b809cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e003816-5aca-42f8-a603-234f2b90487c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f43b2a-6dc9-496d-82e0-9054b326bcd0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a298edbf-01d6-4edf-a8dc-90dc4d286357", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26c7586-1476-42d0-b018-425fe82c6c00", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6761e4-8d7d-4021-a22a-181e4001260a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d33d108-e316-4eb2-97f8-43fd9da50866", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e048392-4993-4148-8917-565b7a35324c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fba134c9-a115-461a-9db3-747f735faaa6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87384c50-7593-4244-8bd3-d3d448a88ef0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b84ddea-7488-4d93-82ca-53afc8b93d01", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5345f3a4-cf07-4ebd-81b5-6dc57a5e778d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3664c553-d8fa-42ad-8c2e-dab27cb91c7b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf678e6-9a95-4e8a-bc0e-a21d34b17912", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3745b31a-d83d-4969-9eab-fc1e867c6908", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a03a8903-2a77-4680-814a-129d0b8ef921", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d5b733-49a7-4469-a973-c81436fabd2d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ff1252-923e-4e7d-9ef6-5e3e92e0f31c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82f8830-bc5f-4c11-a4fd-407b777db60c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9369fa-c19d-4ead-a61b-f0c7c82bba81", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa80eb90-5817-4429-b9d9-21d757984d15", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa54664-3c69-4694-89ef-b487ce8da98f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b563f94-42e5-4fb9-aad7-812060a83139", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b70853e-d5db-4649-bdba-9fdaf2a12244", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57af07b1-0cf0-46f3-a93d-4c99a9be3ef4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec6bb27-a6d9-4936-baf4-329be1e4f744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.1']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7454aaca-6e8c-4c04-9db7-945d45c44184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f328a99-70a2-4329-9adb-2219275dda23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ac9784-f54e-4780-93bc-319142e5c47b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e70aea6-9c6e-42ec-9aab-64693c5b98af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7334ee49-21a6-4cdc-bd60-bbdf1051b422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81702b29-771a-4826-9a80-4ecb59e15055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea08c613-17ee-444c-a896-df43cdb52a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--694c6dbe-0735-4060-840c-849afba3fc64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d8426f-430e-40b7-aca1-6345ba8a31ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbf08f9-7d3c-46f3-980c-a4fa313ac3a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e11e5a9-1508-426b-813b-9a6d309541d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf9a4de-88fd-481a-a614-2c57858f99e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a93e8d6c-88d8-44cf-b297-a30b3712e7ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca1be872-7250-4689-8d06-df48b3a8bae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--151630f6-3287-4334-a374-5398d689b7f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09199b09-1a46-4c08-95b9-0a49d874f916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d307dc68-09e5-4e59-8b0d-2b686aab3a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8943f970-1f83-4453-bc00-148b6847e262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ff070a-a7e9-497c-9630-89c946d87827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01350db1-77ea-4525-a9fa-d0d192e019e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a90510f-ffe4-4c94-80f2-999416af4424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0fde7fa-2a9a-43f3-a22f-87081e9169b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.32']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c16c5f-420f-404f-97b8-b9f1ae9851eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf50f987-f58c-4ba2-b0a1-cf6bd397d9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11858ee-4c50-4050-8ad8-a67ed05cef92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--118a20ec-4996-4511-8b01-b6488cd14ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de161528-9cc7-4029-8e77-2ac4f83e04ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84486f08-71e9-4a9b-9c50-ac550c4f148b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ef7c8d-e2ac-4adb-836a-0085d3668020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ae0d2b-2e54-42e0-bcfc-6bf6428f70f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89014f41-a436-4ce3-b88a-3cf8e1ec4ce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438305c8-1f70-4f08-88a7-8aaa5bdd27b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e6be0f-34e5-4e30-8759-265de25bb094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35534a0f-470d-4db6-a28d-9672fa8fa969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d608c301-1a58-4ee9-9c25-86a49900e070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d8d02e-f484-4df9-9c0a-0e332fa5e58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2b0518-22b3-4f5b-92a1-053e1990059e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.46']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397ef2a3-f774-40f1-8699-34304a13027f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c1e97d8-c8a2-424a-95ff-bd65d0ac9cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.48']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8c7556-a509-4e16-bb2d-58cbf0ae8a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.49']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59db556-cc2a-4a34-a1fd-dc1c4f480539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd51685a-38c4-4679-aa1d-7a8ee8a2cfff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d2cda0-72bf-43a1-b5ae-5032a2c8095e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.51']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07b1c41-2b5b-4f65-adaa-f121a9dfeda0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac734d3-f817-4c5d-9b99-d10a51d9682d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9e785d-cc07-4a40-a6d5-8bd95a5e0578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--985a6b43-9e09-4d87-a297-ce8cc3783051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a78236-0f29-4701-82a3-ac7a8ea9cf84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b6e973-483b-4882-8e9c-45fa799b5e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e720672-0407-4a85-90c9-667ae5a792ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a6b19b-f508-48a2-a3cf-5f878e98c15e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.0']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26ce34c-0e7e-4a0a-ace6-817d45cfcaa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e324a8-2844-41e4-8006-9041b3c0b8f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ef998c-c988-49cd-81a7-c2f4ce8d35f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af09b80-ff22-4a5a-bd7a-07ef05a41672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c5346b-72e8-44ac-a6fc-897b8d9fd37b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926261f3-1fe9-4a0f-bc65-9080c1dfb195", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83bb687a-a4e6-46ae-a985-7b1b02180ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf1cd47-8fe8-456b-9d94-711d77081466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6634d572-cf8d-40c0-84ff-9804fd852996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70384b02-f480-4ecd-8517-d6746c96d39d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fa5969e-40ee-4aa4-84e1-bb95d5281201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a279de8-3a60-4c43-9da1-17651f2badc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88fa9712-22db-4f52-8357-77c372293dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.41']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--692394cc-7ac1-4417-90ac-cab593811891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ad6710-8b5e-4827-b48a-396d47b2a8a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ceb53b-6bae-418d-b86d-32728f7fa4bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349ec438-5c18-4386-9293-b4db7051d911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680834a7-fcbd-40a1-b035-781a166d8181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.46']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a145f2-09fa-4dcb-8883-3aed2bd9b07a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f8ff6b9-e985-4604-80f5-5867fed9eb5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.48']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e448f4d-5495-42f1-97a6-0f1f002f0065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.49']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d36fb7f9-bd28-4196-95ad-c4fda3fa8326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6101a826-e9bc-4358-b4bf-9f98b4e29aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.51']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--778a175a-f07c-4cc9-a0ff-c6d22be40b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a915871-c4e1-4d35-84ee-5b4af4556d56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.53']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6a96a7d-6dc2-4ded-bede-8a12720cc963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6c19b7-2bb0-48ab-bd8c-64b1d3861a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.55']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b89efb-c105-43c9-82bf-0c95eef32743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.56']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e40c1470-cb5b-4341-92fd-faa629f60173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb04926f-7a60-4588-9980-18e78d8627b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e1a1452-0b74-4b92-a9a2-4b520dabbef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.59']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7492dbee-c468-40f9-a338-753fb491afb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.60']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ffae76-0807-4a47-9481-ab3283d6e918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6795f30-078b-4a94-add2-c7499084af2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6cb156b-3b93-43c8-90f2-bdea2dcb4af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.63']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b33f8dd-cd99-4a12-8e77-36d4032f7acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6d9e66-b7ff-4ea1-9f1b-e3cc762ca66e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e954f91-ac89-487c-b3d4-61b2ed79853a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb2e003-f91c-4331-beb5-5fd50c279e89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a965e7f-7db0-49cb-ac33-ae5623e42d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e68c2cb4-13de-4921-aaa3-8ed54c66c9c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be52d55-a1ac-4130-aba2-6b1477c279e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e4dcf5-8f64-4dae-a46c-6d18dddb63c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a586f4-0ea9-464e-8b9e-2dffa08d0630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2d77c2-7d66-4c30-bb93-e76197410077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf657ce-4c7d-49a8-801f-d6cae5efae19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7982bd0-d366-4835-9abd-1786aa45a332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3ee380-e37e-4271-b0a4-333b20c14735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.147.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199ce867-d1c0-4913-b814-5220b75b8330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5fe80af-2043-48dc-bcd7-b4825c17a8cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.90.246.159']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a67bfd2-1710-4354-8902-7a26fe03eb18", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.95.202.167']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87af2073-cdea-4beb-b8e9-d3e160e43f50", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.96.179.240']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474b3599-b88b-428f-be75-7eb2e56019fa", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.96.183.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d7de54-badd-44d4-af7b-e1598dd1e986", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.96.206.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59fb982d-113b-4325-bd4f-3e2fe4b273a9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.97.184.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9130cd12-5a0f-4daf-8c08-ace336cd9344", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.97.193.59']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0895d8b-de4b-4d19-b596-a1c2e9f76e61", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.99.111.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b644e95-1af9-4a88-bc8a-7b025ca46175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.32']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1070ba-95c4-4000-9925-bf4678821272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68bfe2ff-22f5-4308-b072-f6dae1e3900b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c08f65-f53b-4cea-a50f-78649fb65345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3869325a-665b-4ece-9d5e-0f9c2a9111d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.40']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e673fb8a-dd95-4c62-bdce-af10591d5222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e859a8e5-4e99-4e14-8d7f-a2c3286e4d58", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.97.7.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b65d66f-41a6-4abc-89ac-39697af198ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.99.15.89']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb66f2e9-34c1-4b87-ab04-c91d60fd245b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.106.29.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a130492-bb14-4126-b144-0082a2b00dcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.120.104.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b8c713f-db8b-4efa-bf27-2a26e755d7b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.232.123.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d5c409-0a22-4454-a78a-c60068ef1be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0e8023-b1c5-425d-b3cd-3e0c2d992422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5737409-40d4-4639-a555-14e7e4c30b3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3800d675-2b2d-4faa-9412-06306b66d5fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.147']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ff0553-67db-4d85-aa01-ffd3e56ced2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0c9a3b-8f1d-4e9d-90fe-fe86cad35447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.163']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc90851c-7297-47a8-9bc5-9d6902d5173a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.175']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac731099-0e07-40e4-9cd2-e982ebeb15c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b82061d-3f5f-4458-a474-48e2e4626b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9072dba4-e23a-44e0-8bc0-4cc8cb5687aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ad0448-10ad-421f-a54a-4039fefb6b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be7f5df4-9559-4c2e-af9f-79336683ec99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7ed1f8-a380-4709-987a-3a7f7f394bb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52661864-e7ae-4519-891c-0929ed49a640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05983558-ec14-4638-a9e3-43a265d4db4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9026ac92-7a77-48fa-a088-f3a103c4d073", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.246.54.153']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d6b657-32d5-43d3-a9a6-1f5e24e1de2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.249.128.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dafa042-f96b-42f4-9ab9-9c5186647564", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.95']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f50d426-5458-497a-97f2-938901bc3670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.159.103']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd839290-ede2-469d-8391-a7137f8d1658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.159.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2007ad-c292-4e84-888f-5cc043a8deb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.159.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8546cea7-7b3f-4c23-949b-f4173748794b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.159.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e80cbbf-0c7f-47e3-98a9-3a4141eb6222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.159.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--635f5ae2-840d-42e8-b2e8-652874eff8c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.159.176']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03aa6946-aa9f-45f9-8cb4-5f5f05a713a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.159.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff03ca18-79d1-40e6-9b5d-18a940839e25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.159.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82512c25-2d17-4e3f-a18a-3bdd497627ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.159.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3112d74-4455-4c11-9c53-27e16a1d45d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.159.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b60b8d-1f04-46b6-b0d1-d8a8f40a2f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.159.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09295e96-b82c-4948-9cf3-f0139762ddc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.159.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb16459-0cc3-4672-81c6-1ec763ae0c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.159.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50058bd9-46d1-4561-8e81-053a8917535b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.159.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1d8395-987c-49ed-9c76-6e17a8293cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.159.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e928c392-4566-493e-afbd-945e80f1d1da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.159.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f8d4cb7-84af-4d8b-b412-4182f266de6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.159.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d7c8207-e621-4efd-acaa-47f994c020a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.159.47']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c27192b-d1af-4833-bd7a-1dc4038e4426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.159.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85a9c05-86d9-4ab4-bce9-1ad1b4901478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.159.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe92458-0462-4231-91fb-94281fbc4860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.159.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd69246a-9572-4a44-a5f9-eeda987192f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.76.159.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbfac167-0f6b-4e23-b7c6-37638690af6b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.163.107.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2af797-8296-456d-946e-06fe25fe802a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.179.10.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c86c4e30-662a-4a95-a522-ef1a1abf5a39", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.191.106.109']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f551c73-5197-4727-a8a2-d5f42881d2b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e2c602-b39d-4abe-95e5-58275284ff64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.225.157.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d075f8e-8a64-4d04-921a-179a9dd8c76a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.225.216.158']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c19ccbc5-9ee3-4c1c-be83-828c4adf8dce", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.247.164.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1fe2e4-e9b0-48fc-b162-da6ee7a1d556", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.247.170.58']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb101ae-ddd4-44a5-aa56-009b1fb3d809", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.247.215.197']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90ee1543-2d85-402c-a312-1f9486b2909d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.247.37.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0aaaca-4cd1-4bee-abbb-b90571aa9b22", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.247.55.120']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d062e1f-ff0f-4dd2-92cd-89709e05b8aa", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.248.100.55']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3780360a-8ee2-4b09-9c93-fab877ac9400", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.248.12.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d442be1a-b114-4e3d-a5b9-c5197a0fac88", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.248.184.203']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ca2c49-bd3d-4436-8110-8c3a1f689eaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.189.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a311298-0d0a-44a5-bb56-50fb46864bfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.80.20.49']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df193d4-6474-4426-9e27-a28a9036852f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.109.23.154']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e8d6ac-480d-4fff-a254-f28d4e4a2420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.126.211.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--997fd588-7a7a-44a0-883c-75fe297fae9a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.169.151.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc55667-a8ae-4ed0-a7bd-c75b8fb7fd9b", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5909500-f4f3-4440-abef-7cc719136f8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--767f228a-b63f-4fa7-b7b2-043d7377f0dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.153']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e25a2a6-2e97-4476-8a4f-f3196eb5cb0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.21.67.178']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02d45db1-58a8-4ef6-bd62-5b9fe2b7563e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.213.48.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97947207-15e6-4d5f-b828-8f56504cda19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.223.69.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8b0bd15-ad80-435d-9031-b1f70451133f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851a7ae2-8998-4e88-afcb-2fe5196688d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a4e3ee1-9792-4657-a81e-8e0cb7ae3151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953a72b2-d598-4217-a2b7-9df1269ac4b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61eca1c-6746-4889-92d3-da018fc9535c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da24996b-1c81-46cb-98df-1ad2c80a7e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b792ef96-dde0-4226-9320-c003b1633666", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.252.191.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b8c5ff-6702-45d9-8614-d537a9602f53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb35b0e-2b85-462b-9efb-f5bee909f658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aae013c-4367-4aba-8d9c-70f31ceb25b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce92d1a-baa9-43de-807c-248772921a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be96884e-b51d-4e3a-8980-6d1ab1218802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd8152d-cd72-4274-ad7f-f4b9205b10f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5cd7440-95eb-4998-8fed-77783f947a04", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc7030f-0383-4d57-93be-6315b59a7a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f028f90f-7804-4780-9f95-8188c9608fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.45.6.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f095f3-3152-41d3-ba04-87e3fba7212e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.10.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af6a859e-3046-45ee-b940-abc33fdeddfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.10.190']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926a22fb-a30e-4d13-9f5b-dcd97fbc83a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.8.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a31a0c-4541-420f-bc99-32a7c9450075", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.202.224.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d22eddd-eae8-4974-a9dc-07d523b35b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.229.186.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8fc519d-5649-47e4-b3aa-c95572f9dd34", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.93.146.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf9ff79-eca6-45c9-aac1-60dbe51bee17", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.102.164.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725d4a7c-8287-4ab3-87aa-f30918755d6c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.103.252.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4909cb59-78e1-40da-bb30-85e4c7e3f08e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.105.168.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244e4a19-5f88-4ddd-9692-865502f0c804", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.106.95.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa4069b-e9ac-48a1-9eb1-8ca357d203f4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.107.243.107']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0958aca7-77f5-4fef-b2b8-58cba1dd7bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.124.130.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822ca7f9-cc91-4444-944b-02975d1f6356", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.197']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc8a5009-6b9b-4dc8-b68a-649ab1751329", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.134.138.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50e62f96-607f-49b3-a4d3-9e0d4c598a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.150']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f87674b8-3a74-489b-bcd8-5bf6daa56656", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.174.6.171']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2130bf3f-61fc-4664-a638-1e8c48816317", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.173.63']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92e0c345-cb36-4419-8e1d-ee4cc4c682a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9ba8f89-95ee-48b5-980e-9f8e4af819a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0554ef00-e5ce-435a-97ef-d91a47c6260a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3025f07b-6564-4ccd-9ed0-035bf044986f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c52f4d-5af2-4b1f-baa9-e823cc69835a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.120']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca205833-4073-482c-99c1-9ead05c2f46d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd62282d-a7fe-4fc7-b645-dd9838cf260b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200a3dfa-c719-4f56-97d2-0b5eb9b4de4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca21028-cbfe-480d-b952-b3e45e09c50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--548687b4-2a38-49de-baf2-c56ad4f61cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.125']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0955beb7-7a8f-4f39-9fda-448678176fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8fa5ff3-c4d0-4818-9e21-3f29de595a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0986cddb-88b8-4e9f-90fc-405facb5886e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757ef555-a53f-40dc-80ad-82fdffd744dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.176']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e43f71a-26a6-4041-8e10-9a7752adf4d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d9ef5d-822d-4c87-af5d-2dfefe465ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.178']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d24e55f9-37ad-422b-84d0-1d400cd135b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.179']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe30e64d-6733-4cd8-8477-fbc2decf0b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.180']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab15c697-62e8-4369-b028-49c75ade364e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.181']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a06f56b-686e-4a59-9708-38afcd508fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.182']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c738eda-b7e5-43f6-971c-dbe7eb89e5a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.183']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d84f1a0-dbf1-48ee-a6dc-12f9a29bd7da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4450f76f-2ac8-4985-8daa-550a8bbfea52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.185']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdfe4b11-7325-41d6-9e75-8727d9663a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d35c3aa5-e9b3-4fcb-8b95-e1acda64d366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b0339f-b256-4416-a887-8d64fab7bfee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96bc0968-89fb-4c1b-b2df-700c091fed2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165c3fc3-7add-44cf-85c8-bc02335ad8d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--072f0e6b-1451-4619-a580-2fd1a2eb2c45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.190']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b998c420-35a9-41a6-9ec4-9f4db32a1f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd43dbdd-3b51-4fa7-8283-b006776bd325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1fe332-904e-447a-932d-53c28215f5d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beeadb04-1194-471a-91fc-580e4d74b60d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.194']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7840b6c-4cce-41c5-bd7e-d88cb2138def", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70aee5e-f35f-4e49-9d90-93881877652f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d81b70e-11ae-4cf4-9331-5fa796d1d08b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.197']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a00f7d-75fa-416e-877b-4daf8f84d8f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.198']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed71a87e-31a0-4259-95f1-2c438116a562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.199']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e530359-17e0-490d-b1d7-086fb01faf36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ccee41-b715-4669-9044-655d2f91aa2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf8fb5d-a342-40bc-b04e-221a7ef93b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef974a8-7bf9-4fbf-8623-8d7d760d7f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.203']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e800a7-4f58-41b9-929b-fe148b30ca29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aafa2dee-4079-4b9d-83c6-2e6cac1727ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa514c5-0f8e-4c8e-b288-ee82a6b3b37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2055c0-202f-4fca-ba18-266cc0a402f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971ed5e9-59cc-4a6d-8f4b-c550332fd172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b051aa80-38a0-4a38-9800-faf3d77bfcea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797d1485-6626-4e4a-bacf-90b6728407e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c922816-5a75-40dc-8ab7-0a56ad502ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401266c2-709e-4ea7-8ac0-ca34c2ef6e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05140de-3620-4a62-b826-44bce135262a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ffe6d7b-b834-416f-a9a5-493adc5ba114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.214']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d2fa3eb-9f70-430b-9f40-825e909d1e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e8b123-90f7-4f00-91eb-0818e933aa48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.216']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87275fe-00e8-48a4-8e4e-1e8cf01fad2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.217']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffa44537-2eff-4f28-a492-67a5d2ed59b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.218']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374ef751-aef0-408b-bb83-9c32834e480c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47734838-62ed-4ffd-aa9f-ebbd48402fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d668e931-0b45-4357-8838-974925a5c809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.220']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6161847-74e8-4523-bae1-a1ae57a9c880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f38b68c-8a80-40f6-bfc0-4563bbbe5946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.222']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffd5b00d-3517-4b36-9762-eebd2b3a15e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3933b89f-dd7e-4dba-9211-101cd74e57cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf09ff5b-1112-4a52-a24b-0aabcfc4ec8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a7924b-ac9a-4a20-9d21-c1d3e70f9753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce324494-34b6-4137-82f6-9520818355c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd34ab4-c5ca-4ed7-80b0-8639b813fb5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eed87b2-b979-4eb0-a641-0cd4799e21f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e62f4349-3897-4606-a422-72010a04219d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60b47e5-06d8-41a7-a87a-604b006880bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c47743bd-fb65-431e-9317-5094dbf19271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.240']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437ecd70-a701-490e-8cca-e9a0c8ac8891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7bbf358-909f-4be6-a659-b6123b837635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dcd1213-9c0f-4add-81e8-a9592fbe18b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02b12e8-a648-4e21-979c-179a6f4eef57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e01e3e0-4e8f-4215-a17f-f6764fe49931", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd82af05-a7f5-463c-a8c7-937994220ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e233c2-8bbd-45d9-975d-e8e8b2a440f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0127be-19c4-45c4-bf09-d50fd2063725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b872eac-93c3-475a-858e-899bb184751b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3914ca89-8aa8-4980-a9e9-dc764f77aadb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ad7499-a825-47fd-b3e3-a10147780b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.32']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d456509-d2b7-459a-9cf3-c39f54957bdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.33']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a2ad140-fac9-40b7-adb2-2c0695e7dfd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b44a27d-02e2-44ef-b790-cbc2b2e45edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d69b8bc-da6e-4d5a-bcfb-b073fe12ddf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519e16b6-7d04-43a4-98ec-e239f0c2b37f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0892cb7b-5dc6-4f3a-b436-b68ccd8f4511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.38']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd51e47f-f92b-44e9-ba26-435db5e588a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc317d5a-2bcf-48aa-b9a4-f1c02479f78f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc96e9c-1ffa-43f6-b5ab-c598dadabe34", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.201.216.61']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69136c09-5d4e-4d05-a51b-70572df09772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.215.85.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f6be7c-6605-4f68-b77d-418d9b609025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.229.239.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c76f8e9d-e124-468e-8838-c63daf12914d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.0']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14bfe4d8-dcc8-45cb-8285-97459314a641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.1']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4277d4de-d356-4b43-8290-e13f4a6c63e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36ff20c5-4b2d-4b50-8d69-89cc44969b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93349719-b9bf-4121-8c7c-335d6b0c898b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1439c2-0f44-4154-ab7b-753233946062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53600d8-c326-4ae0-98c4-03373667798d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.120']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a36aa6a7-8418-489e-a0be-dd1886e46080", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.121']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5d363f-ecf3-4de5-8824-0644eaf2de87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.122']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816a95f8-aee9-466c-a3d1-c906c128d198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36dc79db-dc36-4a0c-b186-5c44b311a176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.124']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6372bbf6-6cc4-4b3e-bbfb-80860bfebb97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.125']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc0a2628-bcd3-40bb-8037-d9054a9f40c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af68902-a6a5-446b-8ae2-976e0bd8566a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f44044f-5249-4adf-a9df-ac15cfe3465b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b758d99f-16e5-4fde-b085-186fc2e8922a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.129']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f13365-323a-4adf-b138-d30b6018ced7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f489e24-5f77-461d-ab47-43adf8dc9c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75df705e-63b4-4d43-a266-38bfbc29d42c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6d983ca-ec70-4c66-8a9d-be53f7661d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db51f51e-ad9e-468c-ac4f-dbea3c46ce62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07733bdd-010d-4b34-9139-b7d41885455a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1775b625-2aa7-40d3-953e-f162f769050c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.135']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca2a799-4d01-48b7-af96-7d78222f3287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e302d94b-d879-4686-a4dc-e0b066f52d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed96b31-3952-46a0-8c7f-a9494424e0fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788bc933-1268-4642-9179-09368697b4f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce7fd39c-c6f1-460e-ad20-cb23fdc0b299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0d31e2-8e91-46c2-a69f-e7b4160c0e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db18b1e2-9b55-4276-ae09-00ff70245a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--401a8fc9-0312-43a4-ae29-e7cf255b9325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d44cdf05-1436-4cc6-8fb3-3469eb7e1bfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d05927-2e68-412c-bfda-3cb053e9c0bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6660e5-f718-4359-a14e-4ae7d89e5213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba3a2ea-892e-4fb0-b8f1-2f5e8423d3bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.163']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5527e86-721e-4cb4-90bf-c04cb810f4a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.166']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f98eb2e-5e2a-43bd-b42c-146dc4203267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12af4390-9305-478f-baf9-18487c8469d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d402c9-d3fd-42ee-b4d2-d3fce33ff9d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.18']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be2b821-958d-4ec4-8131-ad88dde3109f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.184']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcabf318-5bc3-40a4-98f1-083557860eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.185']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3587b2c0-3a30-4c67-b25a-bf104742313f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7003fc-7776-46d5-800c-7c934269a9d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e10ec53-af76-4065-a931-a6cfb79c6fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eaa84bf-3ef2-4c25-a825-81b1874fa52e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.189']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf54e291-b80c-4d95-83aa-b811e95667ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.19']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a708c02d-b658-4aaa-b486-91c667bfd90e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.190']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--667b3b49-4b71-40ac-b373-43b19e4f443f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.191']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b96f36f2-4f7b-4a93-a59a-46461d7c05c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f96cb48-844a-4a01-8e6d-de57ba75a5ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.20']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a294d749-44a0-4397-aeb6-350b4594af50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd27d10-6a76-430a-bfee-95295f7589cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41e5499-3601-4230-83fe-3b9b60b4d27c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a283769d-770f-420f-be8f-9c8e6dc1cf5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.21']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--155e6812-3b00-4fed-b7a2-c3beb78c47ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cbc1806-6972-4f7b-92cb-4a2800aae451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27de6ded-ed57-4638-b311-71ab41d8366a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b23055a-bfd5-4203-94e3-7ed8be7024e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d61de657-2bbd-4ac0-bfb7-70a4fc6b9801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.214']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d37b8a99-aa00-442b-8be1-dbc6689bcddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19bbc17-125d-47a0-a526-9d3c88943182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b17deb08-0bca-4796-8955-82d13192af30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.23']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44482146-ec0f-43aa-901b-eff1e79839c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c905bd8-232c-4afd-9cfb-bc61c8a358b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe29cc6c-ba8f-4b56-8985-566bc05e9593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e48a8ef-f1d1-451a-be6d-de5082d90f94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1086aaa3-ab96-4953-aa5b-3d6d708e0dcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a328e2-75e2-4ea6-b478-438feb9811c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c56bdd39-92f0-4963-8554-308de5a87299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d912a8-f583-408d-ae82-80e3821a68ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf2f5ad-27b2-4816-8401-f02136bda436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.24']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff1f9ab-03ee-4809-957a-9326f38ba636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.248']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--becd67aa-6f3a-47c9-8657-3c43ca350c3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.249']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad6ce20-e1d8-4ead-a759-b02faeda9b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade270a0-157f-4bcd-b963-0225a72f08bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e46aa5cb-c126-4277-ac40-c540b740d5af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.251']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968e22f7-d20b-4355-a330-7662bd30388c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a2eaa2-9a71-4b9d-b94d-8cdb53a968aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.253']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c53efbe-ce61-40be-83f6-66e8e901a11b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe2f9cb-bbad-4a7f-af30-a33764766833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.255']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314c9fa2-df37-471e-bff1-c00f84233a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.26']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c688d6-cbc2-4263-b436-d2da0d0e0f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cadfbfc1-4dad-4b87-a252-37173fee7ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.28']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7cced20-87a8-4ff2-a098-4a04d2dfa30b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68e53276-b1ac-4ea6-a964-0dab8675efa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c0c0e2f-02fe-43a7-b529-c05d73d43bd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c3670c-608f-40dd-b0eb-d87ca2412d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed0c69b-31e4-4b0c-bc20-69a9a0495ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04f30b99-1b80-450e-94d4-669d82c4784b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8900a9-d132-4307-b3ce-48ebd06f3c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.51']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae917158-e965-4565-a098-f0ea343cc4ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df06c4a-951e-4dd8-a7b4-d345ddef5022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f4f1726-87c0-4528-9929-ebf5b127d8de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe03c64-9387-405c-9e89-9ba9e67ae2f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51378ce5-73d1-4509-88dc-9884945b550f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c15000-81f9-4d55-bd67-cbd9c9f3b394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455ea0a5-b62b-4c87-adf3-a80083219494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5580b7-2138-4056-ad04-3e8ac6dd9bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d663f8-3c1a-45b9-be14-afdcb880e131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482e6657-639c-4f1c-bc26-824f62bdb337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c47f714-1c94-47db-ade8-c0890977f67c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e968c3-c042-4dec-9c83-95f9ae473aab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29718f04-ab09-4cf0-8d66-8a7c41e76e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04db508-e26f-4ac8-b71f-f10714e691ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.88']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c31af2b-7bc8-4b85-ac71-4071377871f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.89']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8177ce-721e-487a-b7a3-319be559d397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2491b7a2-e574-45dc-9633-37e72bb81e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.90']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693059f6-9a1c-4e20-b3a8-d5ee92c2a25f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e4693e-252d-4f7c-83df-ed88f1a2ed4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abcd6824-9212-4641-966a-af93f1fe5af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea41161-8f5e-4c4b-8da3-9d411c34afdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99b6ec5-2fcd-4d8e-95b6-193ae16b3e4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.95']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e867e56-0161-4ae3-94cc-a768a02973da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.0']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2750b976-5256-4290-811b-d4538e7ac364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.1']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f88889-413f-4ff8-8805-84d42269ddee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5bbc22d-87c6-4829-b05b-c2a647e2d60e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.104']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9284434-6de9-4183-90b7-41a0563575c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.105']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2b1384-5e9d-48b6-8139-bd181d522ccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4994dba-6c8c-4edd-8a05-ed3cfe82bece", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.107']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d088fec8-f2d6-4265-933d-9e3eeb37ea90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.108']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--777c6bed-1348-496f-8725-cebac283ad16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.109']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97bed082-49d0-4ca7-a872-4435f0266fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1663aefd-c15b-40aa-8904-dba87194b76d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.110']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50926c49-eea2-4f98-9fc3-807653f11ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.111']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--114e3ec6-7a82-40d6-8a2b-31c7352b912d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a98d7964-f67b-4fbd-97f9-bd6adcc5b921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.113']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e54b559-247f-4801-8df7-935571a297de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade2e621-9a16-4abe-9c9c-0d53831155be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.115']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159ae412-2bf5-4963-b0df-9fea688857a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.116']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc3060d5-8ff6-491a-8cba-dd72de806e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16540fb7-90b2-4dba-bf3d-59a38c25d2c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c6ef23-999f-4b61-9013-a35364fd5f5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.119']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214af73b-775b-42e8-8c06-e306c658e5d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d4568c-f4d9-4f3c-918c-5ccfbf223e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.128']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7945f526-30fb-477b-a7ae-497062ad1dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.129']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1816685-ce88-4d87-b2ad-d729c940b719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.13']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a3f457-1855-4cd1-8179-10999a49fbe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa169293-105e-4e12-81c7-27ad8f372fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f6a14f-8d0c-4bb6-8e8d-1ca56403569f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.132']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75dc9f91-7375-4ff8-8efa-273a1a3f9f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.133']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de0a3c1-fd73-46ee-889a-3c2f44b4d333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f4e89f-65cf-49be-b522-223f29c737d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.135']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ac5510-29fb-43f4-a246-b6f9ad8fcd52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26aedeb0-da74-4198-8a8f-f3f1608b61dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.137']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38cb180f-7c56-4e83-9106-c9aa1eb6cacc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.138']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b8f7ce-5639-40fd-9ad3-a067a41432c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.139']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00438ccf-99c7-43d1-8276-91ef445e41b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0125f803-ced3-42d6-abc6-5dced9930672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1840d2d2-2dbe-48c3-b2d7-2439679427b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b66a0d1-7f0a-4664-8327-2bc71632f4ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.142']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1513c063-5867-4932-99b2-315f6de5953b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.143']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ba967c-f85a-4c62-b57f-d3926d0a7ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.144']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6acb68f5-a597-47c3-94ea-14031ef882e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.145']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ed500f-40b3-47fc-9ee9-bb301a35ac36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b164b3e0-d7d4-44db-8ee3-d416260549ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.147']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e7ecd6-cc63-4dd6-8da7-9ebbad737718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.148']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccfcb00a-9dd8-482a-9188-d08c95840fbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.149']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7e21d2-754c-4903-b678-b18786cafd83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.15']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2325de-f076-4f5f-b8e6-416b83ffbf38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.150']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c399ce-ef26-4499-b9a2-ffd0a20c338a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d77dd05-2fd9-4370-80fc-93a647c17800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.152']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f59c1c-b681-489e-80f0-678c19873db6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.153']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aeaf43d-69c7-4d36-bb1f-a4bb4ab030b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.154']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43294aab-225d-448e-967f-b019dcfe6654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.155']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448bc58d-6705-4ced-ace1-a98bb5a3056e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.156']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea0aa2ce-a26a-40ab-901b-072254664d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62af3855-f650-4c02-9de1-f4b669000d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.158']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e584cc86-6eb4-423c-bd49-2716500a6c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.159']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95f1445-9b64-4764-a87f-fadf5fa50b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.168']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5386715d-b0c0-424f-86f3-4aec62e3002a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.169']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd1947b-43f3-427d-b01c-98f644d9d8ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.170']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c0f5358-850a-4986-942d-87fad88898e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.171']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bdead80-0ff4-46ac-a4da-f45bf64f99e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.172']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8dc5e27-0d0f-49a8-8ff4-c2c7176f049d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc06775-420b-4ae2-a282-933d689ee2a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.174']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b94f47-21ae-43bc-a75c-c51437864b67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.175']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e875975-b069-4963-af1c-cf037e8d9716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.187']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eabc045-5263-43ac-9aa7-e586485b14ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.190']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcbd5a21-8fa2-4e4c-af70-ec46fbbcbe33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edeb624b-d0a0-47b0-adfe-ed8359a3ef7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.200']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58bdda49-c4b4-416f-8ba7-1197edc6dc78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136038a7-45b2-43c0-8e55-5eb0df17687b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.202']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8164bcc6-0254-4ae9-9ffa-9365438f1c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.203']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a884557-1e21-4e04-938d-a8ee87923388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00acbfda-5aa2-4442-9932-563e645b5d56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.205']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187be7b5-f317-40c6-9cc7-98009ef54ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.206']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6acd23e3-258d-40d4-ae30-45e342b5719e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.207']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f250f604-712e-43eb-920b-6c5be4fa13f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aaa06f2-5759-4972-b3a6-6ecf9b164125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6afb8c-1f07-4cae-a9b1-fa7f67358beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b53df380-812f-4ae7-bd58-095504a3bcc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21190b57-7f2c-4fc4-8e14-f10eed4a4059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.212']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93fec50a-895b-4075-9aa6-c00b9aae5099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5cc3d0-0b5c-472a-8e14-9518293a4f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.214']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6b253e-9248-4213-839c-43ed29d6bfa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.215']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b320595-45ec-4837-814f-07a6a8c333eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.224']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6ed1ce-7ae1-4ebe-a218-303d165a756f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.225']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde19f39-be47-4bd4-9884-6538595f6676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.226']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec727ab-4853-4897-9b5f-f0366246132a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.227']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0748f4-63a1-4f85-b3a7-27ef77c59ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.228']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a7dc968-6ca7-4901-a749-cc1ccb6b2051", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.229']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31224b54-9a30-41df-b86b-da69ba25c36a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90afd3fd-0632-4455-8f7e-77218f2e7c80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42146df1-eaa0-4ec4-89cd-d1065f388798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e979c966-b8ef-451c-885e-78be30431f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0665f6c9-8175-415c-9753-6f955a4dc650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e3c45e-5c43-486e-a01f-f033078b1d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d2354b-0499-4b0b-9d06-f8b74bc28ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.236']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5fb78d-5951-443a-a1b6-f248215dee29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.237']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b777778-2222-4015-9c4c-4b9b5d6a5452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.238']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e6bb0ce-8c7b-4f75-8b23-967e8d4780e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--551b5591-1c17-461e-851a-9f8730411f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.240']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a51091-3a1f-43a2-9745-0285b8b22738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.241']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2685bbb-48a1-4adf-9ef2-39ea5059d1a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.242']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9719f6-6890-41aa-abfd-48620c88e915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc03db73-825d-4333-aff8-560807ec205f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.244']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf5b7b6-49e3-42e2-a52c-ee1be22f05e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.245']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ffe561a-d430-45e6-b15c-ab0da6822f5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.246']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf826c9-43d9-4971-b504-989a4e89fc6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6fbddef-c7ec-46ff-a6d3-79d6f5e951f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.248']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb6a8f3-be71-4f3a-82c0-501dfbd1bfd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.249']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b42f9241-13f5-47d7-8763-fceaf5834009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.250']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b520cd10-a5c8-4181-8dc9-20a8a19ff779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.251']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9644c1-81ea-4c37-9d7b-ae1caa8861ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c090bdd-d1a6-49e3-aebb-b7c2e8713417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.253']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c1fdef-4cbc-4c82-8d1b-8f6ab0b197d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--878be2aa-6cc4-4b6a-ae19-4e92c1205531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.255']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba51d46-1565-4836-8902-5c5acda83a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.27']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0678bcea-bb04-4746-826e-9811dc80b13b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549143bd-3ad0-4bd4-a9ba-573f906e5b07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ecc098b-c238-4bab-845c-1020fa3a4694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83181f06-9352-42d5-bbfb-38d492f75c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69bd0033-374b-4f5f-927e-0591c08b63ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.51']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58b112dd-df2d-4571-97e4-8cd440d2849a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82281fdc-de64-4d7a-89d0-dc9e2e3f8526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.59']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbca5919-115b-45cd-b00a-d56588be8b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e49bea-170a-4147-b9ee-0da54a3b69d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.62']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96bd0711-1972-46cb-90e8-5e650f8167f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921a0f03-36c2-4d11-b078-1022e72e6b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0beaa768-da53-4416-8093-3ca4b7b3dac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--694b5a57-65b8-4eaa-9f8c-2e335c946c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.67']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07d16379-6b0e-4720-9288-f5ba66fe2405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.68']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3fac7c-7986-47ef-aeca-70d30d0afa3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e35582-4850-4599-a968-2176ff85b95e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.7']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93a435a-a243-4468-81e2-7ff3f7e9dcee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.70']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34bf20e3-27c0-4385-963f-1da8d558a1b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb11c230-0118-4f7f-9348-bca62ae6891c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fabb654-911c-4e5a-b7b3-47af3ff6a056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.73']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0de455-4417-4e98-a4fa-0f98c66bbd68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4a33bd-e0ab-4375-baf7-cfee1b3528a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.75']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0febb0-adad-46d3-9d47-6c1839a9728c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.76']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503dda28-3706-4ad1-bad5-9fcabbf2f49b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ce6d0e-7912-4975-95c7-001ef7715eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.78']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2b39dc-54c6-48d4-b589-be031587b6ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.79']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9597252-347c-41f4-bdd4-e403b385c858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.8']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8282ca54-93f5-4319-aaa3-df2a1062dd33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd9d6d6-3444-4d1f-893a-0b41b735a37c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.81']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a49a9e1a-3589-4870-a80c-0bc47c7312c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89410515-9178-4c94-8404-0575f9bbccc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.83']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e55af39-7a03-49e2-a8bf-09118cdfd0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.84']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ebfdf9a-6a32-4d40-82c5-69c063087891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.85']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2ece4a-3829-44ae-9a4c-4485147a85e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb62011-b60a-4353-883f-f8c621884407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.87']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5220cb70-656a-430f-b9b8-0977d0a6e92d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.9']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf5cd57-a64c-44a0-acce-5d5ea883be10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.238.181.141']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f70705-3723-4885-892b-769280d71b95", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.245.204.147']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d2a205-0fca-48b1-8d0f-b0e93d8b67f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.81.151.42']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ff85dc-2c2c-45cd-9a75-e529d2a08b82", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.84.111.136']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09502b48-cccf-4742-8a4a-50cf0aa62eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.90.126.65']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7cd9f2f-4e70-4b85-97b7-7798b9d21f5b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.241.196']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc643ef8-f5b9-4a16-8052-de87022056f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.243.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48bdd55e-4bf5-4e42-9b86-e928f5b2f1e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce1e8ad-0ca6-4db0-9ce8-0f3dcb20b964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.11']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ff0d6f-4d30-43c1-a89b-c1a2502655e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa92ff7-8f43-40e1-a82d-68453e046b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.17']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0243d9f2-e451-4b2a-bd48-417fc65d1793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.176']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2173a1e-8aef-41f0-9ed6-39102f7ed738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.231']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b538b6-5101-4ca0-88d6-e5e21a6dda67", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.239']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf04ff9-63ee-4b35-a1fe-9ab9e5594e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.4']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d272b010-8225-4bb7-97c3-b61ef2b18fa1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9081b7c8-5914-42e0-9435-007860dba391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca92d24c-5d4f-4e8c-9e08-725c0cc54fe4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.126']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef0e54c-4028-4bd6-8be2-fd35f4a2dcf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.233']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07eaad8-73e0-4346-a2e9-a22cb58b2675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.235']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2594a39-e6f1-4aa7-ba84-eadaeebd7361", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.34']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e8cfe10-ceb0-41d6-9cac-132579e3fe3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.80']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f3b8a2-e3c7-4fb8-81d8-a2408a8b9c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.117']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ae9fae-b990-40a9-96f6-5b35158ca6be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca13ebf5-1816-4214-b1d3-477032c7214f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.35']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e76d70-6283-4046-bed3-b215b63167ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.37']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b3e870e-4f9b-4a6e-95b6-d7a60df3054b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.96']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3988f10-45ed-4fe2-8a5e-fad5b332aa16", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.93.183.92']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a52aac-248b-4bd0-99bd-8fa22a609cbf", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.93.49.247']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a3e987-0273-4fe1-bc0e-aa9e729c9d29", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.93.99.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9814eb51-2f5a-450b-a81c-e9c9502aba7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e90d6dbd-9491-4628-be49-dbf9dd6f075d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.232']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08507c9-b1da-49e8-9b61-fe471ac90f5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.234']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa475a2-757e-4604-9c8f-b8ccd8f14a65", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.49']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f36d5a-1e3b-4214-864e-c0f114586e39", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4138521d-400e-4377-91c4-0c2f38952ad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.57']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7187ded6-0990-4890-a0a5-891dc4e321fc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0a4139-cb55-445e-9ddb-5026f9ae7cbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca18dde-769b-4eea-92e9-c154ba24f43c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--befe4e88-6d3d-4702-ae88-407c0da37480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.86']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3934bfa0-6b08-4912-b6e2-1fce113dc14d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.57.209']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9312ec4-4ced-4fc0-9fb0-bd35642032a2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.205.107.22']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1484421e-a449-4a77-a1db-bae02442a964", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.205.129.181']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2399455-8b4f-4ff6-827d-725ae52ad35c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.206.250.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae3146a-6b20-4219-8b2d-980fcc290e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.39.60.52']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb884669-1981-4d03-bd6c-064a5152b263", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.44.216.112']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5cfdf6d-21b7-4853-a4ba-5947a78e70f6", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.45.197.94']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e80944-cf43-4c16-bbf7-f413aace3a57", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.62.143.71']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e410a5a8-9bba-4c91-8d81-83ef29319d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2244d08f-3f0f-46a1-be4e-58183ba4cd44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.115.28.102']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93016a41-92c0-4145-9a77-293b2210d8c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.50']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da755b96-7457-4d98-bd76-0351af7751ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f182d5ef-9b2b-4411-951d-80d638bceca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3693605c-e492-4158-8a36-d9fb5cdf1cb1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.183.94.195']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9dcb6a-9238-42d9-a3ad-9f09daea7ed8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.56.152.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--446af704-3f02-4d68-9c4f-f4a4f0b71461", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.95.204.130']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df096df-69ab-4257-b833-fbba7a84df48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.125']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aed588c-77f4-42c7-9fde-d49d71d5707c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.193']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c67484-19e6-4823-8799-fae6788a3e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.10']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e003c2-1dd1-4e37-b63c-d550c6da64c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c366df2c-b7a7-4237-a6eb-5e5763e659b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32dcbde-4a9c-45f6-b237-51390b93b575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.12']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a7cf9e-742c-49eb-aa00-cc4fae2b8177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.120']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5fd4e1-0171-4aa4-b463-3629ca06e56f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.123']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9788f09-140b-4381-8c72-21189e1fa966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.140']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c235a4bf-bff8-4d12-9af3-c1c947306e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.146']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb6f7e23-917d-4b79-a60e-a81f4466ae40", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce84ec8-d179-42a2-9203-eb69b60c30ab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.177']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5edd2357-8c70-42b2-9165-1bedd62752e8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b476a8-2f6f-4e66-8fc6-6ba0fd9f50aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.188']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4715a4bf-e541-43d3-9100-c3ec2e66851d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1db2a5a5-391a-430b-8591-b4646b3359ec", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.230']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa5a248d-f7d8-4b78-ae34-367e11fa057d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.243']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--745f3cb8-6842-44e7-990a-d543da198a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.30']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5219d47-1880-4621-baba-8895d7eee26f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.31']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b85cf74b-c709-417d-b377-fafbb075e0c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.36']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4d9ec7-bfe4-466e-81a8-449d36f82600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.43']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58909d4c-99b9-4766-a498-e30cc109a414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.5']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5bf083f-8342-4efd-a94c-e0c8eb121549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.54']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a12decc-5224-47c1-9376-428020d8c840", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.56']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d12b43-3ec3-46ea-af59-5b951b2cf0ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.64']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544ae400-7c2e-4f10-a368-f598090b6205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.66']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--451ff2c2-9b54-47a8-bd8a-3c6e3e6be52d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.69']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316fdf27-733a-4307-b489-638f6c9559f5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.91']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dff25f8-c742-4f30-9852-5714e94820c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.96']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af2e6d2-8755-4bd5-8b23-89e8a24e2c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.99']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b431705-665a-4405-a769-ade25a48e147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.46.252']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3abe252-9cdf-4a96-90b6-f94f3ad19386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.46.253']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d437b945-fb66-47eb-a90f-2b776edc991b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.46.254']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ab69cdf-7197-4538-960b-6009c0bea948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.159.110.201']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f336547d-2e4d-4e01-a857-9f9c1ef40e73", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.200.177.214']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bece9c4b-d677-4ada-a142-11d77305bab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.131']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc8cd6a2-859b-4d70-a8b4-8422735d6624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f659e74-2c88-4fe5-8b2e-6b1f3ff71948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.3']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f482d5-9129-419c-9ac5-b5f6e0fcfb27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.6']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a527f519-85d3-4682-ac23-5d962f71eef4", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.249.127.164']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822b9bf8-e5b1-49bc-bb9b-0fd20403e0a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.46']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a523ab4c-2c93-44e8-ae56-ee3569bc1c9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.31.111.127']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fcf74cc-09f4-413d-b8a5-987c485d9bb9", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.54.108.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b46109-46f2-4bde-bda5-115b83b6d603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.61.107.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a96a35d-5942-4c4a-9d3a-5cecf7d9400c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.72.102.118']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40f22eb-7345-4105-9189-e744dd1d7877", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.73.131.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ea1dacc-0122-4cda-8922-0a623360f225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.74.104.89']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1fb709-a413-43aa-9b4a-06ea02e255d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.105.4.82']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c69e0980-a970-482f-8ee0-5c74fa778778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.139.138.165']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310535ea-2fec-49bf-947d-da55046116ab", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.173.179.248']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7621c8-7950-4182-a554-87fbbe38757a", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.173.216.16']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7162cce8-7c8f-4999-85f7-3e4362e52747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.53.134']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b80c1dd-5b71-4420-a228-0d5f837334df", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.255.158.96']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276be746-9094-47cf-899a-4a75a96dd17e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.27.17.151']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ffc8a62-2e75-4f7e-8ff2-89ef3166765c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.3.76.162']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f7b4354-b190-4b6a-8c85-046b2361aac5", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.6.42.173']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1928ec3-2088-4655-8c49-fff986e1cada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.101.29']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02ab7d3-8012-44c2-a87a-fa1a6fc8cd97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.101.89']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56be2b84-7171-41c9-8d12-42e2534936c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.106.14']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55ea360-eb4b-4e65-aa04-40f93f2e5ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.106.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbfff40-ece6-4c00-9277-66826c1e3b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.93.15.25']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eeac41f-ae58-407c-af2a-e61afecc0d70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.131.109']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30701bc2-1525-4cef-9a1b-7d9e77f1e4ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.114']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ddc43e6-cb21-484c-bd88-5e40ef92bcb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.150']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0ab50d-12e6-44d5-8d02-d1ec3bc9b28e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.186']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c93a9c6-75c8-4459-afde-e2f480ea0fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.192']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ae7380-cd67-4bbd-ad4b-71898d3a2f7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.199']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ceea52d-ef61-4f28-a052-ab80e8d33f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.208']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757be359-395d-48e2-88d4-9bea61fb6ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.210']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7538b9ff-e172-4e96-935d-0034ae27e5fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.211']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8286048-04b5-442f-ac29-bb498bb446b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.219']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--533d7003-a628-455d-b5b2-d85c671b3106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.72']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b77645d9-2e64-408b-9dad-31d82b3c9e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.77']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--becf1386-b372-4eff-970a-59fa4b016a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.132.93']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5df129-ea46-40fe-ba21-b6a03bebe6b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9daf4fd1-4eba-479c-8639-0390072394fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.135.109']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf994a1-73af-4c9f-a157-d5721c323d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.135.221']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e578d6ff-3fd0-46ec-9004-7c88a6f8fce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.135.45']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e35be4-7488-4d6f-a916-19611721855e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.136.223']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b8d438-4bf1-4190-b7f0-133d9c3aba4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6da98ea-f8d0-42d1-989f-7e404191df7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.142.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81dd91b-b87a-4605-b1c5-99cd8e810b91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.142.98']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab197b0-0777-467a-888e-eebf1fcf9dd9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.159.37.95']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c2c5b7-10d4-435d-89bf-760433511f2c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.70.124.39']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47fe91b2-3b29-4c90-a90d-204b6557ede6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.80.77.204']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4265b31e-a76e-431a-bba2-93dbc3863770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '99.230.124.2']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8d90a1b-e402-47c0-a84e-6d7005704fbc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '99.6.104.157']", "pattern_type": "stix", "valid_from": "2026-07-22T00:00:00.000Z", "valid_until": "2026-08-21T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-07-22-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2b501a-b9b6-4354-9373-2c2b9e56d2af", "sighting_of_ref": "indicator--a63fccb4-20fa-40bf-990f-59a0d92ab861", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe31906-df9e-4337-a7f9-348a73934028", "sighting_of_ref": "indicator--c3511f56-8dc4-48e8-918c-bfd83f1a1534", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c5bea6-d529-433f-a367-1dc9c1c13a7e", "sighting_of_ref": "indicator--d6e7fe77-60b9-4515-876e-5d96f2bb43a3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72eda11-9252-4085-bb15-db1212e2a023", "sighting_of_ref": "indicator--84b22f02-4329-4788-b627-ca0a5efaac78", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e91c093-1f37-4dec-953d-96ea102fd72a", "sighting_of_ref": "indicator--8517c136-1d79-463a-93ea-52865e1d351f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8bf49fc-29da-44cb-bb9e-de072b59d595", "sighting_of_ref": "indicator--8517c136-1d79-463a-93ea-52865e1d351f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55174979-faf6-4934-bf72-991aac948e95", "sighting_of_ref": "indicator--fb0844b5-23ef-4ba7-9a00-2ccbd01fa815", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288a22cb-07a9-43ce-bf77-ede4fcd22e67", "sighting_of_ref": "indicator--98735b9e-9428-4cdf-b1d4-0d5df9d73e43", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb29463-aaf4-4385-bcb2-a3ccbb5a6c9b", "sighting_of_ref": "indicator--932b41ce-7664-44e5-8567-7bce1c608853", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3d2850-b445-4977-97f3-2b58f6ce71a0", "sighting_of_ref": "indicator--d00135dd-eb15-4a7d-8819-8f1b644ceb4a", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca026c2a-ef2d-479b-bf85-1f411ca6622f", "sighting_of_ref": "indicator--23a01b7d-708f-46e3-aa7e-1eddbf7c1b80", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e93ae8-8d41-4c22-9b11-a4d66c7e77ff", "sighting_of_ref": "indicator--f84b6380-ef5b-445a-b95c-dbe4de4e94f7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf183c7c-3ad4-4873-bca0-181913eba5c4", "sighting_of_ref": "indicator--23f9cdfe-a123-41a5-8c7c-3ccfd52b2c11", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f548c6b-cc70-49f4-9a97-3ad66d3265bc", "sighting_of_ref": "indicator--a946c48c-c945-477b-bf8d-e636db8a4050", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59248df5-d836-46c2-81f7-18e0be5144fc", "sighting_of_ref": "indicator--da3a2fb3-0dcc-489d-97fd-eb648a67d0da", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283e027a-f89f-42b9-a3da-b14d1b2af18f", "sighting_of_ref": "indicator--da3a2fb3-0dcc-489d-97fd-eb648a67d0da", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbd4541-f2fa-4170-91c7-23cd77a84f52", "sighting_of_ref": "indicator--9894b474-a66a-4295-b6ae-daab3e7f982c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be166c4-d82b-4889-9a43-35358a9ecdea", "sighting_of_ref": "indicator--ee5c9394-0dd2-48c7-84ee-50906738202d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2639dfee-d762-443a-a1af-d0b40e84f865", "sighting_of_ref": "indicator--c9cf53c3-8066-4b9b-93e1-6f608ebca299", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b13af4d-2288-4e07-9003-4bc10859f35f", "sighting_of_ref": "indicator--c9cf53c3-8066-4b9b-93e1-6f608ebca299", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c045aa18-7d2c-4eac-8b54-47147b97eccf", "sighting_of_ref": "indicator--a2a8f95f-e6bc-435d-a128-2b889825ca34", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0acaf049-61c7-4163-a28d-9dd16adc1e46", "sighting_of_ref": "indicator--06c3c036-249c-423d-bca2-475d1a686fa6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2324fd42-7231-4ab3-9c21-247f762a626b", "sighting_of_ref": "indicator--569470d0-3401-478c-bef2-b04f062e4aac", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a01b4ff-dda3-4036-b59a-05e00f25bbdf", "sighting_of_ref": "indicator--eb205a29-0e03-42e0-bf54-c611eb881974", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5762c431-d84d-42a4-ac82-2b4c798abe85", "sighting_of_ref": "indicator--812b90ca-c99c-4c25-97b2-06ad6bba1193", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085fecab-f340-4117-b9ee-604da1e1ae5d", "sighting_of_ref": "indicator--7a8b8f9e-de13-4e49-bf39-4135db4f4375", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be75b70b-c033-4df5-b9f8-3c4f51f4c33f", "sighting_of_ref": "indicator--2ad1afd1-d9b7-4a8a-b04e-4c7d2632c196", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a15c40-0055-401f-8fc4-85fcfea727b0", "sighting_of_ref": "indicator--3a027c5f-17c4-4ff3-bd04-cdc43f7d40fd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7572ede3-1d41-4e3a-83d1-2d6cdaf47dc9", "sighting_of_ref": "indicator--21ce167e-f70b-4365-804c-08f3e78e04df", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9434b9bf-4cdc-420b-8adb-06d47f9efbb1", "sighting_of_ref": "indicator--78be9346-29bd-433d-a617-7235c6698792", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e9a6e3-b537-42ca-b246-eabd18fa04e2", "sighting_of_ref": "indicator--353a9dd4-e426-460a-a535-ddc5dcdcb5ce", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1c3a26-f7ed-461e-8b9f-03c675372d62", "sighting_of_ref": "indicator--b350c2c1-0cef-472e-9241-a944b320f8eb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9d31f0-3244-448f-83c1-70339b265be8", "sighting_of_ref": "indicator--5eb61e06-f841-4029-986b-bccd4bf3e65a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c63fde-9ed6-4ffb-9e26-4be2d35b4a3a", "sighting_of_ref": "indicator--5eb61e06-f841-4029-986b-bccd4bf3e65a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d37399f-ddbb-49ac-abf9-0f7dbc9538ff", "sighting_of_ref": "indicator--c5068c45-87d3-4722-a633-9a5f6be7f937", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4d9a31-8c40-4a5a-a8df-ca241e2c9a26", "sighting_of_ref": "indicator--6f1b57b7-a0cf-4bbe-9ee9-997650c2093c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417bce1a-3523-4de8-a606-9d43ffe1fa16", "sighting_of_ref": "indicator--8ee8cb83-62c6-452e-a02b-086f6c5b6574", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0980fcdb-c1d5-4535-bb06-6f3a07695dca", "sighting_of_ref": "indicator--20776611-ffd5-409e-85fd-7350c181b100", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1edca7-8924-4f6d-970a-43acf614fdf8", "sighting_of_ref": "indicator--281bb02d-59fe-4c43-88f1-038fd3bf411b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767e6edb-89f6-4245-8cce-7bd58c994390", "sighting_of_ref": "indicator--927f8a12-44e4-49a5-9eb5-41e00fd4e534", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c711e417-3e2f-4196-a789-16b0b815e945", "sighting_of_ref": "indicator--5d04c4d9-a5c3-4d0a-85e1-010bffb82cf3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf4d3ba-4d60-4f99-926b-c9860044a9d3", "sighting_of_ref": "indicator--dd3d8717-7748-42b0-b878-c891d641ea48", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2152dd70-1e51-48cc-8bed-f3956d067d42", "sighting_of_ref": "indicator--ca88ef10-c366-4a08-86c1-2caca23e7231", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326f4579-6371-4112-a771-aca9885a8cfc", "sighting_of_ref": "indicator--ca88ef10-c366-4a08-86c1-2caca23e7231", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3977b4-09eb-4f75-9f4b-3c1127b8e5a8", "sighting_of_ref": "indicator--319eb60b-2128-499d-a366-d023cdd1eb7b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b225ea-5ca5-4d74-8246-076b9855246c", "sighting_of_ref": "indicator--5020d906-1b16-4c87-bb31-dcba40085cba", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09bdaa4-68d7-4a49-a382-21891e3096af", "sighting_of_ref": "indicator--65d380f9-9c3a-43d0-8a2f-ddec4f2805bb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bfb6b7a-0e65-4552-b645-e48e84d9f88c", "sighting_of_ref": "indicator--43e63fd9-00ee-4d6c-9b6b-dcacb681a4f0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a579a2af-6f78-4fe8-9775-fd75d2ca1aac", "sighting_of_ref": "indicator--2bdfc579-0206-4287-b22a-492fe86f7993", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b8c093-246e-46af-b822-b7ef60d90948", "sighting_of_ref": "indicator--2aeae2b4-caec-4d36-9aaa-122c0eb1ccc0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e7f4b3-9e1b-43e6-a76d-937a68ebda09", "sighting_of_ref": "indicator--8ef7dada-2700-44a1-bd41-df6add2f0f19", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac83d151-008e-4444-b9c0-21108447fd8d", "sighting_of_ref": "indicator--451886c8-4b62-45e8-8c01-87ffe2d9e31e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2cd4590-c2e6-4a21-a7ca-4519482b06c2", "sighting_of_ref": "indicator--451886c8-4b62-45e8-8c01-87ffe2d9e31e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f6d6ab-0367-4bf5-87d7-8f60a95e1fba", "sighting_of_ref": "indicator--1b806c2a-fb4f-4e2b-81e5-6ad143c01a37", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87039c4-e58d-4a25-85a6-70fa0cb270cd", "sighting_of_ref": "indicator--373af92e-b0b6-4501-a4ce-37bd4af06faf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75564ae8-f126-4214-b67e-c819df41e26e", "sighting_of_ref": "indicator--eb789a64-bd33-43bd-8b59-2db18a5a0be1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfac984a-a001-4f0b-a1a9-f8974326039a", "sighting_of_ref": "indicator--5232a118-20cd-48f0-a328-ee130648df61", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00392279-c030-4a58-a017-8276d7015f00", "sighting_of_ref": "indicator--163a1f78-5343-4623-ac3e-14ba007549e7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0db914a-fcc2-4bb4-90b9-ede3964f97ff", "sighting_of_ref": "indicator--e087eb5b-fbed-4349-b663-b2c9e3eebe83", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dccaac-7672-4a37-ae04-de608390920b", "sighting_of_ref": "indicator--b0d76f5d-4746-4621-9b51-97089e25d131", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f6da21-2e40-45c3-ae4d-90bf1b017477", "sighting_of_ref": "indicator--b0d76f5d-4746-4621-9b51-97089e25d131", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4828b297-2aab-4827-9f56-e129e27431a9", "sighting_of_ref": "indicator--929975e8-3409-4832-8dcc-b6ceb1e647e4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77998fa-0187-4959-8185-750cc37deebc", "sighting_of_ref": "indicator--929975e8-3409-4832-8dcc-b6ceb1e647e4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f5b317-233e-451c-b960-3d088ef72f4c", "sighting_of_ref": "indicator--20e8bb41-4bc5-41f9-8f54-370f5d263bd3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4235cf-fe1b-4d7d-9120-5173e6431bce", "sighting_of_ref": "indicator--ee29fb54-14cc-4db9-a02d-1e403f13e095", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a785bff-e89a-494f-8123-b669adeeec86", "sighting_of_ref": "indicator--ee267927-cda5-45d8-91ab-4aa965303cc2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ed6fd8-f6ae-4f86-955a-dcd2fc985e14", "sighting_of_ref": "indicator--f0a5456c-1f29-451c-b968-73214eae5fb8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8a4046-d3c7-4256-bf6e-da980d037115", "sighting_of_ref": "indicator--f0a5456c-1f29-451c-b968-73214eae5fb8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f31a116-e5cd-4ba1-a220-242044e86914", "sighting_of_ref": "indicator--e2857bf1-7fbd-4362-b7bf-a96b0676e6a5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6652acc-1ba8-4474-9cdb-22642ad24c97", "sighting_of_ref": "indicator--8b3c83d0-6fe6-4b48-8c98-f0ac362dc72a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a02201f-0d7d-41ee-a1e7-ebb325c14166", "sighting_of_ref": "indicator--e6b789ba-5b34-4044-853c-8e46583b5e3e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7707bf-2598-4632-8e1c-6f3c77988a33", "sighting_of_ref": "indicator--3c6bcc13-d95b-41b4-b9f7-0207425c8912", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e227bc4-2ba6-4280-ab2d-e70b1395467a", "sighting_of_ref": "indicator--41a95e8a-aec2-45b6-bd25-c62c1bab70b6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--178037c8-0a43-4dfa-9828-d4dc59e928b9", "sighting_of_ref": "indicator--5911de47-88df-4bfb-b279-061a36ef4a03", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ebeac2-fb1b-4276-a3f5-3d602c9829ea", "sighting_of_ref": "indicator--1bb37f48-e5a1-40b7-bd99-ddbbe726623e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7767ab7-aebe-4d30-b8c9-cb1b0c7408a1", "sighting_of_ref": "indicator--1bb37f48-e5a1-40b7-bd99-ddbbe726623e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b44af8-ce0f-43e5-a027-49d9f772ab1c", "sighting_of_ref": "indicator--a6874a07-5914-45ad-ba57-4150a9a78171", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f79442e-1829-4ee6-9549-7d48ab749b11", "sighting_of_ref": "indicator--a6874a07-5914-45ad-ba57-4150a9a78171", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d795270c-883a-4897-b0e0-6b3ab6ab9ccd", "sighting_of_ref": "indicator--2f35799f-e144-4a2e-86cf-91505df44139", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688ae292-ee45-42e3-9303-8a1b585396ac", "sighting_of_ref": "indicator--2f35799f-e144-4a2e-86cf-91505df44139", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed393c0d-459c-4c6c-a56a-76bde44b2897", "sighting_of_ref": "indicator--e5351839-d998-4973-acb1-84df87c08039", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ae35b3-b1ea-4275-b569-40f289d909e3", "sighting_of_ref": "indicator--e5351839-d998-4973-acb1-84df87c08039", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a7cef3-a234-4d40-98bb-800af1bda5b4", "sighting_of_ref": "indicator--79f23d42-5a14-4bcd-a1b0-1b79f9231a29", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ef7282-0506-4452-a917-276f4dd4a267", "sighting_of_ref": "indicator--00308a3c-ba32-4111-97bc-935c36b3e58c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cc92127-9c51-40ce-810b-e83cf3bc64b1", "sighting_of_ref": "indicator--8901c190-bb2a-4887-aa85-5837512f9f6a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6a6ad8-90d2-42b5-a553-b6cea5571f2e", "sighting_of_ref": "indicator--8901c190-bb2a-4887-aa85-5837512f9f6a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ae33a8-e3d4-4ab0-a704-19fbd44c10fe", "sighting_of_ref": "indicator--5db189b9-e8b2-41a8-a194-6ae6e8ef3166", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc75c569-78cc-4387-a217-7556fb90c2cc", "sighting_of_ref": "indicator--975cd314-0493-4d4a-948b-b37b98e1d64b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1791c095-8801-4bb8-81f4-5668c4ceaa62", "sighting_of_ref": "indicator--975cd314-0493-4d4a-948b-b37b98e1d64b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4699896-1230-446d-bd2a-7f21bebf3b50", "sighting_of_ref": "indicator--8a897628-411e-4c84-9089-4d4513648554", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae487bb-0443-4102-8a99-a5a165bac4d3", "sighting_of_ref": "indicator--8a897628-411e-4c84-9089-4d4513648554", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3dbcfe8-96ff-410f-b629-de38fa488e2d", "sighting_of_ref": "indicator--74188537-342c-466b-8475-94ee9dbee5bb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d63d1f-7ac4-428c-ac2c-d70f52a57a89", "sighting_of_ref": "indicator--b9a62bc9-840a-4dda-9555-5bb208393475", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af25d1df-6dc5-4407-9278-b42f6f708358", "sighting_of_ref": "indicator--16531e3f-3d73-479d-a654-432a3c1cadcc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123ce615-a110-4d73-8f41-fa3d089b845f", "sighting_of_ref": "indicator--3530bf0b-5027-4501-9bfd-b349f238966b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaeab8d1-9eca-41e6-9f43-2d98f9be5cb7", "sighting_of_ref": "indicator--3530bf0b-5027-4501-9bfd-b349f238966b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--536959f4-2f87-4b6c-8f79-7b73f82457f8", "sighting_of_ref": "indicator--fbe2c90f-349a-426d-b4ec-e4a7a40efd56", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9a4934-517c-4952-a6e1-9d3d7a6f1e5d", "sighting_of_ref": "indicator--fbe2c90f-349a-426d-b4ec-e4a7a40efd56", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b30a49f-bb0b-400a-b4d7-972d38ebf05d", "sighting_of_ref": "indicator--603f1632-dc51-4bbc-b43a-8495f1cb568e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55921c41-f2fc-41b3-ad94-de7a673d15bf", "sighting_of_ref": "indicator--b44da14e-a43b-47ca-ba42-e253f767d331", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f24126ea-64bf-4ba1-9fa0-eb6d22d69708", "sighting_of_ref": "indicator--b44da14e-a43b-47ca-ba42-e253f767d331", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e44fed9-a46c-4949-acce-464178b86bc3", "sighting_of_ref": "indicator--ffc5ead6-cbf9-4c4f-b43c-d7bfcba23bb4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e59f7a-494d-4ee9-afc6-d9b2823acd1b", "sighting_of_ref": "indicator--8298c277-7583-4870-a038-6c2105daec6c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584957a5-6d5f-4a72-a29c-1347b8d814f1", "sighting_of_ref": "indicator--a9061582-b5e8-40b8-8969-d910b3fa7417", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0111fa32-d013-4cc9-b14c-6b284878dc52", "sighting_of_ref": "indicator--a9061582-b5e8-40b8-8969-d910b3fa7417", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13587a3-9884-4ad4-8fa2-e757870bff1c", "sighting_of_ref": "indicator--b0a8e586-a95c-4602-ada7-71a87c89c39c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf406e5-050a-436b-bdbf-4d1617e48542", "sighting_of_ref": "indicator--b0a8e586-a95c-4602-ada7-71a87c89c39c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f19c271-05bd-4d97-bdb7-38354a17a3fa", "sighting_of_ref": "indicator--ade53add-8824-4b15-9996-f08c7126e8b1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c136ef-a8c4-4a3d-ac1b-43c296c9155e", "sighting_of_ref": "indicator--ade53add-8824-4b15-9996-f08c7126e8b1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1a68fb-7913-4576-8685-44f8e29cc97b", "sighting_of_ref": "indicator--7527db04-a205-435f-92cb-1fb83dd7e703", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e8474db-23f6-4d21-a371-ef2cd5296e0d", "sighting_of_ref": "indicator--97a829f4-7657-44a1-b968-caa6953def38", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044aa39a-456d-4d59-ae0c-603f8b0e37f8", "sighting_of_ref": "indicator--6e365803-9d9b-47b4-806d-a3af70258322", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ce566a-43c9-4982-acfb-2467ad39aade", "sighting_of_ref": "indicator--6e365803-9d9b-47b4-806d-a3af70258322", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9213df51-95ea-4391-8da8-04ee8bf97d49", "sighting_of_ref": "indicator--0b4ab42b-5402-41d1-9d88-085fb3111bdc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3552d05-9816-4329-92f1-94f51e65ec9a", "sighting_of_ref": "indicator--f353e513-4394-4d67-b9eb-7be933cb7692", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f49ba1-0920-4713-90e3-bb4c09e9dff5", "sighting_of_ref": "indicator--eb5d4868-869c-4ff9-8959-95443216e707", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09eb3967-fcba-4936-9f17-c29cf28850be", "sighting_of_ref": "indicator--fcce4384-c52a-4e73-9701-0334b470c2d6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e2eb3c-05a7-4a3d-ab19-9aa334935302", "sighting_of_ref": "indicator--0dd5368d-1c56-401d-b778-941fc8de1011", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b30736a-cbb0-4c21-af60-344274e96c93", "sighting_of_ref": "indicator--937f03e6-537b-4e9d-aa5a-2bf4f819ff3b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840785cd-4c09-4da6-9ab3-353c402bf6dd", "sighting_of_ref": "indicator--d2cdf491-a479-4b38-a612-e8750afcbd6e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d296a96-a3a9-4477-aa3a-c9a1018df6a7", "sighting_of_ref": "indicator--89bf0c18-32c5-4aee-b556-d340388e9549", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768a3ec8-a712-4ae8-9cf3-bc30d13d25e2", "sighting_of_ref": "indicator--20df398b-9634-4095-a633-8e9df4be14ed", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14634475-553a-423d-a660-48121e8c13e4", "sighting_of_ref": "indicator--574afb7b-6cc6-447f-ada9-4ea5fc8471f1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c3f027-645a-495e-b8b9-6a46f0b3dd42", "sighting_of_ref": "indicator--858d3e42-1016-473c-a792-6d92500c03a6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23829493-d2f1-49cd-a1c0-b3e59f03f97e", "sighting_of_ref": "indicator--003a3435-de0d-4538-9b54-f35034353765", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90757542-18e6-4940-aafc-09556dc205d2", "sighting_of_ref": "indicator--003a3435-de0d-4538-9b54-f35034353765", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d4d4c1-4901-4da0-b301-eade6553e369", "sighting_of_ref": "indicator--a1b70504-7746-4d0f-9fec-fe303911580e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3cfe54e-6098-4c8c-ab12-2c9530a80542", "sighting_of_ref": "indicator--ad51ecd4-7c53-42e8-b8d4-b9aaec138e8c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e1e27d-2e84-4809-9080-35fd73ea8a95", "sighting_of_ref": "indicator--63a7f870-1d3b-4747-949f-5866c29bdd93", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f04d6f-35d6-489d-b780-58548b2961e5", "sighting_of_ref": "indicator--7d9bac5a-c876-4e8d-ba2d-ccb53b542866", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1e55a6-e3df-400b-a0da-9c9eb6acec44", "sighting_of_ref": "indicator--1463dea8-0781-4da6-8a39-74c81f8af5d9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdcc2023-8cee-45a8-9af4-e5aed692a4cf", "sighting_of_ref": "indicator--1463dea8-0781-4da6-8a39-74c81f8af5d9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e36b74-8ad7-4f74-aa19-55bb1e421cad", "sighting_of_ref": "indicator--0010209e-432a-4895-8a17-bea6ee4cfc8c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97976ba-9fee-4ba6-b585-15d07ce6bf7e", "sighting_of_ref": "indicator--ebe11a63-95f5-4be7-b3f3-ec8f13fa52d1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849ee5fc-1f2e-47af-9332-3d02606ed737", "sighting_of_ref": "indicator--ad60cef4-5381-40d3-b390-e9a051b5c6ed", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea422d74-e240-44ab-88d8-a2ebc088c533", "sighting_of_ref": "indicator--ad60cef4-5381-40d3-b390-e9a051b5c6ed", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bef45c0-1d15-4ec5-b29d-0a0d9268ff6e", "sighting_of_ref": "indicator--05ae6fe8-deb9-4569-ab0e-7e9d83e76e20", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac84fed-3bba-415a-acad-0fe353c2d534", "sighting_of_ref": "indicator--05ae6fe8-deb9-4569-ab0e-7e9d83e76e20", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669b5f44-d29c-456f-bd52-d3017168472d", "sighting_of_ref": "indicator--bb84785d-a448-4e5c-9366-d91f6cbea4fc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a0316d-d8d3-4b43-adcd-db1777ff5a40", "sighting_of_ref": "indicator--737260a0-c2f7-41a8-9b53-57f0a081faea", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ec3ae6-f7c2-484e-ae1a-2a9e287f4297", "sighting_of_ref": "indicator--2056e0cd-b072-4fb8-b9c0-678aa60dfd99", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6f9063-cbb5-4b4f-8913-d06c59fa13a7", "sighting_of_ref": "indicator--d1a8627c-c29c-48ea-a70f-ed5136d14d92", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40fa9617-e463-42b5-ad0d-02bb3b082e61", "sighting_of_ref": "indicator--d1a8627c-c29c-48ea-a70f-ed5136d14d92", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d6bdfd-d91c-4b6d-9210-501f001c44d4", "sighting_of_ref": "indicator--7442667c-48f4-404b-9afb-9b402661aa24", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5447d2-b2e9-4119-ac02-d6b4e287095e", "sighting_of_ref": "indicator--7442667c-48f4-404b-9afb-9b402661aa24", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f095001-dfee-4b2f-b4c1-15158a8117db", "sighting_of_ref": "indicator--7126172c-5473-4ffd-a32a-5083e7609b80", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a139cd-af84-4d43-bad0-6a4e40561d12", "sighting_of_ref": "indicator--f45cac80-26a7-464f-b762-eab1b7ed78b0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70fc8af4-dd4b-45ba-81b0-0fa4e3379da4", "sighting_of_ref": "indicator--f45cac80-26a7-464f-b762-eab1b7ed78b0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf22a31-ad94-4a78-bd3b-34b13a758303", "sighting_of_ref": "indicator--8d2c803a-fc74-498d-ab3e-b87b6c66b0bc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5bd1b5-78ad-4ae6-ad1b-31b2ee4b5009", "sighting_of_ref": "indicator--8d2c803a-fc74-498d-ab3e-b87b6c66b0bc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8d5963-4b25-4363-8042-d3b58d0c97ba", "sighting_of_ref": "indicator--240cb23b-2ed1-4210-94a3-6ee2be5f5fa8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4c5dfe-88fc-4435-93b9-e6ebcdebd968", "sighting_of_ref": "indicator--d19c15dd-4ea9-4ce0-8ebd-54e0b737725e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a6ab7a-470c-4ef2-9450-8492e09f6f75", "sighting_of_ref": "indicator--d19c15dd-4ea9-4ce0-8ebd-54e0b737725e", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc8b3fda-0cff-400a-8408-b749231beb5b", "sighting_of_ref": "indicator--d19c15dd-4ea9-4ce0-8ebd-54e0b737725e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c414033a-ee47-4977-81be-60fda4028627", "sighting_of_ref": "indicator--143a77ab-b996-4710-b0f2-57f0c9977d25", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ffa9d0-09c2-4e1f-9bbc-bd406520a2d2", "sighting_of_ref": "indicator--7a7ab154-5b00-45fe-adce-74964f51a045", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32299c6c-ec4a-4052-93bb-160db5118fda", "sighting_of_ref": "indicator--ff25b8e8-5038-45d6-983c-802a24526ad4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a0aebf-1ac6-45cd-b528-290e438c1a3d", "sighting_of_ref": "indicator--ff25b8e8-5038-45d6-983c-802a24526ad4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1fffee-d0c3-444f-8ae5-fa4a721cd5ac", "sighting_of_ref": "indicator--264e74d7-92fa-40ac-a8d8-3c3526f98173", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2f297c-b5c3-4a27-901a-09a3d552e199", "sighting_of_ref": "indicator--605d1035-80a9-483a-8ed7-52c78c9f215c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89ebd7c-485d-4ac7-afa7-de2db7593369", "sighting_of_ref": "indicator--607b8cac-2c1d-4173-ad77-5359d9f01b07", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369430da-a5c7-4e50-acf3-f301ba5ebfa0", "sighting_of_ref": "indicator--607b8cac-2c1d-4173-ad77-5359d9f01b07", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1efa42ec-357f-42c6-b6be-3ee7a7d03901", "sighting_of_ref": "indicator--607b8cac-2c1d-4173-ad77-5359d9f01b07", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d06240-7467-451c-a930-dad8a76ba8b6", "sighting_of_ref": "indicator--60e441e1-dc0b-4681-8229-aee227cdc921", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7102375-fed6-423c-ba68-930b18efd979", "sighting_of_ref": "indicator--54f78a14-f3ba-4535-8f35-fc65cbc56002", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112d6ca5-350a-4775-8534-d15bdacf62d5", "sighting_of_ref": "indicator--8c23e421-6a17-48e9-928c-7b8025ee96f3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e252ce-44b1-4711-9cf0-5cda84b52121", "sighting_of_ref": "indicator--3e795111-f67c-48e6-a48f-aa103954715f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e8e2e6-014e-49b7-853e-b87ca58f7ebf", "sighting_of_ref": "indicator--3e795111-f67c-48e6-a48f-aa103954715f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf372867-7c4e-458c-8b5a-c12576fe2719", "sighting_of_ref": "indicator--7369eb86-956f-43ab-b621-b99faa27d3d7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac6f33a-d89b-4faa-8b00-e53797def140", "sighting_of_ref": "indicator--5d6a40fb-44da-41de-8a44-346e48b95cd7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc011ae-c2e5-452b-a1f2-0f27aa550be1", "sighting_of_ref": "indicator--c694e6b9-9632-4ffd-a39a-7305209380d2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f667a1-0915-4eae-832a-f184b03e60b0", "sighting_of_ref": "indicator--4c19bd77-ad10-4f53-803a-c5f03b943344", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f50af74-6f66-430a-8bd7-fdd505b61882", "sighting_of_ref": "indicator--4c19bd77-ad10-4f53-803a-c5f03b943344", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8fc892a-ad60-4fc8-953e-0fe609eb64fc", "sighting_of_ref": "indicator--4c19bd77-ad10-4f53-803a-c5f03b943344", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e605e212-9af3-4bf9-8a17-b46c0be4a5b2", "sighting_of_ref": "indicator--1b6ccd4c-bce6-45fa-ad68-583e2fd6e615", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a0852e-dc73-4460-8e6a-28fa7e792b47", "sighting_of_ref": "indicator--5bf7ab24-39c7-456a-aa30-34c1739711b6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f90e7d-089a-41f1-ace0-b90fa621ac5c", "sighting_of_ref": "indicator--5bf7ab24-39c7-456a-aa30-34c1739711b6", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ab1f49-4c9b-4da9-b1a3-576085f1eb9c", "sighting_of_ref": "indicator--5bf7ab24-39c7-456a-aa30-34c1739711b6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f054395a-cbff-4320-8258-1358a377db01", "sighting_of_ref": "indicator--989031cc-477e-4ec7-bf1a-01229038cca7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f7e2f1-dc14-45bc-8f58-c31a469f1d3a", "sighting_of_ref": "indicator--989031cc-477e-4ec7-bf1a-01229038cca7", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0765d8ee-00bc-418f-847f-02f9966da113", "sighting_of_ref": "indicator--989031cc-477e-4ec7-bf1a-01229038cca7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b7268b-8368-4765-8366-d3d8af783fb4", "sighting_of_ref": "indicator--efd74ccd-0c96-4453-a16e-5bede9883cb4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2b6bab-3d89-4145-b268-82ef79f7ef56", "sighting_of_ref": "indicator--efd74ccd-0c96-4453-a16e-5bede9883cb4", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4299fb-fd90-48c7-b8f8-c59327be6176", "sighting_of_ref": "indicator--efd74ccd-0c96-4453-a16e-5bede9883cb4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48fce93f-c887-4ba5-8231-285e06e11b11", "sighting_of_ref": "indicator--434e20bf-4715-44c1-a1e4-778888d2a7b5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c49ddf-d197-4bd7-8cc0-166705f6a348", "sighting_of_ref": "indicator--cd539ec8-8edf-4310-adf5-6042b8f53744", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75862088-2364-498f-b092-5d18e9d5691b", "sighting_of_ref": "indicator--45efb867-4e05-4aec-82c6-21c7ef2baceb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51af7b38-045e-4ac1-a762-9636dc8535ac", "sighting_of_ref": "indicator--bf679953-fbd9-460c-bc4c-059a189bc3f2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29ac0ba-67f0-4aef-98ed-7d71f11852b0", "sighting_of_ref": "indicator--663fead1-7544-43f4-ae8d-53c4d48e3d82", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4fb8229-1d50-4ed1-9369-8916139aa70e", "sighting_of_ref": "indicator--663fead1-7544-43f4-ae8d-53c4d48e3d82", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984bc8fd-ad64-4b69-bdfb-ae5b14b3f141", "sighting_of_ref": "indicator--663fead1-7544-43f4-ae8d-53c4d48e3d82", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5f8eb8-45e4-4912-b1f2-bb14ee3aab00", "sighting_of_ref": "indicator--4f59507c-5040-4886-9fef-fc13cb2591ee", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e83dda-67e5-4a65-9401-fa46303781c3", "sighting_of_ref": "indicator--ca6857d8-704a-4cdc-8ba2-51e33c77a180", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13cf549-64be-4b2a-9c1b-8603cd1a5ede", "sighting_of_ref": "indicator--8748e14d-f539-4637-9705-c0b03110bc25", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498ebb2a-7221-4f4b-a802-f7d306058948", "sighting_of_ref": "indicator--0dc2d099-b725-44d9-a95f-109ae926f14d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4f31d2-ee31-4f93-82dc-a88737a9c2a4", "sighting_of_ref": "indicator--0dc2d099-b725-44d9-a95f-109ae926f14d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c3b92e-eaa3-4bcc-a6cb-b41ead812c13", "sighting_of_ref": "indicator--255bf3e7-7915-457d-b857-a7e197f57ac2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e4b9b3c-86dd-4b14-950a-873785194910", "sighting_of_ref": "indicator--faa66569-c4fb-48d5-bbde-daf438f26153", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3699e9c7-3193-4650-a0c5-ec9b2a4fe427", "sighting_of_ref": "indicator--faa66569-c4fb-48d5-bbde-daf438f26153", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07799870-43e3-43e7-a968-e9e1b6f288a0", "sighting_of_ref": "indicator--ca7cf531-994d-4b9f-8a08-6141b8afd0ac", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d91cd3-1eae-47c5-8a9c-3760d14248fd", "sighting_of_ref": "indicator--aad56f6d-b7f7-4381-a7c7-fcb346d04bed", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--967df1c7-a661-49da-9c9e-26509591f737", "sighting_of_ref": "indicator--c4aaea63-6303-46e0-a6f0-15decb1a35d0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14519b11-2ce3-48f8-a34a-7f4f2c13021a", "sighting_of_ref": "indicator--c4aaea63-6303-46e0-a6f0-15decb1a35d0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db175c87-420a-489b-8369-58a0663204c4", "sighting_of_ref": "indicator--346601de-62ab-4fd2-9ea5-a23eff35e162", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e162ea1-2537-46b0-a8cc-6b882ae8e3a4", "sighting_of_ref": "indicator--6a7ea31c-6525-4053-a663-00e651763a95", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40371b6-fa2e-4b9f-a659-3a500c7afdf4", "sighting_of_ref": "indicator--3c14934b-8068-448f-bd40-68af886dd9c4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9faf2c8-b3f8-4f49-b465-1c69a1a0514b", "sighting_of_ref": "indicator--3c14934b-8068-448f-bd40-68af886dd9c4", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555f0c6e-b378-4b34-8d68-f6f5effc1916", "sighting_of_ref": "indicator--ce265ddf-0e35-4035-bf0c-5abb2bbb6520", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6f0cac-b8dc-444e-a838-017875566ecf", "sighting_of_ref": "indicator--ce265ddf-0e35-4035-bf0c-5abb2bbb6520", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8cf55a-0a2a-4448-b999-6d34d8f66670", "sighting_of_ref": "indicator--c3b10713-e1ba-4ad5-bd52-df478b13ceab", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac97f89-2940-4d4e-876d-2a148d48e439", "sighting_of_ref": "indicator--d8bc519c-0e24-461f-b7d6-aff4bce0c428", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81336bc1-9ad6-40a8-a77a-919bfabe5378", "sighting_of_ref": "indicator--4ccc84ff-fd73-4ce3-a4f8-cc3b59458344", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38475ad-75f1-48cc-ae4a-d0939d91f48b", "sighting_of_ref": "indicator--4ccc84ff-fd73-4ce3-a4f8-cc3b59458344", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7dba11-19c1-49cc-a770-f7c432d05ea5", "sighting_of_ref": "indicator--7c11c06e-6b59-4e7e-ae7a-a242e619256e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311dfbe5-6caf-4707-80a6-ee5dc4648944", "sighting_of_ref": "indicator--7c11c06e-6b59-4e7e-ae7a-a242e619256e", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96eeba0c-abe7-47c0-9934-17e83dde68df", "sighting_of_ref": "indicator--7c11c06e-6b59-4e7e-ae7a-a242e619256e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc8d1ea-719f-4917-ba69-7ad2ebd140e0", "sighting_of_ref": "indicator--f6df9214-61cd-4923-adce-c1eac30de3fd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e504741-5534-4baa-8b80-e5f002823357", "sighting_of_ref": "indicator--ed675112-c0a9-47bd-936e-f3bf82ad3ba2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8dba027-ea4b-4b6d-897f-135a746cd599", "sighting_of_ref": "indicator--6b573e6f-f7d8-410d-a14b-73cd0a21d18b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d203eddd-c174-45dc-813f-ac178cb24f61", "sighting_of_ref": "indicator--fa16f4d8-578f-4d73-92a5-a08aa056341e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98175be-c5b6-414c-9c71-01c4505e4320", "sighting_of_ref": "indicator--964200df-a3a2-4dc0-87e7-6a6909cd1aa6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1344af1-f4ef-41b3-ad21-aa76b8a207aa", "sighting_of_ref": "indicator--4b6c763e-fbff-4a08-903e-a4acacd2f9f4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6445d3-3e4c-495b-a8b7-83a1c5532c0c", "sighting_of_ref": "indicator--55e9f0bf-193a-4f07-8c44-cf0dda1ac50a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b818f4-5214-48de-a6d1-632404bc4bf7", "sighting_of_ref": "indicator--e034256c-db08-4ad8-8f14-3ebe0a50a6cf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be02aca-9acf-4a96-9c3f-5c26b8607b96", "sighting_of_ref": "indicator--0df670aa-c932-4632-abfc-986c73b73cfc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac01572-82c1-46c2-8092-ff6f48b2789a", "sighting_of_ref": "indicator--5965e70a-3bc2-403f-9d3d-5363136e9508", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb36025-f736-4ec3-895b-e9d3b02c5b35", "sighting_of_ref": "indicator--9b59f524-8874-4cd6-87c3-817f69cb17fe", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33374d34-ac3d-4f7b-8311-3cad0b2702dd", "sighting_of_ref": "indicator--9b59f524-8874-4cd6-87c3-817f69cb17fe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0021de7c-6fef-4f26-a2d5-2692623cbb8e", "sighting_of_ref": "indicator--21f67d38-b6b6-4aa6-9eda-c2be9efd00aa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eccdfdad-e1b6-4117-a715-9349e8a13f27", "sighting_of_ref": "indicator--96d6ecdd-315d-46d7-ad16-036ebf2b00b4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8cb753-84ef-45e4-983b-23793135a917", "sighting_of_ref": "indicator--d1754af3-8ec3-4373-a6ff-71408e01b5a6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2226bb73-7f50-482f-85de-0f9105140149", "sighting_of_ref": "indicator--98cfb32b-4b89-499f-b08c-e7154f5fcbc3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d98335-26f5-4fbd-82fb-f032e1b7dd89", "sighting_of_ref": "indicator--f9f9b0a4-b7db-46bd-9a55-29f16cec7614", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9118fc9f-e6ee-4cd5-9bcf-91d046691fa2", "sighting_of_ref": "indicator--a95dbc7b-00e3-4b19-acd3-654344047bb6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d714149c-5ca3-4c1d-96fd-2a4a3141d141", "sighting_of_ref": "indicator--65343c97-75b0-4e3d-b687-0b408b7816d1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46858e80-f98e-46a2-9a5c-e155ac769f03", "sighting_of_ref": "indicator--65343c97-75b0-4e3d-b687-0b408b7816d1", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5b28b2-786a-483b-8ccf-266feedf671f", "sighting_of_ref": "indicator--65343c97-75b0-4e3d-b687-0b408b7816d1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048f1e4f-1840-47c3-9998-a46a850645f2", "sighting_of_ref": "indicator--76a8ed85-ced6-4f87-bfb3-3fca9774c487", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d3f858-c70b-4f16-b2f2-a94bff6e85ea", "sighting_of_ref": "indicator--d2f4f1da-2c42-43fb-a024-e84d77ce4485", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b9a7ea-2375-4578-8ec6-fdeb4bdaf085", "sighting_of_ref": "indicator--d2f4f1da-2c42-43fb-a024-e84d77ce4485", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051cd01f-6e3b-4b11-a565-8a5e9e9620c8", "sighting_of_ref": "indicator--c6b0ac91-c326-4872-b113-b2c32f0fe935", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b072416-71b4-411f-a606-96b781da5413", "sighting_of_ref": "indicator--c6b0ac91-c326-4872-b113-b2c32f0fe935", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96222bf3-db67-4f39-8ad1-8ad80c015e0c", "sighting_of_ref": "indicator--dfba2c31-e21b-430b-992e-e9ee04d24188", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c6433c-404a-4a99-846d-3743d119c12e", "sighting_of_ref": "indicator--c6baba13-5a45-488d-a490-bd8736d2a509", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e75a63-8ae0-4c81-b55c-fb34446c2329", "sighting_of_ref": "indicator--c6baba13-5a45-488d-a490-bd8736d2a509", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--decfb74b-984f-476a-82cb-a048dee33282", "sighting_of_ref": "indicator--c3f8c4c2-da47-49bd-93b0-a5df94721e3f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0662a2d4-e16e-45f6-9e22-87244083402f", "sighting_of_ref": "indicator--c3f8c4c2-da47-49bd-93b0-a5df94721e3f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e494181c-9f69-416c-a504-9f132234087a", "sighting_of_ref": "indicator--3249998b-2b89-47f3-b231-927faae1cf2c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3cb0f60-8fd5-487c-b707-97514c08528d", "sighting_of_ref": "indicator--3249998b-2b89-47f3-b231-927faae1cf2c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b30e67-9f81-46fd-b892-7c74885f12b3", "sighting_of_ref": "indicator--0a2e5454-3f92-45b5-8723-48bb748fd93c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2c3252-022f-4ce1-bd13-e735e684f487", "sighting_of_ref": "indicator--0a2e5454-3f92-45b5-8723-48bb748fd93c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbb6fddb-d612-4ed2-8dc7-a21d22a0d15b", "sighting_of_ref": "indicator--a0ba5a80-7dd7-4ef8-905d-f835c2086339", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a471afb3-2345-4532-88e6-51787b874c6d", "sighting_of_ref": "indicator--2dda8e0b-ac40-4def-8261-27bbc2b14cb1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b00318-760d-4bb1-a106-71d883dedd9c", "sighting_of_ref": "indicator--11675bf0-99a6-4ff6-8a3f-41f2b5c26e9a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c84976-e4c7-46a1-95df-1e879fce7b1d", "sighting_of_ref": "indicator--f6d3a0f0-33d3-4fc3-a225-50da69bdf59f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4608c11-c521-4522-b04f-4e0ee6db33d5", "sighting_of_ref": "indicator--e19054dc-4f08-41a4-84d9-98d9fdef8c77", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76237fd-73f0-4283-8a4d-7ee8266a9445", "sighting_of_ref": "indicator--e19054dc-4f08-41a4-84d9-98d9fdef8c77", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2fb745-36f9-4f45-8b2f-014610a12d3a", "sighting_of_ref": "indicator--3cd7426d-b384-4fd4-a30e-de7cc427346f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3050aa28-a030-4106-b642-93d7f2678c0f", "sighting_of_ref": "indicator--3cd7426d-b384-4fd4-a30e-de7cc427346f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57c759d-613c-4fe3-8509-a8f781beb8a7", "sighting_of_ref": "indicator--c5b503ef-b79a-48c9-9f34-73153b8075e5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd9a0de-ec30-4ab9-9929-3d4e928ad802", "sighting_of_ref": "indicator--7062734a-de34-454f-b3cb-0f121da5efbb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e9a47a-2ea2-40ed-8565-b701d52c10aa", "sighting_of_ref": "indicator--fe8ef9a7-848e-4b72-aac5-f111a1bfcb98", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54e1321-86a8-41f2-9e3e-f963aa8873ec", "sighting_of_ref": "indicator--b2ef1804-2aef-439f-be71-ee4aa3f8dbc1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f8ee65-d6df-4f9e-a41e-da018e310567", "sighting_of_ref": "indicator--b2ef1804-2aef-439f-be71-ee4aa3f8dbc1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adfb8166-3378-4d1e-9413-9c5de535190c", "sighting_of_ref": "indicator--d6be71fc-e541-4c26-9029-fccb761c0c56", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3345e0-5946-460d-ab1a-a5d4ad0c38bc", "sighting_of_ref": "indicator--bf1cee85-3d8f-4360-97f6-ba7919abcab7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c48d8e-a74a-431e-b072-80fc1fb7e006", "sighting_of_ref": "indicator--866f581b-f1d4-42db-8436-31d15419d6f1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3dc9c1-abc1-4a64-97a9-3144135d8504", "sighting_of_ref": "indicator--7d0a5b14-c599-4f97-9f21-da5d498dccc7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc37ac00-7b28-4c14-9ec3-df4e4c351810", "sighting_of_ref": "indicator--a457f348-81a5-4ec9-8a70-8913e02d6a41", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd02986-db1e-4b7b-bfab-10142b2d005a", "sighting_of_ref": "indicator--f33131b8-332c-4d4c-859d-be658544b705", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c92684f-4f62-44af-88a3-efe9df53627d", "sighting_of_ref": "indicator--b509b2a0-0271-43fe-a323-bf7790225f68", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f608ea2-34fa-463d-acfb-a34f06b2a1d7", "sighting_of_ref": "indicator--b509b2a0-0271-43fe-a323-bf7790225f68", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6493770-37d1-4bd3-9bde-2703d36b722c", "sighting_of_ref": "indicator--cfd00d1c-4664-4d87-baf2-8f966817c871", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c747019e-966a-4960-b3cf-5c680bc8b285", "sighting_of_ref": "indicator--6155a4a0-9f05-4b10-9594-e2333d606a93", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c93c2f6-b242-4a31-a651-17038f58ab48", "sighting_of_ref": "indicator--6155a4a0-9f05-4b10-9594-e2333d606a93", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666e9b09-7d5f-413b-99fa-0c36b4b6f5de", "sighting_of_ref": "indicator--87f9a92e-1390-403d-8c9e-97ab25702ef7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790ad829-b5f0-491a-8a2b-e37b296104e4", "sighting_of_ref": "indicator--87f9a92e-1390-403d-8c9e-97ab25702ef7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0ff1e6-6362-41da-9d5f-5c105c4ffc99", "sighting_of_ref": "indicator--ce8a8e8b-9521-4b69-8f6b-a5340a26f6ee", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd73c9e9-9e61-4318-891c-3a75f349f9ef", "sighting_of_ref": "indicator--ce8a8e8b-9521-4b69-8f6b-a5340a26f6ee", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76501fa-d923-45d2-8790-62d7288547b3", "sighting_of_ref": "indicator--13d1c24e-d45a-48a3-8f1c-64ac831c356b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5663900d-57c7-4fa7-910d-44243308466b", "sighting_of_ref": "indicator--13d1c24e-d45a-48a3-8f1c-64ac831c356b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7012026-2fb8-4363-a7ee-29f0471f0b97", "sighting_of_ref": "indicator--9b11b6f3-8cbe-4250-a8c1-c31bb1cf25b6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce57a41-3245-4a37-b7cd-1e5d98f5f83a", "sighting_of_ref": "indicator--9b11b6f3-8cbe-4250-a8c1-c31bb1cf25b6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6befaeab-c1a9-49d7-af80-4cc3efd90e99", "sighting_of_ref": "indicator--84c7feaf-13c6-4215-a62d-24f1cc81e26c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b215fdad-578d-4743-8770-5a7ef4c1f24d", "sighting_of_ref": "indicator--84c7feaf-13c6-4215-a62d-24f1cc81e26c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0b86bb-e398-4d8d-8b3e-b1347b03fecb", "sighting_of_ref": "indicator--ed7b8900-4ae2-413b-bedb-e64a54c4c28c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c38db6a-8741-4f28-a37c-62efce60284f", "sighting_of_ref": "indicator--ed7b8900-4ae2-413b-bedb-e64a54c4c28c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53cc138c-ab3a-4721-aaab-90879c5d5ead", "sighting_of_ref": "indicator--042ab3eb-330b-416d-a9a3-eddd86f2354a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d314cc92-6759-4fe5-91fc-dd15b1442348", "sighting_of_ref": "indicator--042ab3eb-330b-416d-a9a3-eddd86f2354a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6df894df-555c-4f9f-ad9e-7123f5aac49d", "sighting_of_ref": "indicator--67295cb8-5a9d-46d6-8353-3ccf557cafda", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dac94cf-a1ac-4678-a753-ba3947c0ba84", "sighting_of_ref": "indicator--bb8ee678-a183-4b9d-84cd-d0fc3c910bdf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa10edb7-cb38-410d-b153-69ab0319cf19", "sighting_of_ref": "indicator--6a65e346-2f7a-4968-807c-d3c889d83831", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31629e6-1ad9-4c3a-acdd-6cfbea747b66", "sighting_of_ref": "indicator--e28e62be-1a2c-4b02-b88b-660798dea208", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d965cc48-a8ac-4978-880a-7bffa5917017", "sighting_of_ref": "indicator--9bc588e5-a570-4a8d-b201-681252337555", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6e1606-d276-4558-a08f-e4acd9ae72bd", "sighting_of_ref": "indicator--7972939c-9d73-44d2-abe8-5acd4e8bf5bc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4764418c-d894-4eda-8582-e3079069d666", "sighting_of_ref": "indicator--7972939c-9d73-44d2-abe8-5acd4e8bf5bc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af57f75-1985-42c6-bb8a-ca675527fd7a", "sighting_of_ref": "indicator--d5097993-5e94-412b-a16a-00f17b4118ce", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a0a076-c811-4e57-869a-f4120e25d929", "sighting_of_ref": "indicator--6dd9e6c1-872c-4269-b622-7c1886cfc77b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a913173b-d7f7-4e70-8daf-d799157af9c8", "sighting_of_ref": "indicator--d38c39d3-b39a-4a11-8466-05bbeb0f9aed", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d39b4f4-e863-4bc9-99fb-73a1115883a3", "sighting_of_ref": "indicator--e825eb2f-289e-4359-ba1e-e6b746ea6add", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd54e8c-2a4d-4377-8ba2-7ab3aaac86c9", "sighting_of_ref": "indicator--bf7a6d72-84b8-429a-a651-a674d1cf2721", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff03ba0-cae5-4710-b824-d0acf033041c", "sighting_of_ref": "indicator--214a3e64-698c-4068-8d25-86f5aff7d1ac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d4edb6-5903-4504-b96c-1703a4ffabd3", "sighting_of_ref": "indicator--8e0f43eb-51fb-4ea8-a86f-e2235fe085ae", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba107fd-2733-41ca-a971-253b76fea4a9", "sighting_of_ref": "indicator--1414c856-6373-4dfd-8407-b385e56e92e3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb81e63-43de-4294-8cc2-44e564eeae20", "sighting_of_ref": "indicator--c2689046-4188-4168-a613-acd458afa55f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f0c50e-449f-438b-aa25-c0d6ad318cb6", "sighting_of_ref": "indicator--3e143442-3c2d-45b7-afff-f4b0c6b3e900", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed13dae-7cd8-40dc-9b6d-6569cba1635c", "sighting_of_ref": "indicator--44edcde9-b141-4c85-b476-9c98c2331190", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c434844-44dd-4230-a820-be73540e45c6", "sighting_of_ref": "indicator--560a9d5e-ef95-4235-a062-b4d5c1968836", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d07824-b38a-4296-a7bf-fb5cada4d90e", "sighting_of_ref": "indicator--c2f525db-50ce-4f66-994e-75123dbd71fb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3517aa39-eea7-4d41-acb4-d241d4a42ef5", "sighting_of_ref": "indicator--c2f525db-50ce-4f66-994e-75123dbd71fb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec06894f-b9be-4b42-b395-b4ae4f5a230a", "sighting_of_ref": "indicator--e6faec14-77ac-49cf-b87b-bb051dae1df7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f26566-c9b6-40dd-ba3e-c35d2c706e2b", "sighting_of_ref": "indicator--e6faec14-77ac-49cf-b87b-bb051dae1df7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467d91a6-8019-46ba-925a-cbb9d0573185", "sighting_of_ref": "indicator--38c538c5-a2dd-477e-a04a-c43744d343ea", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790fca9c-8801-4d3a-ba09-271e6349111c", "sighting_of_ref": "indicator--38c538c5-a2dd-477e-a04a-c43744d343ea", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33704c8-dd8b-4e8a-91b5-a32b1c7bebff", "sighting_of_ref": "indicator--24de476c-1adf-4457-b0ef-e38b2c78fc72", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0d4b44-1c71-4244-9a1e-7a5de26c0724", "sighting_of_ref": "indicator--24de476c-1adf-4457-b0ef-e38b2c78fc72", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02d6ee1-f96a-417e-8cd8-8b525e1587c4", "sighting_of_ref": "indicator--63b9b3c5-d12d-4e65-8787-1625f445493a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf8fa32-0a3e-49dd-9575-501e51ea7ce5", "sighting_of_ref": "indicator--63b9b3c5-d12d-4e65-8787-1625f445493a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7499fba-a417-4601-bad7-7c6c8881bc50", "sighting_of_ref": "indicator--aae7d44e-1f9f-438c-a64b-46183d3f3f9b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d280fc1-ec35-4c50-b8c6-1ae8d5f0c739", "sighting_of_ref": "indicator--aae7d44e-1f9f-438c-a64b-46183d3f3f9b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522070cd-2c10-4ab1-a613-570e2581785c", "sighting_of_ref": "indicator--f31e9d33-2f62-42bf-ac6a-01975fdab60d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01651b50-9f1e-4e63-b744-3bf9a1bc6092", "sighting_of_ref": "indicator--f31e9d33-2f62-42bf-ac6a-01975fdab60d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc22aee-f4c9-403a-95ab-0953064a2ced", "sighting_of_ref": "indicator--d3b0eba2-5412-4889-a859-38b01c311a4d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d866fbd-7c0f-465b-b64e-805ea5f08fe9", "sighting_of_ref": "indicator--d3b0eba2-5412-4889-a859-38b01c311a4d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f9d2fd-c47c-4e66-ba4d-d0ace18b0841", "sighting_of_ref": "indicator--200e86b3-85f7-47f1-9f68-70eec993216a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e70064-7433-47cc-b45f-3b488d60d5ca", "sighting_of_ref": "indicator--200e86b3-85f7-47f1-9f68-70eec993216a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb092773-bba7-4b1d-b1a8-9554442da640", "sighting_of_ref": "indicator--b15c6d7a-185b-46bd-8fa3-530791ab9b08", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e822051-3611-4e3c-8592-a8c246555827", "sighting_of_ref": "indicator--b15c6d7a-185b-46bd-8fa3-530791ab9b08", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292db27c-e3f4-42ff-ada9-aea29dcb761a", "sighting_of_ref": "indicator--bd10d84f-a55f-4765-84a1-f1b9e59297c2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419dc7a1-5aad-4e8a-ae72-2d0ea5ea794d", "sighting_of_ref": "indicator--bd10d84f-a55f-4765-84a1-f1b9e59297c2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f110abe6-fc5d-468f-93f2-bb772919cb88", "sighting_of_ref": "indicator--79145175-6e68-42ae-acbb-1532241f299b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba2ea8e-8bc9-4cd2-8de8-26d6f7dfa8dd", "sighting_of_ref": "indicator--79145175-6e68-42ae-acbb-1532241f299b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b78450-813e-44a9-ae41-b58323e8daa0", "sighting_of_ref": "indicator--7ac9e8c2-adc1-441e-8675-84ff1d1a03c3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec26773-4800-460d-bf9f-1f5155929b8b", "sighting_of_ref": "indicator--4dc4e7c0-622d-4885-a8c4-005dc5c4ada7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40d7887-a844-4d06-8914-209381d58cfc", "sighting_of_ref": "indicator--922f0df1-9129-4afe-9036-990a71ad685e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3edf89-9158-44f0-9fec-b33bf2aa82ac", "sighting_of_ref": "indicator--dacc1c33-d240-4bfe-bc72-a64174015e5b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb11aa8-fdfc-464d-a70a-fb74f8c332f1", "sighting_of_ref": "indicator--22fb2ac2-ed8f-4b2c-93c2-7dd1989c3f1d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a27da72-0ee3-44ce-9078-979504a2fc65", "sighting_of_ref": "indicator--42fb2e4c-72c6-42f5-b23d-ecef336a5e39", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b7a934-201f-41ed-82f0-3bd32796007f", "sighting_of_ref": "indicator--0ae7bdd8-861c-4fbb-ba08-d0d80888e588", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4c3398-629c-474a-aa9e-57e761d22687", "sighting_of_ref": "indicator--6f1bfe63-d6a5-4b6e-8106-7f3bf8b8c4c8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d845b13-5f12-446b-ae0c-1247835a646d", "sighting_of_ref": "indicator--bfa4936f-7903-4db9-be26-c8b39bdb1f99", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a73ad76-87d2-4c79-945d-7f9737ad09ad", "sighting_of_ref": "indicator--cdbf0a47-7f1a-433b-a4ad-39c1557b180f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb22225d-ad4b-4d04-91e5-ea12bcfedce6", "sighting_of_ref": "indicator--109a6299-2d39-4979-b900-c2e9fd90ea8e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c34becb-2bcf-42ca-9d2d-dc817814a300", "sighting_of_ref": "indicator--10a1bf30-0729-4834-bc06-caacf169cc86", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34e32f4-7c2d-47c9-8167-7769a26a248e", "sighting_of_ref": "indicator--10a1bf30-0729-4834-bc06-caacf169cc86", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1305f7df-e3d9-4cc0-8695-71d3df1a50a7", "sighting_of_ref": "indicator--163defae-fb1c-4411-85a7-e03b4acbd494", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b378180b-c65f-4cee-8fa3-74f2eb90c87e", "sighting_of_ref": "indicator--80a09bda-e973-47be-bef2-416ee2782c4e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f90d86-cfd7-418e-a74d-4838504afb59", "sighting_of_ref": "indicator--0429a3b4-f1a7-480e-8b9f-bfae3dc370ef", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45cb829b-8cb6-4b54-9ead-af72da31502f", "sighting_of_ref": "indicator--1ecbdb7f-e0ff-492a-94a5-ee3d6555da98", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3144b90-19e4-4bdb-9f59-bf658b8baad6", "sighting_of_ref": "indicator--5db2adb2-c272-4faa-bb1b-78f12147f8cc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56cec9e3-5097-43ac-841f-d532c4bdc53e", "sighting_of_ref": "indicator--fdc14f10-5730-49f7-9e6f-df72115e3ec0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cae798b-d1ce-45e6-a5dc-257b74a7af20", "sighting_of_ref": "indicator--8569b765-0574-4170-bbe3-bbb226dc15cf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a64263-8ab1-4b6f-b987-80456c90d0ad", "sighting_of_ref": "indicator--8569b765-0574-4170-bbe3-bbb226dc15cf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6e39be-c7f1-4747-871c-d14fb727dc56", "sighting_of_ref": "indicator--c722df07-41b6-49df-8332-1e0ff2b5c272", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f72fda8-d95a-4633-964c-a854a678df55", "sighting_of_ref": "indicator--011f7501-cccd-43f1-a6c9-a971ef468724", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ae47b5-9bac-4790-a9fd-2f6c863a08cb", "sighting_of_ref": "indicator--071d40ab-c450-4b4c-b4a7-de533b80af6e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7812a46a-0ec8-4850-84e8-7257ad71f844", "sighting_of_ref": "indicator--ce38aacf-5fd8-4f7d-b6df-efbabed9b944", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c32b1b2a-c624-4db9-82b6-beca929212b9", "sighting_of_ref": "indicator--18340c50-a64f-41da-a31e-732129474681", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac6462b-44c5-42c0-bae0-f2139bb1a366", "sighting_of_ref": "indicator--54ace99c-aca8-4a2e-a172-05d1e9d97a57", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a926b9-d8aa-4fb6-8637-1f901d097288", "sighting_of_ref": "indicator--54ace99c-aca8-4a2e-a172-05d1e9d97a57", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ab67b5-becb-492d-97bd-278ac1e89f2a", "sighting_of_ref": "indicator--7802034f-6ce4-4e25-baf7-39a77bceb4f1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f0da266-42c7-46ca-b3d5-f7355bbeea0c", "sighting_of_ref": "indicator--a607b2fc-2977-4433-941d-42b2206ad181", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c150cbc-a251-4a79-a037-f058e3250d02", "sighting_of_ref": "indicator--12eee339-9697-4525-a2f8-cd3aff0f156d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48cb137b-84e9-42e5-b874-83d328777081", "sighting_of_ref": "indicator--2087e28c-e829-4435-acf7-0d80e5f8265b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63310565-d49b-4aa1-8c9f-6096b65f24ab", "sighting_of_ref": "indicator--d922de0f-ec48-4993-bc71-b695d5902887", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555ae79c-8ca5-4871-87ee-04b6f7fff65e", "sighting_of_ref": "indicator--291972ba-7ed8-4ac9-afa0-b04b597cf8e0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9c39d7-1c7e-4821-8457-56c0a9ae2a31", "sighting_of_ref": "indicator--8a1b0c79-d231-4b4b-883d-742548294fcd", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1998b00-2412-4895-aa17-26fb63ee9a03", "sighting_of_ref": "indicator--f6965787-3de2-4611-8d05-463ec1906b73", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e255489-52b6-457e-8bf3-a1852651347f", "sighting_of_ref": "indicator--35edd2fb-6c45-4848-ae2f-13dfb5e416b7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7954b05e-0d9c-4fb6-a2ef-ab0d43689748", "sighting_of_ref": "indicator--8cfd613b-9e6b-48f2-853c-7f960e252a04", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f6534b-1e24-4af4-b3d1-1c2cfe9552d2", "sighting_of_ref": "indicator--d4c232bb-8492-4bdf-ade7-69a0593d7565", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2e11bb-38a8-42b6-a302-4319d5a3264a", "sighting_of_ref": "indicator--70d8bbd5-6218-40e3-a883-070f14ec2bd1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129285ac-e8de-479b-a78c-39cc7f9f3147", "sighting_of_ref": "indicator--967dc1f0-7b5c-40fc-97c5-dba02ce5bfb7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf53256-fca7-4f97-bcce-ea4e258723bc", "sighting_of_ref": "indicator--a011c22d-5f4d-4457-8cca-a4ee6c4fa29b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f72a61-4552-476e-991e-56d05ba1519b", "sighting_of_ref": "indicator--4cf856a6-26c2-4a3d-8b41-662b04f9e46a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400b5a9e-4a03-429d-accb-916b6f09838c", "sighting_of_ref": "indicator--3d4053a9-9c87-42ab-968a-fb4e757b83c0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5527abc-f2a4-449a-afcd-381679cb8d73", "sighting_of_ref": "indicator--2342392a-16a3-4c7e-af17-653327264936", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9856e518-62aa-4a5b-8daf-1d0caa3ff2c4", "sighting_of_ref": "indicator--2ffbbba9-3a56-4034-be44-ff4d9b13f81b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdbe754e-0fab-41c2-a99b-2c3b859ed0b5", "sighting_of_ref": "indicator--c1c03e2c-92c9-432e-b8e6-18059e4b6457", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5e73e2-644c-4597-98a4-a716414847e9", "sighting_of_ref": "indicator--0f7be9a5-5e0a-41c2-9e92-cb766a02ea7f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5af03d1-c0c6-4b53-9f06-3dfe7c4deda5", "sighting_of_ref": "indicator--5f3346a4-f26c-44d9-844f-51c0087f2b01", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a4645b-1786-4064-926e-49a5a10150d2", "sighting_of_ref": "indicator--a7a10c08-3dac-43bc-b457-bb8e8160a3c9", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c362ebe8-a4e3-48bc-b07e-c12420e1306c", "sighting_of_ref": "indicator--77cedc09-5a65-4ca5-8544-1125f1777605", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781f28e2-358e-45c4-b26a-605e5bd17b9e", "sighting_of_ref": "indicator--74a8adc8-4faa-4cf1-b002-f112e77136d1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c57e407-c35c-42df-ae16-2364cea4b752", "sighting_of_ref": "indicator--74a8adc8-4faa-4cf1-b002-f112e77136d1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6098f4-e4a2-423b-967a-399485714eb6", "sighting_of_ref": "indicator--726c8209-48a3-478e-b310-22ef8d0fc9f6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1eb52f2-4408-4572-b9f1-72ecd3210302", "sighting_of_ref": "indicator--18976caf-9a3e-4d27-b51b-d0882ebb518e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317b7740-dd63-4696-9a7b-db5a1d6f0e49", "sighting_of_ref": "indicator--534518dc-9097-4ffe-8113-a017a09e2f79", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c52139-547c-424d-a121-ffbe33deee8d", "sighting_of_ref": "indicator--6a6f3b44-4bd7-4156-aebc-07e1bdcd1f60", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ebf8ed7-9898-483b-9a53-28b8eba1a8c2", "sighting_of_ref": "indicator--a204b132-3d4b-4131-bcdd-0dde59b7de24", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0403e158-88f1-4ec4-892b-e809a31b816f", "sighting_of_ref": "indicator--6843f95e-4366-4b5f-b837-59abae857f31", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e86ae8c5-ae8c-4f91-872e-311d66665a98", "sighting_of_ref": "indicator--6f3b9ff5-2728-427a-83d2-674725fc30ae", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3749b1c6-cd44-4c2f-bf08-3091dc098983", "sighting_of_ref": "indicator--1c00b32a-ff45-4fd8-b619-81c2f108eb50", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eeec087-ecae-4896-bb2f-670f1918d8cd", "sighting_of_ref": "indicator--dbf7071e-7bfb-424b-8afb-9648950ec9d8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d0f9f2-4fa2-4df4-827f-426cd03f4334", "sighting_of_ref": "indicator--dbf7071e-7bfb-424b-8afb-9648950ec9d8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09a6bc7-f632-483a-b332-d2aee92aefb2", "sighting_of_ref": "indicator--c51f3cc2-ee9d-45d3-847b-c7a51362e00a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b8d06e-bdd2-4866-b346-fef49394f4a6", "sighting_of_ref": "indicator--c51f3cc2-ee9d-45d3-847b-c7a51362e00a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23cf493-8de0-410a-9ffe-1498fda5293c", "sighting_of_ref": "indicator--0ed01ec4-933e-4889-8b4d-1a8145e3810e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6979bd5a-bcc3-47f7-93f6-7d828cd683ab", "sighting_of_ref": "indicator--0ed01ec4-933e-4889-8b4d-1a8145e3810e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302fbb9a-b384-4334-afd0-c90e706762d2", "sighting_of_ref": "indicator--bc13972c-2154-4d4f-9c22-ebc4318d63e8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027f4869-fee6-417b-81f8-148e0dd3ef05", "sighting_of_ref": "indicator--bc13972c-2154-4d4f-9c22-ebc4318d63e8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8136313d-33c7-4182-826a-9d1632ab8ce3", "sighting_of_ref": "indicator--c6ca394d-8bed-4996-b75e-80967d2ea95d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0093c1be-37cd-47d5-8629-c9013afbc86c", "sighting_of_ref": "indicator--2a48ed86-1006-48f0-9a93-bb5ab1f16264", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b68b7c1-7ff5-47cc-84be-5d51191c5a71", "sighting_of_ref": "indicator--2a48ed86-1006-48f0-9a93-bb5ab1f16264", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1123389-0d39-40dc-9957-6c3eec6b20a7", "sighting_of_ref": "indicator--82dfdc36-a74b-4620-a745-d0322fb37b4a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62bf091a-30bd-42a0-8cb9-35603ca25769", "sighting_of_ref": "indicator--82dfdc36-a74b-4620-a745-d0322fb37b4a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727268fa-bd70-4526-a9fe-8a9aeb30bc21", "sighting_of_ref": "indicator--c5d44aea-7e13-448c-adeb-3c20622ca5b6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f158e68-8164-4f24-aa1d-982653e16f31", "sighting_of_ref": "indicator--3fc9df09-d782-454e-a00f-e5b6c81fe8e3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381d0573-47a4-4026-8a9a-a1921763ec1a", "sighting_of_ref": "indicator--3fc9df09-d782-454e-a00f-e5b6c81fe8e3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da6993d-5059-46e8-b4cd-4ff9d4079656", "sighting_of_ref": "indicator--11cf84a5-d5dd-4164-916a-3e68756da683", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512e7cdd-acaf-4c18-ad28-7859fccbf771", "sighting_of_ref": "indicator--23104266-0257-4f95-9ce4-b1c7ff178ecd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c9a4c3-8ee6-4fd3-ade0-ebd2a599df5b", "sighting_of_ref": "indicator--23104266-0257-4f95-9ce4-b1c7ff178ecd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df30721d-52bc-46d1-b033-7ac717da5f70", "sighting_of_ref": "indicator--d82e35e6-fed2-4aa6-a58b-aecf60eec521", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738ec101-02ae-4c5c-be24-9260d06db77e", "sighting_of_ref": "indicator--d4357447-7358-4184-bbd9-86cfc4fb1ea8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da0c7e9-d5fc-46c5-92b0-e429c8b9a4dc", "sighting_of_ref": "indicator--522f7142-efe8-4ff5-806e-027fc3009a1a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10dd912-3ae1-4b42-8fdd-22cff168d9af", "sighting_of_ref": "indicator--c926c452-1188-4639-9f9e-14c36a3c0f96", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0e113b-b4c9-4c81-8b29-743c55c90a6f", "sighting_of_ref": "indicator--f98f4e74-5806-4cfa-b7ab-74d7aa313988", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ccdf0ae-bcf6-4656-8d81-54be824738f1", "sighting_of_ref": "indicator--0636134d-3627-43c6-8c64-efe2d4e0b58c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396490d2-7271-4133-88f1-0eda4e24f5d6", "sighting_of_ref": "indicator--0636134d-3627-43c6-8c64-efe2d4e0b58c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2feaeb2e-c321-4333-bafc-b3a0ef6fac9d", "sighting_of_ref": "indicator--0f387865-5f5f-47ed-9999-6d855fb672f2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a503bd53-d5b6-4bf8-9568-c40d3ed9f575", "sighting_of_ref": "indicator--91868baf-01f6-4f42-974d-8a561bfd57a5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93828e33-790f-435f-886d-54a55f4a3597", "sighting_of_ref": "indicator--b4e333e8-6a0d-4451-b21c-836cd390ad78", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3dec97-a8a5-48be-9314-69f74fc9ca7a", "sighting_of_ref": "indicator--b4e333e8-6a0d-4451-b21c-836cd390ad78", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c54d6f76-348d-4923-9d6d-31f2fad10248", "sighting_of_ref": "indicator--20b283b9-4ffb-4ba1-b5cd-38017fcfc288", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48dab2c0-7e9e-40db-a5c0-650ea6a05d52", "sighting_of_ref": "indicator--20b283b9-4ffb-4ba1-b5cd-38017fcfc288", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9a8e71-e66a-4a21-a3de-dae153cfe3a3", "sighting_of_ref": "indicator--56cdcfad-31f1-414f-b8c1-ace700009a8d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a672e1-96dd-429f-81b4-9b2316476c68", "sighting_of_ref": "indicator--83ffe7c7-f59b-4dad-909b-76193bfcac4d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d3d7e1-f63e-4c82-a6fd-942263da87ab", "sighting_of_ref": "indicator--34d2adaf-a623-4a0c-9b76-e48d7def0169", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ad8731-7c8c-4420-bf4b-67415448e484", "sighting_of_ref": "indicator--2fe19212-e523-40c2-a243-062ef6b87967", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7202082d-5b70-42de-b024-30d9ee5919ec", "sighting_of_ref": "indicator--fb018d7a-7337-4862-9cf6-abd9e6550225", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5618f455-bdc0-4eb6-b278-90a3da960cdb", "sighting_of_ref": "indicator--fb018d7a-7337-4862-9cf6-abd9e6550225", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1c188e-aa1e-44b1-adba-bcae32b9e7b8", "sighting_of_ref": "indicator--b573d60a-9eaf-431f-a1e5-d3c149c96112", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21791966-29c7-4732-ad65-2ef4d6124bac", "sighting_of_ref": "indicator--b573d60a-9eaf-431f-a1e5-d3c149c96112", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ab6257-2e17-4e2c-a0b4-b5529e7f49a3", "sighting_of_ref": "indicator--13923b26-3c89-40c7-91a7-215b12a3cf45", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b09e44a-9b17-4815-acb4-efd4b26b90de", "sighting_of_ref": "indicator--d84ad8dc-1755-4170-b1ec-77c69f4973a6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb05fe4-c8de-4d61-b093-8ddfdad4f03f", "sighting_of_ref": "indicator--ce61f6a8-6885-46b7-9d91-fe80281d48bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec20243-e308-4040-9af3-934ba2cfe153", "sighting_of_ref": "indicator--9e97efcc-469d-44ed-93ff-2218fd811b43", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ff3982-13ea-45ca-8de8-d2dcb62f26df", "sighting_of_ref": "indicator--8190e956-e53d-49f3-b259-fb23da1afcfb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099583df-b465-4c19-9c69-9a0082660366", "sighting_of_ref": "indicator--567611e5-7eaf-42ad-8831-02155d54e3fd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab49c5b-3c9f-4cd8-8cc1-b03bae12c8cc", "sighting_of_ref": "indicator--fe1d3d05-3cd6-4f7e-9f8f-49a08385e75f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d646dbd-f4eb-46cf-bc9c-bb0cb5f9a957", "sighting_of_ref": "indicator--774bc151-b5fe-481c-997a-712f1c46e60d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b590965-8b3a-46ae-bb8a-ae75542057d3", "sighting_of_ref": "indicator--54f909fa-76f9-4c31-9ff5-abe6aa13ecf6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eebd5a5-566f-4851-aca2-8bd13a65c8fd", "sighting_of_ref": "indicator--1c5a826b-b386-419a-bde1-fbf112e71207", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24153f22-5c1e-4776-8426-0810a97933aa", "sighting_of_ref": "indicator--1c5a826b-b386-419a-bde1-fbf112e71207", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d4394f-a403-4b5a-b4f8-ea03399f33fa", "sighting_of_ref": "indicator--e4ee7d1b-4a38-4804-92e6-5fc47b493f66", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700c9235-413c-4ea5-9a83-272508bf5386", "sighting_of_ref": "indicator--7c9f2cbc-1363-46c0-a2e6-f9814ea6c3f7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db992d0a-a835-4705-b0ec-70a0fdf45359", "sighting_of_ref": "indicator--f03fdfd5-3314-4355-b6e4-836b06da0356", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71760b0d-c0f5-4d47-934b-73d01bce6a8a", "sighting_of_ref": "indicator--9b8f2f56-b413-48f1-a263-54a1f1b7ee10", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c76b3eb-0da3-4af4-936e-54374951ab63", "sighting_of_ref": "indicator--ed32df63-d196-4d6f-999a-2ac0f80443b7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad1ba5d5-5493-4b4f-a047-d85a1a61d051", "sighting_of_ref": "indicator--25eaf000-b262-48b0-98c5-dc7ebeca9cc9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1267918e-6af5-4605-bfc8-5af8346bcff8", "sighting_of_ref": "indicator--cc2f6ae1-70c2-4492-a27e-561155d26f4f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e6f2f7-08fe-4d20-9ba8-457de4b24e4f", "sighting_of_ref": "indicator--02ab5cec-f043-4ddf-8eaa-bc9b24f7b094", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae439a8-5381-4ad0-b1ec-b361f88d7672", "sighting_of_ref": "indicator--02ab5cec-f043-4ddf-8eaa-bc9b24f7b094", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750bfc63-aad7-4c77-9dc3-022004b266a4", "sighting_of_ref": "indicator--181066a1-c4bd-47ef-9455-2931b050a444", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42fdedb-4274-4321-8643-35c93b217366", "sighting_of_ref": "indicator--d75cf469-c8ed-4a0b-9516-0a90eedf5f46", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab533b49-2401-4faf-a7c1-61b4bf36f163", "sighting_of_ref": "indicator--d75cf469-c8ed-4a0b-9516-0a90eedf5f46", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512c5acb-f86c-45bc-822b-76be947c29b2", "sighting_of_ref": "indicator--d75cf469-c8ed-4a0b-9516-0a90eedf5f46", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bfe6c35-a5ee-422d-853b-4d136c367b47", "sighting_of_ref": "indicator--118180fc-e5d2-464d-9acf-b1ddb703e153", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb889397-c28e-454f-b5a7-e3e822c393d8", "sighting_of_ref": "indicator--118180fc-e5d2-464d-9acf-b1ddb703e153", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c2a05d-1c71-406b-a1be-7ce5f67a06f3", "sighting_of_ref": "indicator--118180fc-e5d2-464d-9acf-b1ddb703e153", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eafa43a5-7768-42a2-b52a-11cbd5e07a30", "sighting_of_ref": "indicator--54cd3be9-9fcc-42eb-b071-0e00b984f44f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d3e5f65-22fc-4bba-a7ee-b7d36ee71497", "sighting_of_ref": "indicator--54cd3be9-9fcc-42eb-b071-0e00b984f44f", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deceaf9a-43bf-42e6-9057-c9c47ca7cbaa", "sighting_of_ref": "indicator--54cd3be9-9fcc-42eb-b071-0e00b984f44f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d082116-a6ae-490a-a3e8-75a83d5caab8", "sighting_of_ref": "indicator--e2454275-ef0e-4c88-8cfb-59bb1f008564", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9b393d-8048-40db-8356-62dbfe934508", "sighting_of_ref": "indicator--e2454275-ef0e-4c88-8cfb-59bb1f008564", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05cbe054-d79a-4c71-bdca-117d75a11b8d", "sighting_of_ref": "indicator--c7dd7f7c-4546-4472-bfcb-8b069077589d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3069cf9a-e557-4cc6-a7d6-1d99cea2bfe1", "sighting_of_ref": "indicator--c7dd7f7c-4546-4472-bfcb-8b069077589d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c010bc-cbd3-428b-9345-23c41b91b90f", "sighting_of_ref": "indicator--d50b10f9-31dd-46d2-be76-5465b63b1521", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8587787-2454-4360-9a8a-fef06a64f089", "sighting_of_ref": "indicator--5524a6f9-ca02-4863-8d98-865ef44360b7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d96eee1a-5689-4d4e-b60f-3ad98b3095ee", "sighting_of_ref": "indicator--5524a6f9-ca02-4863-8d98-865ef44360b7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1269e27b-3347-465d-83b5-eeae9b8137a7", "sighting_of_ref": "indicator--aaaa2f32-2464-4bc5-af62-205520d6d050", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da96711-362f-4e56-a2ec-edc1dd469faa", "sighting_of_ref": "indicator--864c63eb-a429-43b0-98f0-2ed4a1fb2cd9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36776bc9-2faa-40d7-a09c-deded6631759", "sighting_of_ref": "indicator--864c63eb-a429-43b0-98f0-2ed4a1fb2cd9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67cd1880-98e4-460e-b2c4-bc1f293d3721", "sighting_of_ref": "indicator--97ad60da-40cd-4a7f-adb0-02bf4a8d2a28", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a4e17f-fe0c-4b72-9f18-94ab588e0070", "sighting_of_ref": "indicator--97ad60da-40cd-4a7f-adb0-02bf4a8d2a28", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082f6dba-2a97-48c9-a40e-0bf4c924953a", "sighting_of_ref": "indicator--707aa1d0-4884-471b-96b7-95d206381a79", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835a254c-8c26-463e-90a6-d07ea177ab4f", "sighting_of_ref": "indicator--707aa1d0-4884-471b-96b7-95d206381a79", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206a7ab7-8e69-4018-be49-dff307b5a2bf", "sighting_of_ref": "indicator--fa1e0c20-c011-4271-bc03-6fb5522a257a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2240ac-3db0-49a3-8b39-121279e03ee4", "sighting_of_ref": "indicator--a97f98e6-fd22-43a6-a58d-31395d9c2611", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--026ce8f9-af58-48a6-b761-c7086d217cba", "sighting_of_ref": "indicator--e22c17b9-3517-4266-bb99-24e10052a593", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976ba201-f59a-4559-870e-ed4fc375d4ed", "sighting_of_ref": "indicator--48f07727-0932-439a-b613-9043ca66557e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41c8763-852a-4624-874a-4c659987dd4c", "sighting_of_ref": "indicator--dc528a76-b77c-4c7e-b8f1-ce3ea3082ae5", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7254a230-b642-4642-bcde-f354be8c3c45", "sighting_of_ref": "indicator--a62d9f06-91b9-4cbc-8a05-c041754ca3f5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc54fb0-d909-4421-bc93-79c3a55ab6b0", "sighting_of_ref": "indicator--6c4d58fa-ae15-42c2-9a72-ab412b6cfcf8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d96806-6a59-41c0-9919-905a8544ce4b", "sighting_of_ref": "indicator--c3ab7c61-b544-4243-9af2-dcd8ff5d7344", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1183ac-400e-42b9-b432-ab95b567ec63", "sighting_of_ref": "indicator--b019180b-1152-4b79-8094-250ba90af41f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11a4410-73f0-44b3-b436-cb02d4a7d32e", "sighting_of_ref": "indicator--fd5b6071-d511-43d5-bff6-1807addabe57", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce152a03-d2a8-48c1-9249-19b713cb6c1e", "sighting_of_ref": "indicator--958392d5-8798-4b6f-a96c-fafa4dd92858", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7732c58-d446-40c7-9c5b-93fe07356e0e", "sighting_of_ref": "indicator--1f3e0f9f-4329-4a4d-bb62-5adfef6e00c7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9acc557-067d-4882-8408-3ba705ffe414", "sighting_of_ref": "indicator--dfaec405-a85e-4a4f-9a21-64798060b2c9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08e34f7-a8d4-47a1-97a4-1f7c6479eca2", "sighting_of_ref": "indicator--02eb355c-303d-469a-9e94-ca576e9f7dd7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422c0d3a-9da2-4e5d-8dfd-3067380ab0ba", "sighting_of_ref": "indicator--b94ed7ee-8db2-4080-a5cf-9e0284d71752", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204bca01-5970-4127-86ba-928805ab9abc", "sighting_of_ref": "indicator--53d72ba2-561a-4565-8b13-2660f732a586", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a3e1fd-9ce1-4661-b983-54ee0f852d21", "sighting_of_ref": "indicator--53d72ba2-561a-4565-8b13-2660f732a586", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbf564a-5b9d-41bb-ae21-36629c4b0655", "sighting_of_ref": "indicator--53d72ba2-561a-4565-8b13-2660f732a586", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7080b8c-ca87-4952-ba4b-9c78abfcc255", "sighting_of_ref": "indicator--48f2a97c-cf10-42a3-b69c-bbcc25ccefc2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c603e8c9-85e3-4f33-866c-b1ade8ce2df2", "sighting_of_ref": "indicator--48f2a97c-cf10-42a3-b69c-bbcc25ccefc2", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59403cdd-d955-4a4c-a734-08bb423e78c8", "sighting_of_ref": "indicator--48f2a97c-cf10-42a3-b69c-bbcc25ccefc2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f55584d-8d85-4841-9ac3-001ce92470dc", "sighting_of_ref": "indicator--14def68b-2e97-4063-b1b5-345eaeb340d3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdff9dc4-29fe-4342-86e6-1e110252db2f", "sighting_of_ref": "indicator--1ac13c7f-09db-4472-9f34-16faf275df76", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3b50b8-0fa6-439d-8982-a5a7fbe6b040", "sighting_of_ref": "indicator--15484956-e8f0-4964-bcc0-8767c27870a0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce71a11-b8fb-43a3-a98d-7bcfe79f9af6", "sighting_of_ref": "indicator--b919e963-c209-434f-bf0d-5dee14088fa3", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3661dd2-a42c-4f99-9a4d-e852a320d569", "sighting_of_ref": "indicator--1fab8bbd-4f56-4030-b57c-46cc27370e70", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd134064-3cdb-4695-838c-1934a1d6e5bc", "sighting_of_ref": "indicator--2c4f7192-c42e-4c06-a03a-07782d1ba130", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ceda586-68f4-45ae-9b51-e1fa60566972", "sighting_of_ref": "indicator--7f923a94-dd9e-4761-8a4d-5f652f114909", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c242cda5-2411-4656-95a2-1ed7763f0b60", "sighting_of_ref": "indicator--ca68fba9-557a-4b29-ac7e-a23106585423", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a57198-764e-49b7-aeb7-4750b1778cd4", "sighting_of_ref": "indicator--69efd4cd-9068-461a-ab7a-379162ec976c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbefecbd-1f35-43c9-8e1c-11b3885ff365", "sighting_of_ref": "indicator--09e1c7db-6dd2-4ac5-a660-eb18c2cc0500", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29876e1a-92ad-4e9f-8e4c-9506a6496f65", "sighting_of_ref": "indicator--d00b3fd9-a3d7-4d69-8b43-97b70ec8194d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1428cd1e-8a7c-4a73-abb5-6ec884e5daf1", "sighting_of_ref": "indicator--15d8d367-4eb3-46dd-9450-506d8792564a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b127f7b4-190c-4f83-897e-6154ce9a36b8", "sighting_of_ref": "indicator--f2fc9b53-d3c3-47b4-891a-be4a98be6de3", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b45fcae-b159-4496-85d1-890969ae6189", "sighting_of_ref": "indicator--9bae71df-6b8a-4c74-ab0f-d52e1bada62d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df97a41d-de6a-4f5c-9621-483115394820", "sighting_of_ref": "indicator--4f2aebf6-97b0-407f-82dd-ecf8bc391ae9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234d56b6-0b15-412a-b200-4d336abaf2d6", "sighting_of_ref": "indicator--4f2aebf6-97b0-407f-82dd-ecf8bc391ae9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c9130f3-43a8-4ec0-9d93-52990efb7b1d", "sighting_of_ref": "indicator--eb5aacab-1078-4654-b9bc-513486c3ab23", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e97a37a-e022-4322-86d6-a83e50f624f6", "sighting_of_ref": "indicator--b8556d3d-df1a-4d08-8a2c-3a590e81a516", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962c5e99-1a62-4d78-be8f-592a28995603", "sighting_of_ref": "indicator--7aff0e36-72bb-4a4c-b4e0-7723290df7b3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9063b04-1c0c-4949-b794-db603ed2ff16", "sighting_of_ref": "indicator--bffc9b33-c225-408d-bcf5-ebd5b0e004fe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23c17b4-0315-47a3-957c-c7333ba50909", "sighting_of_ref": "indicator--e0434c23-e7af-407c-a83c-b00def2e98bc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8abb415-9332-4e2c-92ed-f4e6e01ed090", "sighting_of_ref": "indicator--ce49d3e4-a6e9-44a8-985a-152e7ae742f7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478099a3-2532-4fe8-a4a3-4561d128f84e", "sighting_of_ref": "indicator--e5d13ccf-fa29-417f-bc8e-50585ed32795", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4fa46d4-a240-4543-b7fe-796a26a3e269", "sighting_of_ref": "indicator--20a22c13-8da4-42a8-8ec1-80632e95ec0b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2edc49bb-39a6-4b6d-9e9c-b5c51fa5de55", "sighting_of_ref": "indicator--78deee39-f878-49cb-a9a3-0ff0baa473fc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac18d7d9-8c00-4cee-affa-efcccde96864", "sighting_of_ref": "indicator--346380a6-8a58-4bd0-9e95-ba686d26aa32", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5430d7f3-fde3-4c35-b171-613a5b9f34ed", "sighting_of_ref": "indicator--ef9694e6-1573-45ea-81d8-edf7f6f93e86", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de35eb3a-74ec-4218-80e9-4fe751b59878", "sighting_of_ref": "indicator--d03e035e-46e3-4289-93b9-b66c781ce419", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521717bc-9600-4fb1-869f-72cb986789c3", "sighting_of_ref": "indicator--d03e035e-46e3-4289-93b9-b66c781ce419", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd47a597-d120-4d17-aa37-7d64c73a4adc", "sighting_of_ref": "indicator--d59c11c8-d389-4c28-ac2c-d26ea806687c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a076e370-009f-49ae-af9f-884b6d67d95c", "sighting_of_ref": "indicator--33648bf1-b662-4b6c-96d2-b4b4b5694827", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ffbdff0-ce68-45f8-bc55-bae3657de0d2", "sighting_of_ref": "indicator--5d2d4ff1-dc09-4bcf-845a-ffeb583941d9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428045ee-826f-4b2a-b343-2aaf28515ec5", "sighting_of_ref": "indicator--55f7d7f1-0fab-4355-8873-c4ac917a1e96", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2ca92b-2a75-45ef-a242-d0fcf39a5940", "sighting_of_ref": "indicator--e4faa2d4-963d-40d6-929c-e942303c5e8a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74cfafc-da74-4196-bfda-57a90121951b", "sighting_of_ref": "indicator--56513102-d416-4572-a31d-48ae964e4b2f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413673d5-1b05-4d7a-8b80-8732738298c7", "sighting_of_ref": "indicator--8eca13e3-089e-4b77-8827-4c1edbca993d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8faa9612-4d6b-405d-bdda-bce38cfcf26d", "sighting_of_ref": "indicator--09014904-a5e6-437d-94da-48052e9b925e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aacb4c3-0eab-4845-a9c6-2e3ac428c539", "sighting_of_ref": "indicator--4bbbbbee-c3fe-4d88-8cf5-2ee0dcc171d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c71547a-248f-4641-826d-c997d5f57dd9", "sighting_of_ref": "indicator--bb92e486-ffec-4521-ab4b-1d9831a0a9db", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7d1b67-d309-4288-90ac-012fe3c493ba", "sighting_of_ref": "indicator--73d3cf9a-8ae4-4a6c-ac3a-efb7cc20ae15", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0116fdd-579f-4902-86a4-48755a1435dc", "sighting_of_ref": "indicator--1a2511dd-03aa-479f-adbc-8b4ea5aed69a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fd3185-545f-47aa-9048-b797188c179b", "sighting_of_ref": "indicator--2fd9b99b-b475-40a5-aee6-bd51c9fa1090", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a183286-1f13-4a54-ade5-33fdef710ba6", "sighting_of_ref": "indicator--156672eb-3481-478d-b8f1-bddf4c0470be", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6035fc07-9170-40a1-9e1c-8a99ac83888a", "sighting_of_ref": "indicator--156672eb-3481-478d-b8f1-bddf4c0470be", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70724f5b-a15d-46f8-a6fb-64eb537ea9b7", "sighting_of_ref": "indicator--156672eb-3481-478d-b8f1-bddf4c0470be", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9bd74c-eb12-4519-83dc-85b02e032c54", "sighting_of_ref": "indicator--27fc243e-bddc-44e9-ac33-edfd1a24fb26", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de2e9f4-788b-4544-9c9f-c0ad48b06faf", "sighting_of_ref": "indicator--0ebd494d-4c67-4658-8b0f-eabf7c2e76b6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4123094b-5ada-4d73-9b66-5f5b24ccbf2b", "sighting_of_ref": "indicator--e4e2dff4-1007-411b-bd98-1f7ae747504d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbd4d92-2844-4cee-8933-60f1ede61895", "sighting_of_ref": "indicator--22e6800e-af12-409c-996a-98cb9c6b4c7c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb09b94e-77f3-4997-8951-05f82206e1d6", "sighting_of_ref": "indicator--bc2dc57e-c322-4749-8fe6-036d7c306436", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b384dc-1fb0-4ce2-a476-880731b93fcc", "sighting_of_ref": "indicator--03bf859a-cf2e-4e0d-bf48-4c9c536a9a19", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d07e3a-e8ef-4d0d-8b81-fb383bf24f61", "sighting_of_ref": "indicator--f96c026c-001a-4208-9b7a-7732d873d245", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a5f809-ac3b-42fc-bd24-46d6a2bc9bf2", "sighting_of_ref": "indicator--e2cc7738-a9c8-499c-916d-e3927f4711fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec212c7-4e13-4ef6-9074-767affdfcc9f", "sighting_of_ref": "indicator--6471c84c-8dc5-41ce-bb4a-cbccaf7dc15e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8177fb-5dba-4a76-acbf-ea47aaea1a9e", "sighting_of_ref": "indicator--7600646b-ba58-486d-a284-b51994dcaead", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf61ba8-5d70-4bc5-b8fa-d636f4304393", "sighting_of_ref": "indicator--bb485e2a-398b-4252-9efe-3209d025de28", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c310fda-59c4-453c-adf5-b5c0286c2c2a", "sighting_of_ref": "indicator--617ecd92-a94b-4a98-bd1e-7fff5ab0b444", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b56c37-c359-44c2-9626-cde784697811", "sighting_of_ref": "indicator--cb1e6266-16fe-4215-ab08-3cc9d1696bab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75c6238-6d20-45cf-a594-b10f6f68dd5c", "sighting_of_ref": "indicator--4042a5c5-f41f-4a6b-b160-e9b01dbe9025", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e171ad5d-ff7c-4a0c-8b3c-c61e73bbc98e", "sighting_of_ref": "indicator--71b2a106-5b24-4323-b6e6-ff7e7b45ea9c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d3720a-5d37-4d67-83dc-830a4ec8d556", "sighting_of_ref": "indicator--42864495-2c29-437b-a615-3d500b8bebe0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fa3e5b-9dbb-4907-afca-8c6b0734c718", "sighting_of_ref": "indicator--93501e40-3b6c-4b3f-911e-b75899df9f34", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8fd8401-b2f2-4c65-991c-17a34b8f51e8", "sighting_of_ref": "indicator--d0ef6fb7-b108-4722-8a8a-7c137fba4a25", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6883bcdc-48c7-45f1-9fab-45615ce4a77b", "sighting_of_ref": "indicator--2d7fed12-9d49-49ec-b7ca-d0983e59a4a9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--046dde51-d6db-4c02-b37a-eabe9d6d1d03", "sighting_of_ref": "indicator--4bd5b9e3-90ea-43e7-bd2c-76609af8bcd9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ddefad-c2d2-4860-a6a0-1572879dbcad", "sighting_of_ref": "indicator--02fef765-8027-4168-a380-768195d9b4fd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48e33fb-83d2-4b01-ab9a-cfd73f71223d", "sighting_of_ref": "indicator--a065a479-a5f2-40de-bdf0-8551e94f10a9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa449268-d835-4df2-bbe8-4e49a4c3bf32", "sighting_of_ref": "indicator--9de0ab6a-b00e-435d-864e-81aee734d98c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71fc9c9a-fb2e-47f0-997a-9ead27d49c76", "sighting_of_ref": "indicator--3a46f4de-ac91-4786-9723-6df5c08f8d12", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2074b3b4-ca97-4f0d-a5b0-60a0fa49fe3e", "sighting_of_ref": "indicator--7c006d7c-6154-4753-93d4-171892e6914c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8783d267-c77c-4ed9-a3f9-333151fa4fee", "sighting_of_ref": "indicator--11bb5330-9e63-4599-9c3a-4cfbf28de283", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b092ce81-f23a-4e06-99ad-c954440cc1a0", "sighting_of_ref": "indicator--5ad2b909-4432-42e7-914e-079f60c87a9d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e7950d-d8fc-4eb8-86f4-b4be50614d87", "sighting_of_ref": "indicator--d0f49ca1-3da2-4813-a5cd-302ddfd35bae", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816bd8ff-217d-4c70-9dc6-e1189a789508", "sighting_of_ref": "indicator--f49a9c67-3d53-4b90-938a-7775e9829842", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233d5326-8150-423a-bcac-dc559190299d", "sighting_of_ref": "indicator--9906792c-baf1-4116-b284-a44a1aab757d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689ffcb8-1706-470a-85e0-8c0f4da6d0a6", "sighting_of_ref": "indicator--9906792c-baf1-4116-b284-a44a1aab757d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f9e8de-4db6-453b-afac-d4482ff4ecad", "sighting_of_ref": "indicator--54b60e13-458a-4a4d-a607-31d7d849b805", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993382d4-61bf-4227-845e-07a2423e4556", "sighting_of_ref": "indicator--806c9a73-7860-485e-a246-a53d334d0cd5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d10a8772-813f-4501-9511-8fe740387042", "sighting_of_ref": "indicator--b7f5731b-d196-43dc-8012-f0a21ea90755", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de802e9f-8605-4cbd-b2d2-83726debaaa1", "sighting_of_ref": "indicator--b3dc4990-531c-495b-bd79-acb7b5f31bf0", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705b0dd8-f656-4328-b9c0-41a0888e852c", "sighting_of_ref": "indicator--9d3a4d46-1e16-4d0a-95e2-99683ba83625", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932a0f7c-a076-4d30-b5f5-9ff9ac12c1f4", "sighting_of_ref": "indicator--ccccf5e9-8389-453e-8abe-11540206b08a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30afe897-db27-40ec-92ef-59ec7e617d6b", "sighting_of_ref": "indicator--c8421ea1-cfb7-4e47-9ef5-3748809aafa5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54b7bec-6a49-4f89-bb97-3ac51cf79e53", "sighting_of_ref": "indicator--ac9d9eb0-5423-400e-9ecf-940e8e9f8125", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7251c237-db6f-4aac-a6b0-a335ce55bf97", "sighting_of_ref": "indicator--2caf5e80-1f77-4faa-93ef-b9f6a96046ac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f7e282-baa6-4e23-9632-4a5921469a31", "sighting_of_ref": "indicator--b466ec28-b12a-49ed-87f6-0f698f7a53d3", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15edc04a-470b-4f35-b5aa-7a79e605a7aa", "sighting_of_ref": "indicator--c0734ca6-5495-4ed8-8289-c93ae06c519e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc0d4c5-b723-4a66-9ae0-7a43887d9ef4", "sighting_of_ref": "indicator--62952be5-361e-44b8-8432-08b94e74422a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad4c5fe-c5c0-4693-ada3-ad610c0b4a53", "sighting_of_ref": "indicator--adc28ba4-07f7-4a03-a194-90c7cff45ab8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726bb780-77b5-42c1-9d70-229391891ac6", "sighting_of_ref": "indicator--ef18d77b-956d-4135-8963-c890cc9e4498", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de94ab5-bd01-4a72-834b-adec37a8e484", "sighting_of_ref": "indicator--619944b9-f26b-44a7-be3e-5b495661ce8c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27486ddf-28a7-4999-8a68-1c91db511600", "sighting_of_ref": "indicator--76bafd4c-a2b6-46c1-bb67-63c530db1c2e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82a8d71-1eff-489c-b9fe-ab7f2946e754", "sighting_of_ref": "indicator--d1df61d4-5bec-445d-b863-4e3e5b2a3cce", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23629cee-ea85-4fda-b8ec-e1d7fa297623", "sighting_of_ref": "indicator--a6e301f6-359f-4cd3-bfa6-a57d0c159af7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d064b8-8dbf-481d-bbe7-3f6be36c790c", "sighting_of_ref": "indicator--adfb2d2c-12b8-4edd-9a61-b161b7fa19f0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46094ea-7720-46d2-ba66-e92ab41ec656", "sighting_of_ref": "indicator--840af72c-ea58-45d8-bf6e-7245010ddc2d", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d12b63-ab52-4334-840c-f2495b29a4fd", "sighting_of_ref": "indicator--be15e264-60e6-47eb-b838-63291ab491dd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2e770e-a1a1-4a97-aa44-73d6257b3c16", "sighting_of_ref": "indicator--3c8a53b7-bc59-4643-9f5d-0925e52425c6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c366bd-65b4-4be9-a208-b7a6723480e3", "sighting_of_ref": "indicator--c083f4a9-bf5d-4450-9e1d-3311a2a87be3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27aac0e9-65fe-45b5-b804-1e574646ba6f", "sighting_of_ref": "indicator--c083f4a9-bf5d-4450-9e1d-3311a2a87be3", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c507a988-031a-4254-851d-4c428242e8fb", "sighting_of_ref": "indicator--ba086b41-c102-45a5-b6ee-33b76bc4c40c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5953dc-dd37-44ee-9222-a1f83e046345", "sighting_of_ref": "indicator--ba086b41-c102-45a5-b6ee-33b76bc4c40c", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac1b4de-b22b-41e0-85c0-fa2a7bc725d8", "sighting_of_ref": "indicator--ba086b41-c102-45a5-b6ee-33b76bc4c40c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21159c64-3bf7-4cbd-ab29-521dd93b3d59", "sighting_of_ref": "indicator--fb85c7c7-d7bc-465c-852d-8625f8dc7df3", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac162207-aba0-4ff9-bb72-e5759445b4c1", "sighting_of_ref": "indicator--76975693-ef02-4c11-86b6-356944b1a721", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed889dd4-09a3-4b0b-ae4c-4c1ff87311c8", "sighting_of_ref": "indicator--80552726-1264-4590-b147-e2ba178602ee", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214d3a12-2034-4452-846a-77e9de3aa0bc", "sighting_of_ref": "indicator--70f85363-65a6-4eae-bb5f-415792b9d141", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f05ee9-4450-4ff3-bc6b-dbff47aabdbb", "sighting_of_ref": "indicator--70f85363-65a6-4eae-bb5f-415792b9d141", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c002344a-d22f-47d8-87c8-9e91ea15d963", "sighting_of_ref": "indicator--5a9ab93e-28ab-42c7-ad8e-7dfcec23f916", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80f8329-a77c-42a5-ab41-eac5c779935d", "sighting_of_ref": "indicator--e79e1d8f-a550-44cb-b0bb-86910070ad0b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a533b9e-ab89-4806-ab10-0257eae9c7f6", "sighting_of_ref": "indicator--414d89f2-4882-4c3d-a2fe-012717119bf8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d297fea2-3622-45ce-83f2-c2305515b6a5", "sighting_of_ref": "indicator--414d89f2-4882-4c3d-a2fe-012717119bf8", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95361cd9-1981-44db-b025-9934ecda021a", "sighting_of_ref": "indicator--414d89f2-4882-4c3d-a2fe-012717119bf8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--971bb587-d251-4cae-8c25-08134a52f2cd", "sighting_of_ref": "indicator--fcb4c7ec-244b-4e86-9e9a-db6be2e90eb5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2194fa-fa16-485a-aa83-f1c7e47348e3", "sighting_of_ref": "indicator--ff9986c9-c0ab-4321-a23a-021e0e668fff", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca85aff1-784d-449e-90e1-42ba181b2270", "sighting_of_ref": "indicator--27dead13-68cf-42ef-ba90-69746c68f98f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17783e3-b048-476c-b8f1-cd281ce5bccc", "sighting_of_ref": "indicator--40a32714-9ef2-4176-96d4-62b6d09777f8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23cbbd50-2e46-411e-9088-a43a77a0aaab", "sighting_of_ref": "indicator--bc433ee6-13e9-496d-b599-9bd35728cd43", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243c2381-1547-466c-bc91-e81e810a495c", "sighting_of_ref": "indicator--9b2768eb-b536-4ad7-b019-02fa259f734e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2e16dd-a9cb-4f19-982f-74f5c8f20ea7", "sighting_of_ref": "indicator--7214a4a4-87c2-41d0-a006-bdb24f08d4bf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9b2346-8207-42c1-844b-463a23295508", "sighting_of_ref": "indicator--ed077217-7d07-4440-a9f1-dee210ab9981", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1650f5d1-a9b8-4e73-b540-28df85462f4c", "sighting_of_ref": "indicator--08342cce-1821-4b2a-b377-9f6fe34b7d99", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddc52838-8c7f-42dd-a9e5-b7dc9e1da050", "sighting_of_ref": "indicator--21dfe7d1-7cad-43df-b5c4-11320127792e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636d7c64-23c1-4d91-82d4-7e29c41e0cb6", "sighting_of_ref": "indicator--5b1478b7-775e-4570-af97-6320247aab1f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988592e8-26a3-433f-b358-7c7d2412a17d", "sighting_of_ref": "indicator--84546786-7583-4472-8c92-065a7f7435b5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa282f14-a4d0-43f2-a7b8-3326fec1388b", "sighting_of_ref": "indicator--fa1a1c59-2c57-4fa9-8b78-441fb3ae6d59", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac8a5b7-b789-49d0-9201-b1bbe9d3c55c", "sighting_of_ref": "indicator--c1293212-1dfb-43ba-9be0-ac4410b2b401", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df21c9fd-f232-49eb-881d-70b8abdf37de", "sighting_of_ref": "indicator--1506f90e-e448-47f9-a286-c087d075f9c8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33fd69e-0f3c-4d66-a033-db82d6595f90", "sighting_of_ref": "indicator--adfb0ec1-6482-4b43-9208-67f72f7b41ec", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9af5192-a234-4229-b5db-df0b38af64cb", "sighting_of_ref": "indicator--adfb0ec1-6482-4b43-9208-67f72f7b41ec", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1825c6f-c8b9-41e3-85f7-8d542d1a118e", "sighting_of_ref": "indicator--adfb0ec1-6482-4b43-9208-67f72f7b41ec", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab61f7d-9453-4a1c-8692-aba53dde74b1", "sighting_of_ref": "indicator--9d21a023-a671-4ccd-b546-ff41ab246544", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde6e4d3-121b-4242-b118-5b212d826b84", "sighting_of_ref": "indicator--9d21a023-a671-4ccd-b546-ff41ab246544", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c25b06-c874-4eff-852f-ba64826bfef7", "sighting_of_ref": "indicator--9d21a023-a671-4ccd-b546-ff41ab246544", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe929cd-e293-4ce9-9b1c-49dd1c6d068e", "sighting_of_ref": "indicator--8538a4c3-bc6b-4905-b034-7374b8416347", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5859956-f0ec-4a8c-999d-df01988dc179", "sighting_of_ref": "indicator--8538a4c3-bc6b-4905-b034-7374b8416347", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e062b23-8e60-44de-b25d-142bd5735513", "sighting_of_ref": "indicator--36704085-291b-49e7-b307-1efb03d5f930", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1985c907-e90d-4e63-a814-b0bd7aca456c", "sighting_of_ref": "indicator--a0f58a1c-7a51-4f1e-9d86-2db39721b270", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8d8c35-6f01-40dc-be0f-34099d80b0c4", "sighting_of_ref": "indicator--8cc87947-c134-4c69-a932-9ec4dc894d26", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61cc3327-5e9c-4505-acc1-d05e101446f9", "sighting_of_ref": "indicator--8cc87947-c134-4c69-a932-9ec4dc894d26", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb62031-b4c7-423a-ab91-111a1c8276e3", "sighting_of_ref": "indicator--8cc87947-c134-4c69-a932-9ec4dc894d26", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a53304d-baaa-4926-865f-60630424e966", "sighting_of_ref": "indicator--29975358-8ed9-47ba-9447-bbecda79099d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a273ff2-676f-4c3d-9ce9-1b3efefca84d", "sighting_of_ref": "indicator--29975358-8ed9-47ba-9447-bbecda79099d", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bdef153-44d9-46de-bbc8-eaee8e5097d8", "sighting_of_ref": "indicator--29975358-8ed9-47ba-9447-bbecda79099d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03884ad1-1d1b-46fa-b19b-f355410b9c8f", "sighting_of_ref": "indicator--243c2c8e-4a05-4017-a4d1-f55a6cdcd26c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bd7981-0d44-401a-9e75-797383a60288", "sighting_of_ref": "indicator--dafd1e66-ba53-4636-8f83-f8abd753b1b4", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c1a77d-c494-4644-a5cb-81a8c535dd09", "sighting_of_ref": "indicator--9c23781d-1ee6-4f7e-9ab4-e32a77b64f21", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ce0203-6cd3-4e47-bc0c-7f31f014fdde", "sighting_of_ref": "indicator--c0938d07-264c-4e64-bd70-8cfe06d7f89f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2066029c-0f8f-4666-924b-70bafe99e2fa", "sighting_of_ref": "indicator--85be9d2a-fc0e-47ca-8732-57b6b3cc6aef", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa879140-6d3e-4940-95fe-30c0301e1109", "sighting_of_ref": "indicator--ed3d5210-d678-4587-b7b6-cc6dc1ee52e7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--653c25b1-e4c7-493e-a598-70373f407169", "sighting_of_ref": "indicator--da1dc00f-985c-4b69-ab2e-0348cf363006", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8207f49d-eee5-43bd-8aea-3dc84bed91ed", "sighting_of_ref": "indicator--79795828-558f-4239-9fdb-ab5a30ceb67c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9600015-18e7-4e20-afdf-50d6c5ba75aa", "sighting_of_ref": "indicator--24ca58a5-057a-47e3-960e-468c8b6c757c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f717629-cd70-41b4-8678-713f5dd03a21", "sighting_of_ref": "indicator--833e27ee-db3b-441a-991a-012d39748c53", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1891f27-5bb0-4022-adbd-80afbcee4654", "sighting_of_ref": "indicator--e73d9673-6499-4b40-bf55-662cedec931d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc693d72-ab41-45da-a0ca-430b7de16442", "sighting_of_ref": "indicator--e73d9673-6499-4b40-bf55-662cedec931d", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9036a8-37cc-49c3-b8c4-495e0be9f443", "sighting_of_ref": "indicator--e73d9673-6499-4b40-bf55-662cedec931d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65f7019-6d4a-469b-9c80-40dc4e3be1dc", "sighting_of_ref": "indicator--ddfc3a0a-0876-4c1a-92e7-dc5bbd05488d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3123e03-7d00-414d-89ad-1dfd467326fd", "sighting_of_ref": "indicator--7107df92-be5c-4945-b9a5-29f48fa48aba", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6553ddc8-2c7b-4c51-a463-754933703c03", "sighting_of_ref": "indicator--d3f466ac-c725-40fb-811d-6df2dc4c7b2c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8dc8e1-8726-4965-8dce-a6458ba1247a", "sighting_of_ref": "indicator--dfc0c840-2f06-4f43-87d1-e1afcc0fc627", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ddcb3d-2d99-4425-a181-2f46258e41b4", "sighting_of_ref": "indicator--dfc0c840-2f06-4f43-87d1-e1afcc0fc627", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc30f9a-636d-4bf0-99fb-533ba2421874", "sighting_of_ref": "indicator--7bd27466-bf96-43aa-830e-7833fa66d55f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4856fca0-7d15-44a5-be0e-e477837288e6", "sighting_of_ref": "indicator--7bd27466-bf96-43aa-830e-7833fa66d55f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b23ecae-9e76-4ab5-a505-4a01baa0838c", "sighting_of_ref": "indicator--44ae7509-457b-4a06-901c-f497e5006107", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773a96c2-216b-4685-98f2-507ec8410159", "sighting_of_ref": "indicator--44ae7509-457b-4a06-901c-f497e5006107", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38b059d-cc96-4300-8617-9781713111c8", "sighting_of_ref": "indicator--4afc9877-6ab7-4666-b8bf-fb7898eaa301", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dea204f-99fb-454b-8a44-b01965086e61", "sighting_of_ref": "indicator--a484450e-196c-4111-80f9-c62d8f2ebe27", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53038126-02d0-447b-8d7d-c544643ed5ff", "sighting_of_ref": "indicator--e5fe4c08-05f5-4966-b641-9eb89dbd5c02", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b0bd1d8-df8a-4d25-a609-1a420710e0ae", "sighting_of_ref": "indicator--e5fe4c08-05f5-4966-b641-9eb89dbd5c02", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02cc6c0a-b69e-48ba-96c3-e7429803abfa", "sighting_of_ref": "indicator--e66e40ae-e67b-47f7-9bc9-cd67c61a88c7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7251121-61f4-4e1d-b8dd-f3fef8420b96", "sighting_of_ref": "indicator--99f292b7-6c33-477e-a7b4-d3fdbd33c556", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27571600-7592-40d0-be42-aa68685a5ce2", "sighting_of_ref": "indicator--631946f8-221a-4043-b021-4aa8c0cb18d1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc7c3af-3f80-4059-a266-ee0ea253c75d", "sighting_of_ref": "indicator--631946f8-221a-4043-b021-4aa8c0cb18d1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a674ab52-c915-497d-8a3d-4803cc0412b2", "sighting_of_ref": "indicator--5a164536-7d0b-4171-85ab-f95cab715726", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05392b44-fa4f-46cb-ad22-c5745717b1dd", "sighting_of_ref": "indicator--cad55670-cd15-4ede-8b3c-598bfc136456", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4637a5a-2ca4-4c3e-8c8e-6d5c848a446a", "sighting_of_ref": "indicator--ba26113a-9d72-476e-8e93-5fadde790eec", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd4d04d-6943-4129-a6c6-6852d33e4fda", "sighting_of_ref": "indicator--b1c31871-aea5-4d86-823f-f20388723912", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f1435c-498d-4ed8-b2d1-447fd3e8fac9", "sighting_of_ref": "indicator--08536156-d935-4915-bb31-17697d279ea9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71c9c0b-2708-4380-a989-1c4106820a0e", "sighting_of_ref": "indicator--08536156-d935-4915-bb31-17697d279ea9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8d36f7-9e19-475a-902d-604e34bc3c16", "sighting_of_ref": "indicator--bfca910f-ee57-4f9b-8650-9d9b2c4407b8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7149c852-3fb7-4034-bfcb-948674a4515d", "sighting_of_ref": "indicator--9cdf7f80-177a-42e4-8a30-1ba2b1386827", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627bb00c-9ca0-4bf4-bed9-b6fd6e78567a", "sighting_of_ref": "indicator--ab495244-0691-481b-8efa-3cab233cedf8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef6cb20-79a6-4503-a74b-3347293a08de", "sighting_of_ref": "indicator--ab495244-0691-481b-8efa-3cab233cedf8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50392a2c-82d2-481f-ab2b-85e9ca5634fd", "sighting_of_ref": "indicator--fe28d0b9-7cda-4a0c-8402-daa36237ac8c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734bdec3-e44f-49ef-9fa3-b82238e82067", "sighting_of_ref": "indicator--fe28d0b9-7cda-4a0c-8402-daa36237ac8c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1e911d-2340-4c98-b228-1e443f071551", "sighting_of_ref": "indicator--94764a81-f88c-4e00-ba87-68b1b8e8bcfa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00738d1e-61a9-425c-b6b1-bc812bbff3c0", "sighting_of_ref": "indicator--69af7faf-e2a8-41e6-bc4a-f36729ec18ac", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727b255d-d18b-4b32-a370-1bc9e50c8079", "sighting_of_ref": "indicator--40edc92b-a63b-48c2-a023-7b00a77ea192", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad6af0d-5d74-4653-8818-91591185fc47", "sighting_of_ref": "indicator--4489dd9c-5035-4447-937c-8beaf2028ec5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1c157c-4769-4a99-a8f8-d6e610c2c202", "sighting_of_ref": "indicator--638c8e41-c27a-4d0d-8438-6087f50f5586", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d2ddae-3a21-4512-90ab-c52bf8987359", "sighting_of_ref": "indicator--0594254d-dae4-49b9-8f50-c2d98727b99c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9822cdcc-cbdf-4ba0-8d92-b7a06cf3a8dd", "sighting_of_ref": "indicator--0594254d-dae4-49b9-8f50-c2d98727b99c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23200bd6-0d39-4bf8-b63c-3dd8589adfe9", "sighting_of_ref": "indicator--25a1e4f2-7848-4152-bdf7-550a3793b93b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206edf4a-2b56-4157-baa4-0922eca268d7", "sighting_of_ref": "indicator--25a1e4f2-7848-4152-bdf7-550a3793b93b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468d3462-2618-46f4-8209-52044313f40b", "sighting_of_ref": "indicator--5506bc55-75b9-4ea4-b8d8-181434aa08ce", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d376ea-140a-4b96-9472-02e711bba2b8", "sighting_of_ref": "indicator--557ebfa1-709a-483c-af5f-ecc28ce4dc48", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f51e6c-77b5-411e-b368-63a41c0307ed", "sighting_of_ref": "indicator--557ebfa1-709a-483c-af5f-ecc28ce4dc48", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ae9641-13f8-4a9c-8b62-9ba7b49d45de", "sighting_of_ref": "indicator--3ea16527-22f5-4875-94da-233bf4667b74", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487c8124-6ca8-4834-ac76-249fe77c8fdb", "sighting_of_ref": "indicator--3ea16527-22f5-4875-94da-233bf4667b74", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d97846-6332-436b-9c1e-358ae16c1cda", "sighting_of_ref": "indicator--be0b14bd-71e2-4ffe-8ecb-b879a9521af6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95f8344-639d-4e42-8072-ca78d7f3d5c3", "sighting_of_ref": "indicator--be0b14bd-71e2-4ffe-8ecb-b879a9521af6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c479a0-1aaf-41dc-86e8-e3a2709ec81e", "sighting_of_ref": "indicator--96f19e60-1655-4cd9-91e4-a27c05774d09", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a28fdbf5-b454-4ef0-8eb8-b7a71c26ca29", "sighting_of_ref": "indicator--3b9f1194-d4c3-421c-9ac9-54507af8484c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fdaed5-a41c-42f1-a2a0-f3d058e3efd6", "sighting_of_ref": "indicator--3b9f1194-d4c3-421c-9ac9-54507af8484c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a970636-0f51-49bc-bd78-126b658130bc", "sighting_of_ref": "indicator--3f3b6d1e-ac82-4323-8992-71291f2eb863", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f5172c-38c7-4a4e-9480-b6dbbd328444", "sighting_of_ref": "indicator--3f3b6d1e-ac82-4323-8992-71291f2eb863", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a522a13-8a51-4893-a6fd-0296f4780927", "sighting_of_ref": "indicator--4aa27d2e-9b87-4d5d-bd2d-eb4186c1404e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff1783e8-15b8-4436-b0e4-c65a2d270800", "sighting_of_ref": "indicator--3be7d38f-8a2a-442b-b233-442d7e26c119", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc96d05-fc29-4bb7-bc17-869f7b3804f6", "sighting_of_ref": "indicator--ccfcc3a2-2a39-4230-ae7d-e2da2de7ac53", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3243c873-b27a-4ccf-8716-d53ada50bca5", "sighting_of_ref": "indicator--ccfcc3a2-2a39-4230-ae7d-e2da2de7ac53", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c784bc-67db-4871-a670-195830587c84", "sighting_of_ref": "indicator--6fb06635-0781-4a2f-8c30-5ef794356b91", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9164729a-4e3c-4029-9c40-abf565c0c56a", "sighting_of_ref": "indicator--92ef6b9c-8866-4548-8820-ec41e127a2ed", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897eee1e-69f3-4d0d-aadb-fda483f12132", "sighting_of_ref": "indicator--92ef6b9c-8866-4548-8820-ec41e127a2ed", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b48aaf-60a2-4d33-9445-b1a8a51c0606", "sighting_of_ref": "indicator--b244a9cf-18a8-4cf6-87d9-5251fae7ced4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce25fe68-b593-437d-89ca-fdf1686d0267", "sighting_of_ref": "indicator--b244a9cf-18a8-4cf6-87d9-5251fae7ced4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0817266-c021-4756-b0d2-f80e017c3cb7", "sighting_of_ref": "indicator--06fbbd44-7c11-4f33-bcd0-e23a20cf097f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ba1d28-ef2e-4255-af11-abe13bd93fa4", "sighting_of_ref": "indicator--06fbbd44-7c11-4f33-bcd0-e23a20cf097f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0bec17-97dc-45ae-a089-09734a85f2c8", "sighting_of_ref": "indicator--b43db595-b4d3-481b-b23a-4c58011cca32", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5c6834-6fc9-4f9f-b77d-5d595fe286b9", "sighting_of_ref": "indicator--fe8ae645-66a7-4d19-9360-14520ffcff14", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336f3675-4253-488a-b3d4-c1680a492e42", "sighting_of_ref": "indicator--86c1e180-5b31-4379-ae4e-fac2713743da", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ce7869-e712-4a5a-b881-5cec7dab1cbc", "sighting_of_ref": "indicator--5defd759-6f12-45fa-9d01-06d74740d1f8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474b3af6-78b3-4aca-9667-20e4f91555f5", "sighting_of_ref": "indicator--7c394532-bbad-4c08-8bcb-d161d152f3d4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e88f63-e431-4034-ae81-1744c016ca24", "sighting_of_ref": "indicator--c249f982-483b-44d6-9b35-459eb54fd9fb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5e08f6-d990-44b1-999c-83293f0d4bd0", "sighting_of_ref": "indicator--c249f982-483b-44d6-9b35-459eb54fd9fb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6a3025-711e-4893-9124-2bacc81e39f8", "sighting_of_ref": "indicator--1c97983e-5bda-4931-9f03-239c5e4b2160", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a3e3ba-1d38-463b-8084-3db84b7ee012", "sighting_of_ref": "indicator--ef447593-09e9-4935-8aa3-94ec008cd5a9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c72d2e4-938d-413d-887e-bfba78b61810", "sighting_of_ref": "indicator--ef447593-09e9-4935-8aa3-94ec008cd5a9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc78c789-ca55-4ad1-ba9a-5d396233cc04", "sighting_of_ref": "indicator--76b5b4f7-40e1-4e0c-9915-477a231bfb80", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61baa40b-da78-4aaf-9309-4a51a0fad7d7", "sighting_of_ref": "indicator--42321b26-23ea-48bf-afb8-de95f2b6fdab", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c7518b-73dd-46c9-81d3-cb53d35f602c", "sighting_of_ref": "indicator--42321b26-23ea-48bf-afb8-de95f2b6fdab", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13c679a-efdf-4ac2-9ba2-7f4f40985973", "sighting_of_ref": "indicator--451fd904-2411-4318-8c2f-1b008f98e968", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450a3b18-d11e-4ebc-8dd1-2900b5f94749", "sighting_of_ref": "indicator--eea2e711-bafe-4577-8f17-96015bfbb9a6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461d52b0-1fec-43ab-be51-cbf3192e1258", "sighting_of_ref": "indicator--a60198e9-f6b5-4cfa-a580-5e693ac50954", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0e7097-63e7-48f5-b62d-33823277e23e", "sighting_of_ref": "indicator--a60198e9-f6b5-4cfa-a580-5e693ac50954", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90c7419-f9b2-4d82-8087-724127fb27ef", "sighting_of_ref": "indicator--b379a0a4-6b55-46fc-ba3b-ed19e9429c54", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298a4af2-bce0-4efb-a145-f5a13f8d2a5b", "sighting_of_ref": "indicator--b379a0a4-6b55-46fc-ba3b-ed19e9429c54", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b62a35-d060-4fa8-b0ef-16de3012a45f", "sighting_of_ref": "indicator--e27df35d-8f0c-4182-97dc-45474ecd8969", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f9f587-74ff-47de-a360-848714ddf486", "sighting_of_ref": "indicator--54f73a43-0c74-4501-873e-d559537f0400", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e6eb53-b197-4950-807c-c1460f92e747", "sighting_of_ref": "indicator--54f73a43-0c74-4501-873e-d559537f0400", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb244d90-34a9-462f-a05e-4dfb3d3cc37b", "sighting_of_ref": "indicator--349a2e6e-efbc-48e9-9cdd-9d1318d3fdce", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9231940-4243-46dd-a8ef-c6a0826bcc96", "sighting_of_ref": "indicator--349a2e6e-efbc-48e9-9cdd-9d1318d3fdce", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b6b8af-090d-443d-a91d-abdbaa7b4893", "sighting_of_ref": "indicator--981d32d6-d2c5-444b-97f6-9b3b6d9ed9eb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665afc67-398d-42a5-8480-160ee1c1422a", "sighting_of_ref": "indicator--f40ced45-a8f7-4828-ae73-08a89e8aff4c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57dd48d-b616-46f3-aeb2-3c3e4f9d327c", "sighting_of_ref": "indicator--6ceb5899-22e0-441b-a2c5-34297f8c4f49", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7379b4d-4b69-488c-99f7-435af38c2fa3", "sighting_of_ref": "indicator--76ebf3b0-08e0-41a6-a524-4b31a7c62985", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ab9e57-0c33-4660-9d78-e64260815873", "sighting_of_ref": "indicator--53aca963-9c62-4fad-83d1-89a08340ca18", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1abec2c5-e3bf-45ff-b976-2f95d8c05523", "sighting_of_ref": "indicator--67502ec9-4031-44df-b0f8-298992bec6b5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486ce942-d681-434a-9869-d5c7eb30ea15", "sighting_of_ref": "indicator--9c99f187-aaae-4ecb-b76c-bb3db74e721e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d15242c-b679-4085-a832-1a209e851e10", "sighting_of_ref": "indicator--4f77202b-7bf3-4a24-9225-da36c69da0e3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45bb707-7570-4d11-bbb6-5638c9bb41cb", "sighting_of_ref": "indicator--c220c213-691f-4a23-86f0-1d87d5b05d0c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271c447d-e9df-42b9-96db-41f31c1f024d", "sighting_of_ref": "indicator--9cf4768f-4009-4d83-bf70-f392e5373cff", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2e5b78-c755-4797-9ea9-6f93f3dbb3cd", "sighting_of_ref": "indicator--055ec8ca-8d36-46f3-9ad8-57e1555dfd75", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c41af0-9e10-4242-af73-03740749f6a2", "sighting_of_ref": "indicator--e88e5d0a-d3a2-455d-8ed8-180997a30040", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b585d6-a1dd-40c4-9c1c-f44e197a3fdc", "sighting_of_ref": "indicator--c3a97f82-d80a-4302-8caf-0a3b246e8846", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8136e746-f6e6-4dac-9d40-24c1c87d24ba", "sighting_of_ref": "indicator--c3a97f82-d80a-4302-8caf-0a3b246e8846", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2e2bb1-614e-4a4a-b2df-41d072adc461", "sighting_of_ref": "indicator--62390ce6-f04a-4285-82e3-4f8f70dce4a7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c926ead4-49af-4208-9f82-c0d16c70e5fc", "sighting_of_ref": "indicator--62390ce6-f04a-4285-82e3-4f8f70dce4a7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab696204-e431-4218-9c21-25a84f06ba57", "sighting_of_ref": "indicator--ec22b3c2-d33e-46f8-8ac5-908a7e6c1dc5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85577d7c-2096-426b-a5eb-6b9f0e5d8ea8", "sighting_of_ref": "indicator--6ed5297f-09d4-4ada-94da-4febb5f3a59f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d6be5c-b4bb-40b7-aa06-a70638ead071", "sighting_of_ref": "indicator--6ed5297f-09d4-4ada-94da-4febb5f3a59f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94459e79-cfcb-4f20-a113-ac41e533fca3", "sighting_of_ref": "indicator--d9a7fcd3-622f-4aeb-a7d8-4489727b1374", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84abbc2-c780-4d47-8f39-d0c1f34e4723", "sighting_of_ref": "indicator--d9a7fcd3-622f-4aeb-a7d8-4489727b1374", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b8ad07-f377-46d0-89ed-840eb4c7f9d2", "sighting_of_ref": "indicator--e75f4195-80d4-4474-a28d-16f19abeb567", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ffd017-ce8f-4750-8b5f-5f846ebd04f1", "sighting_of_ref": "indicator--e75f4195-80d4-4474-a28d-16f19abeb567", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89bd34c-a4c6-47ab-9b2f-850a12687965", "sighting_of_ref": "indicator--33bbae25-8ddd-45e9-8337-a55a2191b7ed", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3b2053-c486-428c-8414-da2ae45da8ae", "sighting_of_ref": "indicator--33bbae25-8ddd-45e9-8337-a55a2191b7ed", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431bd36f-4244-49e5-ad90-340203252f7d", "sighting_of_ref": "indicator--06d8378c-1a49-442f-8bae-bec4f63c21d1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3354254-52bb-4822-84c1-6118275be0cf", "sighting_of_ref": "indicator--a0752615-aa56-4e94-9b66-a0a5d519b47a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4725f72c-f2fc-444a-ac9f-8c763bf8dfe3", "sighting_of_ref": "indicator--fd51af6f-d063-469e-a2f5-f0afbbeed82e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88bf6f1b-9524-43b4-817a-4926e8babed2", "sighting_of_ref": "indicator--fd51af6f-d063-469e-a2f5-f0afbbeed82e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8954439-13c7-45fd-b8a3-ea5bb3d77c71", "sighting_of_ref": "indicator--945a0b6d-e9d9-4ee9-8acc-39498b753074", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb8fe59-d265-4a3f-8d31-fb5ef0dc9ba0", "sighting_of_ref": "indicator--3a53eb38-1004-4a52-abd2-57c132567eea", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050f5186-614d-4656-8253-17fe5605b328", "sighting_of_ref": "indicator--57b072fc-955c-439f-ab09-55f99301b39b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2dd25c-187f-4a2b-b5d8-5cfac215ed74", "sighting_of_ref": "indicator--60715d00-b00d-4b7f-b811-a51e619f9d3d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3782c89c-5049-4826-9a4c-47e9f2334552", "sighting_of_ref": "indicator--5e117349-2593-4eb7-8f82-05df7a2b6e40", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa28d69-e1db-488f-8648-cf6413d50e18", "sighting_of_ref": "indicator--8ffd4673-5ff1-4b31-b919-d2fd0f75ae0f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c592e28-fa7a-4550-afcd-511562ddd8e0", "sighting_of_ref": "indicator--3b27ca8b-ae4d-482a-af5f-b8edf6709d5d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0204e3-fcf2-45f5-9eb3-b1167a8836f1", "sighting_of_ref": "indicator--3b27ca8b-ae4d-482a-af5f-b8edf6709d5d", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85b3ff0-45b3-4709-ba7f-5011a57158d2", "sighting_of_ref": "indicator--3b27ca8b-ae4d-482a-af5f-b8edf6709d5d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684375c7-f6e9-4fe5-ae2c-0423a7a5384f", "sighting_of_ref": "indicator--313843f2-69b7-4a26-9c4c-d38f37e487fb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec272fb2-94be-4fc1-bd70-66528c99acc1", "sighting_of_ref": "indicator--313843f2-69b7-4a26-9c4c-d38f37e487fb", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828f144e-5174-4299-8091-029018805449", "sighting_of_ref": "indicator--313843f2-69b7-4a26-9c4c-d38f37e487fb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e6fcbe-f665-4c6b-b8d8-0482662b22ac", "sighting_of_ref": "indicator--53c24c3c-cae3-4a3a-b15b-3bcca346ae44", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31fe1969-6626-456f-9b5d-0f68b50cf741", "sighting_of_ref": "indicator--53c24c3c-cae3-4a3a-b15b-3bcca346ae44", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05387d6-101f-4996-aa26-84f4f20333ce", "sighting_of_ref": "indicator--53c24c3c-cae3-4a3a-b15b-3bcca346ae44", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfdd8ab5-b6b0-4671-b16e-8f4f4f1ac2cd", "sighting_of_ref": "indicator--192fe265-a608-4089-8a6d-5d9dca194120", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8024ec-1fc8-4442-bd48-c90782c227cc", "sighting_of_ref": "indicator--4ccb25da-dd22-456a-8e18-1d7c7adaaf80", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e408770-440e-4ed1-b2e1-f81e7f5cb8a3", "sighting_of_ref": "indicator--62d85ec4-3f64-4995-bf03-4553d9d9c547", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d32e4c4-966b-433f-b0f6-8e8e8a9134f1", "sighting_of_ref": "indicator--d13ae94a-6514-47f0-8ac8-d0950fac3ea3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819a222a-9f35-43f2-8af6-022edad4d3a1", "sighting_of_ref": "indicator--f2c8e01b-1b5e-4706-9428-fb537e2faa9d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bbf1fd-9b50-4a55-adeb-9328af93f413", "sighting_of_ref": "indicator--f2c8e01b-1b5e-4706-9428-fb537e2faa9d", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea53422-c5ca-44aa-8a4b-cc8483cd23c6", "sighting_of_ref": "indicator--f2c8e01b-1b5e-4706-9428-fb537e2faa9d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59905cd8-1ab5-46c2-bc3a-ffca6d0735fa", "sighting_of_ref": "indicator--460d756f-57b0-41c9-8d00-e63a2cd4f498", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482bfa0c-4574-4498-8934-7f263b3a18ff", "sighting_of_ref": "indicator--f2f9f2ae-be2f-407e-8e96-8ed0f4b6083b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3afb5252-214a-4644-8ef1-f2e1bf60a1df", "sighting_of_ref": "indicator--8b7ac6b0-33fb-4bcd-a200-91281ed96471", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a53749-58a4-4ed9-b593-664038b97668", "sighting_of_ref": "indicator--5947e7da-23f7-40cd-b04c-df176d2778b3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a429042-c9f0-4365-8d1a-04220c73e7fd", "sighting_of_ref": "indicator--1eeb29fc-420c-4077-b3e8-8e25010c29fd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83170e5-cee3-4a41-a326-bee18b99537a", "sighting_of_ref": "indicator--c46b3d58-4d68-4e02-8f7e-912e154d16b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e16fc6f-72ff-459d-821b-e948501eb092", "sighting_of_ref": "indicator--30448fa8-d234-4753-afb1-1a949df25458", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12810554-83f0-4020-8504-67a4584f4b59", "sighting_of_ref": "indicator--11c172d8-e3e3-4bc2-ac4c-df3e4cc0ca9a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc5b944-6c97-4214-ad23-58cd5ae49a6b", "sighting_of_ref": "indicator--484e41b7-f69c-4580-841a-21510e54f08c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00570a71-a2f2-426a-854e-e262e03af6c4", "sighting_of_ref": "indicator--d1efc0c8-e49c-4640-9048-e4328c79094d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a6dd4b-70f4-4fb1-856c-f8a67842c516", "sighting_of_ref": "indicator--46e0e367-e959-4a91-a4ae-65977eb45d6f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--703c1b51-8996-405d-a256-4e27c673a95b", "sighting_of_ref": "indicator--a6b92fb6-a6eb-4698-8392-54a888f4a922", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f57956-026a-408d-8ae2-5661cd634638", "sighting_of_ref": "indicator--a1503a5f-4a82-4ee9-8bbb-87e80f226b63", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d493517d-eee9-49e2-bb67-3a71947fc561", "sighting_of_ref": "indicator--02ea684c-1165-4b0f-a24e-bd1a6d8dad39", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d84fca4-8636-4d03-a15c-51b98634a5cc", "sighting_of_ref": "indicator--a3ba053f-64b2-4ace-a005-204b10bae627", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00dac8f-69e7-4ebb-8d65-34d138f7b6d8", "sighting_of_ref": "indicator--33994d39-8c94-4284-b48b-0e962c3200b8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201e779f-a1b2-4703-873f-9d3cee5ad8dc", "sighting_of_ref": "indicator--76807d20-3812-4c69-aa70-216395611c86", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35da958e-a2a7-4555-80bc-c253fe3faa0c", "sighting_of_ref": "indicator--76807d20-3812-4c69-aa70-216395611c86", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1424f03-97fc-41f4-98d1-3482f9985cfc", "sighting_of_ref": "indicator--a0cbb1e9-4a55-4fc2-87bf-a5082ce449e4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c44087-0eaf-4383-8210-cdcc58e87a8f", "sighting_of_ref": "indicator--8611d319-5b54-417f-b990-1b29dffc0eae", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d8f881-c254-43d2-b583-df27326e3bdf", "sighting_of_ref": "indicator--07a239f1-5571-443b-bf5e-93145549767d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da78559-e36e-41ce-81d3-69f92a54da5c", "sighting_of_ref": "indicator--1ef238d4-45b9-4d00-b2db-cd92fd12653f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc6d41d-357a-43dd-9b6f-d68efabe5c89", "sighting_of_ref": "indicator--7a338574-d755-4ecb-b5e8-a34677077806", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7861d03b-3005-4f68-a8f3-5809ed152da0", "sighting_of_ref": "indicator--5ef8dda1-e7d6-49be-8b08-69e6fa934368", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61043ba3-5c02-48b0-8653-df5002647f4d", "sighting_of_ref": "indicator--0a889665-5af5-440f-81c2-819a61bf9fa3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349c27f2-df2d-4690-b18f-0b935081cc77", "sighting_of_ref": "indicator--d05207c4-bc2a-4ce3-a869-d12f3e5f2070", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e241b4-02df-40ec-a3da-492baa149cdf", "sighting_of_ref": "indicator--5e45ef29-380d-4ad4-95e3-3aa89920f8c7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc25dda-1339-4e69-be8c-fdb7fd36bf55", "sighting_of_ref": "indicator--5e45ef29-380d-4ad4-95e3-3aa89920f8c7", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70f2e74-cbdd-4ef3-9f70-37d34b71e907", "sighting_of_ref": "indicator--5e45ef29-380d-4ad4-95e3-3aa89920f8c7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fff7093-0585-4e50-9be5-5a2673f9b26e", "sighting_of_ref": "indicator--74684990-f107-47ed-8752-aa3bf03d9064", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237cd409-c757-4bf4-b89f-28809e792273", "sighting_of_ref": "indicator--5e9f35d1-2658-41bf-b761-ee3f2d2ae20d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca5e661-2c9f-4daa-a99f-2bf68adb8af4", "sighting_of_ref": "indicator--5e9f35d1-2658-41bf-b761-ee3f2d2ae20d", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94d4aed-baf5-4828-bb28-cc349c226035", "sighting_of_ref": "indicator--5e9f35d1-2658-41bf-b761-ee3f2d2ae20d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffdfbf81-6f81-422f-816a-15103b74297f", "sighting_of_ref": "indicator--b397112c-f41a-4684-bf9b-d1ad324d0a4d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6cc03c-9430-4811-bbe0-d86a05118edb", "sighting_of_ref": "indicator--b397112c-f41a-4684-bf9b-d1ad324d0a4d", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b57e9b7-af21-415f-9d2f-aa30eb7ddb75", "sighting_of_ref": "indicator--b397112c-f41a-4684-bf9b-d1ad324d0a4d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da6b796-1c2c-492d-bf2e-ec6c18fc226c", "sighting_of_ref": "indicator--2b5ec13a-3c9c-4535-a234-9cc7d1e62c41", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851e6510-78bf-49d9-8117-2d3e9ce608f7", "sighting_of_ref": "indicator--2b5ec13a-3c9c-4535-a234-9cc7d1e62c41", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83216021-5e1a-44b3-9290-0863425d6c2d", "sighting_of_ref": "indicator--2b5ec13a-3c9c-4535-a234-9cc7d1e62c41", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6da8095-c817-4eee-b3d5-2997c8d4c36e", "sighting_of_ref": "indicator--fa1d4ed3-5a87-47e4-9534-b6f4db20d389", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d88595-e8ea-44b6-a631-1c28f5398090", "sighting_of_ref": "indicator--3f30b3ff-615b-46ea-af94-c88a7e49f84b", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74031794-3620-4ac4-b01f-cf651026d9d0", "sighting_of_ref": "indicator--77e92af7-e1d5-47ab-a2e8-62f2762d206d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500d6b24-17b0-4397-91ad-82181b425303", "sighting_of_ref": "indicator--9be4e001-0471-4775-b598-524c96d48338", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b37b5d-8845-47d4-9f44-de91524cf3bf", "sighting_of_ref": "indicator--57f07e36-a70a-47b6-b53e-97e5c5b64cf8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7e7a1c-798e-4fc8-ac12-1b30d0b6ca58", "sighting_of_ref": "indicator--57f07e36-a70a-47b6-b53e-97e5c5b64cf8", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baac18cb-3825-4a70-9724-e03c4122f5a6", "sighting_of_ref": "indicator--57f07e36-a70a-47b6-b53e-97e5c5b64cf8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9113b6-01bc-45dd-a1c7-8defb1fef47e", "sighting_of_ref": "indicator--0fb9dba4-e1cb-4b60-a115-b72bae795071", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e93ec8-bc3b-4b35-b8aa-488974bd5063", "sighting_of_ref": "indicator--dc8c47f4-c486-4ffe-ad82-126b905f3460", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f85643-005d-4283-a536-e1cde70e56f7", "sighting_of_ref": "indicator--1904b6e3-a84f-4da0-a76c-f772cc0417da", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2cc94fc-c83a-4358-b3cb-8488034d87b9", "sighting_of_ref": "indicator--e71b54ee-348c-436b-8cdf-2f4bdf68ed47", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72dcf820-0707-438e-bf41-39548e987114", "sighting_of_ref": "indicator--e71b54ee-348c-436b-8cdf-2f4bdf68ed47", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674b1b69-f1c4-4adf-a8a1-d48f750e1b46", "sighting_of_ref": "indicator--e71b54ee-348c-436b-8cdf-2f4bdf68ed47", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9072fccf-cfe2-4d87-ad97-13d5968ade79", "sighting_of_ref": "indicator--9615dee1-8d39-4150-84e6-b0e5515507d8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ff02cf-cc38-4740-8199-4895a909c3d9", "sighting_of_ref": "indicator--9067ff88-19ed-4359-8e6d-b9bf4c9a7e58", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7edfc1fe-3ca4-402d-ae24-e65a2c35fa3f", "sighting_of_ref": "indicator--ad1311fc-3354-49aa-aef2-6992cebf6a4a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23855af-e7b3-460b-aba8-6d9047acdb96", "sighting_of_ref": "indicator--a7645828-31bc-4c76-b744-7f36b4e113a6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32c5c6f-33bb-4e77-a6fe-e2250ced22b7", "sighting_of_ref": "indicator--a7645828-31bc-4c76-b744-7f36b4e113a6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b07057-4fb1-4ef7-a87e-aae01a9d595b", "sighting_of_ref": "indicator--08be597b-be99-4917-85e2-caa29d66fa70", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e5b894-4b90-4732-a7ad-1c6bef441246", "sighting_of_ref": "indicator--d1b9b063-8cd8-4979-84cb-5f4427f263c6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99757c5f-d1db-4e21-bb4b-e4afa75f1b5e", "sighting_of_ref": "indicator--36b60f58-112c-42ec-be1a-e5719182e3a3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76242dfb-e0c4-4236-9c2b-95678f0a5bd3", "sighting_of_ref": "indicator--bb8c5192-8ba6-4de1-b14b-f392b4e14757", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111e8f89-a7f4-44bf-a5ff-dba06de85551", "sighting_of_ref": "indicator--b9ba1138-2e35-4809-ba49-f678fa0c09b0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493aad6e-d301-47df-bf05-802d9f5a816c", "sighting_of_ref": "indicator--a11b5c44-4c3c-4d82-888d-282247165e45", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d75f91-6619-4757-8bd7-3cf952716086", "sighting_of_ref": "indicator--ce74e9ef-803f-4dc7-aef3-ae62a83d9ba8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f99cad7b-bcea-4252-97f3-3d0e6a0c7835", "sighting_of_ref": "indicator--ce74e9ef-803f-4dc7-aef3-ae62a83d9ba8", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99db97df-0067-46da-8ebc-c8ab8c7f0ed1", "sighting_of_ref": "indicator--ce74e9ef-803f-4dc7-aef3-ae62a83d9ba8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2839c403-c3ab-4b6a-bb19-141bc8001a9b", "sighting_of_ref": "indicator--a714d1ce-489d-4056-9683-111387dced30", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce3881d-b18b-418b-879f-1ada4c0bc9e5", "sighting_of_ref": "indicator--de95ea55-7922-4399-a657-f1981b3a0ddd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb01f81-46ef-4da8-ae20-aa9c498df45d", "sighting_of_ref": "indicator--af95a5aa-0168-4d1e-8a86-debdaac470ec", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a34b9a-cfe6-4bfe-b7a4-1431970c6c14", "sighting_of_ref": "indicator--e6328f3c-f507-4da9-95d0-cdcaa5d357b5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0ab4e4-4ab2-47ec-949a-ed59d2290751", "sighting_of_ref": "indicator--e6328f3c-f507-4da9-95d0-cdcaa5d357b5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a15e23-699c-48f3-8896-16685c8e0cb1", "sighting_of_ref": "indicator--cac17b45-c95c-41d7-b1e8-88d5ddb4a3b9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ff483a0-9083-4a4b-9985-a5a8424cbb76", "sighting_of_ref": "indicator--8535af01-8aa1-4996-b581-7a30466919ca", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3565d7-af93-4fc7-9426-95b07ccc37dc", "sighting_of_ref": "indicator--8535af01-8aa1-4996-b581-7a30466919ca", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56835307-8668-470d-9149-c00960f9858e", "sighting_of_ref": "indicator--73d1d670-30c5-45f2-be35-6ce5db61ba9a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e5b26d-8553-4dd8-952b-a1ef2d4328d9", "sighting_of_ref": "indicator--73d1d670-30c5-45f2-be35-6ce5db61ba9a", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8bab15-d39b-45a1-9766-0b8b027e8f63", "sighting_of_ref": "indicator--73d1d670-30c5-45f2-be35-6ce5db61ba9a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c26a7508-f2ef-4af1-bea8-7de6a8e6cd11", "sighting_of_ref": "indicator--d2f0df74-856e-4f94-98f6-49f544362627", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6304ae9f-edcb-485c-bf2e-880302efeae3", "sighting_of_ref": "indicator--fac1bbc4-ad27-4a92-838b-0d446ff08dcf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6431c31-f381-48e5-b3da-261b77b57840", "sighting_of_ref": "indicator--8d9905ee-30fb-4fbd-923e-8892c74ad6b8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c843e485-321e-454f-a45d-d399093f423b", "sighting_of_ref": "indicator--3afe5353-6f2d-49a3-9f4a-dc5974945544", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46266039-ce0a-4802-a700-a656eb3fd84b", "sighting_of_ref": "indicator--3afe5353-6f2d-49a3-9f4a-dc5974945544", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc56bba6-f2de-4790-8579-03a407c66541", "sighting_of_ref": "indicator--fedd84b4-2c6c-4d3c-9626-baf03e70db14", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17bd5c9-bc39-4d35-9ed4-cfd0733be894", "sighting_of_ref": "indicator--2d38c18d-dda8-4981-a493-c644ce631b0f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bff76b5-3450-45da-babd-2b85e5d8bdd0", "sighting_of_ref": "indicator--2d38c18d-dda8-4981-a493-c644ce631b0f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e0fa64-d67b-43bd-81d3-a42e0cfd6e3c", "sighting_of_ref": "indicator--a8dae3d2-cc30-42e7-96b6-50e2bb34560f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312027ff-dc0a-4347-b06d-518474e1b8bd", "sighting_of_ref": "indicator--d137f1d3-60dc-4652-8f20-1302642bec6d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8a597e-eaf5-49c5-bf0e-ad4de127062a", "sighting_of_ref": "indicator--a56665d4-3b00-4f28-a62b-0691fc8171b4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df3c277-5c62-4f57-9d25-857899120f93", "sighting_of_ref": "indicator--a56665d4-3b00-4f28-a62b-0691fc8171b4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218cdc36-3eb5-4845-b6f8-9ca571ddbcbb", "sighting_of_ref": "indicator--e16a2d15-dd3c-4ef8-b067-ac3e5f5ac422", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d04e49-d934-438a-850b-4a79e5458c3c", "sighting_of_ref": "indicator--fc9a3a31-39cc-4ff9-b719-1954e9b115c8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c740cb6c-a032-45cf-86be-8e141131e55e", "sighting_of_ref": "indicator--e2182aa3-3376-4d72-ad58-a95fbf5bb877", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa271be-e461-4b9f-81f6-f3b8547c0e4e", "sighting_of_ref": "indicator--933d720a-c381-4114-870b-503616b1e2f8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5185a6-1811-4fdb-99a2-118112475e22", "sighting_of_ref": "indicator--8a5148b5-2a79-49c1-a6b1-da376b4a8b38", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2f5eda-90ae-4e44-9438-294f9d795c47", "sighting_of_ref": "indicator--ddecd37b-5226-4f7f-8d83-2f01beeeb698", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d53e326-ddd9-4764-8979-75d415264f34", "sighting_of_ref": "indicator--ee6ce46a-88f0-4303-acce-664c583b6367", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc05f84-5393-4efd-b5fd-ded0550c918e", "sighting_of_ref": "indicator--814e1c61-1012-4dc6-ac35-b957307306a1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abcec284-d624-43af-b2fa-f80cc3e761db", "sighting_of_ref": "indicator--0c6ee485-80d0-47c9-b287-1e028b9a139b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f978873-a7b0-4874-90af-82802e622219", "sighting_of_ref": "indicator--ad80f518-06e9-445c-b862-9954f509c9ac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fab3b7d-e850-44d2-b883-b4df7149fe81", "sighting_of_ref": "indicator--c40df960-bb7a-4b3a-82f5-54f39cc6307c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3206bb3a-4f96-4b8e-bff2-a7777c861eb1", "sighting_of_ref": "indicator--2ad7a569-f294-47bd-99b5-e59aeb93781e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8666f3ca-671b-414b-a1d2-45c980884656", "sighting_of_ref": "indicator--2ad7a569-f294-47bd-99b5-e59aeb93781e", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f955a5-0d24-42f8-bc99-29d2a4a870f2", "sighting_of_ref": "indicator--2ad7a569-f294-47bd-99b5-e59aeb93781e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47554bbd-e365-49bc-8628-77ca427817e4", "sighting_of_ref": "indicator--c2976296-b5e8-4d8e-acf1-80af37534eca", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e9e9a2-95fb-46c3-93b1-f2010389f3e1", "sighting_of_ref": "indicator--b35af8c0-bcc8-4c2f-bf88-c82c0eee3d26", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59134c4-b596-4daf-972b-5be31c7b171b", "sighting_of_ref": "indicator--a0580069-394b-4c98-b9ad-63b7e5a149e8", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9632d59e-1d48-421f-a1ea-34d2c597688c", "sighting_of_ref": "indicator--5f65e400-8582-442c-a66a-2a772a2447e7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb47a356-de51-4eae-8722-6cb3da9b3dd3", "sighting_of_ref": "indicator--4b13dc0c-b1a4-439c-b7a9-6fdf445a4ceb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503763be-71bf-47a2-8a3c-8b93a269a7d2", "sighting_of_ref": "indicator--de29960a-db58-4fd2-af51-26e6fa08056c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32522993-3a5d-4b6b-8b0c-c55c2e3af226", "sighting_of_ref": "indicator--de29960a-db58-4fd2-af51-26e6fa08056c", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80393e0f-3091-44a4-9b16-257f9aa2fcab", "sighting_of_ref": "indicator--de29960a-db58-4fd2-af51-26e6fa08056c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ddb30d4-1d2e-4262-85c2-36e24f8483b7", "sighting_of_ref": "indicator--7762aefe-c57d-44c8-b285-cba314a6b811", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3eacb7-a0d3-4603-b38a-63b2cad8d125", "sighting_of_ref": "indicator--70aaf29c-d9bc-4a17-8bc3-fc484cd6ff47", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c1a825c-3e38-4174-ba02-ff7a3bbd7f7b", "sighting_of_ref": "indicator--05c11cf0-1ed0-4fd3-8a88-3d24934c7d76", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b3a245-14f2-45d7-9120-4f25ec76c72c", "sighting_of_ref": "indicator--e0c92ff0-7b52-4cd8-8abe-4bcea29dbe24", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d446ba4f-f5a5-4af6-b2ca-ca8845b52d3f", "sighting_of_ref": "indicator--8537c5e6-f0a4-4094-8ea3-7a400d79ae34", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb3e54d-0b44-46a1-ab9d-5ea246eff533", "sighting_of_ref": "indicator--8537c5e6-f0a4-4094-8ea3-7a400d79ae34", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c83dc4-04a0-4e1c-b44f-59d2560018f1", "sighting_of_ref": "indicator--b440598d-c788-49bd-bc4c-639c91ec93c0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da82635-24a7-4124-be6d-f56c183141af", "sighting_of_ref": "indicator--b440598d-c788-49bd-bc4c-639c91ec93c0", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63986363-c10f-430f-9812-d48c8f94e0b4", "sighting_of_ref": "indicator--b440598d-c788-49bd-bc4c-639c91ec93c0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1eefe7-29b7-4a20-b011-d5f6601bec47", "sighting_of_ref": "indicator--c48106a8-2f09-412f-9355-aa3ceb5ef03f", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2b299d-e80a-4324-ba5e-c6ef5a288964", "sighting_of_ref": "indicator--255d1994-29a6-4dba-a3c6-99ee6745dca5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af566a8-fad0-48bf-91ca-95cd692c7044", "sighting_of_ref": "indicator--89682ffb-7f5c-4760-a747-42e2d0b71594", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b9a237-f7e4-4f7f-9872-c7551ff8e9d8", "sighting_of_ref": "indicator--93710da0-4a62-4b10-acb4-6b2304fd3590", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43401eed-7cfe-4114-ab28-e79f4f8b478d", "sighting_of_ref": "indicator--ef22789b-6908-4216-b69f-51a5f7b35b60", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d50537f-06f0-4102-aaaf-a0d6f46062fc", "sighting_of_ref": "indicator--3be36b15-8f81-4a90-995a-27f7e3aec124", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac02b656-bd80-4ac5-80ba-31cf66d7f0e9", "sighting_of_ref": "indicator--d6df8e19-3027-4a24-bb15-d30f1839678d", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4dc2053-b793-4740-ae82-78cf19144626", "sighting_of_ref": "indicator--d6df8e19-3027-4a24-bb15-d30f1839678d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572528e6-d35a-43f3-b18e-7b1d99284811", "sighting_of_ref": "indicator--041f14d5-b7e0-471b-9ef7-431410f5373c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad7df4f-a07b-4917-a948-9ffb07d7c388", "sighting_of_ref": "indicator--cba20873-4503-4bef-8a5d-1b27abde5121", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6eec1dc-23cf-4064-ba87-a1b572f2d167", "sighting_of_ref": "indicator--f348354b-9ec5-4635-9a6e-174a97ce7fc8", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617aea37-686f-4b41-a588-83dbe401ffa3", "sighting_of_ref": "indicator--a1c2ef91-96db-4b9e-85a5-8d19819b6c0a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d531d88f-9d23-43ef-a75f-c6fdec2dc4f8", "sighting_of_ref": "indicator--0b0a5c7e-69d0-4e72-8337-6b4b42e3b859", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820940a0-1e2d-4a29-950b-21ec1df6ef50", "sighting_of_ref": "indicator--16ef39ae-c156-42b7-a499-df6ac124d517", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0013594d-113c-443a-a950-b4f803c3ff6e", "sighting_of_ref": "indicator--45ef5b13-4f3c-4deb-a3d5-6e0f6f733573", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fbafe9f-05cd-44e2-8445-18a66a5dbad8", "sighting_of_ref": "indicator--c914c483-b7f2-48f7-88ae-89d58951e411", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79892333-4bac-4a8f-a61f-312a244f6b02", "sighting_of_ref": "indicator--559cf142-5436-424e-a833-96f9790afcac", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822db5ca-b9bd-4d65-89a9-8f70a254a4e8", "sighting_of_ref": "indicator--2414b718-82c9-43df-b1a1-3d487f32a410", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff12255b-7419-4d14-9302-1d57f594f2cc", "sighting_of_ref": "indicator--a07482c9-bdad-46bc-b045-0464d59fdffb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ce69b7-4c6b-4016-aa75-e4432278b583", "sighting_of_ref": "indicator--a07482c9-bdad-46bc-b045-0464d59fdffb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ae13a9-4437-4515-a5e6-77dfffe3c5ef", "sighting_of_ref": "indicator--662d87d1-af5d-48a9-bde4-5728e505b622", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2da4c81-398f-4f19-9e8a-e74620adf5de", "sighting_of_ref": "indicator--b7007336-adcb-44d9-af9b-d0d88fa0b26f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45dd57f6-08b7-4964-8b38-982c0de641f7", "sighting_of_ref": "indicator--b32f437e-52af-47f0-a809-5b87dbe0efe5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52055cf8-9b26-45e8-9760-0b944a525fbf", "sighting_of_ref": "indicator--faf094a1-df32-40f4-8b07-e25ec69004b9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0003e42e-f3a4-4c17-b096-ddbe3c9c611b", "sighting_of_ref": "indicator--24fc89d1-2893-46f6-bcd0-fd1d80af3434", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d884c951-051b-4457-992b-d2cbb797944a", "sighting_of_ref": "indicator--dd3bcc7a-cc3c-4bf8-8185-b4ec5ffb025a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49acbac-f493-4210-8e90-59b1a20d31d8", "sighting_of_ref": "indicator--dd3bcc7a-cc3c-4bf8-8185-b4ec5ffb025a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218d8766-fd28-4f86-9cbe-631ae19c2e31", "sighting_of_ref": "indicator--f92ea352-1665-4cbd-b10f-dfa1f99ab3ea", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28066fec-5ce8-402f-9b5a-2a3cebcf42b5", "sighting_of_ref": "indicator--5c1a6215-1c5e-4178-8e3d-700741c49534", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06cbaa15-7359-4f64-87e6-30de4995c50e", "sighting_of_ref": "indicator--e7be770f-69f1-4292-9646-0e566a3c5534", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f499e6a8-801d-4689-9872-a4a51c2d5ae6", "sighting_of_ref": "indicator--fdbcad5a-c55b-4ace-91a7-5dddb1d88cbc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1432ef87-f033-4dd4-8bd2-9ab23c5a267a", "sighting_of_ref": "indicator--93064337-63db-4daa-9eeb-40cc588ae243", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fdc262-fcf3-41b3-b4ce-2e37e58686e5", "sighting_of_ref": "indicator--93064337-63db-4daa-9eeb-40cc588ae243", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855ecaee-cdf0-4375-9a75-9ed517a09862", "sighting_of_ref": "indicator--03e47923-c0f0-4414-90e7-e7e0cf422912", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d45b6a2-d99b-4c1f-8d6c-d6592dc653aa", "sighting_of_ref": "indicator--03e47923-c0f0-4414-90e7-e7e0cf422912", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8457a2-451b-422e-821a-9da949485513", "sighting_of_ref": "indicator--518b280b-8281-4180-b536-95f9fee64222", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb58981-e395-44f4-bb35-9ac053d9cb82", "sighting_of_ref": "indicator--518b280b-8281-4180-b536-95f9fee64222", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a0b805-ddc7-4de3-b692-c0685d6492d8", "sighting_of_ref": "indicator--fa8f80db-1504-4a6b-b98e-c91909ae95d4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac481b9-c1ab-4a05-b0d3-6168e460f48b", "sighting_of_ref": "indicator--fa8f80db-1504-4a6b-b98e-c91909ae95d4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86ed4d1-8685-4a0b-8d7e-112209603ad8", "sighting_of_ref": "indicator--895ca974-b78d-4fa2-a1ec-692a01f6754a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c775d9b-461e-446f-a05f-e4acc0a4b304", "sighting_of_ref": "indicator--895ca974-b78d-4fa2-a1ec-692a01f6754a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa71f7f4-c798-4763-942f-1b6cd09d47d0", "sighting_of_ref": "indicator--09d29540-0d1b-4052-bc14-65b61d8550cf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42004ba2-6dcb-4381-983a-52f994e3b77e", "sighting_of_ref": "indicator--09d29540-0d1b-4052-bc14-65b61d8550cf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e38560-5b6c-491c-9df8-da6032a49515", "sighting_of_ref": "indicator--52552ccd-6afe-4638-ae0c-2f74e323b77b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38260266-b624-49d1-88d5-c79f05e7f0c6", "sighting_of_ref": "indicator--3cf2c0a9-8d93-4680-90ba-b1e4a8d2e975", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21e5af3f-b836-4c81-950b-f3eeea605970", "sighting_of_ref": "indicator--81a19105-e269-41e9-b640-6ba2216be709", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b587d91e-8903-45e8-a2fd-5bd837e41c55", "sighting_of_ref": "indicator--81a19105-e269-41e9-b640-6ba2216be709", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e673902-729f-48e7-b416-8cde83d768fa", "sighting_of_ref": "indicator--dfb37dae-a4ca-4cea-926d-715489003394", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80225f2d-07da-4e17-8d6a-aed29419bcc7", "sighting_of_ref": "indicator--dfb37dae-a4ca-4cea-926d-715489003394", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51707762-03ac-4197-8b0c-e32e44c8c2fe", "sighting_of_ref": "indicator--f63f2aa1-4d1b-4adb-b300-b07e71dc3779", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaef73bc-5fef-48cb-8f2f-4c46860065f0", "sighting_of_ref": "indicator--5fd545cd-b75e-4d31-9f0c-5f1d4e0a28dd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4ec97f-cdb9-427c-8c39-4f11cf614332", "sighting_of_ref": "indicator--7fb33e51-2fc7-4ecc-be1a-238c21e0f5f4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b046b7-42b9-435f-aca5-f95399d57285", "sighting_of_ref": "indicator--b9809613-1476-4fd3-ba2e-1cb656988b27", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c098281-9388-45b7-9c91-abbf3e50188c", "sighting_of_ref": "indicator--15d0a59a-1b9e-4eee-99e5-88f0ff5d1426", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--347f6aee-797a-42af-b3a6-a06cd60ba69f", "sighting_of_ref": "indicator--7bf2297f-138d-4c60-8c3f-09726a5c682b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d129b47-6a74-4395-a2c3-1591703bae3b", "sighting_of_ref": "indicator--0ecb8367-f0c6-4964-b4ed-4c43a3d4c773", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f1365a-99a7-4c77-bb52-0f0be1c9f9f6", "sighting_of_ref": "indicator--0ecb8367-f0c6-4964-b4ed-4c43a3d4c773", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411c44ce-d3be-41ee-8a1d-77e5beb204f6", "sighting_of_ref": "indicator--6e836316-3fcc-4bc2-aa1c-9c82df02716a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a10d674-6a91-4f4e-aa19-716d2959170f", "sighting_of_ref": "indicator--74abef45-c38f-4c07-8a19-38b4d42ab208", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa637c63-8b35-4a02-85f5-a551eacb5429", "sighting_of_ref": "indicator--262f9570-0ea1-4ea3-ac79-96c9368078b2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--982c6ef7-8f82-4efc-9092-6c7b268919da", "sighting_of_ref": "indicator--12489259-c87c-4edd-9761-c2b67d5e6904", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e88d744-8b2f-49e8-9b6c-b2d63b8881e4", "sighting_of_ref": "indicator--12489259-c87c-4edd-9761-c2b67d5e6904", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5068b077-d313-4390-aa67-d0eaf1879b6b", "sighting_of_ref": "indicator--12489259-c87c-4edd-9761-c2b67d5e6904", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12939056-fe9e-4eb7-bb9d-0aeaf9eb3392", "sighting_of_ref": "indicator--5e63a179-82b9-4b6b-b28a-6845017c0ce0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c160c33-a82a-4ae5-8c68-c8beae205632", "sighting_of_ref": "indicator--492b1069-37bd-4674-9c24-d59857373db9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4906c8f-2ec2-4854-99b5-c45aa8c808d8", "sighting_of_ref": "indicator--10abb26c-4731-4d26-a3f0-c288214bca84", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a101a9-b38c-431e-bba5-beafd30d41fb", "sighting_of_ref": "indicator--20acb399-916a-49b0-9884-9567ebc41b8d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5543fd70-c939-4498-a093-739a5b4f59d4", "sighting_of_ref": "indicator--ff189abb-8fc4-490c-955b-71b4e1ea6680", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d7ebf3-aba7-460b-888a-3f2d220ccde6", "sighting_of_ref": "indicator--ad28fbac-9533-4a20-8873-b566b2142b84", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06cc6d2-494b-4223-9c7c-4bb5992660cb", "sighting_of_ref": "indicator--fbfc4671-1074-4e63-828b-f456b794bc46", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912e7750-a73e-4744-854a-404b2bad01c2", "sighting_of_ref": "indicator--7605a8ec-2001-400e-9eb3-22067638ec42", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1f2794-2dcc-4b94-bce2-36a170440045", "sighting_of_ref": "indicator--37311174-b551-471b-8c1d-23d8ec9901e9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e70258-1bee-46eb-9a67-2b45320746e2", "sighting_of_ref": "indicator--963154f9-16f0-49b8-8aa6-7d3fea7dcae4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a382b4e1-ae2c-4515-8db4-07360999bb40", "sighting_of_ref": "indicator--963154f9-16f0-49b8-8aa6-7d3fea7dcae4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b7b4e5-56cb-4688-b2b4-e7c305370200", "sighting_of_ref": "indicator--f4fad59c-8ffe-4899-975a-60934fe3a582", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c667b699-781f-4741-a3d8-4a82c0024f32", "sighting_of_ref": "indicator--f4fad59c-8ffe-4899-975a-60934fe3a582", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40bf07c8-8958-4ca4-8468-828d3646a1b0", "sighting_of_ref": "indicator--f4fad59c-8ffe-4899-975a-60934fe3a582", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f6b31f-d08f-45cf-8dc9-05831e8efbb5", "sighting_of_ref": "indicator--90787781-f304-4346-a109-e9943f4a5b00", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c6b0e3-f08c-4361-a865-8d26d32f70ae", "sighting_of_ref": "indicator--b225261d-d868-4e89-b497-ec62af6ae9ce", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--663389c1-d910-43de-893c-b61ffdd5e77b", "sighting_of_ref": "indicator--2d15fe17-4ab2-4be7-9240-e0707d17829e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f930e653-1460-479a-a9b4-6a33a8d39e3f", "sighting_of_ref": "indicator--c2cecc9c-6f14-4537-8610-df5d1a2d9f9c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c54cec4-5f07-466d-80d6-3065efbfb57c", "sighting_of_ref": "indicator--c2cecc9c-6f14-4537-8610-df5d1a2d9f9c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dececb6-32b8-4470-a515-6b18fc9b8a1e", "sighting_of_ref": "indicator--b23a150e-49fd-4a98-b612-43c55e220bbe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6074e1-5966-46bf-9905-268cf1deebcf", "sighting_of_ref": "indicator--56a23dff-bf80-4965-b309-11a689e8873b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32f9b36-80d7-4bd0-9a33-cdf20367d8c6", "sighting_of_ref": "indicator--024296b7-6eaf-4a40-a963-5772cb5e249b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91bf926a-f462-4537-98c0-657fc7292c54", "sighting_of_ref": "indicator--06038854-3089-468d-b179-94c5c6f2f6e5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76079c32-a5f1-4b74-a504-d4bf185c39f4", "sighting_of_ref": "indicator--8e00091a-d204-4106-8ec7-78da45182b63", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32818d5e-02bc-4290-af05-df361d1aaddd", "sighting_of_ref": "indicator--064b01f7-e5fd-4a8b-a1de-1ce253e98c17", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f37218-c7b6-4d48-a52d-e2de66e2a16a", "sighting_of_ref": "indicator--d9015683-4c9b-4cbd-bcc6-e3db77397856", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ebb6ff-b0c1-475b-b2d8-eb69026bb822", "sighting_of_ref": "indicator--e8cf9244-c4df-442f-9e7e-034d98d10922", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b9594d-0c82-4bbf-8e55-718da00ab325", "sighting_of_ref": "indicator--5c710a43-e632-4001-896f-af1162d1ea06", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0ad6a8-53e4-4bc6-bdba-94328465c45d", "sighting_of_ref": "indicator--44736d42-f674-4690-b9e7-ff874ba21f3f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce19f61-adbb-4e5e-8446-8d50b63f5b32", "sighting_of_ref": "indicator--8e00c0fc-5f39-4ee1-bfdc-e2294bcb1b0b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfbfe0c-edf9-4976-93fd-e492e2f1d7ac", "sighting_of_ref": "indicator--2a32d540-4765-4f9c-8f25-c39db8f51ea1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6ad556-24a7-4d1a-8cbb-96e48c4621c2", "sighting_of_ref": "indicator--5d806844-82a9-4eb3-92a8-952f78e696c6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f1e2e3-7c77-4a18-81cd-08821019e737", "sighting_of_ref": "indicator--5d806844-82a9-4eb3-92a8-952f78e696c6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c6f17c-5811-443c-9d66-8370611c10ab", "sighting_of_ref": "indicator--b56073bc-42a0-4881-8516-a9a17c68aabd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad44bbd-d6fd-498d-996b-f74c8a4b7070", "sighting_of_ref": "indicator--b56073bc-42a0-4881-8516-a9a17c68aabd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25e10de-ac08-4af1-bc89-ddaad90c554b", "sighting_of_ref": "indicator--5e2e8045-ec4c-4402-944a-17401d28295d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31dd27a1-43a2-4a5c-8ed5-8b2ede748379", "sighting_of_ref": "indicator--5e2e8045-ec4c-4402-944a-17401d28295d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953cd7bc-197e-40cd-80a9-ff4d16005d46", "sighting_of_ref": "indicator--3d3d0c9c-9d58-4ccb-8533-835d0da232db", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f84ef4-e5a9-42cd-b268-8d4af3912aff", "sighting_of_ref": "indicator--3d3d0c9c-9d58-4ccb-8533-835d0da232db", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dadf1866-507f-4a2c-89b4-d101f29ae8e4", "sighting_of_ref": "indicator--323ff841-9e11-4f95-809e-7e473c2a29c9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e3533d-964a-4a36-9dd4-43e021bde28b", "sighting_of_ref": "indicator--cce72aae-2df2-43ff-ad00-1827026d6bac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0af4f5-6d89-4241-8b99-3acff01b56fb", "sighting_of_ref": "indicator--ee8f734c-6483-4fdf-871a-7a52d35f85eb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b22dab0-5f80-4c42-9f20-e8f38b6bbe56", "sighting_of_ref": "indicator--ee8f734c-6483-4fdf-871a-7a52d35f85eb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff225380-e393-428e-ab3a-5b1adbbb3d38", "sighting_of_ref": "indicator--005b09f4-637c-4d51-a0b7-a74939153f24", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9945b1-bc8c-43fa-b836-e4407a054974", "sighting_of_ref": "indicator--6b4cc089-48a6-4ea8-baca-bf06ee012783", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e029a1-488b-4c8f-a1ce-b8760fca9ee1", "sighting_of_ref": "indicator--2d82a34a-a535-4700-899e-01efcbfc326a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8942342f-3cc3-4efb-af17-c64984501eac", "sighting_of_ref": "indicator--21e9ce86-a6d7-4560-9b2e-bff7b0716575", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80f8fef-98dd-49af-8bbb-241947e830a5", "sighting_of_ref": "indicator--760aa62a-1e57-4f8a-9792-936559e8413e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a58927-a582-411b-a565-1bfb03deb871", "sighting_of_ref": "indicator--1258867f-0de4-43b6-b17c-afc78f1d6d25", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e09b97-1221-44b6-bff1-337eb7b15b76", "sighting_of_ref": "indicator--8b980f4a-398f-42f5-9db2-2045d7eee90c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172559b4-6119-4436-928d-696ede5a4825", "sighting_of_ref": "indicator--c589e780-410e-4cce-80a1-4d98fef1048e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4fb319-dbfc-4928-af36-4724d286a365", "sighting_of_ref": "indicator--e84250dd-ad28-4fce-a810-85977aaa4293", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15886443-1740-416b-846d-21429881c5e3", "sighting_of_ref": "indicator--e5f63910-4236-4d13-8483-5af5f4a1c919", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77fe8fc-0b24-4628-a313-09694c5ba392", "sighting_of_ref": "indicator--64c78cad-1371-4499-b6f1-9724d131d2cc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c46a7d9-a0ef-4170-8587-82a67ea7b1f0", "sighting_of_ref": "indicator--64c78cad-1371-4499-b6f1-9724d131d2cc", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65efd9a3-41fe-4abb-8b13-0902ce4a8230", "sighting_of_ref": "indicator--64c78cad-1371-4499-b6f1-9724d131d2cc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6436bc8-b27f-453f-bda5-e2b0297918d8", "sighting_of_ref": "indicator--fa0190d0-e954-410c-a220-26d8ac0704a2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c086ed-43e5-4c36-a891-ce38446f604a", "sighting_of_ref": "indicator--78616a7b-3ec5-406d-99c6-162e81c49e0e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7015abf4-3be8-41c0-a937-03d24dad424d", "sighting_of_ref": "indicator--aa6d724d-8793-4a21-9e4b-67cf380fee17", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4731dafd-a86c-4409-aa47-928a8e0c0f05", "sighting_of_ref": "indicator--53fb6ed4-7e69-4d3a-9fc9-bfb93d2a6695", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a67b75-b907-4f34-9e67-44895b84912d", "sighting_of_ref": "indicator--0cc29a04-2889-4fda-9849-833e56c73ae0", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44f6fa0-9281-4a78-aa0f-566c08da5eae", "sighting_of_ref": "indicator--3cf553cc-8946-451b-8026-2a5060e36e1e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6518699-777b-4f2d-b3fe-b523acd80ea2", "sighting_of_ref": "indicator--4721774c-5063-4279-8ac2-7a39f68667ac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4347074-41f3-4532-b0eb-b03c75b4b16c", "sighting_of_ref": "indicator--a1c09ff3-5b3a-415a-86b7-a0f5b4e9b5ea", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eadc0e5-a03d-49c6-b236-be621dc7ebb2", "sighting_of_ref": "indicator--4a47f3d5-b4a5-4b27-ab22-45a6a39f902c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac15c31-3b36-48b9-9b8b-b44f40e6014f", "sighting_of_ref": "indicator--2e4b5478-1bc4-486c-b426-78e47e77467e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8da8e5-7370-4da0-9f2d-36f273b2d1b4", "sighting_of_ref": "indicator--27d63461-129e-4ea8-a388-ee242ea5bcc1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cbaf03f-2b61-4a99-9c44-94effaa45c40", "sighting_of_ref": "indicator--d6044c14-7264-4ad1-a985-58cb66d3aa3e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3eb856-5c55-4c5c-8a93-01d5f682568d", "sighting_of_ref": "indicator--14a8da67-7810-410e-80cb-6a0fdc1171eb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf610ea-e9f8-48e2-8498-9005a72becd4", "sighting_of_ref": "indicator--5750335c-9607-4922-8743-524d158740b6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b657de-2185-4e39-bad8-3f55d36154df", "sighting_of_ref": "indicator--cb61ba32-b142-4ea4-9fa9-365d532ec740", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--595eec31-f1eb-484c-bf50-4245121a8a8a", "sighting_of_ref": "indicator--3b15989e-2a50-4b78-a44e-93cc762aa754", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d22eb4b-c675-4505-ac1d-42a13b0cb455", "sighting_of_ref": "indicator--d07d5f27-2c69-453b-b5cf-fa181b2c39ad", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4434f65-ce35-48eb-b059-55a036556588", "sighting_of_ref": "indicator--53348d71-6a9e-4807-a4ff-23aadf649546", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed156d8-3bcc-4cb0-bfab-540056edc03a", "sighting_of_ref": "indicator--4f616549-36a7-4a55-a5a6-26fc766d2840", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef27dca-7f77-42c1-a05b-b585b7d8e35b", "sighting_of_ref": "indicator--21ad7dbf-22c4-4210-9dcd-266fa5fb0154", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6d2260-4064-4281-9193-1929a809daf4", "sighting_of_ref": "indicator--d71f0b93-de1b-41d1-a1a7-d3a7854551d5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036779fc-8b57-471c-a6bb-a1403bc0b2f8", "sighting_of_ref": "indicator--a855d69d-bcfa-4cd3-a426-991c47d6c677", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429fef74-4e31-4e96-b7c1-e79a8de7ca20", "sighting_of_ref": "indicator--2d0b4a3f-92eb-40d1-a987-20506640f5c0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc4d6af-5420-403a-b2f3-3517acb92d2d", "sighting_of_ref": "indicator--2d0b4a3f-92eb-40d1-a987-20506640f5c0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b753071-d225-43ba-bc37-dd75a9b8aac3", "sighting_of_ref": "indicator--38145d03-32da-459d-8e01-f5642b02b2ce", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29c39e2-2921-4859-afde-f58f85d21113", "sighting_of_ref": "indicator--ef06305e-3868-41da-8ec4-ddbbc3baee75", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d262ced1-881a-4125-aee7-5bf51904b7fa", "sighting_of_ref": "indicator--91fbcfc4-63b6-4d4e-a4f0-0c9d9e49895e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d6c2b2-e357-4141-88f4-b50c62db471c", "sighting_of_ref": "indicator--6feac278-7dae-4abe-a4cf-3211450e0538", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09ec013-a012-44c8-b1ac-afe9eb8f4f9f", "sighting_of_ref": "indicator--a418cb8a-ef96-4afb-94c4-c642e14efaa6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89fbd577-ee7f-4f9d-9601-d9792b5f644f", "sighting_of_ref": "indicator--87eb2168-75af-468f-988f-efa7a24f5148", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9cf535-6040-436e-a2f0-2365fd09cfb8", "sighting_of_ref": "indicator--eadbf02e-b821-4111-ac8b-185ea3791bb5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4cd6c5a-cdfc-4c89-a4af-98b63edf2cbe", "sighting_of_ref": "indicator--7923dea0-6204-4cb2-9744-74c31c6f7405", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36702314-85ae-4529-8121-7fbbf484ff36", "sighting_of_ref": "indicator--b4107697-4d36-4b16-9f22-1ae9caf1b035", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628f9819-829b-47df-95b1-1e3586ad8de4", "sighting_of_ref": "indicator--cabe74b8-fca5-4915-9ecc-a0c4ae9cabc8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd186bac-52e0-4bf0-9e3d-4f7bbc5403cc", "sighting_of_ref": "indicator--d45b36f4-b1ee-435c-98dd-36fc980e32f1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0a0c3d-32a3-41a5-b5c7-394d83728979", "sighting_of_ref": "indicator--0e29ee44-0a37-4121-8ae3-e2c9eb081608", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435352f9-7f97-435f-b58e-aeea4f79d5d2", "sighting_of_ref": "indicator--165a59cb-f048-468f-b6a7-b4a6b2dd3479", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dacd6e0a-243f-4671-954c-4db8ef9ebbe2", "sighting_of_ref": "indicator--07f83926-9473-4629-a945-fd6eeb62cacc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db172010-abbf-4b86-9069-c2f2ee6440c7", "sighting_of_ref": "indicator--95a5c279-7a51-49df-ad1a-17700538d42c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e041a4d4-a623-44a9-bb71-ab4fa861556e", "sighting_of_ref": "indicator--6e37c67a-ee09-45eb-85a6-39ff0fca6a60", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd14c23-ce93-4203-9c45-f2ec2ee398ff", "sighting_of_ref": "indicator--a9b273ce-5bcc-4559-810c-25beebc26856", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40893ee8-6ea2-4083-bd56-b360f4b83199", "sighting_of_ref": "indicator--17920807-2e9c-4dc6-b981-3ddb883c874b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699b767d-51b8-4a14-a72b-6240ff752356", "sighting_of_ref": "indicator--54d2b794-fe2f-48e8-b391-2caf5577bc9b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3e4428-3271-445e-9001-e98c90a8322c", "sighting_of_ref": "indicator--54d2b794-fe2f-48e8-b391-2caf5577bc9b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1edc02f3-730c-4d7d-b5d5-6926ae1c7a7e", "sighting_of_ref": "indicator--5706e341-6b6c-4f61-973d-eb9a5f2836f7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc358654-1123-4e94-b660-b644b89971e8", "sighting_of_ref": "indicator--d3a0e4fc-13cf-4d27-9202-9e88a5baea1d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a551f551-3c9f-495e-9419-195a2df1ce35", "sighting_of_ref": "indicator--b90ea378-5a75-4d7d-96f5-c9bea05a5739", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fac5c99-06a8-408a-a7f7-d2e687d3e395", "sighting_of_ref": "indicator--a3e649ec-e0da-4b1f-aeea-c1ca48bc9ce9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad40e3bb-22ce-457e-b31b-7bbfa88731eb", "sighting_of_ref": "indicator--a95c3bcc-4ab8-4fa0-ace2-dd639a89d542", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7f8e0b-085d-43b5-9d31-2f33ec970f3f", "sighting_of_ref": "indicator--ef13b251-1fc2-418a-8a0f-6e05b9fd33dc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323843b6-8cea-4ea4-9864-0ce37c19f4a3", "sighting_of_ref": "indicator--38b908ed-1c80-4230-8951-d2f95f965242", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3364d8f3-f7e5-4b9b-b61e-e4ef9946b574", "sighting_of_ref": "indicator--4b5e5eae-e330-4706-b8ea-f65ccfb3b468", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188f6a66-5260-49c7-b6ce-62ea3103db2c", "sighting_of_ref": "indicator--8db0d648-7652-4919-8d63-b8d43f8d7a43", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d3d542-2965-47ed-9559-c4e984658bdd", "sighting_of_ref": "indicator--67231574-564f-4192-b011-9fbbbf6df5a4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8199c046-77cf-4193-a237-efcc9ed6aa89", "sighting_of_ref": "indicator--66e44fb1-3260-43c3-a2b6-887f66a68544", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9aef126-1e80-409b-a9bc-a032ee6b7a9d", "sighting_of_ref": "indicator--1cebb02e-cfdf-4256-a7c1-ed3026176307", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d00afd-6b1d-49af-a819-ca63ae26dcc9", "sighting_of_ref": "indicator--bf882836-27e7-4a5e-8b33-8639aa469a23", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe7dd19c-7647-472e-b190-c09b1f24a82c", "sighting_of_ref": "indicator--1407a7fc-57a7-45f5-a386-2ed01a7a1133", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7949dff0-9404-4e29-9b02-7c083a19af58", "sighting_of_ref": "indicator--854cf1ad-8e26-4c37-8495-96c116f6bd9a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48511ec0-9141-412b-b3ef-c41e8e29508c", "sighting_of_ref": "indicator--daa4536b-90c6-48fb-a0e1-d699420c27e3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12bf513e-7eb1-4e6d-88f7-ead162811a30", "sighting_of_ref": "indicator--092d7ddf-a9fb-41a5-bef8-eb818d408e90", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0961ea14-c568-42a4-a337-ece201a676a8", "sighting_of_ref": "indicator--af679bc0-757a-45da-9e8e-69623da03a0f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa17f996-097e-4670-840a-57c981efb961", "sighting_of_ref": "indicator--af679bc0-757a-45da-9e8e-69623da03a0f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d528721f-4f10-4ef5-84bf-dddf3a8fe8b3", "sighting_of_ref": "indicator--0e850d3f-328b-4cb2-b1ff-bcb22ad33da1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdcfce58-fc05-4f4a-88dd-d0312b9c7866", "sighting_of_ref": "indicator--575fd283-0d3a-4f8e-b6b1-6e1e404275c0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b082e2-6010-4a06-a645-9f06719182d2", "sighting_of_ref": "indicator--e169f4fa-f843-4b90-9053-b5e8dcfb1251", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea304cb-c4f9-4467-a046-69bb4c379826", "sighting_of_ref": "indicator--7f45d474-febf-42f4-8b44-207df33acb06", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91067d0e-f87f-42e9-af1d-73df8b0a3fdd", "sighting_of_ref": "indicator--571a8bad-50ac-4ccd-882f-745a4dc64955", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b90e64-e2b0-4a0c-b7dc-1bde897b52f8", "sighting_of_ref": "indicator--bac61a90-0f13-430e-8b09-5316145f8c38", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194c45e9-d2f5-472b-8eda-8d42b554f858", "sighting_of_ref": "indicator--70cb3d1f-fab4-4169-9994-3e98b87b7bbe", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5e7d7a-7d30-4daf-a680-3aeafa27d6ae", "sighting_of_ref": "indicator--943f1ccf-a85e-4379-8782-8abb6d3cb924", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed61f68d-9fce-464f-a279-049f9d494759", "sighting_of_ref": "indicator--e45456c8-4f1b-499a-82cd-dda36f772cc6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b290f31-03b4-4e2a-85c1-28a923dfd761", "sighting_of_ref": "indicator--3eea7eaf-9043-4caa-9298-c54a50725e7a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf42b6e-87a2-4147-ba00-9a08fb57ec19", "sighting_of_ref": "indicator--90eff6db-3f28-4792-a5c4-575618cb9ab0", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e818e048-8605-4c72-a8ed-91a2764160f3", "sighting_of_ref": "indicator--5d348429-59ba-4674-8a16-d02a05dabd8e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebdfc968-9ab8-4fff-83ea-f71d07ca4dcf", "sighting_of_ref": "indicator--fa8b0af3-ed5e-44c1-a8ba-8b7462d7aecc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f5dd6a-b4d6-4a00-be6b-fb61ceb39679", "sighting_of_ref": "indicator--fa8b0af3-ed5e-44c1-a8ba-8b7462d7aecc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473ad9ac-c6ee-4af3-b8dc-fd5af5fa5c74", "sighting_of_ref": "indicator--b8d98f27-9667-4c49-b7df-fc0721de20b0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56dae01e-757c-4916-9708-1fd396c02e71", "sighting_of_ref": "indicator--30c1a1bf-071e-4229-b6f7-f01f46af2680", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e763cb19-5bf3-4a1e-a06f-606ba75d7698", "sighting_of_ref": "indicator--b8f85e81-861f-44be-af6b-ba0f73abe4d7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2130bb7a-93f1-44f4-8979-36e4f591fa21", "sighting_of_ref": "indicator--d1c455db-4bb1-426b-8c22-7721df6978d4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c552a3-c9d5-47ef-98cb-ad5039c8d3e1", "sighting_of_ref": "indicator--2f74ec07-5036-45d8-bce2-23288614f16f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--264eeb5a-da70-4693-84fc-c1f597b3781a", "sighting_of_ref": "indicator--284ad7f5-4736-4714-9861-df3704cb01dd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f92aa1-9b85-44d6-bea7-81a3899c2c3a", "sighting_of_ref": "indicator--04828da4-469b-4976-92be-02db4ac6e11e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5501120d-9e6e-4b0f-8288-0e3892f9169a", "sighting_of_ref": "indicator--682598b9-cf53-4f3a-a380-0e07d054f0c7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c237dab-ebdc-49e6-84b2-216d3a1c79e5", "sighting_of_ref": "indicator--08c52832-968d-44bf-aa86-21f744b4964c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91987053-4b19-4e41-886f-d7edd35088f7", "sighting_of_ref": "indicator--08c52832-968d-44bf-aa86-21f744b4964c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c083c9-6181-432a-9230-3a0fd25fb480", "sighting_of_ref": "indicator--44c7ed8a-0ea7-4fa2-9095-acacd2d83581", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac64d9e-7c62-4414-a822-fa674bef948d", "sighting_of_ref": "indicator--fa2dbb02-b4c7-4804-b634-47d1e7ecbefd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a40ff0-5c66-4fc7-b6ea-69b7dff9473c", "sighting_of_ref": "indicator--b90f06e1-6314-4697-962b-0db6efa0279e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb6464b-4a4c-4fc0-b92d-2b7b3c06a849", "sighting_of_ref": "indicator--e19fbdc3-617a-4cce-9bc6-f1b4cc2206b1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d60ac73-2abe-45da-8d7e-df13e0219768", "sighting_of_ref": "indicator--a5ef0e21-fabd-4b1b-88bc-dc238dc80b83", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51864342-ad4f-4ca0-924e-b8d26eda4d01", "sighting_of_ref": "indicator--fef68c12-7d88-4fa8-894d-8fbb8399cc84", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cff7686-d6df-4e2a-8c3f-00b1ef77e8a6", "sighting_of_ref": "indicator--fef68c12-7d88-4fa8-894d-8fbb8399cc84", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63f6c1fb-9970-441b-b326-c06c57efa30c", "sighting_of_ref": "indicator--fef68c12-7d88-4fa8-894d-8fbb8399cc84", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5b31b2-c9b1-43f2-aeac-5aa69d3d19ad", "sighting_of_ref": "indicator--e5573f5e-c70e-438c-9836-53bd00f54ce9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab997788-6bfc-4bcd-9ab1-5eb57f562c1a", "sighting_of_ref": "indicator--80f19221-1324-45f1-8c28-af7b069fa32a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77d3aac-bb53-44e0-801c-da681c69e207", "sighting_of_ref": "indicator--b1568da4-9a7f-4825-a800-b708ccfdf26c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d119951-f70f-4e00-9951-9d862667bbbd", "sighting_of_ref": "indicator--ddaad98c-0782-4bff-b7aa-8e929eaf10f8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0240aef-4059-4d59-b016-3288c0171cdf", "sighting_of_ref": "indicator--1de412ab-5282-4e7e-bf34-47fc51bd29bc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af41b66-0a42-4d57-8565-90016b8172a3", "sighting_of_ref": "indicator--6de3f379-c90f-4d6d-8f87-bdd307b1b0e3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce9dda1-4802-41e5-926d-1c8448d43f27", "sighting_of_ref": "indicator--ee709559-ba90-4b19-86ac-dcb13f767432", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a147c5ec-2578-4e5d-a9f0-a38b8adeeb83", "sighting_of_ref": "indicator--23f99d78-b21e-4b76-ada8-01551d169b78", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bcd5704-be78-4b2b-96a7-3238f1a58ee0", "sighting_of_ref": "indicator--d41d8d77-4184-4751-9864-f44b87b94f8f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a07f4f-8353-41c5-9bf2-47b800dad582", "sighting_of_ref": "indicator--0fa1e6d6-3c91-4561-87a9-ed246d9105ea", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275b8ea9-1de3-49ea-9325-c0eb1a763b4a", "sighting_of_ref": "indicator--bae86a4f-5d67-4e45-b20f-b0b263510671", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8dbfe78-d5aa-4b42-94cd-5da2e77e52f7", "sighting_of_ref": "indicator--b45c0567-4976-45e5-99d9-5f0e4be5f42c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7034758-339a-4788-9766-ac60fc7ad589", "sighting_of_ref": "indicator--5de082fa-e06a-4596-9d5f-171e3e731fa8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ffbf13c-fe66-416d-97fd-3340516871fe", "sighting_of_ref": "indicator--86f854ca-f089-47ad-94ad-ef9b88644ec9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882e5f23-8c60-487d-9833-ac386d93fdf7", "sighting_of_ref": "indicator--86f854ca-f089-47ad-94ad-ef9b88644ec9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a27e65-768e-42a3-b875-99a04a52e879", "sighting_of_ref": "indicator--44c6633f-323f-4b15-a86a-d2f8ab1504a4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1356e643-7a1d-4c88-9906-7ef0cd1cde4f", "sighting_of_ref": "indicator--ae5c6c66-4df2-422b-b07d-302385eba9f9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2daba6f5-0d7f-455d-8873-911e19e47ce3", "sighting_of_ref": "indicator--ae5c6c66-4df2-422b-b07d-302385eba9f9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dede58ff-6b5a-48ca-9a2d-097812ac473f", "sighting_of_ref": "indicator--f28fbda8-2a43-4266-b41e-b70fd16cc7a1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e6f3a1-0abb-4df8-945c-23f49ad94c43", "sighting_of_ref": "indicator--f28fbda8-2a43-4266-b41e-b70fd16cc7a1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d422667-0d2c-498b-9578-02e5361eec12", "sighting_of_ref": "indicator--72fa4b55-3bd9-46b6-aaa1-fb211e933ccb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8619bd2c-77ff-485b-80f2-65392eed1a01", "sighting_of_ref": "indicator--72fa4b55-3bd9-46b6-aaa1-fb211e933ccb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cfb1b0f-199b-436a-a730-a975d1d5b86d", "sighting_of_ref": "indicator--8706a0a4-e4b7-49fb-8e6a-2a344e2cbc78", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28807c4b-1dd8-4a1f-933b-4d44356a975f", "sighting_of_ref": "indicator--fd0b14e9-fb7e-42b4-8d65-37ec171bf71e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944b7742-c7ea-4b9d-882c-2ac0cad5c3ab", "sighting_of_ref": "indicator--4ba5d417-388c-4e84-909a-39b6efdcb889", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b06011c-b737-423a-b486-47c7b5535a53", "sighting_of_ref": "indicator--5341f225-e448-4141-9b0a-5d85dd77215c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc28b96-455d-4b3d-b4e0-596bf064ca9a", "sighting_of_ref": "indicator--72fbf0e1-196e-427e-9fdf-d6196032b612", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a17a7fe-b8b6-4f18-a57c-f00c6f5bea7a", "sighting_of_ref": "indicator--72fbf0e1-196e-427e-9fdf-d6196032b612", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597a7148-b239-4474-9103-c8dc3afc5200", "sighting_of_ref": "indicator--ea48b6a0-84eb-49f5-a633-ca56207b78b2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177e40d2-c846-4479-9af4-c3a21368c0cf", "sighting_of_ref": "indicator--d57f119b-e0c4-4ebb-9770-af9bfb859ac5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d221dcbd-2a46-4079-a748-8a545d7795ee", "sighting_of_ref": "indicator--ac79b7ae-d3e4-45da-9a8d-e4582bce3ffc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c78c01-46fb-4a68-812d-d554db6d9a61", "sighting_of_ref": "indicator--ed630f53-8c1a-4890-9360-a934df7eb3f9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe0740c-e3a8-4edc-8ced-c40def85a091", "sighting_of_ref": "indicator--a3586d23-4a62-47f8-a303-7c6fb52f792e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3142f6ea-55e0-4e24-bfd3-b66c2fee380c", "sighting_of_ref": "indicator--a3586d23-4a62-47f8-a303-7c6fb52f792e", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f538d9b9-f787-47e7-a6dc-d8a549c472ec", "sighting_of_ref": "indicator--a3586d23-4a62-47f8-a303-7c6fb52f792e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34d9f9a-6ac9-4bb5-8c2a-2d0a5c8253f5", "sighting_of_ref": "indicator--2ce5261a-b752-48ae-a250-e10143dd8160", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce79cb7-d495-47ff-a56a-4c4bc20e55d2", "sighting_of_ref": "indicator--b2105dca-1fa6-4508-8c44-969e0b1527fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0eb123d-03ba-44cb-ae66-400b78e49a51", "sighting_of_ref": "indicator--c0d2dd23-5c02-4caf-be73-1f7c83de5547", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c377cf9b-9d02-48aa-8c41-75527de4fe06", "sighting_of_ref": "indicator--4d99984f-fd1f-4363-9dd2-2a8f74fe4cb0", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf5bc60-cc2e-482e-80ab-ea9f9804aa7c", "sighting_of_ref": "indicator--9e3893a4-1e4b-42d3-8df0-03314670cfea", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8d01e0-b6f8-4841-b5ba-9c08c4c56b5c", "sighting_of_ref": "indicator--7245772a-60b6-4be4-bae3-1525848c97d9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8012ae0-87bf-4fdb-8169-131a99a8de4d", "sighting_of_ref": "indicator--c7e66dd3-ff2f-4d59-8601-116d4c77ad4e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d02f6ca-603f-4e19-bd61-2931026d1a23", "sighting_of_ref": "indicator--c7e66dd3-ff2f-4d59-8601-116d4c77ad4e", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cacb3e43-7c51-47cf-bef1-7f14c5898448", "sighting_of_ref": "indicator--c7e66dd3-ff2f-4d59-8601-116d4c77ad4e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5780bd-e049-4447-867f-224eb2b6f78b", "sighting_of_ref": "indicator--003a224d-ab69-4bba-9362-47ec215b73d9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dabbd34-8f03-4571-aad4-ccda3b76ef97", "sighting_of_ref": "indicator--ea5dbbc6-3005-448e-a561-af578abfb549", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eefbb056-f454-4f82-b946-2ae241051836", "sighting_of_ref": "indicator--c8a72102-12e3-469e-9d68-01df6ccbdf0d", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6834538-5b36-463b-ad15-23dd0e87d6f3", "sighting_of_ref": "indicator--3764581a-c81f-445c-908d-b4afca3ded25", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2377e2-b196-445e-9057-6b6a0a4daa62", "sighting_of_ref": "indicator--d705e6fb-4f97-47cc-ac06-1aa1ab977373", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a39d47-a929-429d-908f-4d3b4e61ee23", "sighting_of_ref": "indicator--4b55bfcd-abfa-4795-ae9c-d548b0e39549", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c85d3e0-78dc-43cc-9403-d711fb8600cd", "sighting_of_ref": "indicator--4b55bfcd-abfa-4795-ae9c-d548b0e39549", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b1671a-2917-4ecf-852b-b1d6a17da7b6", "sighting_of_ref": "indicator--4b55bfcd-abfa-4795-ae9c-d548b0e39549", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406287eb-9a3d-4dc6-9469-f9b09d5410df", "sighting_of_ref": "indicator--d6299bfe-969e-4e1b-bfec-e20a5fb7ff4a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5321898f-76d7-4e40-9421-ee41ed859c00", "sighting_of_ref": "indicator--0b35005f-5ecc-49fb-9508-3d2a4893eae8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a87facd-fd1b-460e-a37f-7fdb908654a7", "sighting_of_ref": "indicator--0b35005f-5ecc-49fb-9508-3d2a4893eae8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e641e2bc-5380-4f08-b96a-182be7d7e10f", "sighting_of_ref": "indicator--08ee5b60-9994-4062-a72b-7cf89b1e3787", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3316089e-9d8c-44a6-be86-3881d9638422", "sighting_of_ref": "indicator--08ee5b60-9994-4062-a72b-7cf89b1e3787", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6b04b4-3846-4dfc-b21d-229e7aa49380", "sighting_of_ref": "indicator--8203f1b2-4a9b-49cc-8697-e883922e12fe", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a05091c-c56c-4276-b395-4b527d1b540a", "sighting_of_ref": "indicator--8203f1b2-4a9b-49cc-8697-e883922e12fe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22fcc31c-f4cb-48ab-b048-56ea3d5ffc48", "sighting_of_ref": "indicator--671c6227-1b78-4ec4-9cb8-0647cae64c59", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d185fd1-56ca-420c-a9e1-14444341b631", "sighting_of_ref": "indicator--671c6227-1b78-4ec4-9cb8-0647cae64c59", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7705cd-5c70-45ff-9673-6093a42e1b72", "sighting_of_ref": "indicator--671c6227-1b78-4ec4-9cb8-0647cae64c59", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4c6672-904a-4bf0-8697-542c6550a327", "sighting_of_ref": "indicator--b3be5e1e-199e-49b6-b924-93a1ce77573f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e60e6e-a773-4d3d-8c55-f5539f63669b", "sighting_of_ref": "indicator--b3be5e1e-199e-49b6-b924-93a1ce77573f", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801e8b54-0305-42d7-a81c-b86436e2bbcc", "sighting_of_ref": "indicator--b3be5e1e-199e-49b6-b924-93a1ce77573f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b565063-34be-4cdf-89c7-a4bef855e06f", "sighting_of_ref": "indicator--b870221d-4b39-40a4-b0ae-c477e23a4f84", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74da10ed-ddf7-40fb-9173-955cb10dc9ea", "sighting_of_ref": "indicator--b870221d-4b39-40a4-b0ae-c477e23a4f84", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e198e9a-f041-4d3e-9586-5882085eede7", "sighting_of_ref": "indicator--b870221d-4b39-40a4-b0ae-c477e23a4f84", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718decde-d4a2-4262-9bbd-6295c6932e3c", "sighting_of_ref": "indicator--76f7e8c1-1a9a-480a-8afe-84fdd73020d7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a28724a-c276-477d-99d8-389fd649c106", "sighting_of_ref": "indicator--76f7e8c1-1a9a-480a-8afe-84fdd73020d7", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4907bc5-beba-4aa1-a423-323a8565b60e", "sighting_of_ref": "indicator--76f7e8c1-1a9a-480a-8afe-84fdd73020d7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923e5df5-9080-440f-9086-14b2203fe413", "sighting_of_ref": "indicator--13910b27-9472-4976-bbf3-c72b7775fe82", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1afc2e-bcb5-4feb-ad99-02ca691498da", "sighting_of_ref": "indicator--13910b27-9472-4976-bbf3-c72b7775fe82", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8126de0b-d09a-425e-8bb7-b91696b77096", "sighting_of_ref": "indicator--cd93a92a-edb5-4ef2-843a-1762c3d61965", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a5d620-276f-45a7-ac65-55d3d900961b", "sighting_of_ref": "indicator--60a7c992-571c-4908-a1b7-a368575cf2e8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c578e8-78e4-4cba-ac4f-300c13587d82", "sighting_of_ref": "indicator--036e391a-b240-41db-ab06-c12034e8b379", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b57bc071-5fd3-44e1-9205-33847f9939f0", "sighting_of_ref": "indicator--ba39f173-d3e6-4b43-b81f-fc20804eda69", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3b92a1-b832-4c6a-b9fd-b19225808bf9", "sighting_of_ref": "indicator--116d5806-cb17-42d6-bdb7-05c6a2c376eb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1648ce55-3876-4055-9038-5988b6d58ff9", "sighting_of_ref": "indicator--c211d24f-d2c7-49f2-9c2e-d2a9d1cf4dd8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1b144d-39d7-42bd-b724-dcfdd494471b", "sighting_of_ref": "indicator--a2d0abe4-e013-4cff-9a99-cd07d931d515", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8300f5d9-a01e-46ba-891d-8584af8338cb", "sighting_of_ref": "indicator--a2d0abe4-e013-4cff-9a99-cd07d931d515", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10b1dce-f985-4e61-bb6c-a092aefdb70a", "sighting_of_ref": "indicator--a2d0abe4-e013-4cff-9a99-cd07d931d515", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47d2e2b-c9eb-4c11-bd7c-3222101dc119", "sighting_of_ref": "indicator--ff1b52d7-a3be-4fe6-b627-e7125c8d1845", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7cb7544-8ad8-4260-870b-2aa7146f48df", "sighting_of_ref": "indicator--36325484-71fc-4416-97d3-16ccc292668b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9a4c52-540a-45ae-9725-149499cae181", "sighting_of_ref": "indicator--36325484-71fc-4416-97d3-16ccc292668b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af64a23c-8894-410a-ab95-5f9033763aec", "sighting_of_ref": "indicator--9350d0cc-d535-4551-8a4f-f901ea7f0f58", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d3a72a-06cc-4c26-a212-f36da476a4ba", "sighting_of_ref": "indicator--e2690648-aadb-426b-a73c-c85cd1667fa6", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972081a1-19e8-4056-9624-35031d400e38", "sighting_of_ref": "indicator--a19a8566-3d4d-4f95-9b38-58ee3b7193d0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b4659e-0766-47a1-b461-63eb0408126b", "sighting_of_ref": "indicator--a19a8566-3d4d-4f95-9b38-58ee3b7193d0", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af92bba-b19f-4d1b-bd4a-98f21dec3929", "sighting_of_ref": "indicator--a19a8566-3d4d-4f95-9b38-58ee3b7193d0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d037c4-0c60-4f7e-bf89-2bfc900bbef3", "sighting_of_ref": "indicator--51fb111c-0ab7-4878-8baa-a16ea69aeb96", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2ae1ab-8c41-4d86-b6c3-a388cb12fbab", "sighting_of_ref": "indicator--459c347b-a31d-4a2b-8718-dd2e2edc9552", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a39d8ca-145e-4f0e-833f-3f7e6c275da8", "sighting_of_ref": "indicator--64cd8595-9dbd-4a75-aaaf-ad93d19876da", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e932199f-8f73-44f8-8f8f-3b47bb182f83", "sighting_of_ref": "indicator--64cd8595-9dbd-4a75-aaaf-ad93d19876da", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b07f77-cc12-4b27-a6ec-4edeb5b5eec0", "sighting_of_ref": "indicator--9638e7d6-74b3-449f-9ff3-d25cc0cff584", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c938fb6-0e0d-4318-b8d3-dd3da31e8973", "sighting_of_ref": "indicator--9638e7d6-74b3-449f-9ff3-d25cc0cff584", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83279744-bb44-44e1-b0ef-487fa665ead4", "sighting_of_ref": "indicator--fe1b392e-a498-439d-aaa0-dfb6bbd0b80a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--780279ab-f3a3-4228-a0ab-6a79779c011d", "sighting_of_ref": "indicator--bb12315a-8a44-4a00-8db0-ef02c97b38ed", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44cc1779-ef2e-40fc-bac1-329d33fe15fd", "sighting_of_ref": "indicator--bb12315a-8a44-4a00-8db0-ef02c97b38ed", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7684e1-a887-470e-bd9c-a7e3450f3cc2", "sighting_of_ref": "indicator--90477581-4d74-45f1-a21c-58052386e911", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42bebefe-87e6-4287-b2e2-e19aa648c702", "sighting_of_ref": "indicator--2590f931-0e61-4454-938a-e64d7301a809", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b799e3-bf85-43bd-8c00-3dc9059c82c2", "sighting_of_ref": "indicator--1fae35f2-3a67-43dc-bcd5-cf8a59c762fc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b95d7da-cb64-4eac-bc47-c8c6069daaac", "sighting_of_ref": "indicator--a5af6f04-d6ad-486f-8816-da7fcd20d35f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc8e1ad-6adf-402c-983e-9891804ad711", "sighting_of_ref": "indicator--e0b7823c-19ab-4fa6-a229-b8c0559e9164", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0dab57-68ff-4b06-af39-201cee81cc49", "sighting_of_ref": "indicator--e3aff5dc-28c9-4c5d-a2d4-70dc18bb07ed", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d580347-9891-4c0e-815d-b5eaddc3d83c", "sighting_of_ref": "indicator--8d695aa2-ed74-43e0-bb52-df0a76c3c466", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f537b56c-3956-4a9a-b55b-8535a3b1d057", "sighting_of_ref": "indicator--a41b9d12-fcef-41e5-93b4-8953d9dda087", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c894722b-848c-4769-9c57-e1a09b0d7b72", "sighting_of_ref": "indicator--a41b9d12-fcef-41e5-93b4-8953d9dda087", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17894bb5-0554-4196-b74e-dbfcb24ffdae", "sighting_of_ref": "indicator--bca7bac7-433b-4c64-94c4-7d5e3728a7de", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88e895c-8649-43ec-841c-857b9016f5ea", "sighting_of_ref": "indicator--d32c17f3-1274-4412-a72b-6c5f5479a191", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38e19b3-506a-46ef-b2df-3c4213dab892", "sighting_of_ref": "indicator--16c4aefe-f668-4cc4-807c-26eeb3a61ff1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77933b17-e83b-471a-b51a-81309cc9dd08", "sighting_of_ref": "indicator--3250d7ac-08a2-448c-9df4-e8244d81b65f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29bc503-f658-4e3c-b825-e2160644e97a", "sighting_of_ref": "indicator--0c7e1500-ec73-489c-a643-0d88591f5cc6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7197b026-3ae9-4bf7-b789-e573b7a1142b", "sighting_of_ref": "indicator--a268ebc0-9bb8-4082-9dad-6bca47d952ca", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a5c6c3-37e1-4cb4-bd84-54ebdc01b3e8", "sighting_of_ref": "indicator--a268ebc0-9bb8-4082-9dad-6bca47d952ca", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34b2572-def0-4bee-a7a3-e9be35e1eee1", "sighting_of_ref": "indicator--826edf8d-8bf1-44ac-8101-8988d9b4af09", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cac2f0c-db00-4ffc-ab32-a8d6fec4f106", "sighting_of_ref": "indicator--c2b41de2-5259-4e13-873b-30e8e47d9906", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc59eee-16a4-40c3-9db0-0f2479e0c00a", "sighting_of_ref": "indicator--0a91dd6a-6bcd-4f0d-b7f0-ef5d0962155d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789c23a1-ea56-4e19-bb9a-e8e440b87da5", "sighting_of_ref": "indicator--e68ebacb-489a-4b59-a068-b4f4155341a1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f07a89-1516-4419-8417-f2fabab53b2a", "sighting_of_ref": "indicator--a4068eab-469c-4289-9910-ea4862296dd9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8105e6-76e7-40e9-8413-709ecba0e74a", "sighting_of_ref": "indicator--32127967-53d1-462c-a5c7-facbb844db0b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe66f39b-fc35-4f46-aad0-eb6ab15b867a", "sighting_of_ref": "indicator--b86942fc-54b6-4388-9960-8abb908125fe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6768b3ed-36f3-49c6-b8fc-ea70d299d73c", "sighting_of_ref": "indicator--5bb01a3d-6c42-4932-a8e9-7c8d2bfd2bb9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5f0604-1596-432e-ad0a-86389bf6dd02", "sighting_of_ref": "indicator--36d8c9ea-28f7-4491-856b-7202709c4cfb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f60885a-a824-40bc-86a7-ba8ec953d1a8", "sighting_of_ref": "indicator--80e676c7-1da1-448c-937b-736f7baa008e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7aaae5-4e27-4689-b763-afabfea35c11", "sighting_of_ref": "indicator--80e676c7-1da1-448c-937b-736f7baa008e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c973398b-4ef8-4d1e-b3bd-a5ce308adaf7", "sighting_of_ref": "indicator--e755ee7e-25ba-4ed3-9e61-6310443b642f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5883aa1f-eba3-4603-8275-5cd31f750528", "sighting_of_ref": "indicator--e755ee7e-25ba-4ed3-9e61-6310443b642f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868338ea-fd5f-4435-8cd5-21f78abb1864", "sighting_of_ref": "indicator--1177ac5c-fe98-4c8b-b864-d3e7f0233fad", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4854e31e-b421-4942-b470-b958332abd88", "sighting_of_ref": "indicator--1177ac5c-fe98-4c8b-b864-d3e7f0233fad", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4f240f-25a5-4caf-b836-b624fb75d306", "sighting_of_ref": "indicator--7511fae8-af11-4b23-8e11-cbbc71d4790e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd2251c9-ddc6-4338-800f-16b22d13a3c6", "sighting_of_ref": "indicator--7511fae8-af11-4b23-8e11-cbbc71d4790e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e398ba0-0257-40f4-9aa8-cabcb14095f9", "sighting_of_ref": "indicator--cc4d7f5d-a3b9-48bd-9d56-0ce3dabc37ad", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91d47eb-c4e6-41c3-a0bd-cd140972a956", "sighting_of_ref": "indicator--cc4d7f5d-a3b9-48bd-9d56-0ce3dabc37ad", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e616dc-ab16-4841-9eab-268ff1c00065", "sighting_of_ref": "indicator--679f9aa3-b7f9-4a33-83d5-18e8e04df2de", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393f0dee-9c3d-42d3-9895-6e01ece26717", "sighting_of_ref": "indicator--679f9aa3-b7f9-4a33-83d5-18e8e04df2de", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6dcc32-0692-4252-bf56-1eddb556398a", "sighting_of_ref": "indicator--f65f2b5a-1278-4400-9367-90eba881f440", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b858374-a09d-4208-915c-a858f84f045a", "sighting_of_ref": "indicator--f65f2b5a-1278-4400-9367-90eba881f440", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73bd66dd-8e66-4486-bb3e-16b143560ae1", "sighting_of_ref": "indicator--8ce0d034-9299-4da7-b52e-52fb807d13be", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb5f9772-15f7-41bb-95c3-7867d36ff305", "sighting_of_ref": "indicator--8ce0d034-9299-4da7-b52e-52fb807d13be", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c8c8ca-ef2c-452b-a521-3c20d3f701e8", "sighting_of_ref": "indicator--f6008f87-66c4-45ff-96ea-be837faddf32", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b28faf-484c-4377-898a-3b3153cba89d", "sighting_of_ref": "indicator--f6008f87-66c4-45ff-96ea-be837faddf32", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee9dc09-2ccd-488d-9930-790e63c26a7b", "sighting_of_ref": "indicator--96289aaf-6207-44e6-987e-d3001e84b5c4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5387dc97-af17-4bf5-8d58-3ea66f9af420", "sighting_of_ref": "indicator--96289aaf-6207-44e6-987e-d3001e84b5c4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b97f4f-8206-421c-96b1-f1e077f46f43", "sighting_of_ref": "indicator--49cb8339-144b-45e2-8052-1fa917f402f3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a24e8d-fe8b-460b-af7c-12b1ef011fc9", "sighting_of_ref": "indicator--49cb8339-144b-45e2-8052-1fa917f402f3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6563d1c-0b57-4889-8bf6-8fce71e99f98", "sighting_of_ref": "indicator--670f3efb-dd46-4c3c-ac3c-140a4eeac17b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc8b203-fe7b-4889-b719-1b5858c40d40", "sighting_of_ref": "indicator--670f3efb-dd46-4c3c-ac3c-140a4eeac17b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b3219d-a85d-4f67-8863-09649dab6945", "sighting_of_ref": "indicator--18dceab5-cf66-4c0d-bab2-da012eba75ec", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6312da74-f382-4874-8e78-eeca122d4838", "sighting_of_ref": "indicator--18dceab5-cf66-4c0d-bab2-da012eba75ec", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6fd40f0-3776-4e25-b9e4-c80f6fac5a1d", "sighting_of_ref": "indicator--5039e5ee-4cad-40a7-9032-84b1398403c1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13362072-8ef4-4c4b-bf76-a91f82ff7bb2", "sighting_of_ref": "indicator--5039e5ee-4cad-40a7-9032-84b1398403c1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cead6ef-1960-4ee2-b750-f7190c0741f2", "sighting_of_ref": "indicator--5499918e-0693-4291-aa07-0d9d32830629", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe073ea-c4b9-4ac5-b8ee-26694ce82f2e", "sighting_of_ref": "indicator--5499918e-0693-4291-aa07-0d9d32830629", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b53794-dda5-44f6-a1dd-c047fe3c5fb7", "sighting_of_ref": "indicator--ad2eb5f7-50e2-4e9f-8dc2-d219fff934b2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718f3b03-8777-4d6e-89ce-3db5d072d537", "sighting_of_ref": "indicator--ad2eb5f7-50e2-4e9f-8dc2-d219fff934b2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e902a7b-2562-493d-a4f8-9a7bbab99ac4", "sighting_of_ref": "indicator--934398be-a58b-49c8-bc0e-6a7deb9f6a59", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4ab04c-bfb7-4961-aa06-1352e3fe0fd5", "sighting_of_ref": "indicator--934398be-a58b-49c8-bc0e-6a7deb9f6a59", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca884eb3-5afb-4f2d-97d9-90729d64b681", "sighting_of_ref": "indicator--f82ddc15-7d85-43b5-b4e4-2202bf80cc91", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0c61449-0365-4611-8c83-dfd7e21d4d91", "sighting_of_ref": "indicator--f82ddc15-7d85-43b5-b4e4-2202bf80cc91", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ef5937-6c39-4156-b5f0-d900abfc8818", "sighting_of_ref": "indicator--de0b40b3-f4b0-40b6-ac9d-3883074920d2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f114402b-03e0-46f4-897e-edcdd8cdb2d6", "sighting_of_ref": "indicator--de0b40b3-f4b0-40b6-ac9d-3883074920d2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3cf8dca-fc68-4f86-833d-403a0a74ea31", "sighting_of_ref": "indicator--8d283d46-83f9-48aa-a984-751563c2768a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aacaa5c-e941-4c22-b4fe-d5635a8ea110", "sighting_of_ref": "indicator--8d283d46-83f9-48aa-a984-751563c2768a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d689a21-0513-409f-8e05-250b7ab8f1c7", "sighting_of_ref": "indicator--e68489f3-de78-421a-b491-98a385b7e069", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0dd96c3-ecc9-4c2c-b10c-a02169b51c1a", "sighting_of_ref": "indicator--e68489f3-de78-421a-b491-98a385b7e069", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0661afe1-0f26-4d4b-91f1-f57c2600a662", "sighting_of_ref": "indicator--aa0b4ad0-4e1e-4cad-a631-c622e18af66a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c178a6-6e93-4077-bc1f-f97593cbfc9a", "sighting_of_ref": "indicator--2b17c2a9-cb69-4ef1-a99a-57367ba85c2e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd732df1-4581-47e0-8dcb-ed8acf1c5e50", "sighting_of_ref": "indicator--2b17c2a9-cb69-4ef1-a99a-57367ba85c2e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c610ed96-f419-4da5-91b7-6bbda265b7be", "sighting_of_ref": "indicator--1ffaa18a-a216-43b0-8e8d-7d26d14accdf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b95948-02e3-43e5-845f-c6cc62504234", "sighting_of_ref": "indicator--b08a0fd0-a136-4b0d-9592-3488ad373517", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b1f711-e048-4fb4-88d0-34416b7ed96c", "sighting_of_ref": "indicator--9e65e92e-a469-46d2-846b-5ac8401180a7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42bfb435-5970-4434-99f2-6a4839e73648", "sighting_of_ref": "indicator--07063aa8-d50f-4082-9b42-fcb57648933e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9328b5-f07c-45cb-8a38-b65188e3409e", "sighting_of_ref": "indicator--07063aa8-d50f-4082-9b42-fcb57648933e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a2eea54-6cf3-4361-8b84-cae184ce2aa4", "sighting_of_ref": "indicator--c3f28185-2e5c-44be-a153-ee894788a12b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e349a568-7215-44f6-bd9d-ec37aff17ca2", "sighting_of_ref": "indicator--c3f28185-2e5c-44be-a153-ee894788a12b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2197ea37-eba9-4c8f-90b5-f51f74942701", "sighting_of_ref": "indicator--eea972a8-0017-4ba5-8787-ba22088a1a4a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db3fb33d-ef3b-4100-8b79-301b02ea4935", "sighting_of_ref": "indicator--c250889e-ec4a-4e31-940e-d7c5b97b294d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a382d68f-08ac-4794-9fd9-8c0c0a523690", "sighting_of_ref": "indicator--e91de70e-9943-4422-b3a1-cd4d5810df78", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2f26e2-277b-4ccd-9519-dfdab48d4248", "sighting_of_ref": "indicator--afb1f730-b724-4170-a32a-7ba775c53c21", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e7adbc-3edc-46ac-83af-b0c9cacd0c37", "sighting_of_ref": "indicator--bdb8a9c3-fc72-4400-b6e1-71a0bda81354", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ff7b1c-70af-4f01-afb6-e8fff125f1b2", "sighting_of_ref": "indicator--e2e3e2a7-d738-4871-85fc-2b55bb68d12b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a9f23f-7ac3-4b96-a84d-87cecfd38922", "sighting_of_ref": "indicator--5142b216-96d0-4aaa-962c-954db0a80497", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0559a708-af83-423e-9eb8-f5fe06773cab", "sighting_of_ref": "indicator--5142b216-96d0-4aaa-962c-954db0a80497", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e03fc1e-0c5a-47ef-9c14-338f680a3f02", "sighting_of_ref": "indicator--3d4c1981-b738-46ea-bffa-04164193c550", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903d4403-dcdd-42a4-9e6b-3938ce707877", "sighting_of_ref": "indicator--e6c687f5-f1db-482c-bb45-daaedb51910d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c067f8-48f1-49c9-bd5f-7636eba79553", "sighting_of_ref": "indicator--e926cae4-b106-4b80-ae9b-80b7c4491a80", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b5fac81-b917-4dbc-813d-39bc95460ece", "sighting_of_ref": "indicator--9d9bd115-44de-48e0-bb79-d1dfbc4d749c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--583b970d-aa73-4f5a-9516-03450c4388bf", "sighting_of_ref": "indicator--20e4be21-79fe-4adf-aed2-704e27fbf8ac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92a1c97-0cfb-4fdd-8421-820d5a1b2b0b", "sighting_of_ref": "indicator--19913f0f-617c-4ca5-bbe5-bf834906402c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6e4447-bae9-4094-bfdb-ab5a56c42d98", "sighting_of_ref": "indicator--8799d17f-a28c-415a-9339-51940cb483ba", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8d9a07-dc52-4ef5-a98d-4e29d48e64e8", "sighting_of_ref": "indicator--4c5f227c-9067-4c60-a478-9598062603cb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4649fe28-feaa-4195-9b8d-23c5e05699f0", "sighting_of_ref": "indicator--4c5f227c-9067-4c60-a478-9598062603cb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488331bc-23c3-4594-acf3-dd4e18867e4e", "sighting_of_ref": "indicator--24a0a58e-e8a5-491d-83b9-203d6442ccc9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b4b9a6-a5e1-48c6-a947-025554804b92", "sighting_of_ref": "indicator--24a0a58e-e8a5-491d-83b9-203d6442ccc9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04f9a82-b6bb-4581-8b1c-50b78547ebd7", "sighting_of_ref": "indicator--0d2240c9-a7ab-4a0b-b741-e3f2683af491", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ca4427-c7a4-484f-bb6c-354a633d386d", "sighting_of_ref": "indicator--0d2240c9-a7ab-4a0b-b741-e3f2683af491", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def8db7d-35a8-4cda-b08b-468d7a21dd05", "sighting_of_ref": "indicator--6e90ba88-9d26-42af-93e8-383b639a729b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb376eb-af26-44ba-a7b4-6e973b2bf1d9", "sighting_of_ref": "indicator--61e9c595-f574-4b93-bdba-94c5970b6769", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5773f5c-36ff-420f-bcfb-b24e77ff5ca6", "sighting_of_ref": "indicator--b7168ef2-4209-4f1e-8080-92b10df73b0c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ff1a9b-dec1-4b60-a0cf-ba327a61cfe9", "sighting_of_ref": "indicator--a36d21da-8c0f-4a8b-aac5-bd26b03e91bc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d503a79-3690-4f1a-bb1d-f7d5525b983a", "sighting_of_ref": "indicator--f350c554-6d46-4b5f-aea1-a1fbedd13022", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11275f96-6612-48c4-aa0f-01c863336dfe", "sighting_of_ref": "indicator--cee93402-8c4a-448b-a9bf-1edc324ae3ed", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6457c627-1d33-48ff-aca2-07bdf206e1af", "sighting_of_ref": "indicator--8951cd07-e856-4a2e-80df-86eefc7bdb4f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de137d0d-7edd-4a24-9fd6-8b27d38ca27a", "sighting_of_ref": "indicator--ddcafb50-3d57-4fa1-a23f-d38a9851259d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b980ee8-609e-43c8-8b51-8543ec2ae868", "sighting_of_ref": "indicator--8fb22704-0a61-4a90-83f0-4e1ce16748d5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c40ddc2-b200-448d-8dda-7d0aec64a25b", "sighting_of_ref": "indicator--21499eb9-02c6-4554-9778-e389ed5c0326", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c50182-adbf-4c20-9e89-bb3020957765", "sighting_of_ref": "indicator--20378a5b-12b4-4276-91f9-33046168304c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6973e1-65ec-4ead-af5a-a8cb5dccbb3e", "sighting_of_ref": "indicator--50058833-488b-490d-b1b7-682e9c0d880b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb03f5ba-ee43-4ac9-a5ae-15eede2d2a69", "sighting_of_ref": "indicator--b777f802-500f-44b0-8dce-c044c0c28771", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121d5d9d-d333-43c7-b39f-d24d0290489b", "sighting_of_ref": "indicator--e4932d21-89c4-46c9-a321-0db56dd1dfbf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e740b46c-6f5b-4d5c-b225-0d276ce0b80b", "sighting_of_ref": "indicator--4e32aaa6-6278-427b-b49b-d9cc3597b8ec", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0657095a-ac57-48b5-b6b4-e567f53e5326", "sighting_of_ref": "indicator--4e32aaa6-6278-427b-b49b-d9cc3597b8ec", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d61a8d-2b02-4826-9a46-958249f4cc85", "sighting_of_ref": "indicator--3bbed889-8971-4ec2-9c16-18877fe03f62", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d9951b-291e-4065-bc73-0587b1995f98", "sighting_of_ref": "indicator--f9e455ef-a6bf-416d-a545-daee4dc75a98", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0387d4-d5b3-42e5-9db2-06ef79777876", "sighting_of_ref": "indicator--dd0ee7b3-0278-4abc-afc7-753cfcbcab4c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05bca85c-7349-4a52-8dd8-62defbe9aee8", "sighting_of_ref": "indicator--40a0af06-434a-4fe4-9853-b8c7e85d53a0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c888404-be59-434e-a19e-6c89f4a6ad93", "sighting_of_ref": "indicator--8d34fd77-c2e3-417b-b107-686e23334850", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4a8628-4c50-47d3-88d3-7b1d2b95f579", "sighting_of_ref": "indicator--8d34fd77-c2e3-417b-b107-686e23334850", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d06f9d-888f-4abe-94c2-369d6f4ed887", "sighting_of_ref": "indicator--c3f862c6-4a3b-4c15-aece-65ed48d4d8db", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1294bac3-7478-4c3c-9493-277811764f89", "sighting_of_ref": "indicator--0d23c7b8-3af9-44d3-a9da-c148c837c8ac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad62386-a17f-4259-8c43-28d50099316d", "sighting_of_ref": "indicator--1b77254b-ab2c-4dc1-bcb6-87697e27c954", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc3d191-57a6-4637-bdff-93caf5666cfc", "sighting_of_ref": "indicator--8ebbbd2b-82dd-4069-93e3-427077460dd2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731a6f9e-41e6-44a8-bbb7-0f95c890795f", "sighting_of_ref": "indicator--4a087c94-af88-47fb-a2af-db178c798b8a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c056f89c-19a9-42e6-a31d-389540b679ca", "sighting_of_ref": "indicator--557398e7-8bde-4827-859f-389eff6ba3aa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9acd86c5-2b13-456e-aa2f-5c312cc967a0", "sighting_of_ref": "indicator--557398e7-8bde-4827-859f-389eff6ba3aa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9df32c-638c-46d0-a628-ba224bb4a3c0", "sighting_of_ref": "indicator--9adcdd0f-0df2-4272-bedf-acbdf736b8d7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26530821-5809-4676-9e7a-4264a23a56fc", "sighting_of_ref": "indicator--9adcdd0f-0df2-4272-bedf-acbdf736b8d7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa03595a-0cb4-4cee-a933-af7615810e75", "sighting_of_ref": "indicator--65fd49e9-82d5-41e2-ab0b-3ea7665e3058", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896b1153-e37a-4f83-823e-d50041aedc4b", "sighting_of_ref": "indicator--b2d593fd-45e7-4e18-b704-b58b33552dcf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b0e097-b9f4-4c5e-82c4-1799ef7a4b1c", "sighting_of_ref": "indicator--854a89b4-9a80-47ce-9afe-b5463696dd3a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388ab72e-b8c9-47cc-a4c7-59aafaad5366", "sighting_of_ref": "indicator--854a89b4-9a80-47ce-9afe-b5463696dd3a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91330db-d5b6-480f-9394-d174f696dac4", "sighting_of_ref": "indicator--6868e54d-95e4-4970-b44d-e2ae73084e6f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef56e94-bd8d-4d1e-bd4c-1556f94acfba", "sighting_of_ref": "indicator--12fdd6f3-5309-4718-acba-f2889aa26ad2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572f6a9a-44b3-4a00-9e89-90f2ec821bc3", "sighting_of_ref": "indicator--f07a12f8-f327-44b2-88e2-9ce73b60c3e7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--362e3bdc-b8c1-4b47-832f-dfa6c1dbe18d", "sighting_of_ref": "indicator--42044b93-4bba-44c2-913e-dc6adad5ab1d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f4aae1-48f9-4d47-8f77-2fd7905b8e40", "sighting_of_ref": "indicator--ce064a57-8567-4741-a851-a9cc94f9d923", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426ef470-431c-4318-bfe0-8e6d5ab2c4b0", "sighting_of_ref": "indicator--fee9b7de-707b-4ed6-8604-c27650fe32b7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17589408-54dd-4fb7-9d0f-3d83a062d695", "sighting_of_ref": "indicator--0d0bcd32-4762-4865-b22d-d36bd051ff48", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989a9d62-19e6-4f52-b0e2-1807f2e28934", "sighting_of_ref": "indicator--0d0bcd32-4762-4865-b22d-d36bd051ff48", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39478660-6462-4e68-b33b-2c428d74b38b", "sighting_of_ref": "indicator--ce01f870-0bbc-4979-9b4b-e2c0b3467ecc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5088c3-37e4-4cdb-bfa1-23d24a062285", "sighting_of_ref": "indicator--64fa2683-678a-405c-9f6f-f0142306d67f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2a3beb-b6ee-4822-9619-8a68e3c204f9", "sighting_of_ref": "indicator--5900fcb3-dd0e-4cb4-9549-711d170c2637", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2499f00-8d6a-41be-8b92-99c2c66138c6", "sighting_of_ref": "indicator--0b541c0d-b340-4c87-8706-9bbc8f3c91e4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8cfc622-d188-466b-8db2-dc4625120f89", "sighting_of_ref": "indicator--8bb284f5-254d-4894-977e-1e02ab3f84dd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf98663-cad8-4da0-9949-ac6b9457a0ed", "sighting_of_ref": "indicator--8bb284f5-254d-4894-977e-1e02ab3f84dd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe7a730-7c51-406c-85e2-e10e0ced5665", "sighting_of_ref": "indicator--27b4bd42-d3ce-42a2-9960-d73f314e79d4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8f538e-3047-4c5a-9bb6-f87e1e94f367", "sighting_of_ref": "indicator--27b4bd42-d3ce-42a2-9960-d73f314e79d4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7dad10-3c00-4085-b106-ddbb3f52286a", "sighting_of_ref": "indicator--bf1e5eb9-195c-44e4-8a06-83bd5080a322", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f873b5-f9e6-4c11-9f27-5bc5cb0d6f7e", "sighting_of_ref": "indicator--bf1e5eb9-195c-44e4-8a06-83bd5080a322", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09a1841-79b9-4e49-aa63-f40f3235a7bc", "sighting_of_ref": "indicator--fa0a692f-83c9-4de2-9825-c67a2b12f99e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0364b15b-8487-49c6-893f-94377b0ddb81", "sighting_of_ref": "indicator--701979e0-925d-48f2-954b-72c98baae163", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944e64dd-1d02-4cb8-9e02-870be3d62d98", "sighting_of_ref": "indicator--701979e0-925d-48f2-954b-72c98baae163", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ff3d57-7da0-4be5-bf15-7fc3e6c66cf5", "sighting_of_ref": "indicator--297c90fb-3efd-47de-9e09-b49ec6d20c6a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d27194e7-7abd-4e6b-8c79-390cb013b9d1", "sighting_of_ref": "indicator--30a1ab66-abe6-4672-ba53-6b27eacf594b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24534c43-7fc8-47d6-a824-ec28ccefb8ce", "sighting_of_ref": "indicator--72fe8db8-80fc-4fed-bba5-5cd3c78d04f8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d17d0c7-9819-4fb6-94eb-fbcc1010bb8e", "sighting_of_ref": "indicator--c9b540f7-af37-4249-a4c5-b4ca451e0c6b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92dd5c33-032c-48f5-9ba1-f6f0d0ea03e4", "sighting_of_ref": "indicator--42dab2d6-222f-49f6-a744-0bdbae105549", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021a5192-2a19-44b4-9371-25c43bf13104", "sighting_of_ref": "indicator--11f77cc2-ad24-46c3-aad0-fdf781bf283d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c1c54fc-e46e-45b8-bb08-f20d4f3f1371", "sighting_of_ref": "indicator--11f77cc2-ad24-46c3-aad0-fdf781bf283d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a86ec2-3480-4954-a923-9e9e89462911", "sighting_of_ref": "indicator--04a10e83-6ec8-4030-be22-04abd4bcae5f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff65e3f-c0da-4397-95f2-099ea3b65417", "sighting_of_ref": "indicator--04a10e83-6ec8-4030-be22-04abd4bcae5f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52646d17-0945-4184-bcd3-9edd3d48e602", "sighting_of_ref": "indicator--639599d0-30f2-4976-b5a8-cc3113c013cd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf118ef-7f32-443c-98a4-38462002c680", "sighting_of_ref": "indicator--18b95394-805f-4a95-8181-684943ddf8e9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae38139-92f0-49c5-99eb-55581fa0f7e9", "sighting_of_ref": "indicator--169ee267-1682-4f8a-94c0-9f22db2ace63", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e366bdb-43a9-4cc1-b6d5-1ef97c906a3d", "sighting_of_ref": "indicator--169ee267-1682-4f8a-94c0-9f22db2ace63", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95db43e1-7ed2-4e93-8b54-8706d9e78f04", "sighting_of_ref": "indicator--a6cbbb31-5110-4b99-8a45-7221e01323be", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3129f8f2-6b3a-495d-b2a2-0c199b7819f1", "sighting_of_ref": "indicator--7212fce2-cc3f-40cf-ac3d-011856a890aa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963433ba-c4b4-40f6-9b5b-3a0a73e98c89", "sighting_of_ref": "indicator--7212fce2-cc3f-40cf-ac3d-011856a890aa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1fee5b-6ecd-4d7b-b65f-35bd3549240c", "sighting_of_ref": "indicator--b058dd1e-c527-4705-ac2c-6fc3fe4a18f4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fdf2e91-0ba6-4344-8f64-4367d5b261c8", "sighting_of_ref": "indicator--90fa26f8-439b-4880-bb1c-b745667ede71", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c464b5-dab0-4237-948e-9081a2d6b205", "sighting_of_ref": "indicator--04d7f6fd-9448-4b64-9d09-cfa431622793", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b0e7ab-eeb0-42cb-b11f-f748624c8514", "sighting_of_ref": "indicator--89493726-ebc7-4673-a6b6-3ca449205ebd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d622b9d-d548-4589-972c-f6eb670d9d6d", "sighting_of_ref": "indicator--b40935e3-edf8-4129-bd1a-4e5bcf978667", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd5ec51-ecd7-43c9-9eda-16a4f8ada9d0", "sighting_of_ref": "indicator--b40935e3-edf8-4129-bd1a-4e5bcf978667", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edcd39cf-7a2d-412a-97de-9630b781b570", "sighting_of_ref": "indicator--08668ba4-ae97-47d1-8d3b-2134037364a7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70cf2c38-329c-4858-9f77-794090f28f3c", "sighting_of_ref": "indicator--dc221d40-b736-4720-85a7-6a11e2832d23", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e3d5aa-bf81-4e3f-8537-8be1f2a649f6", "sighting_of_ref": "indicator--dc221d40-b736-4720-85a7-6a11e2832d23", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d227cee4-db4b-4b68-b847-bf1878349cb0", "sighting_of_ref": "indicator--edf71a10-b816-45c2-99e7-9e5d3675de91", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177a3bb0-0c1d-4d02-a24e-ccbe8a933902", "sighting_of_ref": "indicator--8a9699a1-183f-4bec-9e69-0ee9df38ceb1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906d0e40-329f-4719-a7be-5c2e0ccb4b90", "sighting_of_ref": "indicator--344f0ea4-a935-413b-af4a-f8369ef6a0b6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd81a3e3-b643-433a-9ce8-4cf14956d902", "sighting_of_ref": "indicator--8222b851-383d-4454-b035-be7ea0c119ba", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ef736e-e2e6-442e-95f1-23bb1c9a95aa", "sighting_of_ref": "indicator--8222b851-383d-4454-b035-be7ea0c119ba", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e21524-f2b1-40fd-ba84-9878c9dc96c9", "sighting_of_ref": "indicator--c0f7ce20-4647-4e97-ad09-3530da36440f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8bceb6-05bd-4d90-9259-cb0071cf384d", "sighting_of_ref": "indicator--db786f28-8b16-4092-a1f4-8711e54efdb1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba331ec3-22d0-4344-bbe4-8e78e1e59504", "sighting_of_ref": "indicator--d97b38b0-a068-4209-ab98-8ea046dd15e2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822925a3-3fc2-4410-9e70-32ab3f5f6336", "sighting_of_ref": "indicator--d97b38b0-a068-4209-ab98-8ea046dd15e2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1cfb49-ca34-443f-894b-1861175005b0", "sighting_of_ref": "indicator--6a401c71-9658-489d-914e-d8735bbe8d50", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc0f58a-b3b9-440d-9f97-381f3868b4ff", "sighting_of_ref": "indicator--d157451e-4ecc-4187-9755-2a0a7b847c3f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--facc14a5-865a-4d9a-95b2-cece45fb9a8e", "sighting_of_ref": "indicator--987e0c6e-1a6e-482a-953b-9162319d6c10", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d6aaec-7270-4b52-aa7b-ce2734af2acd", "sighting_of_ref": "indicator--987e0c6e-1a6e-482a-953b-9162319d6c10", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94dd0e1-3f69-482f-b913-b82fd66c4ff2", "sighting_of_ref": "indicator--987e0c6e-1a6e-482a-953b-9162319d6c10", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abf9368-1bc8-4d8e-ac7b-af7d8f7a1c40", "sighting_of_ref": "indicator--554ef1cc-22cb-4a6b-a010-fe1e18ffa243", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79f1323-fa8d-4116-ba1f-4ddd763d058e", "sighting_of_ref": "indicator--7ab918f6-44dc-4fc2-8195-6c6a747a491a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6acd56-4325-4cf2-b3ac-2c52a5a07c29", "sighting_of_ref": "indicator--7ab918f6-44dc-4fc2-8195-6c6a747a491a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a228ba98-102c-4c11-82af-bb040e6bb0e0", "sighting_of_ref": "indicator--314a185d-a55c-4728-bbb7-cc8ffbaea8d5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77ffbbb-fe00-4f8e-8125-74d50939321a", "sighting_of_ref": "indicator--3a7c8bd6-e212-4170-89b5-84e5d2eea789", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3956a691-cfd3-4ed4-8cda-8022fe890c68", "sighting_of_ref": "indicator--c25b6fc4-c6f3-43c3-8e5d-78eb32c327d9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673996e7-0bf6-48fc-b58d-525b40fd1d96", "sighting_of_ref": "indicator--c25b6fc4-c6f3-43c3-8e5d-78eb32c327d9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e7bd40-89a8-444f-8d3c-79dee2fd2788", "sighting_of_ref": "indicator--c4a52c69-1673-4c47-b5c9-ea49a18b791e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c0d720-0b45-44ad-8855-27c5914c9da9", "sighting_of_ref": "indicator--d0ff115d-54ee-483c-a608-3ee62c6b19c8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf2682e-48eb-4382-8e96-a8114c64a0a3", "sighting_of_ref": "indicator--6e9d266a-2d0e-4631-a20a-c811d8934c4c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5facd7-e85a-4f00-9513-b3d8b14a5b9a", "sighting_of_ref": "indicator--e2aa0059-fc35-4f96-904d-caa8bcb88618", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d58ebf-1241-437b-9e0b-6af4f7204ebc", "sighting_of_ref": "indicator--be38e8c3-194f-4116-a203-45165c13b775", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec92b959-f7dd-4079-aa0d-2682a016f337", "sighting_of_ref": "indicator--3c479e91-3b43-4483-98b0-0c2984624261", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e387ce-e5f5-47d7-99b6-73b228058d06", "sighting_of_ref": "indicator--3c479e91-3b43-4483-98b0-0c2984624261", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16427c93-d785-4de1-88f0-80601befec7d", "sighting_of_ref": "indicator--5f20b132-131b-4033-b9f2-51577f3839a1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63eca19a-3076-4e7e-be46-4b9dc5cb6c74", "sighting_of_ref": "indicator--94894585-22e6-4007-8ada-75ac242bf66d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0cf62f-9e88-48b2-88a7-d4abee8b37a5", "sighting_of_ref": "indicator--6a738b60-dcdb-42ae-8da3-62050c09cfef", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31118a5b-5e1a-4dec-bc52-7d5b956e1461", "sighting_of_ref": "indicator--0efcf632-9340-4b1d-8dd3-e51c24e3932c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17773a9d-2aa2-4604-b9ef-e227b61450f7", "sighting_of_ref": "indicator--9255c264-7ec6-4b6a-8a70-c4a961887ee3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5621826-81e1-4e33-aa1c-6c0dcf6103ba", "sighting_of_ref": "indicator--dbcd98b9-71bc-4192-9acd-9e6111019d3a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6291f078-ee5f-4dd7-8704-99b751669122", "sighting_of_ref": "indicator--1a55bf01-aa42-4f41-838a-b1f7adb67a6f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37eaf4b7-b3a0-41d7-816c-a4a09c896c83", "sighting_of_ref": "indicator--2cb2ac42-d00a-4342-8752-b5db757f5e99", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b040fbd3-b272-4e80-8487-53ed6f0e5682", "sighting_of_ref": "indicator--5e637db9-2694-4550-972d-a2f1def96953", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d3c173-5f48-445f-b0f3-d2ff612bb60a", "sighting_of_ref": "indicator--9d4db6a7-f51f-4a2c-a886-6217b44c7ff5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100f9d08-629f-4380-9584-4c33e11e4587", "sighting_of_ref": "indicator--ddb4659f-3588-4e15-b379-79592b32429f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8164cf-ebff-4f4e-9adb-53cb3a1528e4", "sighting_of_ref": "indicator--7d026d62-b31a-412c-adef-bca80cba9c40", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e268ed27-3729-408f-b6dc-f2e2e4d8a7c3", "sighting_of_ref": "indicator--f8854041-9249-4be7-b004-12407587c88f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b73479-8185-45d0-91df-46fe84021e69", "sighting_of_ref": "indicator--b272f892-eba9-4141-ac23-a98673215c13", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0215038d-7511-49c2-bc67-9b22039071e3", "sighting_of_ref": "indicator--f8e44aee-8fe0-43f4-8996-dee54db41047", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c75ce1-6820-4073-bc75-b2cfa892e88c", "sighting_of_ref": "indicator--b46da4c2-34ee-4b9e-9937-1f97054506c8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4daeb730-11d7-40f0-a0b3-f31c21ca4b75", "sighting_of_ref": "indicator--e6d7d351-bc39-4f73-bdc1-bb8ba1c9e0fa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd0fdf6-32ee-47e2-b13c-cd6edbc7b2ab", "sighting_of_ref": "indicator--efc0d1e7-6ab7-4079-9cad-b42cf34bca39", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caede0a9-56a6-47b8-a6b0-ed193f6f8872", "sighting_of_ref": "indicator--e85d8e81-0b7d-40bd-97d0-6b13093b7b8f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45912a9-0cad-47f3-a73b-abc04f1dfd6b", "sighting_of_ref": "indicator--a5dccac1-1a9a-4928-a3f3-d007a6eb6973", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ddb8cd-b866-4cc8-bc9c-4e2a5fa58b73", "sighting_of_ref": "indicator--00797ead-1066-4412-8443-0dae94e5fbec", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ec5844-1adc-449b-b381-ad9eaf3e5cab", "sighting_of_ref": "indicator--745de6a9-2103-4d0e-ab84-7de76dc97d51", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0209825c-30d5-4198-b37e-4ddbae4686f9", "sighting_of_ref": "indicator--745de6a9-2103-4d0e-ab84-7de76dc97d51", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795904b7-954c-428c-87f5-add1fcb921bb", "sighting_of_ref": "indicator--8661f67f-e892-4551-8b35-4bf539bc7f1e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03df3347-20ca-4ad6-a2cf-16c0ca71e869", "sighting_of_ref": "indicator--294b56a5-0d68-4495-a6b6-405abf81eca6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75788a61-395e-4f1f-aee2-3c287849e849", "sighting_of_ref": "indicator--294b56a5-0d68-4495-a6b6-405abf81eca6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7ee773-2a05-4858-92f6-4199ab5ef28c", "sighting_of_ref": "indicator--7e89c255-f1b7-469e-a64a-c46384fb87ab", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152216bc-d91f-4e35-a8fe-3ff0a7bfd3ac", "sighting_of_ref": "indicator--aa59bb42-e482-4fe6-855a-81fb2f1b5e32", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77b1cdf-a8f7-4a64-ae7a-d76ede53f444", "sighting_of_ref": "indicator--aa59bb42-e482-4fe6-855a-81fb2f1b5e32", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2fb458-1675-4178-87d0-c4859470d430", "sighting_of_ref": "indicator--5d65acc5-7cae-4790-8cc1-5c88af3a36a7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd786fc-6dea-44be-8e9e-ca4c467e376e", "sighting_of_ref": "indicator--06c018dc-db42-4e71-9cb7-fb39b34f8f83", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1690a84-58fa-472d-b418-06563259f336", "sighting_of_ref": "indicator--2b9984c6-2a60-4396-90c9-d23c055f8a49", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b366e886-acab-4349-a77b-4d22c9703842", "sighting_of_ref": "indicator--2b9984c6-2a60-4396-90c9-d23c055f8a49", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360c2263-fb5d-4aeb-a8d9-b74f8acb282d", "sighting_of_ref": "indicator--d88b8481-aa7b-4d52-a75d-6019c7968cf6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b3bfef-5388-4f3a-931c-2d1ccf6b09f3", "sighting_of_ref": "indicator--ea26aaca-8956-4554-ad28-d3aa41c6084c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba970a8-a331-42ea-8ca5-e8a40dbc5e40", "sighting_of_ref": "indicator--16da3a2a-8698-48c9-afcc-22984e161b83", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b006a316-9ea9-4cf5-8bc2-5798bf62e3e8", "sighting_of_ref": "indicator--dbf48fc1-eace-4dee-bb96-3ce022c94294", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0637f3-2a9c-49f0-b1c2-beff44942a40", "sighting_of_ref": "indicator--87f66598-39af-49ed-8c11-d7357a032eb0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c047c86-9862-466d-9cbe-2804a67169a3", "sighting_of_ref": "indicator--e161aad4-3f80-4037-83e0-f0adf1ddee7b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eea887c-42a6-4ddb-aebf-ec89e69a256d", "sighting_of_ref": "indicator--e161aad4-3f80-4037-83e0-f0adf1ddee7b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4430c45-b916-447f-8ebe-cc130e45b867", "sighting_of_ref": "indicator--f23bea18-1825-4b88-a9f3-90141f3dea74", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--402f500f-7d4f-4b8e-95ea-b6ce3bff93b9", "sighting_of_ref": "indicator--575bad08-a076-41cf-8d68-173774031032", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f8a781-9082-4c80-82f4-7857fb4eaf1f", "sighting_of_ref": "indicator--575bad08-a076-41cf-8d68-173774031032", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97274152-d843-4c68-8337-4b6e7378296b", "sighting_of_ref": "indicator--1f341d97-6eab-477c-9c35-02e2af39eb35", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76af40f9-df8a-472a-a772-e3a1f6822304", "sighting_of_ref": "indicator--6ed6ed9c-b19e-46d8-b530-4ea9006c2a60", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36f0685-b6a1-4e91-9743-a4a003ff31bf", "sighting_of_ref": "indicator--0a584a9d-5b62-432e-a28b-1d0a44c948ff", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0b8f0a-452e-4036-a237-a7f2547d8753", "sighting_of_ref": "indicator--eed8d861-3187-47a6-ae2f-2a2b20a6bc59", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d54ae2-1f57-497b-92f7-75236a9f914d", "sighting_of_ref": "indicator--eed8d861-3187-47a6-ae2f-2a2b20a6bc59", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e999889c-7d9c-40f2-8aa8-fdb541bf37e6", "sighting_of_ref": "indicator--eed8d861-3187-47a6-ae2f-2a2b20a6bc59", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dcf425a-bdaa-4a05-adfa-5b50112c0fd7", "sighting_of_ref": "indicator--4a30a0ad-bcb5-48a9-a65b-d99889d55296", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2bb429-0f82-415c-b36e-cfd792397ec0", "sighting_of_ref": "indicator--4a30a0ad-bcb5-48a9-a65b-d99889d55296", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa3479f-2a4d-4432-a90c-5afc1ada3a92", "sighting_of_ref": "indicator--1e41b0f3-5423-4c1e-9c7a-301da07573ae", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1952e389-e852-4916-af6c-2ba1b0d39b39", "sighting_of_ref": "indicator--161c6535-5d9e-4ef1-b05c-74c08fa39549", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84980b6-60f2-4050-835d-a90541fce1a7", "sighting_of_ref": "indicator--b6b0a05c-479b-47e8-9a3f-15457d7a0987", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b5e45a-a0ab-471f-ae92-ac1b31906dcb", "sighting_of_ref": "indicator--991a2e58-4e4c-4fbd-955b-a772e0240d87", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb81020-78ee-4046-990b-94e1a568e16b", "sighting_of_ref": "indicator--38f2e5da-e967-4c12-befb-0558f5a5e4ad", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b413aa5b-0404-4d88-ac75-bf2625225979", "sighting_of_ref": "indicator--913fdd91-f3eb-4618-88cf-6d94484dc304", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea99755-9f93-4a4c-a097-8797fc9f4dd6", "sighting_of_ref": "indicator--913fdd91-f3eb-4618-88cf-6d94484dc304", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f221e4-cf0f-4b90-9a45-909284bd7743", "sighting_of_ref": "indicator--4fe3c478-5d55-45c7-b05d-d7b01f6746ba", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4f1baf-b3da-4680-88c6-44f3dd1caf44", "sighting_of_ref": "indicator--af3e78d2-650d-43f6-b32e-571004cb161f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27540e8-e1ec-4cff-b2a2-cc6aca82a190", "sighting_of_ref": "indicator--c95a4f87-1754-4a6b-af93-422e47c8abcd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31f613b-bc49-4254-8916-bacc04896c50", "sighting_of_ref": "indicator--2ac7be04-564d-4ebb-9a9c-fd15d560c159", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f370d63-f0ae-4bba-bc63-e92ad6626518", "sighting_of_ref": "indicator--43130af6-7eee-4eba-8303-c933656c82aa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb21ecb-82d7-4a9b-9998-e035a0924217", "sighting_of_ref": "indicator--43130af6-7eee-4eba-8303-c933656c82aa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe042c6-0d5f-431b-abed-407a84fcb52b", "sighting_of_ref": "indicator--244734b2-2c96-4ddf-a408-5f86f87974a1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cfd732a-cdcb-4eca-ab0e-a0a3357e411f", "sighting_of_ref": "indicator--9188b8a5-0fdd-44a4-a5da-5171da198f37", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5778420b-57ff-42f9-815b-6e341a088313", "sighting_of_ref": "indicator--99d6ba14-16c7-4dfa-bd24-6d90f800f566", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1808dbb5-bac2-4fe1-91d0-4e7b1c49abed", "sighting_of_ref": "indicator--99d6ba14-16c7-4dfa-bd24-6d90f800f566", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611f9ae1-a7f5-4e40-b2ca-0acb54bd6fb4", "sighting_of_ref": "indicator--e0cf0b3c-e608-4471-bfe2-2555a170519c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20773fdf-83cc-4b49-807b-3b2ff6a79f41", "sighting_of_ref": "indicator--7c8baddc-8913-477f-8e11-7832f03cfcb1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa34a510-d29d-4466-84ea-c96cc1297078", "sighting_of_ref": "indicator--6a461dda-249a-4e55-8d61-469543ea6551", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4a4338-f5f2-49fb-bea7-85bd12734fec", "sighting_of_ref": "indicator--074c5c31-2beb-4365-8001-0291b5e52f5d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7578f120-8ee2-4bfd-9243-a469563ccc06", "sighting_of_ref": "indicator--160cbee4-6fb8-43ca-9187-25c6f8a71c65", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d16ab37-6904-4ee8-8372-b31b2601cc45", "sighting_of_ref": "indicator--c1a2d621-9f07-4291-81a3-4e79b1c005a0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae6a047-1a44-4a88-8c2f-d8d64262dc8f", "sighting_of_ref": "indicator--13a8d251-3cc7-4e69-a00a-3e55d031c42c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89dd0066-c001-4672-b185-4176de315ec7", "sighting_of_ref": "indicator--4fc7dbc6-884a-4aeb-afcd-b3aedaca8cf9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3c9148-777e-4bf1-bdba-a56c5caaa3a8", "sighting_of_ref": "indicator--95688412-42d2-4c53-9b7e-12df244d0a41", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7f75e6-035f-4223-8410-f8d404027651", "sighting_of_ref": "indicator--fac91b6d-de7b-4e48-88e7-c0e363a41985", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44907fef-6e9d-43cd-b1b3-77ff05a2c38b", "sighting_of_ref": "indicator--b2ec004c-2825-47b0-b198-c558bc764449", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457c6086-e999-4eee-9643-55fcdf520042", "sighting_of_ref": "indicator--98ff8e83-30ed-4eb2-9129-e06c8dee0e81", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405b1427-7c6a-4f80-94df-015032dd20b1", "sighting_of_ref": "indicator--91fa1d87-0574-4191-b690-9afff0ba9acc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9675e9d-c7ee-406f-acd6-433bf18ae8cd", "sighting_of_ref": "indicator--594415b5-2ce1-4bda-ab1b-24bb0481393a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d9222d-c946-43bb-a195-4e8be0641821", "sighting_of_ref": "indicator--8ee52fd4-062e-4777-80fd-6e58bff20baa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f075833-bdfa-4a0f-9498-33b9c522c929", "sighting_of_ref": "indicator--dfac8a9a-5ff9-4b7c-8c53-26c25e62bd0f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f86549-e87b-4ea6-8ad3-0d0a0754cb85", "sighting_of_ref": "indicator--dbc065a8-9b78-4292-8240-f7f2d84ea8d7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b061d8-1a9a-42b4-aff4-e1e0c9605d2f", "sighting_of_ref": "indicator--de070f70-941a-41bc-8717-4107fa2f68fa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94363ea9-b548-4ff3-8c01-97403fb127c2", "sighting_of_ref": "indicator--08e69be2-af21-485a-aa3e-a9097b7df722", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e7d968-2a8f-4828-976a-8112b3732e56", "sighting_of_ref": "indicator--08e69be2-af21-485a-aa3e-a9097b7df722", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71fee6e0-28eb-4050-a2c2-f652dea06a98", "sighting_of_ref": "indicator--1982e569-5819-4b0b-9309-d795b7204ea0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5951a5d3-0c43-4ad8-9fbc-3251234fa013", "sighting_of_ref": "indicator--4fe28f96-db27-4e30-975f-48fbe1a5562d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce535f00-2607-4371-90d8-18b52b879812", "sighting_of_ref": "indicator--f25f2c0f-260e-4c14-b964-bf973b86f08c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2fe61c-ee36-408a-a04f-eaa142ab95b3", "sighting_of_ref": "indicator--f25f2c0f-260e-4c14-b964-bf973b86f08c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edea0d92-dbfd-493e-a307-e6cd00e871fd", "sighting_of_ref": "indicator--b0dd355b-b3f9-4826-952b-3ee64d74f39a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a53f4f-762c-47c2-b6d9-f7648100f916", "sighting_of_ref": "indicator--81bd1c7b-d0ed-4fa6-b77a-8e2f70af7c29", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d4d3b4-26c8-4140-aad5-ce1f7d97f840", "sighting_of_ref": "indicator--47e5f30a-b22a-41fa-baa5-213ee7666b35", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38359a83-c0e1-4294-9a19-8664a40947cc", "sighting_of_ref": "indicator--1e1391fc-e586-4056-a1c4-3aaa38c22025", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb322bca-e89c-469f-ae07-0b78e1d9833f", "sighting_of_ref": "indicator--0f8e1522-841b-475c-aa51-2a96421f9a1d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a032495-4e61-4b44-bf26-22cc3e99494a", "sighting_of_ref": "indicator--0ca3d03e-80d8-4e11-9e74-6874c1ebdca9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aaf0ba0-f369-4bd7-b8c3-1083abc94d46", "sighting_of_ref": "indicator--aad03c14-1288-4603-a812-2f3959cedbc6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf84254-f9ce-4fdd-a868-d6bd4668787f", "sighting_of_ref": "indicator--b575cfe5-1cbe-4c42-9a5d-9bcaaafc2b93", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bec9529-56e0-40f4-8164-3a80afdc7ade", "sighting_of_ref": "indicator--b09efeec-afbb-4660-b10b-3933fb486bc6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e50478-9274-414f-9ec1-5de2ba4e2390", "sighting_of_ref": "indicator--7b0fdae8-13dc-4318-af05-17c2374fc291", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ff6927-4ee4-49e3-bdd2-44b9252b6dac", "sighting_of_ref": "indicator--2c1811c6-2436-4322-9d14-11939b89d547", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57bac164-fb67-4195-8974-3a8009fb231a", "sighting_of_ref": "indicator--68ef8773-694e-4cd3-a61c-747cc75a7ba0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ebfd0f-5aee-4e7a-8850-4a74701a4d7c", "sighting_of_ref": "indicator--015e32cf-3135-405f-ac7a-4b95dc3448a4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847d89c8-5ab8-4f67-8f18-3a38662bdc87", "sighting_of_ref": "indicator--015e32cf-3135-405f-ac7a-4b95dc3448a4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51c3b2c-2f9d-46cb-a7a0-557552cdb6ea", "sighting_of_ref": "indicator--222682a9-a79a-481c-b047-b73f5fd5db11", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2639a5ad-feb3-4365-9b22-d373ed87438e", "sighting_of_ref": "indicator--bfeef63b-4c02-4477-8b8e-af6d11851ca8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c99f464-2bda-4bca-821a-709b4da6063e", "sighting_of_ref": "indicator--ce5c979a-2ea9-4aa7-ba70-9160fdfa797c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80af219f-b4e5-48ef-92c1-ef73bb3ab66d", "sighting_of_ref": "indicator--333ad516-5dd5-4bc5-9126-5ef541c03f36", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80d79b1-e0a4-4737-b81a-0fc43b7224bf", "sighting_of_ref": "indicator--333ad516-5dd5-4bc5-9126-5ef541c03f36", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8df7d97-4815-4aef-a27e-7079d1a0c2b0", "sighting_of_ref": "indicator--37be6c95-1383-4398-befe-985968ab3e42", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6339710c-e952-4d69-9801-a3c60804b58d", "sighting_of_ref": "indicator--be780036-c129-417b-8778-032932c31b60", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35298ab8-a349-4644-8f6b-9d4d911dad69", "sighting_of_ref": "indicator--ad76bced-408c-4053-8bf8-b5b7b17bf1a3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15764e32-e451-41dc-b9c0-5221de1ceb29", "sighting_of_ref": "indicator--a7203fbf-35b0-4c7f-ae93-82438dd96de8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d2d614f-1595-4fbb-abaf-62274c15b579", "sighting_of_ref": "indicator--9da3f935-1bce-46db-84b7-f22a6fd1ee31", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66cc028d-1182-450f-ae3f-ff9038768baa", "sighting_of_ref": "indicator--994f5528-e103-4411-b773-967d37149639", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309a5bc9-7b88-481d-bc39-55bf3da9bdee", "sighting_of_ref": "indicator--945038cb-f485-4a83-97cb-e8a30e338d20", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd3018d-bf93-4c87-a56b-6392df2dfa8b", "sighting_of_ref": "indicator--b72abcbc-afa1-4707-afdc-91b37b73c1d8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7da83d8-4287-4b3c-8c86-f80a80d70810", "sighting_of_ref": "indicator--849d8cd9-ddca-45e1-8ab0-03fdad3a4be9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6e8aea-6eee-4a61-80e0-1d49058f3b84", "sighting_of_ref": "indicator--3249c082-6774-478d-864c-340543877daa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1d8163-068e-44dd-943d-245377bc2f24", "sighting_of_ref": "indicator--caf6a8d0-0b1c-498a-bbf8-91619ebf7ec1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e29c034-3b80-4178-bdb1-6ce46690df5f", "sighting_of_ref": "indicator--b7acd720-d986-43b3-bce6-683a7bd8ceb5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0516613-ee49-4eb0-8dad-063315b4dc5f", "sighting_of_ref": "indicator--1966e321-af1b-4b9c-ab34-f96904ec8f04", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d969a78-12dc-42ff-927e-9b403ec60865", "sighting_of_ref": "indicator--1966e321-af1b-4b9c-ab34-f96904ec8f04", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40737eca-938d-4e19-bc4c-1b7d9f20cf0e", "sighting_of_ref": "indicator--923da41b-6948-4e2d-ba9f-7cf2b77ab781", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1796d595-0d4f-4e5d-8e2e-9a1a9380174e", "sighting_of_ref": "indicator--b48c3def-1976-4a60-9fd5-7bd0c56b19e7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdace40-292c-46fd-9b71-ab8f08c7c5e2", "sighting_of_ref": "indicator--b9820c95-7b4f-4d12-b6d3-3c4a6cc91e52", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675a9336-57dd-4015-be36-091e314ae5d5", "sighting_of_ref": "indicator--b9820c95-7b4f-4d12-b6d3-3c4a6cc91e52", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a33aa0c-91de-48c3-986f-96b8df08f894", "sighting_of_ref": "indicator--f273cb82-79a7-431a-b727-932208af7bae", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd92710-0da4-4eb8-b4f9-f870514f7627", "sighting_of_ref": "indicator--fb63c7d6-ea23-4f6e-b006-77411278a6fd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3b377f-1342-4af7-aace-e546cc148262", "sighting_of_ref": "indicator--530a4e9b-7848-4566-b9b4-ae6a7cfcc22a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60af2f89-2293-4c43-a201-84a1faf8111d", "sighting_of_ref": "indicator--9fde4e0c-7c9f-406c-adda-5aedd61c697d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b57b4cb4-b157-4878-9d97-88bf3bfa9178", "sighting_of_ref": "indicator--9fde4e0c-7c9f-406c-adda-5aedd61c697d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcb43e5-1a8b-47b1-99ab-80b8e3790eaa", "sighting_of_ref": "indicator--a9857493-cb5d-4f5e-b4a2-bae1bffdca57", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8ffda4-fa19-4ca3-8518-0320669c1e0b", "sighting_of_ref": "indicator--8627c50e-f659-47d3-8ac4-444e5ca6ee9c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5367fea7-238d-461d-bcee-a5fb49ea0956", "sighting_of_ref": "indicator--45a862fc-7313-431a-92cd-70d27e8a8de2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7648b7f3-6fb1-4ec9-8564-4d2c263fee2f", "sighting_of_ref": "indicator--0d815ea0-0a71-4954-941d-f56d0b5d7c28", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d16b3992-7bb8-4cee-85c5-cfd79788a847", "sighting_of_ref": "indicator--27e778bb-2781-45cd-9e95-a2850a2b1917", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7c09e9-ae78-41a1-8806-71040c44c10e", "sighting_of_ref": "indicator--db3db57f-cdf1-4995-9844-8434f23a0a4f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d5fafd-1f22-4fcc-bec4-eef16dbc887b", "sighting_of_ref": "indicator--3ffff750-7575-4c8f-aa9b-cb77c63b9dfa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b1da28a-0475-470b-a09b-c0f2384fef6a", "sighting_of_ref": "indicator--98de3a2d-dc38-49e6-982b-c966e8d88b19", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4108cecc-9ae1-40ca-890e-ef0abbda511a", "sighting_of_ref": "indicator--17049bd8-bc7d-467c-a28b-36c9130e561a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a628a60-9994-46ec-a832-aeacf6a772c4", "sighting_of_ref": "indicator--e850888e-b37f-44a5-9f88-aa5703564446", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260d2994-81e1-4599-ba38-896f46575d19", "sighting_of_ref": "indicator--633409b3-a124-414d-bcf6-c6268ed7ad8d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d08b1ad-0231-4ce3-a2b9-b4d5b5817150", "sighting_of_ref": "indicator--633409b3-a124-414d-bcf6-c6268ed7ad8d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5040d324-86ba-4d14-9eb5-47bbe6fb1869", "sighting_of_ref": "indicator--ccc47354-64b5-401f-a513-a16b9a929828", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655ffb44-107a-400e-9736-2705452c5d98", "sighting_of_ref": "indicator--a13c7aab-a6f5-4a6a-bcdd-34965513d048", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b2931a-1b3b-4c75-bdc0-c6e275038d33", "sighting_of_ref": "indicator--5c93f890-551b-4a63-9f92-bd04125bdd45", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b965d8f-b871-4605-a4b7-c4ded306a1b9", "sighting_of_ref": "indicator--bfdec399-a35a-4f19-b167-5348a4cbb36e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db5cf3b-3b89-419f-b700-1addc00b87d5", "sighting_of_ref": "indicator--97ddd210-66e1-4098-92ff-36f2ee5a6890", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1aa1509-e604-44c8-9cda-354e508f31b1", "sighting_of_ref": "indicator--7fa7e450-ac2b-4a66-9037-8b87a4a0d6f1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8386430c-5821-412b-acbb-a93a416d4df4", "sighting_of_ref": "indicator--955bf5b4-fe0a-422c-93f1-d707f6bea780", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9f030c-af39-4cd0-839f-e1f8b0f67c1f", "sighting_of_ref": "indicator--9f0ecec3-57c8-48ee-8d74-5248dbb7bc0d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da9e588-f72e-4e20-affb-d07be9a289fe", "sighting_of_ref": "indicator--5f2da2ef-b482-4c6d-bb39-f554d83575f1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71cb0a1-576a-491b-b4c9-5fee11ac780b", "sighting_of_ref": "indicator--9ea4bbaa-7153-44c2-8ff5-339852949059", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a050d24-f3f1-4288-b2b5-30418413917d", "sighting_of_ref": "indicator--e23758da-48af-4dd9-9a17-646cc87ccbd1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8db456e-6a43-461e-8804-3d7ed90e076f", "sighting_of_ref": "indicator--bcab8b66-a7c7-4a3d-a878-b34ca54ed12f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa663af-67fd-4a63-aa50-2bb036392c48", "sighting_of_ref": "indicator--54140cc6-5f1e-47ab-8786-049d997c102c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7302cc45-2e89-41dc-b065-7346b0823955", "sighting_of_ref": "indicator--a50d65fc-e0a1-423a-95af-516c04bfc977", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85cd8a61-762b-4701-bc6d-9aba19f23db5", "sighting_of_ref": "indicator--8fd95f0b-b47a-4d1c-b161-fc7063972149", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33cca2e-15dc-4c45-9009-72136a5ef3a3", "sighting_of_ref": "indicator--1ca940f5-d757-4f24-9d7a-141e42f24d2c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a149f28-81de-4aff-863c-c64427862d39", "sighting_of_ref": "indicator--27d1b95e-a73f-4878-8e40-55caaa98127c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb17b3c5-a532-4bee-9ae1-3f6f4f96b611", "sighting_of_ref": "indicator--7a82e0e5-6f40-49cd-9ba4-ed1ecb0d1cd8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bccb2cd-1401-4c1b-b905-1f7cc91340e7", "sighting_of_ref": "indicator--d0d97d8d-375b-46b4-9d5f-74253422934c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1bdc1f-50e2-42ae-a051-7521ee657abe", "sighting_of_ref": "indicator--d0d97d8d-375b-46b4-9d5f-74253422934c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4691171-409f-45a0-8cff-07bc1f4d397e", "sighting_of_ref": "indicator--1c226a77-0f4f-46ea-81d2-a832abdf6fc1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45bf067-9c68-44e9-87ae-25cc011d32c8", "sighting_of_ref": "indicator--1c226a77-0f4f-46ea-81d2-a832abdf6fc1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34bb0035-f42f-41a2-83b9-37db7fb94ccc", "sighting_of_ref": "indicator--766de900-e04b-43a2-93b7-241a8a77616d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3476ab28-96c8-416a-b2af-2a8ccfafa669", "sighting_of_ref": "indicator--11b29b2e-b391-43ae-8097-5f1d7c782ea0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e4c28c-83eb-4d9c-b201-348381656993", "sighting_of_ref": "indicator--11b29b2e-b391-43ae-8097-5f1d7c782ea0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d67bdcd-96e9-4f18-addc-6ce186216107", "sighting_of_ref": "indicator--6868febe-2185-4a42-9cf5-48553170a846", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6062de90-fd06-42a3-8c16-43fb3f8bdb19", "sighting_of_ref": "indicator--83fd3777-1e71-4157-92d8-daa4d1e90042", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeac0ac6-294e-4112-9921-6ac64d8065f5", "sighting_of_ref": "indicator--d0817d71-8a3b-4e22-a13e-0eb9496f422b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d8512d-a1da-4d48-9180-e6fb2735efa2", "sighting_of_ref": "indicator--d0817d71-8a3b-4e22-a13e-0eb9496f422b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be58b86-81bb-4faf-a90f-60d7ffcea27e", "sighting_of_ref": "indicator--21bd1fa0-6bf7-434a-8eff-a575b34dbd14", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e58ef08-d963-489c-aada-f69160a499d2", "sighting_of_ref": "indicator--21bd1fa0-6bf7-434a-8eff-a575b34dbd14", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbb5584-f65d-4aa1-a5b2-5b45927e21a5", "sighting_of_ref": "indicator--ab0606b5-7213-4a24-afe2-2e692b1d5bd8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e3a1d0-f997-46c4-837e-5999a20b0a91", "sighting_of_ref": "indicator--7a413cc5-dfe1-420f-8b45-76073d5be500", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193697f1-4d04-4265-aff1-5de2397c5b06", "sighting_of_ref": "indicator--7a413cc5-dfe1-420f-8b45-76073d5be500", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa45c2d-1a29-45e1-ab81-70f2c6040700", "sighting_of_ref": "indicator--47fbd192-5e22-4c92-86d3-bdab80e4db58", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f85bf90-fc23-4f82-a478-7d403d03ab76", "sighting_of_ref": "indicator--a24275fe-dee5-4078-b8a7-7778b2fa3869", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d08a866-e77e-4f2c-b25d-ebc995491726", "sighting_of_ref": "indicator--eff6a766-c646-4a82-86d0-4b88b78353d8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f6e59f-bff8-4be4-92aa-99818ff40a44", "sighting_of_ref": "indicator--14c678fc-f850-4526-973e-571b9c276c32", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a62453e-bad1-4f2c-aeb0-a0e85f8197c5", "sighting_of_ref": "indicator--14c678fc-f850-4526-973e-571b9c276c32", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726f8fe6-e34d-4fba-baad-5af3aa5a86ff", "sighting_of_ref": "indicator--14c678fc-f850-4526-973e-571b9c276c32", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b29b69e-4b2a-4779-956d-6b19c3855ff6", "sighting_of_ref": "indicator--3befb936-20f0-40ed-a495-fb3ca8f1e395", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fae8a18-2c5b-4b39-b73d-5cc137ec11fa", "sighting_of_ref": "indicator--3befb936-20f0-40ed-a495-fb3ca8f1e395", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83142fc-5401-4dab-b318-9322b04b3d32", "sighting_of_ref": "indicator--fcebd976-68bb-4b11-a559-ebdd2ffe341d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db018e5-6655-400c-a08d-900c652fd684", "sighting_of_ref": "indicator--ab74edb8-5b32-47c8-846b-03fc109cbe8e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af32816-a203-4e8d-a295-128f1e8255ca", "sighting_of_ref": "indicator--b8827658-2e0f-416d-954f-db8391595d53", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e21e5f-212c-4bb6-ad84-68d1a1011c65", "sighting_of_ref": "indicator--c6702c61-74e1-4842-a1c6-c9d1163de380", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20930fa4-a634-4deb-9384-92000c4da208", "sighting_of_ref": "indicator--8da0a114-7342-4b86-a1ee-f823a4ab1862", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604d7677-26c3-4959-92f3-8108a9d8a2b9", "sighting_of_ref": "indicator--afc64224-0b9b-4537-8b74-12c1817dddb7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba684edd-b3dc-440e-8ca3-c7c459a5d29b", "sighting_of_ref": "indicator--a43a9572-48bb-431e-911b-b27a6ef6c655", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085cb34e-065b-4598-b5c6-0f604507efbb", "sighting_of_ref": "indicator--53b18b1c-face-44d1-958d-3f7bee47fe56", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f59377c-39c7-467a-ab21-8b6e52a13fef", "sighting_of_ref": "indicator--34bf2c55-2c76-4d60-814a-e3d1480629c1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93527500-31ff-403b-9789-659570ce3831", "sighting_of_ref": "indicator--3692b132-9f87-4837-8546-ae6d50b1effd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85cc0ee2-4b7a-40d0-ab28-7ab4ebf476d7", "sighting_of_ref": "indicator--66ac4633-508b-4c6a-9f3c-31ba85e2744d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff70a19f-ba45-42a1-aeae-82da26dc2a36", "sighting_of_ref": "indicator--31cd9cc9-51b7-4305-af7e-6f9fa23fd758", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d3c629-ccd6-4ffb-af06-341ae594fb68", "sighting_of_ref": "indicator--a1bec776-4cf5-405d-b65c-50804df5755f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--398d2bdd-d438-4541-9707-e8054d75a5c0", "sighting_of_ref": "indicator--210829e8-1876-4087-ba1d-42e1e115df54", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c850f23d-b111-46a0-bbb5-ddb86573334c", "sighting_of_ref": "indicator--cf34745b-611e-4bde-b275-c82019db3caf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d850b5-53f9-45ce-bf2f-a863a7bd7a68", "sighting_of_ref": "indicator--24abd194-fc3b-48ca-8955-1b40814733da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7106f4-db44-4ac6-bc4c-dca17a108fd3", "sighting_of_ref": "indicator--0c545a45-0f37-4d05-9456-a21ab2718aee", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0fd6281-7397-4c4e-8a26-b05a443a680c", "sighting_of_ref": "indicator--e829314c-57c1-4aa1-a86c-ff80bcdf9090", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4df883-e498-4b6f-9ec7-e93bf0141e36", "sighting_of_ref": "indicator--6ed5526a-2c49-4d9e-a6f1-17cb48da8b2d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682c1f46-a91e-415b-b2d1-b04f627b8fb5", "sighting_of_ref": "indicator--658d9a3b-fb93-4f87-a1c6-f21f8f8fa98f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01152978-2f40-4071-b543-cdfd900dcd55", "sighting_of_ref": "indicator--5e6199ef-5387-4ed3-a2a7-2770282156ba", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a987d68c-ca4f-48c0-91c3-bd6f45177983", "sighting_of_ref": "indicator--1f92eae0-a831-4e71-8c82-63ed80b6ad0c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d470cd-4cd5-4893-abb4-3eee5b18e256", "sighting_of_ref": "indicator--e67c3715-e70a-4cab-a7b4-f1bbb14a0cbb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee2eeb3-952c-4d87-b384-a8598524c9a6", "sighting_of_ref": "indicator--ab967ab9-0298-4376-9771-0d7196448c48", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3844ef4-6cd3-4cdf-aad1-41ab3fa56336", "sighting_of_ref": "indicator--7e8841c6-59e5-4955-af06-6780fcb9ed41", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1885395-2388-43ff-b0bb-511abdf299a6", "sighting_of_ref": "indicator--77bac833-e221-4610-9071-0fe715819601", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8afbb2b-f266-400d-b75a-a480d5dff51a", "sighting_of_ref": "indicator--8cde3374-6dc4-4c51-8366-2c3a20971dc6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d50e173-4244-472f-839c-b0f157d0d122", "sighting_of_ref": "indicator--7aad15c4-6652-45f4-b6f3-66dfdd402947", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0549b497-3f8e-4049-80ff-1fb100991d2c", "sighting_of_ref": "indicator--42eae85f-add8-4a7f-922b-b270226c2bb0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9fdc26-9acf-499f-abd3-a82ed21c5aa4", "sighting_of_ref": "indicator--cc8f9131-f265-4995-b43c-a619c2889ebc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f59bdc-7dac-40c4-967c-e7d7142c5dab", "sighting_of_ref": "indicator--10e98b0f-054c-4caf-a00f-8cc98dc6ce95", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724a7880-71d8-425d-9829-fcc313f8cda0", "sighting_of_ref": "indicator--10e98b0f-054c-4caf-a00f-8cc98dc6ce95", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b77aa72-2584-4c27-86c6-158ad06aa789", "sighting_of_ref": "indicator--e8dada2f-bea2-4949-b640-9132168875d2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321c370f-86ee-4734-be1c-9343747b53af", "sighting_of_ref": "indicator--e8dada2f-bea2-4949-b640-9132168875d2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46011bf5-40c0-4027-be01-71e1016ca418", "sighting_of_ref": "indicator--ce5ed8d4-a52f-47f5-819c-b5306babfb3b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd17636-be40-4af8-b08c-16afea2af0f7", "sighting_of_ref": "indicator--ce5ed8d4-a52f-47f5-819c-b5306babfb3b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee601946-4b04-4f04-939e-11d2b48bfcc4", "sighting_of_ref": "indicator--78ba6a03-6d1e-4c4f-ab74-b353b6635a64", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b27f34b-0583-4a0e-abb1-7630fcc3e2d0", "sighting_of_ref": "indicator--6910e755-96ec-4669-b9b4-f61902108011", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977c8401-d49b-4359-b398-2b11c2aca32c", "sighting_of_ref": "indicator--c81c1783-76f2-4ce3-97f0-5e53b2b07d23", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117b141e-94cd-40d4-97f5-9f1edd125f90", "sighting_of_ref": "indicator--203ac5c4-0efa-46ce-b86e-3ff3e2e983ca", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da24646-a083-401b-bb2c-30dcc263b604", "sighting_of_ref": "indicator--cf7ad892-9253-4c9f-91ad-7cab603d87bd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e3e808-1baf-4e9d-b4de-931d13393a35", "sighting_of_ref": "indicator--cf7ad892-9253-4c9f-91ad-7cab603d87bd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe3c773-7976-4026-a3f6-3d2a4bf0637f", "sighting_of_ref": "indicator--3d4009e8-044e-448e-9f3d-ec3b87b8b89a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aaf0f4d-a8c9-4094-894f-a0f827868c71", "sighting_of_ref": "indicator--953f53af-89cf-4506-aeba-e8cf530fb78b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf27ad4-1134-430d-a171-5a4d320133af", "sighting_of_ref": "indicator--953f53af-89cf-4506-aeba-e8cf530fb78b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e4d99c-6f5a-47f3-ac6a-71932bbf3615", "sighting_of_ref": "indicator--94918eca-71c3-441f-9f79-88922534b727", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbcc0ac6-94a9-48c5-ba51-29a851560253", "sighting_of_ref": "indicator--c62d82cb-4185-4a28-9b90-123b3795f232", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1be5d09-1e8b-41ed-9c6d-d44d773d38da", "sighting_of_ref": "indicator--09f31646-d588-4113-96a1-6aad4eb0ab6a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2681c2-f39d-4a65-9405-80e9dc51678d", "sighting_of_ref": "indicator--09f31646-d588-4113-96a1-6aad4eb0ab6a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476b7473-0df9-45fc-a23f-fdc46b737ab2", "sighting_of_ref": "indicator--3ecc5a17-418e-4a3c-8c7e-545f3c8ce971", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87883f23-9f98-43ee-b8c4-0cb143349171", "sighting_of_ref": "indicator--3ecc5a17-418e-4a3c-8c7e-545f3c8ce971", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec41736-9900-405c-b0ea-aa50b4157a87", "sighting_of_ref": "indicator--6b4c9075-56da-401b-8a4d-e2e19c56961f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35058b49-015c-45ce-88d2-57b5a571c5ac", "sighting_of_ref": "indicator--6b4c9075-56da-401b-8a4d-e2e19c56961f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3ffee6-d760-4ca5-878d-df84b0e52589", "sighting_of_ref": "indicator--d8bb0820-de7d-4be5-9e04-8a869f0fe445", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddff9097-5c47-48e1-900c-562755256067", "sighting_of_ref": "indicator--fdb5641f-727c-4840-9a76-1ac59bd79599", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64070fe8-4ba9-4c10-bc6e-5b56f4b50c6e", "sighting_of_ref": "indicator--6168292a-e917-4bba-9150-fca9e29f0b97", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08ff4cd-7fdc-451a-a045-ac67e72d407e", "sighting_of_ref": "indicator--6168292a-e917-4bba-9150-fca9e29f0b97", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc2f5fa-7eb2-48a7-9624-042f11efcac9", "sighting_of_ref": "indicator--4f474a66-535d-482e-8a83-c280dc09070c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--850a77b3-5f32-45f6-a272-1fe7aa7282ff", "sighting_of_ref": "indicator--5bd9ed2a-3b53-4baa-8546-6f198f2d5d10", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f7273b-72ec-4103-9633-617075985cb2", "sighting_of_ref": "indicator--5bd9ed2a-3b53-4baa-8546-6f198f2d5d10", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e5a73a-f638-4e51-b8d7-46a0600040a7", "sighting_of_ref": "indicator--2eea4e55-2b21-44a9-9b90-36ceeee67080", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1a9687-10b5-4554-abcf-4eb4782ccb03", "sighting_of_ref": "indicator--9f99938c-0d6e-49fa-bb51-cb31cdb38e8b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d2b35e-de71-423c-a693-23f653867832", "sighting_of_ref": "indicator--9f99938c-0d6e-49fa-bb51-cb31cdb38e8b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947bd255-f5a3-4da7-b6c2-18bdd9482fea", "sighting_of_ref": "indicator--bb589edb-45db-466e-87ab-e0e4622a5caa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50eee727-2acb-40be-8809-1de00d3e073b", "sighting_of_ref": "indicator--bb589edb-45db-466e-87ab-e0e4622a5caa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0974b6c-cc58-4202-88e8-4adfcb578b01", "sighting_of_ref": "indicator--57b04f3b-3ab3-4e9c-9b7a-2bc8cc33959d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a1bdb4-b5e2-4868-a0f8-00440e92c88a", "sighting_of_ref": "indicator--57b04f3b-3ab3-4e9c-9b7a-2bc8cc33959d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df09a943-18d5-42a0-8124-a88c0e2f7b8f", "sighting_of_ref": "indicator--060dc80c-0e11-40e0-b6d8-6245dbac09b7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7673e88-7ff4-4761-a988-e080ed136e21", "sighting_of_ref": "indicator--144c0728-3ece-46f4-b38b-c56953ae7143", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e83acd1-dfa9-4e4b-adfb-d14caeb97406", "sighting_of_ref": "indicator--144c0728-3ece-46f4-b38b-c56953ae7143", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7577615-aa85-4607-8342-f6c758b97791", "sighting_of_ref": "indicator--7c961b50-81d2-414a-a826-e9281f8954a8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13c94bf-83ea-4284-991d-2bb0a17889a6", "sighting_of_ref": "indicator--7c961b50-81d2-414a-a826-e9281f8954a8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aade89b-75e1-4389-b710-733805dc1446", "sighting_of_ref": "indicator--2b7a668a-1201-420e-9f37-ce32e8d7f494", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6769375a-b040-495a-bcc9-b151a9a47e6f", "sighting_of_ref": "indicator--c8758db8-235f-4641-a571-ebf0c8d2dbce", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23474b76-0d9f-49d9-89da-ac691edb148d", "sighting_of_ref": "indicator--1aa29727-4a72-434c-9856-5c679480e939", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02b68a4-d408-4c3b-be0b-d2d4ccd108f7", "sighting_of_ref": "indicator--1aa29727-4a72-434c-9856-5c679480e939", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef68b82d-1ec0-459a-96df-59b0c3b1c71d", "sighting_of_ref": "indicator--9629fcec-f6a2-45ce-af57-9d8f7a567084", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c61f88-58dd-43e0-a887-e089c3c5160c", "sighting_of_ref": "indicator--dc459817-27f7-4634-867b-038fe84b2cac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79aa92da-81f7-444a-bfd3-56463368689e", "sighting_of_ref": "indicator--dc459817-27f7-4634-867b-038fe84b2cac", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f1fbaf-2b13-4629-8c30-ddbd9524beac", "sighting_of_ref": "indicator--4c96ce8e-96be-4834-bcc4-440a8f3376e9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f310b9f-ab90-47be-aed0-6aee4f65fece", "sighting_of_ref": "indicator--4c96ce8e-96be-4834-bcc4-440a8f3376e9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c28f5e9-ea4b-4dea-8295-d529e8be01f1", "sighting_of_ref": "indicator--d7e3a283-cad6-4b53-8663-51a819c66477", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a547726-18db-456e-84c1-e84373749fc8", "sighting_of_ref": "indicator--d7e3a283-cad6-4b53-8663-51a819c66477", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff91cf96-f63a-4017-94f0-1b45636d24c1", "sighting_of_ref": "indicator--46c8daa6-c271-4777-80ea-ac1a60274279", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e30101-4571-4b0f-9ae4-fc28e26c66da", "sighting_of_ref": "indicator--6bc61a18-55d8-46ee-8112-b8fc22d90ead", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec199d30-1174-4e76-a235-0ec6def796dd", "sighting_of_ref": "indicator--ae6fff5c-9291-4257-aab6-4a2d646a4aa6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6519d1d-9f30-4ba3-ab14-e3c8100026b5", "sighting_of_ref": "indicator--b8d9558f-c146-4bc9-a91f-915e8e2cf84c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e61e36b-78ba-4582-bee1-65225192f46b", "sighting_of_ref": "indicator--f1c046ca-2924-4c14-b7cd-68de2677015b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba286b78-a117-40d5-afd5-7c27ac60ae40", "sighting_of_ref": "indicator--f1c046ca-2924-4c14-b7cd-68de2677015b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec385d44-958f-4489-8291-bb533d063437", "sighting_of_ref": "indicator--6338bbb2-bd4d-419c-93d4-4cbf7b5be0ce", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e61d817-451e-4858-b56f-993597843d61", "sighting_of_ref": "indicator--18e5e0ac-4082-49f6-bf28-73a218e903a3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d63d96-cabb-4905-a1bb-779328782b4f", "sighting_of_ref": "indicator--e7c18126-589d-410a-96a9-d301154975b4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f10a3e3c-b9d3-4c20-bbb9-da590f40de07", "sighting_of_ref": "indicator--4581b1e6-f6ab-4b16-b016-3261b3161bda", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c88bee4-43a3-42a1-bcac-2bee0fbb1b33", "sighting_of_ref": "indicator--ef942b69-eee7-4535-8988-bb7ee0246e09", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba22073f-d09c-40dd-b4ea-9328c9f0a8fb", "sighting_of_ref": "indicator--97c77ecf-8dd0-419a-8bb6-7b9e47783607", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d539fbdd-f255-41bd-9a46-5583e57e21db", "sighting_of_ref": "indicator--a5e03eee-3980-4964-8c5b-6ba9d753b3a4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196e44cf-3f23-4f48-a4dd-a68abc4f2f7e", "sighting_of_ref": "indicator--a5e03eee-3980-4964-8c5b-6ba9d753b3a4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d462fa3-e314-4d79-a612-f98f310685c3", "sighting_of_ref": "indicator--ef4bcaa1-7cac-44af-b8bb-cb0391c38b4d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c924374-f73e-4cc3-a541-fced466d7577", "sighting_of_ref": "indicator--ef4bcaa1-7cac-44af-b8bb-cb0391c38b4d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c42b92b-7e46-4894-aec6-ad0e43eb9f70", "sighting_of_ref": "indicator--509f611f-9d48-4551-9334-5e6353431e82", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc879b98-bf6e-4713-9c54-5f303963009f", "sighting_of_ref": "indicator--509f611f-9d48-4551-9334-5e6353431e82", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ade8bb4-485b-4287-ba32-279a2f9d8483", "sighting_of_ref": "indicator--ed3dab6f-088a-40c4-8d37-33ec6c057ea7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473df8c4-e3f5-4ab3-b9fd-f1cf7d1c30af", "sighting_of_ref": "indicator--ed3dab6f-088a-40c4-8d37-33ec6c057ea7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23aaed30-8f40-406a-93a2-1d4332d987ee", "sighting_of_ref": "indicator--79f873ca-15fd-4cf2-8c74-d26a53231563", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0bfb7e0-56c6-4afd-9d33-51b87d5bf2cc", "sighting_of_ref": "indicator--ad50073b-97b9-4c52-b617-6e9657116d80", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5b3cda-8013-4a86-ad57-84c0a5c84188", "sighting_of_ref": "indicator--675d4009-dd46-4267-9ad9-0bbd4342813c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa330e4c-3156-4646-a0b7-cf3c8064f0c1", "sighting_of_ref": "indicator--675d4009-dd46-4267-9ad9-0bbd4342813c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ce1e65-4906-48c0-b7af-89f14cc2f468", "sighting_of_ref": "indicator--13267bad-2717-41a1-bdb0-e8b1537a0a69", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1f6d72-d5e9-4e34-8e67-c125d7e4a5cd", "sighting_of_ref": "indicator--13267bad-2717-41a1-bdb0-e8b1537a0a69", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5df2980-fa86-4265-848f-05194589272f", "sighting_of_ref": "indicator--6b7a5a35-ace4-4b66-9d90-0ae76083c9a2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91fbd9f9-176f-47e2-9e8a-2d9c900a621b", "sighting_of_ref": "indicator--6b7a5a35-ace4-4b66-9d90-0ae76083c9a2", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f5664c-c23d-447c-b2b3-987c763f9fde", "sighting_of_ref": "indicator--6b7a5a35-ace4-4b66-9d90-0ae76083c9a2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f66708b-bbdc-40e9-8d67-28576b4e564f", "sighting_of_ref": "indicator--a84bd916-f92e-4624-b07e-0a0ed3016e14", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d384f7f7-025c-421d-a15b-5a1ef1dca2ae", "sighting_of_ref": "indicator--a84bd916-f92e-4624-b07e-0a0ed3016e14", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac333ca6-0eae-480a-a921-947cd4fabe6c", "sighting_of_ref": "indicator--4006e9d9-2f99-4f63-81ad-502be26dd10b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032cb6e0-508d-457b-acb7-f0f99f642c6a", "sighting_of_ref": "indicator--755f8a56-b057-42a6-b9ae-0565b1cbcab6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067d1823-0f32-442c-aadd-cd0f2c888e76", "sighting_of_ref": "indicator--808050c3-ea68-48e7-a1d9-b7e83972b2bd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72eb75be-ea33-43c9-988d-201a43021f80", "sighting_of_ref": "indicator--808050c3-ea68-48e7-a1d9-b7e83972b2bd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db1b9d4-aca9-413d-91e1-bcbb1142ba55", "sighting_of_ref": "indicator--98c4c3ad-4071-4153-96f6-b43b736e5e16", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c54161-fe38-4c26-8aae-78e1111235cf", "sighting_of_ref": "indicator--98c4c3ad-4071-4153-96f6-b43b736e5e16", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d874a70-f69e-456a-98d3-4091aef62c51", "sighting_of_ref": "indicator--2556eb4d-3dea-46d4-aa80-07bbacc3f03f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379f94f7-34f5-4a84-8b92-e1847dc59f79", "sighting_of_ref": "indicator--4211b0c0-beb4-4e2e-917f-c448702f9b34", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e302f1e2-edfb-4d65-bafc-bfbfa2bc90db", "sighting_of_ref": "indicator--c64f7628-75c8-4950-a2b0-05d0091d1556", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8342ba2a-f965-4b16-bd7f-343f537a30d8", "sighting_of_ref": "indicator--c64f7628-75c8-4950-a2b0-05d0091d1556", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1a1000-eb86-47e3-9597-86fbf9e7b6a8", "sighting_of_ref": "indicator--63d1bc4a-84f7-4493-b97f-6fd8d84e53d9", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5992de-c839-463b-9c43-41fbec9f2019", "sighting_of_ref": "indicator--4cb05005-36e1-4f74-a841-3171ca55f96d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a72a3a1-76f2-4232-a6dc-15c83c7b0f39", "sighting_of_ref": "indicator--4cb05005-36e1-4f74-a841-3171ca55f96d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a572c7f9-c7ed-4529-9d1d-9a6d053fcea0", "sighting_of_ref": "indicator--29131d34-7897-46ad-af7e-449bc59924e7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad91edf4-e1cb-4f95-82e0-e2421edb3801", "sighting_of_ref": "indicator--eb57cc56-4d96-4046-9c34-9c35cb44b4bd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9068cb-9d7c-4f6d-9d9e-88c03e5c4a43", "sighting_of_ref": "indicator--eb57cc56-4d96-4046-9c34-9c35cb44b4bd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a6cba5-a248-45b0-aecd-bccd993da370", "sighting_of_ref": "indicator--19305b80-64f5-4539-b481-7384bdc9fe35", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--687349eb-776f-44ee-95de-2691e6de6b38", "sighting_of_ref": "indicator--19305b80-64f5-4539-b481-7384bdc9fe35", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe7f7e68-c984-4a29-8a2a-be826906ce08", "sighting_of_ref": "indicator--2fa6d015-608a-49e1-b3ec-50776f32a0e0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd21cac6-8c3e-4042-a57c-87fdc8355626", "sighting_of_ref": "indicator--2fa6d015-608a-49e1-b3ec-50776f32a0e0", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3836cc-3dd6-4923-b321-1eddc3c3ecbe", "sighting_of_ref": "indicator--2fa6d015-608a-49e1-b3ec-50776f32a0e0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e386b819-1dc6-4703-9dd4-f141fe426f43", "sighting_of_ref": "indicator--f1a44c17-c279-423d-8498-3bd63c762e4c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7dec00a-6b4d-45e3-b705-7f8d7e41ecb8", "sighting_of_ref": "indicator--9189669c-6bcd-473f-8cd9-9962ca6d175f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3addf658-cc01-44be-85da-4e96ec801f55", "sighting_of_ref": "indicator--49d1f9de-e5a2-4acb-9e14-ae38d85e4baa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9318aa0c-d479-4b6c-88e8-b6390a8e40cb", "sighting_of_ref": "indicator--49d1f9de-e5a2-4acb-9e14-ae38d85e4baa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee55e3bf-3453-42d6-876e-7f8ae342289d", "sighting_of_ref": "indicator--11a52a3e-591d-44d2-a5fc-433519147093", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59625ac3-b7b2-49a3-9bc4-9b8c232fdd91", "sighting_of_ref": "indicator--60ff456f-1ef0-45a7-a763-9a4103e81cb4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe91b603-78a9-4a73-bcc9-4896dd6cac5d", "sighting_of_ref": "indicator--99c256c5-d9ee-4416-8474-1e863424c33e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21cb24fa-c991-4347-ae50-97ac3caf108f", "sighting_of_ref": "indicator--99c256c5-d9ee-4416-8474-1e863424c33e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e765d0f-12b4-488c-b69e-2c8aa654d66d", "sighting_of_ref": "indicator--19838c22-432c-414b-ac9f-435ee20b2c0a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99c7056-b7ed-48e9-b1d9-01aa7373ddf5", "sighting_of_ref": "indicator--19838c22-432c-414b-ac9f-435ee20b2c0a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479ccb4c-3409-4d48-abe7-c2c901bb4abc", "sighting_of_ref": "indicator--1c4c4e28-c41b-426a-9e54-1f34db2d75d1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9eac98-7171-4bd6-89fc-7c497763c6ce", "sighting_of_ref": "indicator--63957123-1ea3-48a4-89bd-24f83d4f4427", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e93990-27ba-4f0f-b64f-13376520504f", "sighting_of_ref": "indicator--a7215aac-7765-47c2-84c8-66b59d93b897", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56634fad-503e-4f11-885f-4398525bb448", "sighting_of_ref": "indicator--d2b76865-ece2-4967-a163-5b7c01934ea1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69387da2-886c-4b8a-aa23-d3d28f746666", "sighting_of_ref": "indicator--5a73bc71-ddcd-4057-9fa4-2e97b0e7c1cc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b45a81-e53f-41bf-b434-0c1d7452abcc", "sighting_of_ref": "indicator--5a73bc71-ddcd-4057-9fa4-2e97b0e7c1cc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ed4675-d36b-4f7f-86fa-b577fa979a6e", "sighting_of_ref": "indicator--89948ff8-1b90-4200-bd06-fed3423562d5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bbd79b0-fb0f-4ec1-8caf-63345ea89b81", "sighting_of_ref": "indicator--b033e26f-7918-4d9c-8482-ab203c732d58", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c269bd4c-8018-45ab-a532-0771108a1535", "sighting_of_ref": "indicator--597a0cc6-5e5d-4c7c-a58a-a4bdcb5ca08e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e549ae4-4760-40d9-bef6-b6b2d483dd54", "sighting_of_ref": "indicator--f7c96d2e-ceed-4fea-a300-dbd96d3143a0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856655f7-a3dd-4b80-9d98-0b178143ae78", "sighting_of_ref": "indicator--0234b142-4315-4b15-b7d6-b153e7dca16a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548a56ae-3449-45ba-b53d-3b087e07a160", "sighting_of_ref": "indicator--14e6ecca-bc28-42d4-99ec-cedd3be8b01b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32578d37-865f-4c93-b2e9-3edabe33933e", "sighting_of_ref": "indicator--c916e344-062b-4d3b-bfed-5cb3ec4102fa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ceb1f3b-36de-414a-a286-41a1a635834e", "sighting_of_ref": "indicator--c916e344-062b-4d3b-bfed-5cb3ec4102fa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5008d287-6917-4931-ab76-5951d0399970", "sighting_of_ref": "indicator--b58f2773-059f-47bd-853e-da252dddaf7b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca1efe0-3fd3-49db-8862-abe291e213de", "sighting_of_ref": "indicator--5d359221-6ff6-4810-9663-eca2e3912a5e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e54915b-6064-4809-89ba-63a283f64adb", "sighting_of_ref": "indicator--104f372c-03a6-4414-82d8-f62bf31694e0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e3eefe-b4af-44b6-86b8-6cde4c0df7e1", "sighting_of_ref": "indicator--104f372c-03a6-4414-82d8-f62bf31694e0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392ef79d-e94c-4d7b-a060-9020a1d75fa2", "sighting_of_ref": "indicator--b74c6785-582f-4c44-bec9-5453335db660", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd5fc7b-d4eb-4082-b301-ff3b6f92ad2f", "sighting_of_ref": "indicator--3983c529-5fcf-4666-8e8e-e5562e5ce33d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8cb00fb-3230-4d5c-ac06-c10e78a40dad", "sighting_of_ref": "indicator--3983c529-5fcf-4666-8e8e-e5562e5ce33d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63eecb58-944a-4384-a8df-96df3ee5dbb0", "sighting_of_ref": "indicator--0f0dfe83-ff7b-42ca-af77-f4ae3a561655", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ec1f97-1dc5-466e-9327-f4433a2b6498", "sighting_of_ref": "indicator--0f0dfe83-ff7b-42ca-af77-f4ae3a561655", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fea8717-485c-4cb5-8de7-b66716d462eb", "sighting_of_ref": "indicator--748404e5-497f-4f37-8d29-93a33cc89b05", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd08ae8-e155-4834-b715-2504294486f9", "sighting_of_ref": "indicator--18b9d2cc-fc4c-4f90-b9cb-4d18541042c3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9e0851-4f39-4e17-842f-67c9f6c86636", "sighting_of_ref": "indicator--18b9d2cc-fc4c-4f90-b9cb-4d18541042c3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e45d65-e9aa-4ca8-9829-ff1ee5208332", "sighting_of_ref": "indicator--668b377e-3edf-4692-a608-3e195d315c14", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4335da-f4f6-4684-8032-fae26557d3b8", "sighting_of_ref": "indicator--668b377e-3edf-4692-a608-3e195d315c14", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a0216c-5125-45cd-9fd9-7312f0f14d65", "sighting_of_ref": "indicator--e18a2838-d06a-4a8e-82d8-5b716208e336", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a727db-dfa1-4207-959b-d189051d5ab8", "sighting_of_ref": "indicator--e18a2838-d06a-4a8e-82d8-5b716208e336", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e87eac-ff4a-44a1-b9c1-f553d5279bfd", "sighting_of_ref": "indicator--8d89c460-91c7-4a91-9ad3-49111d5cde6b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b1ec7d4-1316-484a-b908-97d710d8853a", "sighting_of_ref": "indicator--8d89c460-91c7-4a91-9ad3-49111d5cde6b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fafa4f6-daf7-439d-8794-229906f0e1b8", "sighting_of_ref": "indicator--f8a903b7-d903-4746-935f-1e02aef38299", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72781b2-0cb9-45c0-9eb1-51f9ede1bc34", "sighting_of_ref": "indicator--f8a903b7-d903-4746-935f-1e02aef38299", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee42a039-9956-4f67-97c3-db3db931c340", "sighting_of_ref": "indicator--e74f1245-909a-4212-a2de-7ac066fe6eda", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b742e872-3e9b-4272-88d9-bb3f0c7bb7ed", "sighting_of_ref": "indicator--e74f1245-909a-4212-a2de-7ac066fe6eda", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7ee1c5-1701-46c9-a865-713466945555", "sighting_of_ref": "indicator--9aabdd16-b4be-443c-9bcd-af871342b4f6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590f397b-2719-4902-ba2e-76b383795bdc", "sighting_of_ref": "indicator--9aabdd16-b4be-443c-9bcd-af871342b4f6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92630995-96c4-42b7-8742-78beb88c5bb3", "sighting_of_ref": "indicator--107fabe0-7184-47b6-8e68-969b5c70abe4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1fa1e4-4857-4c53-8684-d9d9d2ad3080", "sighting_of_ref": "indicator--107fabe0-7184-47b6-8e68-969b5c70abe4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8626730-79e9-43ff-89e1-79f6f3bb1646", "sighting_of_ref": "indicator--c1f7cbba-4012-44c4-a50e-edd2325c121a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5fb10d-ddd4-424e-9e9e-a603ba468c92", "sighting_of_ref": "indicator--0db45aec-454e-4edd-8a78-b56cff170279", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec09b474-4022-45b2-9097-6f60dd51181b", "sighting_of_ref": "indicator--0db45aec-454e-4edd-8a78-b56cff170279", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996c55a9-b160-4d14-88e6-91ef1331d440", "sighting_of_ref": "indicator--b38a33e5-a097-405e-b30a-b569f4ac5d58", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fec4146-4e51-4e85-b6e8-5e21dd94823f", "sighting_of_ref": "indicator--b38a33e5-a097-405e-b30a-b569f4ac5d58", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3b4a80-7d2d-4959-a772-48dd5daee603", "sighting_of_ref": "indicator--c0aa6149-1383-4263-b5a1-2248b8206657", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6f04e7-5887-475c-b527-6be8788e9350", "sighting_of_ref": "indicator--e9ad84b5-e597-444f-b261-ec6a43812fab", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8c3c36-028e-41e1-b436-5548136c8be1", "sighting_of_ref": "indicator--e9ad84b5-e597-444f-b261-ec6a43812fab", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de84fdd-69b0-410a-9123-da7554e2b2de", "sighting_of_ref": "indicator--91cd06f5-93bc-4145-92db-fb159ef2fc90", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8493f0cb-7e03-4d74-a072-8b9f296e5db5", "sighting_of_ref": "indicator--91cd06f5-93bc-4145-92db-fb159ef2fc90", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c0cf20-bf64-4496-9bb1-2d2a1bef2aa6", "sighting_of_ref": "indicator--568881e4-1b1d-4f3c-9a10-65005c8040f9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f868359-a999-4a04-b5d6-332dad02709f", "sighting_of_ref": "indicator--db9a0fe9-78dc-4a61-974e-f1cb165faf20", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455d2fdf-eb5b-4480-9435-249481675c49", "sighting_of_ref": "indicator--8e143ac4-aed8-4b75-8a33-4f25ac34e331", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fbefa01-634c-4530-81bf-9c3dec926ce6", "sighting_of_ref": "indicator--8e143ac4-aed8-4b75-8a33-4f25ac34e331", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e680782-7fc7-405a-9647-77a54e8001f5", "sighting_of_ref": "indicator--66dcfea2-f7bd-4474-b740-42392cc05bdc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80672b69-5fe2-434e-a217-cfc1a2e7aafd", "sighting_of_ref": "indicator--66dcfea2-f7bd-4474-b740-42392cc05bdc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ece1d2-cbed-4808-ae63-e19c4b1b3403", "sighting_of_ref": "indicator--8dd52dc1-9b2d-49f0-8d46-92f2e3ac7be9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32296728-f27e-4bf5-96af-5f9b486b2123", "sighting_of_ref": "indicator--b020c899-de42-4ca2-8e4a-30de0a8d306c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5416fe8e-9019-47df-a760-b9468be590a0", "sighting_of_ref": "indicator--b06c051d-37c9-4b7a-be67-1e67f29c0e8b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d66666c-91e8-43bb-bdaa-54c7c844fa49", "sighting_of_ref": "indicator--b06c051d-37c9-4b7a-be67-1e67f29c0e8b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2681e61d-88ee-41bd-840c-9b96b31bbbbd", "sighting_of_ref": "indicator--b0a5a358-806f-4f72-98c6-186398d237c8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66b045d-28f3-452e-aecd-51636bab6619", "sighting_of_ref": "indicator--b0a5a358-806f-4f72-98c6-186398d237c8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb6a736-f2a5-4348-9e19-4c8ca699fe8f", "sighting_of_ref": "indicator--97517ed7-fd9e-41ec-9df7-d15f54c2ec72", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4f510b-f226-4702-ac61-d1530c2ac56f", "sighting_of_ref": "indicator--97517ed7-fd9e-41ec-9df7-d15f54c2ec72", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00078e62-4939-4f55-a7cd-e389a1dfa06b", "sighting_of_ref": "indicator--5d8d61b7-a072-41ef-9f1b-a7e725af370a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363954a1-2068-45df-9214-dd8bd1b6868f", "sighting_of_ref": "indicator--5d8d61b7-a072-41ef-9f1b-a7e725af370a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e38b14bf-9330-426e-9b88-b6e3b69c57ce", "sighting_of_ref": "indicator--c4d08772-abf7-4909-aadf-2fa55e6d19b3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25acf33-7ac1-40c2-9e13-946c5ae253e1", "sighting_of_ref": "indicator--c4d08772-abf7-4909-aadf-2fa55e6d19b3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225ead11-7990-45f0-89ce-51e98a453390", "sighting_of_ref": "indicator--21d29860-cc61-4bbd-b7e0-9408be5d39eb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de011cb3-584d-4479-a4ad-8fb2499c7b0f", "sighting_of_ref": "indicator--03138a59-f18f-43ff-8ce9-19ad26246d00", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5783df7-a7ae-4f97-9d91-cb2ffc2cc682", "sighting_of_ref": "indicator--03138a59-f18f-43ff-8ce9-19ad26246d00", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42db7131-4d73-4186-876c-3f5d27fce53e", "sighting_of_ref": "indicator--3e4569fc-8baf-49e2-b605-202df3bbe11c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc80892-fefd-4bb6-8f07-8e26a95d36bc", "sighting_of_ref": "indicator--c1deb480-38c6-44fe-b500-040c066e448c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3b9c35-7850-4bd8-a4ea-81d6622f744f", "sighting_of_ref": "indicator--c1deb480-38c6-44fe-b500-040c066e448c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e4bf85-8a37-45ff-8910-87d989a7d097", "sighting_of_ref": "indicator--65744677-a576-4e17-a34c-47872eb82c18", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bddd4e42-6d3c-4dd7-8209-92644cba6c7e", "sighting_of_ref": "indicator--65744677-a576-4e17-a34c-47872eb82c18", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6423c44b-d950-4407-a38e-eb0af5ada480", "sighting_of_ref": "indicator--85bdeb9c-3b32-4380-8891-1ceef3d75694", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2564c9ea-bb8c-40e7-a589-e44d6e78a780", "sighting_of_ref": "indicator--85bdeb9c-3b32-4380-8891-1ceef3d75694", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535a4a8b-3f7e-47c2-bb79-23510aaa76fd", "sighting_of_ref": "indicator--319461c1-6ae3-40cf-a476-d153b1294f5e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330f7561-2df0-450e-96b7-16d1db230981", "sighting_of_ref": "indicator--30223458-e1e0-46e7-99a3-b7e29802690f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25284ced-3f1f-4a31-90af-37727bae26d0", "sighting_of_ref": "indicator--99bbc358-792a-4c0e-810e-88cf0208ebe1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e45273-df9b-445e-9d6c-deff5acf53bf", "sighting_of_ref": "indicator--99bbc358-792a-4c0e-810e-88cf0208ebe1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b86d32-437e-4d47-b7ea-51bcfb3620eb", "sighting_of_ref": "indicator--8d3d9f9c-3529-486b-972e-2d6c698b7254", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376d448f-4b0a-4508-83bd-e0f5d055c22b", "sighting_of_ref": "indicator--4a1c2483-482c-4756-adb3-b9f4a87e2ad2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54664ad0-688b-4e2d-9a92-bc6e4301221e", "sighting_of_ref": "indicator--b1ac28b4-ed7e-4cf8-be26-da9dd774bbae", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb24846a-39b4-43a4-b3be-83a04eac0954", "sighting_of_ref": "indicator--9f9c1c39-8be2-40a4-aad6-4dd945ccf711", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c795bb5e-6f96-4bf0-89f9-73d37cbc21df", "sighting_of_ref": "indicator--9f9c1c39-8be2-40a4-aad6-4dd945ccf711", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e79c73-1b8c-4f1c-9ce2-9afd388015b5", "sighting_of_ref": "indicator--cb84b2f0-bf80-46e3-ba74-9cbc4b30db66", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce436180-7975-4dc3-98c0-119bce046c83", "sighting_of_ref": "indicator--cb84b2f0-bf80-46e3-ba74-9cbc4b30db66", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c176bba-9afe-4e78-bc7b-f22fc7c40c5d", "sighting_of_ref": "indicator--fbea28f3-3c74-4f03-82dc-2799d6f9a494", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54591d9-de04-4b99-b08d-a25ea52ef3b8", "sighting_of_ref": "indicator--fbea28f3-3c74-4f03-82dc-2799d6f9a494", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25dff165-e930-43ce-a116-1f6e8bb7cb9f", "sighting_of_ref": "indicator--db120d08-931e-4f12-8495-fdffecbceee5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d683920-184e-4b23-879a-3987ec937694", "sighting_of_ref": "indicator--64429933-b312-4c27-a860-7cf5b33caaf7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f013f6e-e621-43af-a3d0-6f2b658de429", "sighting_of_ref": "indicator--ea03dfdc-711c-4f55-94c1-aa9473231132", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69231f0-e143-4574-b6f2-a97571191362", "sighting_of_ref": "indicator--ea03dfdc-711c-4f55-94c1-aa9473231132", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15193f37-1860-4d79-94f1-173862e0fe1e", "sighting_of_ref": "indicator--71ab5b2e-bc81-4565-b536-455225ff1a51", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1b915c-bc68-48a1-a435-cf60cce5d868", "sighting_of_ref": "indicator--ac042aa8-bad1-43a2-9c15-00d2fcb9af23", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b3d03e-0ecc-4b5d-b6fd-f785ecbe7181", "sighting_of_ref": "indicator--74516245-4fb6-4353-8c97-965241207046", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3bef442-387e-46d5-8fe2-1359eb1fd5db", "sighting_of_ref": "indicator--e2ecd553-a8f5-4d0a-9cfe-385aade820f1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f92dfd-41de-4ee3-9f4e-dc16fa3e4c96", "sighting_of_ref": "indicator--a7b384b7-2e15-4fa1-ba0d-6f7c0c197fa6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9d827b-4b9d-463d-bf48-b8b821071b89", "sighting_of_ref": "indicator--07532ccb-a0e3-48d4-a6a5-476f1f42d95e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3615da30-3ca1-4c9c-82fd-6dad44d6f70b", "sighting_of_ref": "indicator--ac88649e-3d5c-46d3-a2f5-1be86347ce6b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d32178-c08a-452f-9bb2-e0d892ee6485", "sighting_of_ref": "indicator--ac88649e-3d5c-46d3-a2f5-1be86347ce6b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7235ff5e-2581-4e3c-9793-83883b7fffba", "sighting_of_ref": "indicator--d67b50da-e0ee-47cf-bfaa-17c9c483a278", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f10dc0-4091-4070-87c1-799dbdf7f232", "sighting_of_ref": "indicator--d67b50da-e0ee-47cf-bfaa-17c9c483a278", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2802eb7-d757-486e-8d55-777d91378c83", "sighting_of_ref": "indicator--a5d71c2b-c1e9-4484-b0c8-271e092f5f30", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb6899c-78e8-464e-9992-053811da41a7", "sighting_of_ref": "indicator--a5d71c2b-c1e9-4484-b0c8-271e092f5f30", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b3647f-6bd9-4dc2-b259-ac75ce5762f1", "sighting_of_ref": "indicator--0a98a6e6-8fd9-407f-a33b-dab862e28c57", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64d8a43-488f-45d6-a62d-4ec0bce75768", "sighting_of_ref": "indicator--6d46be4b-d82c-4cb7-a5ac-44334553aa58", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d519363-e5d1-4882-9973-6baae390477f", "sighting_of_ref": "indicator--6d46be4b-d82c-4cb7-a5ac-44334553aa58", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62904de2-dca8-4cf1-ae40-1f59f9acccfb", "sighting_of_ref": "indicator--9103b7bf-0361-412a-b912-522b9ac3d32a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--308a0789-44b2-4230-83f2-426ffa1b4d3c", "sighting_of_ref": "indicator--9103b7bf-0361-412a-b912-522b9ac3d32a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332347bf-4309-41bb-9810-54b644b63981", "sighting_of_ref": "indicator--baa9a672-a78b-4260-be98-c1adf3813b40", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6ea8bc-3baf-4d6c-8f3e-b38711d5f1f4", "sighting_of_ref": "indicator--baa9a672-a78b-4260-be98-c1adf3813b40", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee84e369-e2bb-4268-a8b6-d04ccc7347cf", "sighting_of_ref": "indicator--33ba9bf2-3c6c-490e-a703-f94a907a8209", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ddc6e7-e716-4702-961b-e926ba149b28", "sighting_of_ref": "indicator--33ba9bf2-3c6c-490e-a703-f94a907a8209", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ec31d4-a042-46b3-9711-ca96c8ccb7bf", "sighting_of_ref": "indicator--2bb79202-e7a9-4b92-8b21-c9a6101cfda1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ce882c-7d82-439c-98e0-6f6d88f46e83", "sighting_of_ref": "indicator--2631329b-7ac1-4676-8785-90eff6b6bf57", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95ffb87-8147-4253-b267-82dd55574eee", "sighting_of_ref": "indicator--87f79584-df7c-4559-9438-9a35fd656a89", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36caf157-50f3-4e9a-9292-82e92bf32980", "sighting_of_ref": "indicator--87f79584-df7c-4559-9438-9a35fd656a89", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbcb01eb-60f1-46d5-899d-5611a053b8a3", "sighting_of_ref": "indicator--86b3f6f7-e5dc-4d43-ac77-f534a205aaf4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ab068e-aac8-4b6d-ba22-623802527a89", "sighting_of_ref": "indicator--86b3f6f7-e5dc-4d43-ac77-f534a205aaf4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3739eed-e4ae-4341-b9bd-11407b3b9085", "sighting_of_ref": "indicator--ac47e765-bba1-474d-8a44-39aa1d34effb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe52f5d-4068-48ff-8920-ca733dbeb1d7", "sighting_of_ref": "indicator--8e900f8b-fb5b-4be6-900a-95652a14a4d9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bcc903d-bc5b-4353-93b9-38ddcdbf610f", "sighting_of_ref": "indicator--247fc913-9210-4e0a-95d2-866a851a580a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f01435c-a450-4e3e-bc08-78964e144b17", "sighting_of_ref": "indicator--247fc913-9210-4e0a-95d2-866a851a580a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e99c071-5228-48b1-aae5-b2a415abdca5", "sighting_of_ref": "indicator--3c92a090-a693-4adb-845a-2a4f2eec7e9b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ef4cd1-66ff-446e-8fa5-dca684c39e66", "sighting_of_ref": "indicator--53b551b8-a143-4c78-b396-053e2a49783a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56823985-8d2d-46c4-895f-f7ef83546856", "sighting_of_ref": "indicator--53b551b8-a143-4c78-b396-053e2a49783a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0567416-7ecb-463f-9444-bc793055026f", "sighting_of_ref": "indicator--91e9ad46-0961-49a3-b7dc-6bb521f4178e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff202e7-6cea-4e8a-9dc1-e0881bfd89c5", "sighting_of_ref": "indicator--a3b15754-eda7-411d-9ca1-9050bb1919fe", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0df643-876f-4e5f-b770-e677b71c8de8", "sighting_of_ref": "indicator--a3b15754-eda7-411d-9ca1-9050bb1919fe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d88894a-d2a6-4732-81bc-4bc6da0493b6", "sighting_of_ref": "indicator--74914023-f048-486a-9913-4252f8243b34", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599ae643-d05a-4277-bd45-f1746f886135", "sighting_of_ref": "indicator--5fde1ac7-e0da-4f02-9545-32af0ed09b7f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86674846-7873-48a9-a9b5-b967bfea9447", "sighting_of_ref": "indicator--729514ac-f346-4da3-9dda-6e63e33448e5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf34bd68-b894-4f41-b6a9-37a3d9e91f09", "sighting_of_ref": "indicator--9a581dd4-4cbd-420a-9007-935fdc833de5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c39d118-9b14-4369-87cf-3a78fee0acef", "sighting_of_ref": "indicator--041ae8e7-f515-456e-b9c7-29ff5e64e658", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fd2e2e-5386-4f90-9786-f39e23863ecd", "sighting_of_ref": "indicator--10a08958-e842-4ac4-84ab-d547e4c12992", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84f53ee-720e-4a6f-b98b-79ab338c8bfa", "sighting_of_ref": "indicator--40c5ba27-7c28-4cf1-b6a2-0f6a4b3a5398", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c771e3a4-e8f2-4753-8ba7-dd58b73f37dc", "sighting_of_ref": "indicator--ded2bb10-d6b9-4652-8b48-f16ac5467471", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8183c4-d8ef-41dd-a6b3-ae91438e9d4d", "sighting_of_ref": "indicator--00d3233e-b8ab-49cc-8461-d3d0b657c4e5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af190f7-14af-44d2-a7e5-efc8abccd9be", "sighting_of_ref": "indicator--2134700d-3aae-4f5a-a67f-b8a527977d0c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28c8ecb-ea78-4e4e-86b2-4b6415dfa768", "sighting_of_ref": "indicator--2e142477-fa91-44f9-9d3c-c8dc0c3dd60f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2129fea-d4fd-452d-9769-a73487ba5815", "sighting_of_ref": "indicator--ad62d4df-9366-4310-bcf9-b3e709321f84", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc90afa-4df0-4762-aa63-9f786cf37c5a", "sighting_of_ref": "indicator--ad62d4df-9366-4310-bcf9-b3e709321f84", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64529cca-ec88-4efb-a980-859fd93990f9", "sighting_of_ref": "indicator--212741e6-0175-4451-b2aa-a7faa4c0ba62", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd90171e-21db-4d04-b430-1abe16015d9a", "sighting_of_ref": "indicator--212741e6-0175-4451-b2aa-a7faa4c0ba62", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3d3ef1-7d52-4f8b-b863-e767b6879a1a", "sighting_of_ref": "indicator--4c0ac414-64ae-4266-a329-1203da8dda5e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f592ab8-d636-473c-b26e-bfab53a285e4", "sighting_of_ref": "indicator--4c0ac414-64ae-4266-a329-1203da8dda5e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7993a09-6c8f-4e80-bc61-1478b6b3d991", "sighting_of_ref": "indicator--5f6f30aa-b94a-43f1-9fa9-32f8bf04e880", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3a388e-2533-4794-9464-daceb8e208af", "sighting_of_ref": "indicator--5f6f30aa-b94a-43f1-9fa9-32f8bf04e880", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd233eb0-fce6-47f8-baa0-7abd8521c26b", "sighting_of_ref": "indicator--5f6f30aa-b94a-43f1-9fa9-32f8bf04e880", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591ee04d-94e3-4e1c-a048-fe38ceff2299", "sighting_of_ref": "indicator--e6173fce-0de8-4d6b-8c49-c04e07c9d39c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded318d1-384c-4f89-8ef6-cd607e3cd888", "sighting_of_ref": "indicator--c7cb6a69-c551-4b02-874a-e113fa004d51", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5219d60-3314-4d7e-b96e-97c4cd76dd26", "sighting_of_ref": "indicator--4e97af5f-9fbb-4891-859b-efba205f42f4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e20149-042f-45fd-8174-9375de09ef7e", "sighting_of_ref": "indicator--573c59b6-db21-4e03-b205-c7d7d0a2c7a6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed3d80a-2052-4bd3-ad05-68eeaabf3276", "sighting_of_ref": "indicator--60625a7c-5170-45e2-9b03-b92efdfea15a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c61d51e-4bb2-4bc7-b785-9fc8612ab19e", "sighting_of_ref": "indicator--f107067f-db62-4ab9-a7d5-410263da8fd1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a65c8a-095e-4a4f-ad32-8649720a86bf", "sighting_of_ref": "indicator--09d9463e-51a9-409f-a233-8d24da1d799c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33585d3-26d2-4814-939d-64a8717b6d13", "sighting_of_ref": "indicator--b1646d4a-ed05-4d62-a65b-1a2a8b9b6a0f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d082d73-4bf3-4bca-929d-1587ab2a86c0", "sighting_of_ref": "indicator--67e69553-b183-4137-b43c-0b464b668260", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003f99c2-d6cd-49d3-b44a-7c7e17ab7c13", "sighting_of_ref": "indicator--67e69553-b183-4137-b43c-0b464b668260", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742b72bb-fdab-4509-ba57-963f4e754986", "sighting_of_ref": "indicator--67e69553-b183-4137-b43c-0b464b668260", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0916b82-0a2c-47c8-9e06-afcc5d4f5e16", "sighting_of_ref": "indicator--66920efa-fb33-4b1f-8794-bac96d0b6caa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6862715b-332b-404c-96a6-7b9aa00034e5", "sighting_of_ref": "indicator--66920efa-fb33-4b1f-8794-bac96d0b6caa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96417a6-f313-4321-a6ea-638fe0ff8792", "sighting_of_ref": "indicator--3b4c2064-a627-46d7-9f60-eb54e9205613", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb137c3-6990-4009-87fa-69d1843122fd", "sighting_of_ref": "indicator--6031046d-f28c-4785-85d5-63785ad66531", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49045957-0ae0-41e6-9a73-000a84f12179", "sighting_of_ref": "indicator--6031046d-f28c-4785-85d5-63785ad66531", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bde814c-ecd2-4c63-81a5-e3227c601b76", "sighting_of_ref": "indicator--6031046d-f28c-4785-85d5-63785ad66531", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47193c1a-9108-4439-9f36-a64b918d8cf5", "sighting_of_ref": "indicator--e9959d05-b941-4fc4-8077-e0de856c8b86", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a899fa-1933-47d1-83b3-21e41de5dafa", "sighting_of_ref": "indicator--31af38d0-4129-42b9-821e-8947ba7c90de", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca22ab72-7ba8-400e-aa4d-03966085812f", "sighting_of_ref": "indicator--90b81e52-81ae-4339-8013-1110839e4693", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10943015-5cdd-4860-a53a-f706625441ff", "sighting_of_ref": "indicator--a4965e29-2d39-4616-9726-5f7beb003f92", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c2396f-a9be-4fcb-b53a-34999e47efe3", "sighting_of_ref": "indicator--aaff0eea-df62-4c61-92c7-f61b36092bff", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da1f3c2-c0e3-43fb-9b7b-15d03ce3a7bd", "sighting_of_ref": "indicator--242b5cb6-8847-405d-9a80-7839cf180aa7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206b50d9-8fa8-467c-a7fd-50eb6191b929", "sighting_of_ref": "indicator--e68d006a-13f8-4e8a-b67f-f61fb41d2d81", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517a8e88-778d-4222-bd42-059b3d883042", "sighting_of_ref": "indicator--dd33d420-3e7a-4cba-9eab-d81775bd42b6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf969854-095b-4b24-90b6-160faa519e28", "sighting_of_ref": "indicator--6ab85fd8-f2f5-489c-a60a-17920ebb13b0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5faca1-3181-4e72-8df2-969fd0a89715", "sighting_of_ref": "indicator--8ae94cfc-47c7-47c1-977c-0e0f6abb75ff", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8dec6fe-a3ea-4627-992a-e59721bc5ed4", "sighting_of_ref": "indicator--70588aff-c788-4697-bfd7-d34f69682421", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6faac3-792f-443f-9199-741c2e07f14d", "sighting_of_ref": "indicator--38cdb59d-8e36-4874-a905-4e4b7e946375", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c6ddf5-0ebb-41d7-b19e-6a95a4b5d758", "sighting_of_ref": "indicator--38cdb59d-8e36-4874-a905-4e4b7e946375", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d832cf94-3f98-458c-bb21-3adc7f564f8b", "sighting_of_ref": "indicator--1fb70285-fa8f-4e5b-a726-725d3e885894", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094db0bb-a41b-43ff-adad-baa140a72b55", "sighting_of_ref": "indicator--1fb70285-fa8f-4e5b-a726-725d3e885894", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4d0fd9-8387-46fb-ac86-47f626c14914", "sighting_of_ref": "indicator--878ba302-f127-42ce-9b36-ebdedfb1f1af", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63929e6-8010-4a21-a5cb-7024392d8665", "sighting_of_ref": "indicator--878ba302-f127-42ce-9b36-ebdedfb1f1af", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116f4768-ccf8-4a35-a91b-e51985d84f90", "sighting_of_ref": "indicator--73a38ae0-ffe0-4ae5-9746-06d1ecc6cb6b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e4267c-1902-4778-b04b-2eef12623a39", "sighting_of_ref": "indicator--73a38ae0-ffe0-4ae5-9746-06d1ecc6cb6b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c809e9ae-9e96-4661-a8f1-79ed4775b8c5", "sighting_of_ref": "indicator--76678cb4-7566-4886-856e-99ea320bd44f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e732ac-e8ae-4de4-91ae-9d6c188a9268", "sighting_of_ref": "indicator--76678cb4-7566-4886-856e-99ea320bd44f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a63f56b-c7c5-42c7-a077-ecdf6c697d92", "sighting_of_ref": "indicator--ec0f61b3-2f4d-49be-931b-bf8efec5addd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef8ac83-d523-4e0b-a4d6-7e862c628e3f", "sighting_of_ref": "indicator--351c52e9-85fe-4f47-96b9-2630db58545c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ec9345-3a24-45dd-8971-7ddac5c1cf09", "sighting_of_ref": "indicator--86dc4936-3391-49e8-8232-a546f2b64304", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9e537a-ec14-4eb5-abdc-6ae4ac3e6db8", "sighting_of_ref": "indicator--86dc4936-3391-49e8-8232-a546f2b64304", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a29b1ebd-b73f-4522-87ba-1fc4d36ea871", "sighting_of_ref": "indicator--faf2932a-434f-4c3e-89ac-79ae12f87f89", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ce3cf5-5cc6-4377-b2a4-24937a7a13d8", "sighting_of_ref": "indicator--faf2932a-434f-4c3e-89ac-79ae12f87f89", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc8999ff-ecaa-497a-b60e-37d76d60e075", "sighting_of_ref": "indicator--263cde24-62a3-475f-b5fd-481929d667d9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ba3bfe-7b15-42fd-805d-30ccdda6a72f", "sighting_of_ref": "indicator--263cde24-62a3-475f-b5fd-481929d667d9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d67d64-9400-47e9-9628-f5f29438c95b", "sighting_of_ref": "indicator--a71ba001-97e3-4597-8f13-ab0bb01667b5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6382661-8a46-48b1-9bdc-2128a66e3625", "sighting_of_ref": "indicator--a71ba001-97e3-4597-8f13-ab0bb01667b5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9150446e-0087-4bc1-9458-1767be0c0a1f", "sighting_of_ref": "indicator--1e78fdde-bdcd-41e5-88d4-4adb2afb3eeb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099dbd15-0301-444a-89ed-6639f61e575b", "sighting_of_ref": "indicator--1e78fdde-bdcd-41e5-88d4-4adb2afb3eeb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abadf682-32b0-4f47-bc2f-3856755f3312", "sighting_of_ref": "indicator--1f936280-361f-4081-80ae-8627daeacc65", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2401764-0952-434a-a046-a3d05bfcdced", "sighting_of_ref": "indicator--4a7ae639-d071-4a27-bf0f-24fb8db42f9a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3de5360-9b11-4daf-bfd9-1ec7fba70d7c", "sighting_of_ref": "indicator--4a7ae639-d071-4a27-bf0f-24fb8db42f9a", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16535ca5-9704-4703-9ee2-367c3d16d249", "sighting_of_ref": "indicator--4a7ae639-d071-4a27-bf0f-24fb8db42f9a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228462b8-6306-4f7d-a899-f2606a5f8c53", "sighting_of_ref": "indicator--2495b8be-4f21-42db-9248-b4fe6e8c39c8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195b0b4b-5ee8-4dac-a2be-bc97660235e5", "sighting_of_ref": "indicator--2495b8be-4f21-42db-9248-b4fe6e8c39c8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5cbbf96-0680-4628-bbfa-c96256c84026", "sighting_of_ref": "indicator--7fc67ea5-013d-4fff-936d-626fa6370f1b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71e6788-5b55-47c0-95dc-94bc0ae2acd3", "sighting_of_ref": "indicator--7fc67ea5-013d-4fff-936d-626fa6370f1b", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4489c8ee-d519-49bd-8d71-f9a10412c6b1", "sighting_of_ref": "indicator--7fc67ea5-013d-4fff-936d-626fa6370f1b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf82d136-20a3-4085-a3b6-673b989b57f9", "sighting_of_ref": "indicator--a7a0127d-7ba3-4b7e-8820-bfd66731a225", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7cbde5-42fe-4a33-9756-e54be9a7bfd3", "sighting_of_ref": "indicator--a7a0127d-7ba3-4b7e-8820-bfd66731a225", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffdaa599-1e04-4cc7-8c18-85de5adbab05", "sighting_of_ref": "indicator--a7a0127d-7ba3-4b7e-8820-bfd66731a225", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5263e1fb-9204-48b1-8567-34392f2b2ab7", "sighting_of_ref": "indicator--fe0b6ea8-bda2-4649-b033-30cc63a4abbc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9231c5-96fd-4570-8b90-51b34ee40866", "sighting_of_ref": "indicator--fe0b6ea8-bda2-4649-b033-30cc63a4abbc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7480d9d5-dc28-4a0b-bead-4c6ab0105d94", "sighting_of_ref": "indicator--4d4f2b2b-bf7f-48c7-9126-afd79ac297b1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3dd4655-bfcb-4bec-b094-d913a2761b0b", "sighting_of_ref": "indicator--6475e529-d902-4f78-904c-88201b243408", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a23bc54-714d-4e54-8b28-423e901f5606", "sighting_of_ref": "indicator--e5231183-b60b-48b8-9328-ed196715dc17", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9d37b2-6159-45de-bf00-040b26552418", "sighting_of_ref": "indicator--fc97d614-39e0-45ca-b7b9-8e23625006d4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6696f1ec-e3d6-4b09-9b39-246ee1a475df", "sighting_of_ref": "indicator--49be2b4e-c5a2-44ab-8e2d-afd6dc8878c6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85928eb1-8391-48bb-b0b6-ff7e16ab1ca6", "sighting_of_ref": "indicator--2966a1d0-22ca-4e63-b1b7-0c94b3094c03", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34b4f62-8d9f-41db-82a8-875e61f3179e", "sighting_of_ref": "indicator--f9fd591d-27df-4734-b8c8-fdf55d99ce6c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1c9a93-58be-4c51-8d28-36fa73d1e3f8", "sighting_of_ref": "indicator--fbab5298-6614-4bb1-a78a-b566c0845c84", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d041d763-8614-43dc-a199-6879ab1cee98", "sighting_of_ref": "indicator--9e79a3c2-6c8a-4542-ae18-e19ae5850663", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf28521-d7ab-4782-be30-dd523c142929", "sighting_of_ref": "indicator--32dd1752-122c-4d28-b93e-c1bea0a886f7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3563a78f-3dcb-451a-9895-4c4ba08ea2e0", "sighting_of_ref": "indicator--2f58680f-f617-4b31-9ba9-22785bed3528", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f8d26c-419c-4f43-bbee-e894b771eb4b", "sighting_of_ref": "indicator--f2e5b54b-26fb-471b-85b4-96f86facba30", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d02782f-4685-41e4-b402-42fd338c46d1", "sighting_of_ref": "indicator--c4187942-fc57-4241-a8c3-a5555566846a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609ccc61-e25c-4fdf-8ebb-62c304754ba8", "sighting_of_ref": "indicator--a78e09b2-8f65-48bf-bfca-2ab61bb9df37", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649f18a8-f78e-4172-9b85-b23df27b510d", "sighting_of_ref": "indicator--59a2f24a-4c42-4a82-aa29-0f822de4264c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29bd9716-2d88-445f-98dd-0ec66d2aa8d4", "sighting_of_ref": "indicator--16f37dca-2d9f-4740-8e51-e81b491ac0ae", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d251bab5-6945-42b7-a303-80818721799d", "sighting_of_ref": "indicator--16f37dca-2d9f-4740-8e51-e81b491ac0ae", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f2cd5d-5560-47b3-9ad5-7ef37a81ea64", "sighting_of_ref": "indicator--8be25b3e-af0f-4e0d-a42a-0f249507fb7b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15e2f5d-029d-440f-a29e-db27c6e08437", "sighting_of_ref": "indicator--ca9441f4-c92b-4ece-9c55-d7c57e0d4cef", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00cfa978-02c5-44e6-8526-e2eb45fc6fea", "sighting_of_ref": "indicator--ca9441f4-c92b-4ece-9c55-d7c57e0d4cef", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8e3253-ff1e-492f-861b-b6ebcb5f1138", "sighting_of_ref": "indicator--ba3c05be-a45b-4163-96cb-fafc8f57d467", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b251bc8-23ec-4f51-a00a-5b225517cfa0", "sighting_of_ref": "indicator--ba3c05be-a45b-4163-96cb-fafc8f57d467", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9de7c5-1294-4ee6-b243-03bb043f00a0", "sighting_of_ref": "indicator--414e4b20-005d-496c-ba6b-2efc5fe17657", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31c35bd-e0ff-4de9-bce8-4296c0716f3f", "sighting_of_ref": "indicator--a614cbf4-e776-4b64-bdcb-b33ec613f1f6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c26287d8-ea9f-4cd8-ac6a-70579b5af20a", "sighting_of_ref": "indicator--a614cbf4-e776-4b64-bdcb-b33ec613f1f6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9224ab5a-1196-42f2-92d1-6cc69ff42e19", "sighting_of_ref": "indicator--e5e77e22-e543-4b51-856d-afd9784cc840", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec7cf50-1dc2-45a6-9b68-6ccf0edb7e7e", "sighting_of_ref": "indicator--e5e77e22-e543-4b51-856d-afd9784cc840", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c16a4f9-ab0b-45d8-932a-719318c27fc0", "sighting_of_ref": "indicator--6b877f6f-41c5-44d1-9d0b-91e422eb13f4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fce3326-e25c-4454-bd4b-50d7cbadab0a", "sighting_of_ref": "indicator--9513e0e3-9eae-4c96-ac01-73bbdfccf55c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef674e49-34c0-49ca-9c8e-07212ba96602", "sighting_of_ref": "indicator--e6074e52-e0a8-41d8-b9c0-c4c6b31c13f0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e927f02-80c3-41f8-8108-6daa2df0d53f", "sighting_of_ref": "indicator--b060445c-9014-4f48-8da0-0e0c0a51b0aa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c4407c5-fc71-4bd6-84fe-e22d84dae475", "sighting_of_ref": "indicator--2b5b0fef-dc9b-4fc9-8c51-da61a7120cd4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee96801-2b65-40b4-bb2c-b8c6223ca6d8", "sighting_of_ref": "indicator--1f0a7036-4b45-45b9-85d5-eb3d507082bf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b8e854-1431-4bbc-ac3a-b4d11c10df1c", "sighting_of_ref": "indicator--ffe49f54-79b5-4c06-9f54-7556645b991e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d719a1-ca6c-4fe3-99fe-9df9c4b0bb46", "sighting_of_ref": "indicator--15f8cf0c-9963-44f2-aea8-e0535b995544", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b40401c-4555-4e8f-a51d-b3dcc054c0ce", "sighting_of_ref": "indicator--e2f6f433-7d61-4eae-9958-657c3501d485", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b964c3-e628-47ec-a15e-b26843ddd124", "sighting_of_ref": "indicator--fbb4f680-f354-436a-bba1-2e6d61c898b7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a38889d-de99-4f9e-ba07-7ef968ece634", "sighting_of_ref": "indicator--fbb4f680-f354-436a-bba1-2e6d61c898b7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98a1349-d37e-4d17-a1c3-6d8a26d1b80a", "sighting_of_ref": "indicator--c512410c-abbd-4c75-81d7-4c3bea4bfbbe", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94401ba9-494e-4354-bbdc-4a02579a77dc", "sighting_of_ref": "indicator--c512410c-abbd-4c75-81d7-4c3bea4bfbbe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07729156-da10-4015-b677-d18000fa54ed", "sighting_of_ref": "indicator--dcf5b1b5-dcb6-4f82-b35c-c96eecc0bfa1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3025fdd-ba61-4536-8b1a-c86ae009472a", "sighting_of_ref": "indicator--7e6c4bdd-8a36-4cc4-a951-9453f7c50a6b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63ccea0-343f-41f6-9d9b-e405ba479dbe", "sighting_of_ref": "indicator--8baf2b04-dc57-476e-9dc8-a677c9393b87", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005607c6-e187-45bc-a60b-b0c229b71782", "sighting_of_ref": "indicator--3c89c809-2d1c-4efd-9f37-28d8986cd1f8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda68269-f990-43aa-801b-74753f658a4e", "sighting_of_ref": "indicator--40ffa0fb-d71b-4bd6-9466-78da22557859", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33da8e9-c839-4c93-a273-daa60f12403e", "sighting_of_ref": "indicator--2629aa8a-10d8-458a-9f70-a72d4c622d5e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598cd897-c6ae-4ae9-931f-554b3efd96d5", "sighting_of_ref": "indicator--2629aa8a-10d8-458a-9f70-a72d4c622d5e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e26bd40-3419-4926-bae4-773ebe173c2d", "sighting_of_ref": "indicator--ca0a6468-fdc1-44b8-89a1-144c0b640870", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be6698b-daee-4958-ad7e-94e2bf4d49b1", "sighting_of_ref": "indicator--ca0a6468-fdc1-44b8-89a1-144c0b640870", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca00a27-8508-4357-8de6-28308a9c4c7c", "sighting_of_ref": "indicator--178325bb-3253-4834-b2b4-fb33ce344f82", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9766bb8d-6322-4dd1-977f-c83668e07d52", "sighting_of_ref": "indicator--178325bb-3253-4834-b2b4-fb33ce344f82", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b65904-dc27-46e4-a04b-2213e558763d", "sighting_of_ref": "indicator--d5f04876-2a53-431e-871f-e204f04a3627", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4b7e41-0efa-421e-a54a-7a0c55776b4e", "sighting_of_ref": "indicator--2950f978-9c08-4662-a89a-64a76f801956", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d524d7a0-fc97-41af-a592-c7e035421aad", "sighting_of_ref": "indicator--e5d6ae85-0380-4b93-8f95-ef4b677404d1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e302cd8-161c-4ff9-a523-9d9d0aafb9b9", "sighting_of_ref": "indicator--e5d6ae85-0380-4b93-8f95-ef4b677404d1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c952847-bb2f-49dc-a46d-f33f6e22c196", "sighting_of_ref": "indicator--39013261-c6fd-4e5e-aff3-0a5b43751c40", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d6557b-93ea-4838-a652-8f549d160cdf", "sighting_of_ref": "indicator--29987044-7f12-4053-ab58-945b0c0ad7f2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ea874c-8cef-4162-a7d2-5e54c29e37bb", "sighting_of_ref": "indicator--be57a676-46dc-439b-8d43-abdd6c58f106", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae0c84ca-4ca6-44db-bb38-039869bd5438", "sighting_of_ref": "indicator--68eefbb0-3841-40b8-91b6-184686cda242", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3fbd4c0-2649-412a-b29e-a00a2a92791c", "sighting_of_ref": "indicator--a1659506-a1b5-4301-91a4-c96915641c21", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e2cfef-c067-45d7-8673-7f34058db49f", "sighting_of_ref": "indicator--ef87e524-4786-47a8-bde3-f821ed726c86", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde9d69e-1a9f-43e9-9105-7006f33a105c", "sighting_of_ref": "indicator--3a69e00d-8f5f-4592-bb37-562afbd7906c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82923be1-090f-46f3-8433-e4cba3a0aaa2", "sighting_of_ref": "indicator--5a406cb2-cc3d-4500-9584-705485a55daa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--011252b0-a02e-491a-a142-1b70952e1571", "sighting_of_ref": "indicator--db773030-d3b1-4a68-8b58-68920e61850b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2b5fca-1b93-4fe1-bcd4-f04633e9db15", "sighting_of_ref": "indicator--db773030-d3b1-4a68-8b58-68920e61850b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72d2393-6a7f-470b-9684-0324e10b878a", "sighting_of_ref": "indicator--23cae64d-35ca-4994-8e74-c6094b48ecb3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73986d37-eded-4c8d-96f1-2e825ae9ad1f", "sighting_of_ref": "indicator--f971c4c5-6283-4aad-872c-4d1fb8719c6d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05937356-375a-4d12-b7c5-970de655a50e", "sighting_of_ref": "indicator--dc43c3f3-7228-4c71-8ce5-ec53446bafa9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde805a5-e92e-4b19-910e-b9733c353692", "sighting_of_ref": "indicator--8d7b6f88-86ce-42fc-a651-0d68df3f4ab5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a1ecd6f-5581-4a68-95cc-473414ed32ec", "sighting_of_ref": "indicator--346a3af8-af73-4f00-bc77-7025141c831d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18e7ca7-20c3-4aa1-91a2-0f697dba0ce6", "sighting_of_ref": "indicator--02354c4b-1657-44cb-a06a-6992e3c2844e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa39f19-17ec-45a2-88f6-678e21f782d8", "sighting_of_ref": "indicator--b6f8b996-57a3-4652-bdc1-f5f8baf4784f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d567ac-8336-4cab-aef3-d09db20530a0", "sighting_of_ref": "indicator--b6f8b996-57a3-4652-bdc1-f5f8baf4784f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25571bc9-e4d8-4dc2-9bf7-b7dd1489ec42", "sighting_of_ref": "indicator--4b442886-bd9b-4901-ba99-7d898e5268a3", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4c44c7-9f76-4eb0-a87c-fc51c3397a61", "sighting_of_ref": "indicator--0d8bb198-9716-4925-b0e6-406fd5e96195", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08aeed72-52e2-4258-9219-466c764e2599", "sighting_of_ref": "indicator--747d58c2-4ff3-45c2-90c6-3ec00e415d31", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede594f7-89aa-4a60-b120-827197a4ab1d", "sighting_of_ref": "indicator--2aad8cf3-715e-4e67-95a8-336dbf92f8ba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f7ecfb0-4841-4168-9170-b69766540d55", "sighting_of_ref": "indicator--cf893325-8de6-4435-9e5d-3dd2af70258e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79761d11-bbc3-4d60-8392-e311c31fefd3", "sighting_of_ref": "indicator--cf893325-8de6-4435-9e5d-3dd2af70258e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec1a1ab-d289-4b9d-85f2-ae495118ed49", "sighting_of_ref": "indicator--ebfc633f-562a-468c-be5f-16416e18ec6b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94824b33-edce-412a-b079-a05b48e6791c", "sighting_of_ref": "indicator--c929980c-d1aa-4784-8ce4-dd8279156cf2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3287dc0f-2c12-411f-b82f-15c768ddfdf1", "sighting_of_ref": "indicator--83afa87d-c168-49cf-86f2-c2c24f5e46ec", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd8375d7-9668-4235-bda2-f9253feb952b", "sighting_of_ref": "indicator--0159ffbb-cf5c-47e9-9fa3-2c993b774c96", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896ae279-7773-4bd4-b356-34f2d31510d1", "sighting_of_ref": "indicator--0159ffbb-cf5c-47e9-9fa3-2c993b774c96", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7c9fb8-fe10-4e98-98a2-8cc6a603dedb", "sighting_of_ref": "indicator--faf21e0a-1ae3-49d8-bfba-5b0a58826261", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b503e807-0edb-4ce9-9ce8-f35a5f372a8e", "sighting_of_ref": "indicator--faf21e0a-1ae3-49d8-bfba-5b0a58826261", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--714ab3ae-9a7e-4423-8a7e-e744f62b8e95", "sighting_of_ref": "indicator--faf21e0a-1ae3-49d8-bfba-5b0a58826261", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a940950c-5b10-4241-a132-d8e2559e0fe6", "sighting_of_ref": "indicator--ad1810ae-c492-4509-b121-b4cb62757d66", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dcee712-7aac-4965-b50d-c9f1a57885d6", "sighting_of_ref": "indicator--4f2938fe-4008-4dba-acb8-73b9ac2c99b2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb6982e-9ef0-4937-98b6-6b42ce281506", "sighting_of_ref": "indicator--02cdbf07-399f-41a2-a71a-dc317b4d550e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8fd5bdb-627e-4711-bc6a-a53b58ec767f", "sighting_of_ref": "indicator--89c73b49-3b43-4780-9ddc-d695667d1847", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c98dffe-e521-4bbc-9c86-84c6393573be", "sighting_of_ref": "indicator--c6509a4c-bf54-4421-ba50-00f4f582589b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f28724-171c-4104-b285-718153658a14", "sighting_of_ref": "indicator--f044c432-0fd3-4035-8bdd-62fb4a598268", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ba82b2-d430-4546-89a5-71ed1c35d9d4", "sighting_of_ref": "indicator--f044c432-0fd3-4035-8bdd-62fb4a598268", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae7667f-8c4b-41ab-b3fa-dddfde425e43", "sighting_of_ref": "indicator--4af71107-af10-4cb8-8d8b-05080a477906", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c90488-c435-4705-a95c-0d572acb1da6", "sighting_of_ref": "indicator--604c1a0a-6c53-43b5-8cee-b39403f8b60a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e8992c-3029-4d14-b17c-67b02bfc5566", "sighting_of_ref": "indicator--9ba908f0-53ff-4950-9e5d-5c69d53a5ef7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c67857-9971-4993-8770-15303ae2d403", "sighting_of_ref": "indicator--f3c839b7-5024-4d65-86d3-1b770b839234", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc60766-4656-4a23-b9c6-f75b6873df7c", "sighting_of_ref": "indicator--04cbe945-1e64-4721-94e2-60b85aed0d23", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9c4062-a811-438d-9edc-a09f1e89c6ac", "sighting_of_ref": "indicator--79164b00-f8b0-44e6-99f4-ece47c0ae1d9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c0dfd7-ced1-4528-985e-89cda9bf7a82", "sighting_of_ref": "indicator--1f3f877a-f6ea-41d7-a2b4-544d97a02b6b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9e5123-3148-4e7d-99e5-bfd5b9312a7f", "sighting_of_ref": "indicator--6a92c079-55d5-48b6-bbe3-516da0fc3172", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf155106-69a5-4f12-a325-cb2bfc82f09b", "sighting_of_ref": "indicator--e5a4d2c1-cb68-47f1-863b-b28bae182502", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc1ee9e-1cef-4d48-b0ef-d39b0509df57", "sighting_of_ref": "indicator--93eda90c-6e00-4df5-8b7d-78bc4a00cc29", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--699f58fd-8025-4764-9d8f-d6544b683018", "sighting_of_ref": "indicator--e1227ac3-257b-48c5-88ec-e07ed877f9bc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cafc75a-fd21-4659-a090-61f20af405e4", "sighting_of_ref": "indicator--5d56700b-dc19-4449-9fc7-62fb02f09f86", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac6b7e8-8ed2-4d53-a8ba-af8e01f0fca0", "sighting_of_ref": "indicator--769d64c7-c206-420f-9396-988c75046cf6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76df6a46-c7aa-4469-9138-a57e4339a24f", "sighting_of_ref": "indicator--30e09be6-fe08-48ac-aaef-988d5fdaf482", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed72e9db-c076-41e9-8eec-97e67fab670d", "sighting_of_ref": "indicator--74d62115-2901-485f-9a66-d48fe01ac8fa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9199c986-b7ee-4abe-b34e-e9b2ab983700", "sighting_of_ref": "indicator--865e82f1-daeb-4422-a2c2-78c16ab67515", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aceeb23-1eb6-404e-8d0e-f89de8687268", "sighting_of_ref": "indicator--d7d45390-2133-4c20-b85d-14f3852ee17f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50bd332-f582-48df-9ddc-2e446e9f90f6", "sighting_of_ref": "indicator--5c4d4baf-d829-4d90-a2c8-810d8e2dbc58", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca270a20-ca94-42df-b31a-9d93734ad893", "sighting_of_ref": "indicator--e0216c51-d27f-498e-96de-50385e2790a6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b19e677-74d1-4828-8344-8a74649e1c0f", "sighting_of_ref": "indicator--d3ee46f7-b652-4da3-88fc-9bc7a31198e2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9e2c8a-9689-4777-a51d-c246fe5e925a", "sighting_of_ref": "indicator--d3ee46f7-b652-4da3-88fc-9bc7a31198e2", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114872ee-fb92-4169-ab12-71f26457f024", "sighting_of_ref": "indicator--d3ee46f7-b652-4da3-88fc-9bc7a31198e2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc555d6b-bc8f-4685-af67-3c0e99585ff9", "sighting_of_ref": "indicator--826786fc-f057-4d39-ab5c-ffa39f5ce8ae", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249215fd-3a85-4111-a0a5-af17811c124e", "sighting_of_ref": "indicator--826786fc-f057-4d39-ab5c-ffa39f5ce8ae", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94428439-b02c-4c8b-b106-7d2361e36c25", "sighting_of_ref": "indicator--2d0e8c27-f0b4-4fe3-84cc-9e9021a55f7a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f5b93b-155d-4fbe-93cb-617b068fdf68", "sighting_of_ref": "indicator--d845573a-e6a0-44cb-a326-3b82cc831ae3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c606031d-9f53-4626-8ea0-74b8a1107e72", "sighting_of_ref": "indicator--d845573a-e6a0-44cb-a326-3b82cc831ae3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35821f5d-2d69-4d8b-8ffd-95b75c56c141", "sighting_of_ref": "indicator--d267da21-8007-4ac8-b267-dac768b98e27", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62dbe934-7b84-4062-9a83-6c7278aeaede", "sighting_of_ref": "indicator--d267da21-8007-4ac8-b267-dac768b98e27", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5177a9d-3aa5-46be-af97-d670f18642b4", "sighting_of_ref": "indicator--7b19da5c-8ae6-409e-918f-e0477549099d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8afc7194-6d9e-4289-9250-b13de5b2d3fd", "sighting_of_ref": "indicator--83abee6d-c4ab-4732-903a-b252e9d7968d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044a154c-e63f-4bd9-9e5b-a9d645713d46", "sighting_of_ref": "indicator--83abee6d-c4ab-4732-903a-b252e9d7968d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257300cb-2bba-4180-a774-22e7714e276a", "sighting_of_ref": "indicator--dc9eb5fa-821d-468e-8267-3d251329056e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27540a2c-2585-4d3b-99c3-e0da392eed44", "sighting_of_ref": "indicator--dc9eb5fa-821d-468e-8267-3d251329056e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf697a6-8592-4c0a-a15b-5f3d3dab9009", "sighting_of_ref": "indicator--8752ec60-a456-4234-b66c-fb6b533e2616", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487b9146-daa8-4288-83e5-a8f8c7f08162", "sighting_of_ref": "indicator--3f394cda-c4f2-4bd3-9e56-7cd60b4585c1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed2a8a1-b5a1-4185-ab01-9192426f3a41", "sighting_of_ref": "indicator--ae5ddb43-46c6-469b-b2fe-cc267864ad8e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ba9c4c-d64f-4946-a890-78fc362fde58", "sighting_of_ref": "indicator--5c910cf7-223e-4f2e-af0e-0b0043c9c4a3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb2515e-f2b9-4ee9-8542-ac8eb163e6d9", "sighting_of_ref": "indicator--5c910cf7-223e-4f2e-af0e-0b0043c9c4a3", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5776db8-a151-4be7-86e6-c8bedaec1205", "sighting_of_ref": "indicator--5c910cf7-223e-4f2e-af0e-0b0043c9c4a3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d76e6a7-fa8c-48fa-82a0-de75a9ca7c0e", "sighting_of_ref": "indicator--d9dd3d09-fd7a-409e-9419-d4526415d370", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ccc88f-b1fb-4d37-b834-4b9ae8f02531", "sighting_of_ref": "indicator--d9dd3d09-fd7a-409e-9419-d4526415d370", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f91437-a8e3-442d-9c0a-f834ac190048", "sighting_of_ref": "indicator--d9dd3d09-fd7a-409e-9419-d4526415d370", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1a775a-b490-462a-8c91-71a0fe39d3af", "sighting_of_ref": "indicator--9a6ef759-75c8-4076-ab5e-809016d0baf5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2dee22c-606d-47a3-bca9-eb6a57914858", "sighting_of_ref": "indicator--9a6ef759-75c8-4076-ab5e-809016d0baf5", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fecbe3ed-4d68-457b-ad32-8bafe7ffcf0a", "sighting_of_ref": "indicator--9a6ef759-75c8-4076-ab5e-809016d0baf5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ad673c-ffe9-429e-b955-1f80947aeeff", "sighting_of_ref": "indicator--acaf172d-6194-4eaa-8cbc-a9afa810a0e1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2243ae-12f6-40c7-b02b-9911b9286af6", "sighting_of_ref": "indicator--acaf172d-6194-4eaa-8cbc-a9afa810a0e1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8923522-7552-4fd3-a036-75ccd44a4520", "sighting_of_ref": "indicator--29cfd270-5092-421b-b994-9357876e5bbb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47ace12-db42-4a7a-bf95-ff8ef6e2f047", "sighting_of_ref": "indicator--e5be655e-58c5-451b-9f3c-1be43a9f65ec", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d62877-f4b5-4777-a90e-920045515e20", "sighting_of_ref": "indicator--0cb7dc96-25a4-415f-b85e-c4ae33d34a33", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69f0f70-d6e5-4df2-8ff7-6c78ac955c33", "sighting_of_ref": "indicator--18544049-7fb5-49fc-b4e2-c47da077ab5e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dddcaa2-1796-4e78-b6ff-a27e5f3d0e76", "sighting_of_ref": "indicator--6ac15451-9a37-4bd6-8b16-ded49d105ac9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048e8419-8ff0-44c2-b003-f3c196fa9a4b", "sighting_of_ref": "indicator--6ac15451-9a37-4bd6-8b16-ded49d105ac9", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a8277e-0bb4-4bc1-a3ab-eb01b080258c", "sighting_of_ref": "indicator--6ac15451-9a37-4bd6-8b16-ded49d105ac9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef39c81-5d1c-402d-8f98-76f7084b3d8d", "sighting_of_ref": "indicator--6e8a7944-7b2d-401a-bc97-56d2dc7d1141", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11e5a33-db25-4db5-9744-169cf4520822", "sighting_of_ref": "indicator--f58d968c-fd5d-4e7b-990a-b4cf6c92221e", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca10181-4af3-4393-8a63-47aeca43cdef", "sighting_of_ref": "indicator--96b880c2-4553-48d2-9886-96797f7deecb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b2b3d9-8504-401d-bc79-b9a397b90929", "sighting_of_ref": "indicator--aa7827c2-ecc8-495e-b544-252c1c8446d4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f724b0-1b99-4839-b77d-fc55f240f36b", "sighting_of_ref": "indicator--aa7827c2-ecc8-495e-b544-252c1c8446d4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabfd28a-de39-49ad-9423-e8ac9dfd0447", "sighting_of_ref": "indicator--57613ab9-cf94-442a-9ef7-dad2c25cf3bf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1d569a-941a-4d0c-883e-a524a3f8b2d4", "sighting_of_ref": "indicator--57613ab9-cf94-442a-9ef7-dad2c25cf3bf", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79e237e-d8c6-421b-8f69-aef8bcb18c8c", "sighting_of_ref": "indicator--57613ab9-cf94-442a-9ef7-dad2c25cf3bf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9fb3dd-aacf-44ea-9170-a944f5b33663", "sighting_of_ref": "indicator--ca54aa35-1972-48a6-ae45-334e503a5dfc", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8cf8a2-af0d-4c84-8f30-1d74ec521f8a", "sighting_of_ref": "indicator--327df584-97a6-4191-8f60-22694bcc0621", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa732d0f-3e7d-4d48-acfe-fb96453c5048", "sighting_of_ref": "indicator--5e843eb3-1762-4bb6-a775-2ceccb5cf899", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e67a544-f0df-4f81-8461-2478523d185d", "sighting_of_ref": "indicator--5e843eb3-1762-4bb6-a775-2ceccb5cf899", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ea7944-2e49-45d0-82ba-f19f6d6f0fd7", "sighting_of_ref": "indicator--9216a26f-9233-4179-8d8b-431df4fae023", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2506b6a2-6826-4c13-bf81-66b81ab1c31c", "sighting_of_ref": "indicator--567141bf-c0cd-418d-b7c7-3decf4fa4dbe", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044df3cb-9757-4c7e-b120-d20179156517", "sighting_of_ref": "indicator--f335af6a-77dd-4237-8c6d-e482d0c6d0c6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ad45ee-c325-4445-8aa0-77556e08cee7", "sighting_of_ref": "indicator--701fdb20-0dfd-4aaf-9e44-5fa2f7b6f1b4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec6d519b-d0ef-42ce-910c-200f6a7d1104", "sighting_of_ref": "indicator--af182175-c29f-4778-9347-fe40da8d4414", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6aeb6c-3822-4899-8e72-b52f11ae9de5", "sighting_of_ref": "indicator--a61a200d-3abc-4cb3-b86d-85ed38ed21c7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf7c00c-bdb5-48f7-9892-8ca58abc38f8", "sighting_of_ref": "indicator--101eec15-a768-4c1f-98a7-8e9d6f466f2f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d779d6a6-65cb-4209-aa05-3c7a7f5426ba", "sighting_of_ref": "indicator--c12cf934-a801-4dd7-a670-59d6c1027da5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516af213-7774-4400-bcba-bcf2b9e425b6", "sighting_of_ref": "indicator--c12cf934-a801-4dd7-a670-59d6c1027da5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc81491-b175-43cd-9ee1-b171e55ca4d9", "sighting_of_ref": "indicator--3528747f-6298-4c36-9cc7-4e7caa29965c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da46f72-9d78-45dc-a5ac-2920746be8f0", "sighting_of_ref": "indicator--3528747f-6298-4c36-9cc7-4e7caa29965c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe6ee35-1ae0-418c-b3f6-34482fb51209", "sighting_of_ref": "indicator--f9636b27-f74f-4ab1-abf2-729b81087c01", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7204d608-a374-44b7-aae1-bf04cde04158", "sighting_of_ref": "indicator--4af49b74-08ad-4306-83f0-f363df0d9d1a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5a3f3a-577b-4662-b373-fda149092566", "sighting_of_ref": "indicator--76cfbdce-c44a-4d55-adbe-a226b2197674", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad7f3c5-5395-4ffd-b015-899f6b01d299", "sighting_of_ref": "indicator--93007409-c5bf-4c97-987d-81e2242b3b5e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f23fea-148d-440d-b592-b7d7ac2bfc35", "sighting_of_ref": "indicator--3c22fd9a-feef-4840-9c6f-6b2c827e67c2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a9c037-1565-41ce-97f5-d991396f6824", "sighting_of_ref": "indicator--807d7e71-e93c-4875-bb05-629e49ccf654", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d36ecf1-2898-4a98-9875-73e1c66e8422", "sighting_of_ref": "indicator--67e810f4-d318-442e-a503-4b84e044835a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3737ecc-c633-4599-9063-1c331a6cf5a4", "sighting_of_ref": "indicator--7b512650-7649-4e97-a6b3-6e9e5b35be55", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb14161d-8920-4bf7-9ec7-e63d40db78e1", "sighting_of_ref": "indicator--2d193978-4dd8-4e42-8823-ceccd773ccc9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456fda28-15a7-4778-a534-e6577ee427ab", "sighting_of_ref": "indicator--2edd2039-5988-490a-a01c-34b717a887df", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7721a851-5bba-4589-8491-3c58b50a7c0c", "sighting_of_ref": "indicator--f96ad2b7-9d12-4501-bd71-f65334f3f01c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f5e9e7-47f7-4ea5-bafd-9f5aceee1cf8", "sighting_of_ref": "indicator--930b26e0-0faa-468f-9f6c-c93e35254cd9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b23f073-e3c8-4d15-8877-bf165310b8b0", "sighting_of_ref": "indicator--930b26e0-0faa-468f-9f6c-c93e35254cd9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5336565-e81d-4aec-b5d8-b15ecdc38805", "sighting_of_ref": "indicator--c23abb6f-b0c7-4733-afa0-09141bc33ef3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886506a0-2e17-4dd5-be76-799549d650b3", "sighting_of_ref": "indicator--5d956cd3-e05c-4eb4-afaa-6a7912bbf9bb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8b9864-649e-4daf-a1e6-ca1daf569654", "sighting_of_ref": "indicator--564e637e-2bf1-4f8b-9073-721aabaa5972", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d04958d-2d81-4b5d-a678-9a18c58e2bae", "sighting_of_ref": "indicator--c6ffe082-eaa1-47c3-b91d-4541f06cd84d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87628462-a71d-41e8-83b4-896a75fc4c0a", "sighting_of_ref": "indicator--4c1cfaae-53ad-4b87-865a-a370d7c7e844", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f162696a-3d75-460a-8e60-3fcff726e57d", "sighting_of_ref": "indicator--4c1cfaae-53ad-4b87-865a-a370d7c7e844", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48cfec2-60e7-4da6-870f-8cc5619db891", "sighting_of_ref": "indicator--873b8ccf-5709-4a44-b380-3a376e1670cf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4481b3b-4b76-4af9-a90a-57a50aeea216", "sighting_of_ref": "indicator--55f8f1fe-d688-4f4c-aa88-5f98af7d2f63", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d781761b-5f86-40de-8229-03590a6f50ea", "sighting_of_ref": "indicator--4330f9be-d248-45b8-8123-d93b7c08ebc7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ade0433-628f-4056-a662-016986fa9ab3", "sighting_of_ref": "indicator--d268b07e-bee1-4bdf-b806-d58fdfea9475", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cedce08-7cda-474f-b6e6-4a4a2b8a7e37", "sighting_of_ref": "indicator--68331c46-24f5-4bd4-82e6-7a54d2b41696", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb701915-8f77-44d6-b6c1-10aca999ce27", "sighting_of_ref": "indicator--210c9d52-67ff-45b7-b995-546461c76925", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fbe8200-0211-4e49-baa1-f58c6590bffe", "sighting_of_ref": "indicator--210c9d52-67ff-45b7-b995-546461c76925", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83f4751-319f-4777-8b9d-d6ceebf58f1c", "sighting_of_ref": "indicator--4cfee896-3882-415e-bc28-1f9a6e3999bf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4aed2d5-8ccf-4a87-8ba0-8c0fd3595968", "sighting_of_ref": "indicator--ba1f82ec-9c88-42cd-9c6c-c817c34757c1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29587825-b5ad-4c77-b699-06dbb84b7e42", "sighting_of_ref": "indicator--69cab112-9d52-4a57-8914-0b1dae2d6d48", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b675a35c-32d1-4030-a3d8-dc77740e9217", "sighting_of_ref": "indicator--a3f2556c-2593-43cb-bc7e-f3e30824c4aa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242ab4d5-127f-499c-ae76-187ae179971d", "sighting_of_ref": "indicator--93905183-12e8-453f-a3d8-2cb57358f5be", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27858dbe-9777-4ddd-8e3f-fcb02fbc5145", "sighting_of_ref": "indicator--1b8c213c-444c-4156-a5ca-1b41afcb1c88", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e9cffc7-8779-4d07-bf55-98d1bb17ca34", "sighting_of_ref": "indicator--2498d8ef-63a0-44a4-a5bf-1aff2b07974e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24faa161-e922-4da4-8acc-ccd1c582ed9d", "sighting_of_ref": "indicator--02b37fce-2c3b-421c-a7ad-ec17e661f08b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73bc4315-81c0-4478-84ef-048c57019bed", "sighting_of_ref": "indicator--33a2d178-09cd-4c44-ac81-b051c769ebc3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd4dfdf-1aad-4531-be1b-7046b93b29a3", "sighting_of_ref": "indicator--023cf1d3-e1bd-4c37-ac77-0411d8e3a3e1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9063691c-9097-4d6e-8f52-620d222a57fe", "sighting_of_ref": "indicator--fe253441-29a3-458b-a89a-3c552b928991", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb8435f-d63f-4d08-9d3e-d37a2d272fe2", "sighting_of_ref": "indicator--fe253441-29a3-458b-a89a-3c552b928991", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49368715-26cc-4b3b-9b52-ab5fc88c6a99", "sighting_of_ref": "indicator--30de9465-f5ea-4b59-8193-1cc79a53b2e6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2fe2dc9-bf8d-4f9b-b90f-4e842eca02c5", "sighting_of_ref": "indicator--e45ff332-b3b6-43b1-83f5-61bf1d790099", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7c0c1a-8ffe-4ecc-a65f-13da2938e367", "sighting_of_ref": "indicator--2f5e3ffe-74cd-4860-9144-9d8d5b1dc919", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c2c6e14-86e4-4d09-a48e-d4324a547fdd", "sighting_of_ref": "indicator--927f8274-5a38-46b9-ad67-40b53b2d2f9d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc837e4f-df2c-4dd8-8ffc-cae05131c307", "sighting_of_ref": "indicator--00832db9-c7ab-4ac1-99c3-b3e1d5cf7044", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7916809d-c054-4c50-9653-d7bc0dca4ef2", "sighting_of_ref": "indicator--bf5fe682-111f-4902-be1a-255322230380", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3758ba89-10bb-4de4-b330-4d3f1351bff8", "sighting_of_ref": "indicator--34e16da4-857d-4564-a0e4-740dbb5ff53d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08afdcc-f0fb-4401-b025-25ff83a32c27", "sighting_of_ref": "indicator--7d06e61b-9754-41d9-a10a-38ccc1f668d8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da2d573-a97c-447d-9b46-2c19ca18a2a1", "sighting_of_ref": "indicator--80554685-9742-4d0b-9307-044cc826d2c9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da958e96-e5d3-41c3-ad36-d3e9a596c841", "sighting_of_ref": "indicator--b5e1354a-9eca-4a83-b522-b82b6e0ec655", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf84de5b-129b-4abe-888b-be07b5c1470b", "sighting_of_ref": "indicator--707508c3-f732-44a6-8e0a-ef4b906d3bac", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9246bf40-9b38-4f54-bd4b-00847e081e6c", "sighting_of_ref": "indicator--030cf512-c358-4e9a-8413-8973c78d30b8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291c9018-a57b-4515-a880-da026fe88b83", "sighting_of_ref": "indicator--d66e913f-5381-4906-af4f-57eed2c0062e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4759b7a7-9171-470a-9c9a-7caf98181e47", "sighting_of_ref": "indicator--b01c8d93-a853-4d07-ad8f-76165b7d0319", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c237b383-9423-4181-9114-ee466cb845a3", "sighting_of_ref": "indicator--14e2f380-eba4-40a9-848e-c53665cde8cb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ad9ab9-2f09-4825-91d3-03aef5fdca54", "sighting_of_ref": "indicator--9eadc168-3e78-4c05-902b-35d347daa00d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4be15e-4535-4ce5-8eb0-50d021557f92", "sighting_of_ref": "indicator--c49dc1a1-3fad-406b-8345-f6cb6011e877", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b10722d-17dd-47f3-ad2c-401bfd180c41", "sighting_of_ref": "indicator--3dc22dab-37a4-4a50-ba7b-0a7a4fc35e16", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceea1cd6-f0d7-4191-af5d-e4ff3979bf21", "sighting_of_ref": "indicator--ceee8065-980d-4685-b61a-9866f53ce365", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e472be8-ee68-483a-bec7-e9be7cb976d6", "sighting_of_ref": "indicator--e1d8d004-83b7-4def-84c5-49a1043c9a57", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04f807a4-aab4-403f-8f41-87aa7abf4393", "sighting_of_ref": "indicator--a34a6b54-da38-4b33-991e-72668e3e6dd0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7655343c-430d-4ce8-a9ba-32e27e3dc8c1", "sighting_of_ref": "indicator--5a2a0ca7-441a-4a86-b556-9062fcf491b4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255d3b37-9ae6-480f-b155-2db6988df2e8", "sighting_of_ref": "indicator--0cfe41f7-de99-4795-8c98-f76db233dd6f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3cfc35-5f45-4bb5-b8e2-96b56f1d3663", "sighting_of_ref": "indicator--72c1ef23-b413-4e43-a135-451f9d3e1d70", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb20bc6-26c9-485e-b52e-18c0957c74d9", "sighting_of_ref": "indicator--96735ede-3992-4a37-9eb1-086b4c486a14", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ee3fd7-cbbd-4ff7-9d32-c258d27ad387", "sighting_of_ref": "indicator--f43fe2c9-f101-4880-af49-fadd1c8b1d6f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301caac8-7a70-49c6-8fbf-2ff7b482e404", "sighting_of_ref": "indicator--e0b89fa1-1a6c-4fdb-a2ea-85efd2b63b1c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d779767d-b43e-421d-a58f-b442e3c4c954", "sighting_of_ref": "indicator--e0b89fa1-1a6c-4fdb-a2ea-85efd2b63b1c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dfbc1c0-47c3-41d4-a549-f076fdbbfff7", "sighting_of_ref": "indicator--5368d074-d9e8-406a-b0df-20c1baffe650", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d530ee3-2621-45f7-91c5-e9df093cfc9c", "sighting_of_ref": "indicator--1f32a758-3940-4226-b3b5-51e124410da0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7129d5a2-b4b8-4959-b7e5-171759fe6961", "sighting_of_ref": "indicator--9f5557c3-3243-4721-9037-801864f2f304", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74949faf-0985-46dd-895a-321cced1146a", "sighting_of_ref": "indicator--b469367b-8c22-427c-9741-5bff1887d1cf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8781b91b-fd2f-46b7-8453-4e5fa81f195e", "sighting_of_ref": "indicator--ba973f2d-0a6d-48a7-8875-536915aa4fce", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83b8a73-3b24-42a5-b167-5858163b3812", "sighting_of_ref": "indicator--33277402-ef3d-4b7e-a456-c709dff5e682", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff68198f-3424-4659-a6ef-05dc1f5dfbdb", "sighting_of_ref": "indicator--60f1a472-16e9-47a2-b8ae-03e587c58e37", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ad80da-dde7-4000-a56e-3f4144641344", "sighting_of_ref": "indicator--74d67128-ac11-4bec-aaae-4b12a7623860", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe2c54c-da54-4d2c-babd-3c2c0e4fa4ca", "sighting_of_ref": "indicator--fe3ccdeb-2971-45a9-a075-1cb4c4e1c8d0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f1df31-05e5-4891-82e1-1c60c60f7dc6", "sighting_of_ref": "indicator--edb81c2e-4699-4632-aa29-c897fa940ba8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7378418-b614-47c7-8547-5501a05ecca5", "sighting_of_ref": "indicator--bf5e896f-9e65-4ace-925a-4db5768f9abd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd72081-3afd-4201-8cb2-c3f274f7a14c", "sighting_of_ref": "indicator--f9424a3b-db8f-40fb-8216-6f2276bc5fd9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e98f2b-00bf-4a4f-8eba-79e9c717fef1", "sighting_of_ref": "indicator--f7f039e9-cb52-40b4-aa12-02a27c3faef2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a3570b-3658-4a5c-a979-944132080e17", "sighting_of_ref": "indicator--5832875c-f881-4311-a4f6-bc45ac82ba67", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dcae742-0443-4679-b84d-05362788b303", "sighting_of_ref": "indicator--11301517-9b7c-4ec6-9387-5310896a1ec7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea005586-5452-4329-bd4f-34fde510ce57", "sighting_of_ref": "indicator--43cff1b4-f695-4a28-b673-1ad6c628120b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11762b1b-439a-4241-87d1-1df28b786221", "sighting_of_ref": "indicator--4480acad-ae11-4f7b-8087-76ef8809b1ee", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c2f616-3007-487b-a46d-592e41c55404", "sighting_of_ref": "indicator--9b3ced88-7cf8-4020-8041-c1230d77c144", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585ad99e-989b-48f8-a837-ab9d1fa194a5", "sighting_of_ref": "indicator--1600417e-9f40-4990-9f28-1cb47a55a615", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc11086-94d6-4506-8b74-9bdaf3298994", "sighting_of_ref": "indicator--f574bb48-9ac6-4072-ab31-a6283976c0e4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22b8d94-5148-4b30-87e2-281a5ee0634a", "sighting_of_ref": "indicator--76ac3376-371d-494a-90d9-21d75d9bf194", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f117ad-f599-4f52-9efe-f7d50a921b35", "sighting_of_ref": "indicator--ae2a41c2-897d-4841-9ce5-0cedb6362b0a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9761d2d5-2d23-4a4b-8d26-a1afb3278cce", "sighting_of_ref": "indicator--84b1dd47-39e8-4dfa-b145-8b2a532cc614", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664762be-129b-4894-9254-2cc6d9185bc3", "sighting_of_ref": "indicator--03abc1c1-ba86-46f5-a9d8-0f282c8f4e06", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c544585-1d85-4184-b28a-8adb68a39873", "sighting_of_ref": "indicator--03abc1c1-ba86-46f5-a9d8-0f282c8f4e06", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f87cb64-be14-49a6-b852-93cfa9fdc553", "sighting_of_ref": "indicator--a15c09d6-6bbd-431a-bc4b-891088947149", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb937975-40ab-4b2e-965c-c1c62267ecd5", "sighting_of_ref": "indicator--f5be4828-ab6e-4a4c-bba2-eb4288e3dd78", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8394cb9-3565-431e-abb6-1802a80a7666", "sighting_of_ref": "indicator--c5aef97b-e0c2-401d-99d0-a7b6cd60d26e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--135dbdc4-32e6-435d-8a35-72f46953a599", "sighting_of_ref": "indicator--d309fe63-afd1-42ee-9651-21a5cd70b059", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1932e86-daf3-459b-a70c-f26ecbe97eea", "sighting_of_ref": "indicator--db285755-87be-442d-8475-9fb673f89bb3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f7f4ad-b80d-4fe1-88db-b68f823b67aa", "sighting_of_ref": "indicator--fd4c0df7-8702-414c-bb35-e57dbb3f9629", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64bc6d7c-7e80-4ac0-b809-fc4b0f6bf0c4", "sighting_of_ref": "indicator--6f115266-b44c-4b02-9587-6831c4f7815b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41a6353-9ef4-4ad1-8a56-06bf4a9e17d1", "sighting_of_ref": "indicator--390e659b-14a4-4501-a2e8-1e6bfced62d3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c65956-f4f5-4d3c-ac73-78f56a3ffe86", "sighting_of_ref": "indicator--49e90a46-0ab0-444d-94b6-48d69de1a88e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c2b529-ab12-46e7-8a0d-6276a7c24892", "sighting_of_ref": "indicator--9418e924-33cb-4149-9c4d-80ef0f2e9b94", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2f3e8d-2040-4592-acdd-6ffd460ce3db", "sighting_of_ref": "indicator--9418e924-33cb-4149-9c4d-80ef0f2e9b94", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86685539-cfec-4eec-b21f-4d56eb18fc7c", "sighting_of_ref": "indicator--14981a56-b2c1-4587-9be2-e4c745d62993", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a0b68c-d343-438b-ad10-fc3b5f54d692", "sighting_of_ref": "indicator--9c6660ef-c750-40a4-b998-7a35732bf353", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a139c9-5878-4f78-8446-4e734f3939d5", "sighting_of_ref": "indicator--e0beead2-9d1d-42f8-ad7b-0cd7c4698f71", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d991fd-fd60-424e-ad9f-f8ddcc6ed68b", "sighting_of_ref": "indicator--360f234b-6aa3-4d5c-8877-060321ca21cb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9b506d-c279-41e7-8e68-2e63a9d5fa16", "sighting_of_ref": "indicator--c7403ff1-58fb-4499-853d-4fd473baf732", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b49c4b-a418-442c-83b9-aebb2123b877", "sighting_of_ref": "indicator--314c1cd1-5f62-478f-b690-f435404def90", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79d1671-ac98-41c8-821a-90fb047fe57d", "sighting_of_ref": "indicator--e342a6ed-d836-4302-826e-9c81542f9d79", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23c7ec5-cad3-43fd-ad54-4aaf468b1115", "sighting_of_ref": "indicator--e342a6ed-d836-4302-826e-9c81542f9d79", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d586d2-d7fa-4687-98fa-393823b4e68f", "sighting_of_ref": "indicator--ae8f54e3-8ca9-4142-9258-c889abb21ea9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99fa46a-7c48-45ad-90fa-8cd72095d74d", "sighting_of_ref": "indicator--ae8f54e3-8ca9-4142-9258-c889abb21ea9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4911b628-34ca-4654-85e0-242f0ce67780", "sighting_of_ref": "indicator--e9b80d9b-8203-46ea-bbdf-2b6f3f7edf9a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1337c50-710b-477b-ac06-60f87e780468", "sighting_of_ref": "indicator--9d43f831-a631-4b34-baa6-4d9fbdf36ab0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c6b68c-4233-4dad-b4ac-7ddbdb79020a", "sighting_of_ref": "indicator--00b868a4-cc53-40bd-8f61-b94cfa168dbd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c35313f-0244-45d2-88a7-3d452312b3ae", "sighting_of_ref": "indicator--6b8566bd-e974-492d-b096-3eaf4295f783", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9072120c-ed41-4286-9fb7-59a6b4a015be", "sighting_of_ref": "indicator--537fc317-94be-4b2e-bea7-3e1beaf5a30e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4a43a5-5f96-44eb-a545-67b1febebf31", "sighting_of_ref": "indicator--b39b5fdb-290b-4788-873e-ac1e8815f852", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6071be-c035-4606-91fd-f71841ed0a7e", "sighting_of_ref": "indicator--b39b5fdb-290b-4788-873e-ac1e8815f852", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540f57ac-b596-462f-b404-27c0868aa2ef", "sighting_of_ref": "indicator--695ab191-bf0f-436c-b6af-13b3580b55dd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103a0b46-8b8e-4486-a0c2-b75deebeee97", "sighting_of_ref": "indicator--1fafcdf3-ff60-4564-9e5e-aa3d42d95873", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904d40d2-a675-4555-9bca-75e1f8c71a0a", "sighting_of_ref": "indicator--bc2af69c-a41e-4399-8c65-89db655254ac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32cfc045-e521-42e2-9185-be6e2d518aaa", "sighting_of_ref": "indicator--cf9fe4b3-eaf4-4a3a-82cc-3253abdb6e45", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9024b98f-f364-46e9-8ccc-1583f5d7b4ad", "sighting_of_ref": "indicator--8a4144dc-7b9b-499d-84f6-596fc1e48eaf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f430720d-ee15-4795-903c-a0e2c2e61e50", "sighting_of_ref": "indicator--3ff268f6-d650-4601-886a-ea668256116b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f000d76-24b9-4ee6-806b-744ced704bb2", "sighting_of_ref": "indicator--b59350dc-808f-4073-9c29-05e450f0a822", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7bffb1-2b51-4e23-a02d-91267d54bc65", "sighting_of_ref": "indicator--35c69231-7871-4555-8e77-b20c3e9562e4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd65476-e316-4d9b-bb69-b5648bb9c60c", "sighting_of_ref": "indicator--51b09a8e-2aca-4bfd-b01a-4547e80112ca", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184dc92f-cef4-4e60-9eec-67dc133dc57f", "sighting_of_ref": "indicator--d329a261-9b3a-4b97-ae50-d61963001f65", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4100ae-d424-4a47-84a0-e94e5589cfa1", "sighting_of_ref": "indicator--10f36bb9-a3c2-4089-b2b7-2353e9a0b5a9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d982894e-25b5-44b5-ac85-9096432126d8", "sighting_of_ref": "indicator--18769b46-485e-46f8-a445-393e1a379792", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b0d1243-1cac-490e-af7c-22794640eb74", "sighting_of_ref": "indicator--bb426cee-9f8b-4be9-9eb0-0e520c767646", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85303691-bff3-4b70-865d-edad36578ad1", "sighting_of_ref": "indicator--a69869c0-77cf-4813-876d-d1a55719f3b8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89040afd-b1ba-4ff4-89e3-368022662397", "sighting_of_ref": "indicator--a15f41f5-4ef6-4648-b815-248c19073dc2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8774ecbb-62ba-4e46-9be9-078b460b3c40", "sighting_of_ref": "indicator--4d45f03b-0fe5-4dc8-a76f-48744c7bc1bc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496d2a2c-098e-4411-a3cf-998dd08c2978", "sighting_of_ref": "indicator--4d45f03b-0fe5-4dc8-a76f-48744c7bc1bc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64055d0e-5062-49ce-861d-849497700a16", "sighting_of_ref": "indicator--b6d6c212-0dba-442e-9768-e23ff892cc07", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84730784-e54b-4e5b-af36-76189e1834b9", "sighting_of_ref": "indicator--bff73b29-888a-4f0e-9fd2-8871ea0914ab", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9f862d-a90f-454a-81ff-d0de9c7e8d04", "sighting_of_ref": "indicator--e7830b75-7213-4759-8d94-3c49434e0358", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260311e4-c1f3-4ec4-84df-4fa01f744c47", "sighting_of_ref": "indicator--842f1199-79d9-45de-9e05-bf2bbe50ab78", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9155d390-4f0a-4f23-8455-4bf27b2c5c9f", "sighting_of_ref": "indicator--1fcbba35-b977-4e92-a1ee-f0b403acb9ef", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e8e9e4b-0f58-4b88-a1b4-b9fd5de915f5", "sighting_of_ref": "indicator--1b346bfe-20b9-484b-9a03-ebdc9ff8cce0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753b5028-78de-40fa-aadb-1c61b39d52c9", "sighting_of_ref": "indicator--c8ebd130-0367-4934-ba1f-7cd91ca912ed", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb65b04-3756-4dc6-806e-d734bbc70ec3", "sighting_of_ref": "indicator--c8ebd130-0367-4934-ba1f-7cd91ca912ed", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51221df-995e-4f21-84ae-6df291ed165e", "sighting_of_ref": "indicator--a8c03b9c-284a-40b9-a51c-2aab04d9b9b9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1474ca-70ef-473a-94d6-8a675db62c9c", "sighting_of_ref": "indicator--e7b3b790-703a-441b-b93e-d49b1a371667", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d375766-aa98-4e49-9a1c-60306f8d1aaa", "sighting_of_ref": "indicator--39b6609d-86f9-449e-9ba4-cee2ca95c5a6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ba0ec3-5f7e-4fc3-ba9b-58f7a87fe341", "sighting_of_ref": "indicator--7146db14-2e9a-43fb-aec1-19493d1b1caa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9b9eaf-4c56-465a-b267-51f870d76298", "sighting_of_ref": "indicator--77e4f1e4-bef1-448a-9641-ad4008b445b6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642b2c20-fed6-4584-be25-1b76adef73fd", "sighting_of_ref": "indicator--e1d291f1-d0ef-40a3-8285-b99103436c58", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6e460e-9253-442b-b5a3-a644f4eb00bf", "sighting_of_ref": "indicator--4031cfd3-3edc-4549-8b7c-8a53a593b2f3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48caeb90-7a80-4926-94ae-6e55d9270cd3", "sighting_of_ref": "indicator--4aedfc31-4839-466e-a295-17b3d38a5228", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--779f2f4f-49d8-45d3-8ef1-4bd5515e5cb8", "sighting_of_ref": "indicator--c788e159-2ac3-4cb0-9d36-adada7730885", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afcc73da-2693-4d32-b729-aabe2062bd1e", "sighting_of_ref": "indicator--1a3d74d0-8708-44fa-ac6c-9fd5fc5c5481", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf14af5-b415-440b-92d9-e8a67e4c9694", "sighting_of_ref": "indicator--5bbb8c9c-757c-4874-a08c-685be93e5428", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2659c4c5-be17-44d2-9868-f1db79e31100", "sighting_of_ref": "indicator--45b40897-5adf-4ad6-b47b-c5eb5ee37132", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ddcf88-fcaf-4c96-97a6-5c8b43d9d213", "sighting_of_ref": "indicator--fd7143fe-007e-4ece-a2fc-62946a9c5335", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1b2b53-a1cb-407b-b7c1-4cba5cdba570", "sighting_of_ref": "indicator--cdc1a7d4-2c3b-4aef-9561-460c19cb3806", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0112fecb-3dc3-403f-8ba2-17ce4afd626c", "sighting_of_ref": "indicator--3fdb3814-5d13-46cf-b20d-636526e84448", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c01284e-b943-451e-aa10-792556abaa28", "sighting_of_ref": "indicator--c5af5702-8bf0-4808-a369-e1db391cfff5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9ea7b9-8052-4a0c-b8a6-3d9a74b1fb62", "sighting_of_ref": "indicator--0980e7b3-4587-4fb3-86fe-644b67ad1985", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d1f339-7959-48d2-a3b5-60da1f99cd16", "sighting_of_ref": "indicator--4a95e7c4-2c6e-4f06-928e-196ee7e2f89a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab052387-ceb6-47f2-b3bb-c6eb40877bc9", "sighting_of_ref": "indicator--d744fe25-103c-45f5-9afc-b3b0459057c4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ebe821c-a2ff-4457-afdf-0f8dfb4ab9d2", "sighting_of_ref": "indicator--813ca483-4a4c-44b2-a78c-41e00159cbd7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f10d5c37-9361-48cc-aea2-fa79514f119c", "sighting_of_ref": "indicator--a2c0539d-ea0b-40e3-a387-b2882035d7ed", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff33245f-4be8-49a1-9084-e749bacd25c0", "sighting_of_ref": "indicator--8ff0d6aa-8444-407d-9f31-7eaf08193a9d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d464d0-679f-4b94-894b-0bc9afce3812", "sighting_of_ref": "indicator--8ff0d6aa-8444-407d-9f31-7eaf08193a9d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854bc264-eefd-4c9d-b891-34b0c9f2b288", "sighting_of_ref": "indicator--12901e36-66f3-4d22-b0f5-27862abb16b2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82366e2d-7843-4123-b535-daeb75ffcb30", "sighting_of_ref": "indicator--12901e36-66f3-4d22-b0f5-27862abb16b2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4e08eb-94a9-4f10-9af8-7054a910e7a6", "sighting_of_ref": "indicator--678b0728-cb34-4196-8c20-9b55c09452d2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b428360b-eecf-4f54-b22d-12f6b1eafa28", "sighting_of_ref": "indicator--678b0728-cb34-4196-8c20-9b55c09452d2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2918a71-1cca-4902-8c82-7fa7c695c112", "sighting_of_ref": "indicator--f760b888-2224-4053-a625-9ee3340c64d4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725cba9c-1662-4b44-8581-cfde84572c1c", "sighting_of_ref": "indicator--f760b888-2224-4053-a625-9ee3340c64d4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0deb991-01eb-43b2-b976-6edff9e2d9e9", "sighting_of_ref": "indicator--8a365697-f099-4a18-beda-a115ed424a36", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89de0e8b-dc41-40b5-b0dd-38b79272bbd5", "sighting_of_ref": "indicator--8a365697-f099-4a18-beda-a115ed424a36", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7bb0225-8eb8-4a32-a50b-768c00cf57bb", "sighting_of_ref": "indicator--501de234-3b60-4206-b7b4-61c58661541f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ccb989-bbbf-46e2-bcf4-d4a365b9f5c9", "sighting_of_ref": "indicator--501de234-3b60-4206-b7b4-61c58661541f", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736e5711-11a7-4fa9-833e-dc2788268ba4", "sighting_of_ref": "indicator--501de234-3b60-4206-b7b4-61c58661541f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f5aa11-c3fd-451d-96a0-5002d7b249c7", "sighting_of_ref": "indicator--d97bd670-2462-4f3f-93fb-0f115ea7dac1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fbda0b9-091f-47de-b3da-a58acd244eea", "sighting_of_ref": "indicator--f7907e28-3bba-44b9-a4d9-abd10c4c46b5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd479852-791e-4c12-ba1f-83a0ab2b1ebf", "sighting_of_ref": "indicator--f0c299d4-4cee-4fb5-93f9-17e425dc1e36", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c974ccca-234b-4b2d-adfa-2e4969893181", "sighting_of_ref": "indicator--e3cc8bdf-0b8c-4a0d-a1dc-7c89436d7e5b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f79c67c-3c00-4dad-866a-d692963cf0ea", "sighting_of_ref": "indicator--ed55a0a6-8b8d-4936-a378-e910777d3f5e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc38975-08de-4cec-b68f-1b84258df4b4", "sighting_of_ref": "indicator--bbe5b759-5827-4790-8a95-2f47da24b3cc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833fa9f3-06e8-4322-8df0-6eeab45211ca", "sighting_of_ref": "indicator--813811a3-060c-48c9-8341-65385ceb39f0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac953a1f-822f-4146-af7d-d4f6c7f45c44", "sighting_of_ref": "indicator--d191d626-5bdf-406c-a8c9-7b507e852a59", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ee5847-69de-4822-a20f-dedcce5c5a23", "sighting_of_ref": "indicator--d3987de9-25f6-491f-8226-deb21e2eadb1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0da30a1-a078-4f27-b475-b88497598c47", "sighting_of_ref": "indicator--a1b9a454-a5b9-4aee-a4d4-bd3cdfd5f8e0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4293ac67-273d-4ada-8479-6ed4e3656202", "sighting_of_ref": "indicator--eef5ee69-ae36-45ce-8a5e-bbb1c8550e80", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a6ac16-3a1b-426c-9ffd-dcca997e4eb4", "sighting_of_ref": "indicator--eb37759b-a443-4fe5-9012-b44985117de5", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b35b4c7-3a8d-4db5-901b-ac07d4cf38bb", "sighting_of_ref": "indicator--5160129d-991d-471c-b33e-cc14b3f36d8f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a415f8c6-9581-4c58-b002-04b3eed70e14", "sighting_of_ref": "indicator--f887317e-f1e0-43f9-919e-2a4e57c051d5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a4bb47-cf38-4129-ab81-cf2ed6d26654", "sighting_of_ref": "indicator--f887317e-f1e0-43f9-919e-2a4e57c051d5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8097d571-110e-4bdf-b156-e0fbdc03c097", "sighting_of_ref": "indicator--488e38f2-9138-4a02-9ffe-84db3563a037", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b476fa04-4794-4590-a6e3-c2b9abd28555", "sighting_of_ref": "indicator--6903a480-4393-479c-8c1e-940a91f03560", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e91e97b-6a3f-431b-a32b-cea6440f74a9", "sighting_of_ref": "indicator--4d08cff5-d131-4645-9f4f-07db217d3955", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2254ee83-7470-4f05-b33a-d2281e373f23", "sighting_of_ref": "indicator--704a6b2d-5803-4ef4-8704-a5ef1783b522", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4c093a-a5d3-4302-a8bf-381de8784bff", "sighting_of_ref": "indicator--68963d00-bc29-43ff-82c1-484365991978", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99074ab-c90c-4811-bb59-cd134e36e287", "sighting_of_ref": "indicator--ef58f465-588a-46d1-8e68-ef3df2896c42", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652f0218-9d9c-49d8-bd5b-2228447a6a8b", "sighting_of_ref": "indicator--64a8e56b-ca5f-404e-9422-45dcfb3597d8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c8848a-4fb1-4fac-a2df-80d62ae26297", "sighting_of_ref": "indicator--64a8e56b-ca5f-404e-9422-45dcfb3597d8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d0ef4c-d4b3-41dd-8b35-7474cd57c0cb", "sighting_of_ref": "indicator--479c394b-b643-4791-b4d8-2f36d44c8e41", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06fa35c7-ba3e-489e-8642-5047669132c2", "sighting_of_ref": "indicator--c93c1147-fc69-4c92-a96b-85d09cdcc283", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1413ce3-20f9-42ff-9137-c77ae697c603", "sighting_of_ref": "indicator--0ccf6df0-6e46-42e0-8a63-9ebdda1afd61", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c570fb-287c-4c00-8664-4390afb5be4a", "sighting_of_ref": "indicator--0ccf6df0-6e46-42e0-8a63-9ebdda1afd61", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d73c7db-2fb6-4c63-82de-6f31b4fc0835", "sighting_of_ref": "indicator--6825da2c-0e79-46dd-80b5-ac28755c156c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28805d92-eb17-41a1-adf7-5a24b9ebfbd5", "sighting_of_ref": "indicator--33ce78f1-72a2-44c9-b6dd-2e5fd58792a2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3239199-efb2-48f9-9622-43272c50385c", "sighting_of_ref": "indicator--62a9358f-3d80-4b72-a506-a80d20579695", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4318d33-44ef-4103-ac9d-7d3d920d90a2", "sighting_of_ref": "indicator--62a9358f-3d80-4b72-a506-a80d20579695", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537ddd08-bfc9-4009-a00e-134aa12f203c", "sighting_of_ref": "indicator--a5821929-312e-4ae2-8f2f-e939913d2bb4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e510c827-9c80-43a5-8b99-6855a56b2cbf", "sighting_of_ref": "indicator--f488a578-fc07-47d5-99f0-df498f64dd85", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a825d0c7-b25e-440e-8506-94c8487d1f24", "sighting_of_ref": "indicator--91416fa7-98a6-417a-b67f-7285e516ed7c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8fc260-1e26-4ee0-a0b9-43a16a129fe0", "sighting_of_ref": "indicator--71677a73-49ba-42c0-b3eb-9bbaf61d1987", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3ccdb4-f06b-4aa0-93d2-4130c7c96485", "sighting_of_ref": "indicator--71677a73-49ba-42c0-b3eb-9bbaf61d1987", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9064795-288b-43a8-bb77-4a1a4c491b74", "sighting_of_ref": "indicator--9a8a3a27-2044-4989-bc10-8837edb5bd19", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db4c92e-6b95-4ab6-897a-3a65bf8d0548", "sighting_of_ref": "indicator--983c2360-a6ec-4ba0-b456-27c72ff0b92e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a83974b-86bf-49c6-be47-a11a7d91ec9b", "sighting_of_ref": "indicator--a6d8bac8-eda6-4813-939f-38e42c3b1e2b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d048c064-8433-4e5d-bb12-61c02a7287d8", "sighting_of_ref": "indicator--0c0e5196-cd53-4d5d-b34e-b094619c89a8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3294c76-577b-425e-ae2a-293d1d2b7f5e", "sighting_of_ref": "indicator--e60a499b-ff26-4a75-b40a-fee842ea2383", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cdee0cf-771c-448d-b93a-2ea744c2efd1", "sighting_of_ref": "indicator--2360d159-63c8-49a9-9bfd-1df485e3a795", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9a9f48-1ea6-4756-a7b9-51bd00dbb88c", "sighting_of_ref": "indicator--893367a5-4ad5-4b8a-8d81-a3e20f8a6511", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b29bd651-9863-4919-b3ed-dad8a5ad35e0", "sighting_of_ref": "indicator--db6eb2b0-e848-46d7-8f7c-c4e044f68415", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03424980-0cf6-41ba-8e3a-6fe83978ea71", "sighting_of_ref": "indicator--db6eb2b0-e848-46d7-8f7c-c4e044f68415", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb315cc-e0cf-4084-a373-2a3a5d2156a5", "sighting_of_ref": "indicator--3d806f36-93f0-44d5-af42-c35d4d3300ad", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd040b0-5d19-4d09-b7c0-e729f25bbe84", "sighting_of_ref": "indicator--3d806f36-93f0-44d5-af42-c35d4d3300ad", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a787e83-eb15-427b-af8c-879f6463d469", "sighting_of_ref": "indicator--e1f75184-e668-43ef-a7aa-a9c3e99307eb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134385e9-06d5-40d0-9a8d-cebcd1858831", "sighting_of_ref": "indicator--373b35fc-e3fd-4de3-b363-a428191029a7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aedf581d-5759-434f-9350-505a98fdb447", "sighting_of_ref": "indicator--373b35fc-e3fd-4de3-b363-a428191029a7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e3d4db-d718-4fca-adb0-9bc4644991ad", "sighting_of_ref": "indicator--ae6b95b4-c8f8-4335-ba0b-060b76a914bf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bca540e-9a8f-4508-944f-7f176ff84562", "sighting_of_ref": "indicator--9df87bba-ed21-45e8-b028-749381f7d850", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a207b7-aae0-469c-8167-ca2977ef20d2", "sighting_of_ref": "indicator--3b172889-33af-47ad-b0d3-906dcc87fa68", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0fd3ac-0c9f-412e-a24b-31be1d42d993", "sighting_of_ref": "indicator--efd1d2d0-1877-464f-9336-5ac0f0da09d0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b62aa1-0f4b-4334-a2df-8e6d5f980dee", "sighting_of_ref": "indicator--00cdf518-f67e-43a8-8d67-2f47d5f013c1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5658598-839a-4315-969e-fe63f6300346", "sighting_of_ref": "indicator--00cdf518-f67e-43a8-8d67-2f47d5f013c1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--109f433b-d8c3-467b-8748-13630fc48e15", "sighting_of_ref": "indicator--a2d55b71-9d91-4f21-8dd6-7ea7bc297668", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c236275-d9af-413f-827d-72ec8ec1cb7b", "sighting_of_ref": "indicator--43afaed9-63ef-4751-8482-828d6c4202ac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a36e5bd3-93eb-489f-8a20-2d1ee8e9128d", "sighting_of_ref": "indicator--43afaed9-63ef-4751-8482-828d6c4202ac", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821923c7-c137-47f8-8866-12d6fb39f799", "sighting_of_ref": "indicator--78945510-11ce-472d-816f-c677322c5cb6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ae11e1-2a6c-48cc-adb8-59cecccc1652", "sighting_of_ref": "indicator--f45c924a-9b7b-4f27-8a26-f392f34ff5ae", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7745da-b9e3-475c-9863-7c0d2ffb1d2f", "sighting_of_ref": "indicator--f45c924a-9b7b-4f27-8a26-f392f34ff5ae", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1093521-e9fd-4d15-bebb-62ca5632c2d5", "sighting_of_ref": "indicator--daf5f42a-64be-4888-b38d-ba3b439ba646", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ae234e-f18a-43b2-b08f-572509699df9", "sighting_of_ref": "indicator--daf5f42a-64be-4888-b38d-ba3b439ba646", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c060e41d-ac12-4c19-83df-fd189925b1a3", "sighting_of_ref": "indicator--04ee5e5f-5709-4e08-bf0a-b14927414ecf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ba7b0a-7c91-46a8-8548-ec1f2ecb4577", "sighting_of_ref": "indicator--fde0d60d-9f42-4685-b676-5f8f5846d069", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc270f5-657c-4663-9331-eb9ba56d600b", "sighting_of_ref": "indicator--b7efb918-c2c9-42a8-b882-c8c2e2f02d70", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4cbf85-a125-411c-a1c6-c811a0508eec", "sighting_of_ref": "indicator--b7efb918-c2c9-42a8-b882-c8c2e2f02d70", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1406440d-d6f1-496f-bd62-26d2054e3f1a", "sighting_of_ref": "indicator--68048065-a93e-44d0-b263-36dd34f37b4e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b11a3f-0a56-45da-89ca-d5cbc856a91a", "sighting_of_ref": "indicator--1ad17a0c-c47f-446d-9abe-2141931075c5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bab42ca-edaf-4012-a7eb-98cf61795ec1", "sighting_of_ref": "indicator--a534d72c-b42e-4b0a-b14c-772030bd9780", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05c1f77-68e3-4454-b6c2-60cb3667cb03", "sighting_of_ref": "indicator--74bb9c47-cfe0-46f7-8163-aac38b25cb03", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f829d2f5-5f94-414c-9c9d-d766c80291cd", "sighting_of_ref": "indicator--ae9b593b-d07b-44bf-9ddb-fb846664ce3e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5d13c1-48f1-42ef-b2bb-945f384f299c", "sighting_of_ref": "indicator--d899c4c8-5aca-4dc8-9fd1-61703708d1de", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1130bc7f-e0ff-4051-88d7-fb9646bdb033", "sighting_of_ref": "indicator--84c21f86-b7de-4bc6-8f0a-233375db2bb8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4763ade2-77fb-4f7e-9232-73e858bfdc93", "sighting_of_ref": "indicator--84c21f86-b7de-4bc6-8f0a-233375db2bb8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1adb1c-4d05-41d4-9b1e-e493499b1861", "sighting_of_ref": "indicator--3aa1d8cb-78ef-4001-bd16-f38568ed91fa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335deade-11d6-4a94-9dbb-068030c236be", "sighting_of_ref": "indicator--596ad901-4427-48af-9cac-91202495689b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c33c8c-42b3-44ba-9fb4-aabed6df3377", "sighting_of_ref": "indicator--6df61ff5-50ac-4fa3-b571-32752c3fea51", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac7bf7f-8fa8-4f88-b8e6-ac614c1e62cb", "sighting_of_ref": "indicator--6df61ff5-50ac-4fa3-b571-32752c3fea51", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff748352-894f-4a39-9797-1546129b5778", "sighting_of_ref": "indicator--39aaf050-1418-410f-bf60-56b898c58fe6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3553da27-7932-4237-9a79-b85a81838904", "sighting_of_ref": "indicator--1fd9e397-c6d1-4a29-bea9-eb7c1ea5c103", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f567e3-dbd6-487a-93a4-05b8b1e59a1a", "sighting_of_ref": "indicator--67c3b57b-4704-4fd1-89d1-465e9ccb3013", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8cbf4e2-6102-423a-8e0e-ae6527491a5c", "sighting_of_ref": "indicator--67c3b57b-4704-4fd1-89d1-465e9ccb3013", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cf1141-bd49-43ce-9663-e34c835c260a", "sighting_of_ref": "indicator--94d167e1-8c34-4e79-9beb-35e816c2e16d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6313179-2b60-48cf-ac8d-21bb7342d7e3", "sighting_of_ref": "indicator--97e2c12b-0a7a-4c4d-8966-d86558854f95", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c45bcd4-e76c-46a5-a01f-da0ad0664473", "sighting_of_ref": "indicator--f5aaf53b-b412-4806-8d62-6d5b09b174a0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c318cfe-6f3f-4924-991b-dd9901187718", "sighting_of_ref": "indicator--7c967ec0-4aac-4936-b6fe-35f3e433633b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b349163f-1496-499d-aec7-256bf9ad1950", "sighting_of_ref": "indicator--b9d90bb7-b66d-4acf-9f55-a3d95c572389", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48689e94-e598-4383-82d4-77e2eb57cf8b", "sighting_of_ref": "indicator--584fc37b-a7f5-4860-81be-64e4ffd5e38b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f548c3-6660-4f06-8ae9-e4ce6e93148a", "sighting_of_ref": "indicator--584fc37b-a7f5-4860-81be-64e4ffd5e38b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540de92e-cb93-4ed9-9cf6-e4cda26874da", "sighting_of_ref": "indicator--5606c370-5442-4f75-8362-ceb0fb940d45", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a755dc07-7ab0-41e4-9d01-96c912cc94cb", "sighting_of_ref": "indicator--5606c370-5442-4f75-8362-ceb0fb940d45", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31652fad-bec3-4e23-b344-037f6bd82009", "sighting_of_ref": "indicator--1d595dde-b077-431a-b961-0ae30284ed1a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b3d066-c75b-46b9-90cb-5b6dd773a9d3", "sighting_of_ref": "indicator--1d595dde-b077-431a-b961-0ae30284ed1a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7ef2b6-3978-4763-8845-c300836225c2", "sighting_of_ref": "indicator--7022c309-7efb-4d14-b88d-ef9592151af3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4a8d88-22e8-47a1-8eab-40f96167ee93", "sighting_of_ref": "indicator--7022c309-7efb-4d14-b88d-ef9592151af3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f3af63-e2d1-4432-bf34-a95fcb25bd1c", "sighting_of_ref": "indicator--77a4bcfe-0324-4845-b361-ef729b39351f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac155ba4-a04b-429b-89db-556dcf1fbea2", "sighting_of_ref": "indicator--9b4fb51b-2377-41a8-8392-a3c4a408d3e9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaad932e-c955-4aca-ac6b-38daf2f07446", "sighting_of_ref": "indicator--0ada0829-fb89-41ee-913e-adbd4cfef420", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69697eec-4987-43d1-b4a7-44b1c9ee400d", "sighting_of_ref": "indicator--7b14f8f5-56cc-4d86-a983-48c6f2fa7d34", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180db56d-febe-4840-82f9-1338fa544002", "sighting_of_ref": "indicator--88e72929-8c86-49ac-82b8-f74cb2f8a55b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d59fe71-a2c4-4d58-8295-548861e94c6f", "sighting_of_ref": "indicator--d65ee9f8-2d4f-435e-95a1-217242875f9d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe9fcdb-1f35-4800-a45c-34e27e415f1f", "sighting_of_ref": "indicator--c92de750-9360-45f4-8bcf-c94fad0d7335", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c34f2f3-c015-4a64-bc9d-cc7b66322483", "sighting_of_ref": "indicator--bc84bc27-efc7-4473-b9cf-bce34fae8293", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b4c5f5-c8f8-4439-ae24-4d6cbd1cb15c", "sighting_of_ref": "indicator--da4d66a2-9137-4e31-aaa9-bf1798a242f5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3366638-8f2e-4804-a84f-6f5b7d4699bb", "sighting_of_ref": "indicator--da4d66a2-9137-4e31-aaa9-bf1798a242f5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2359adec-d3a3-42d9-a597-3749ea1e2e1f", "sighting_of_ref": "indicator--cec6ed28-eb76-4d39-8c66-21ca0090e522", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b750e43-596a-41fe-ab98-ec5bdf3cd7ce", "sighting_of_ref": "indicator--cec6ed28-eb76-4d39-8c66-21ca0090e522", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de9636f-8cc6-4d8f-92b3-eb13459557a3", "sighting_of_ref": "indicator--bbf2438c-f3f6-4426-88d2-a2061c7d7147", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e346ad-0ccd-4e05-90ad-f5d50b5ba734", "sighting_of_ref": "indicator--5da9c551-a4d4-4555-bcea-52ef5800d157", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1888d8e3-ac8c-41b4-8979-68201fc86c42", "sighting_of_ref": "indicator--5da9c551-a4d4-4555-bcea-52ef5800d157", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91bad25-029c-4c14-8b7e-f16e6c566213", "sighting_of_ref": "indicator--d41d51eb-5a02-4729-bbff-024960c59b5a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298a675f-0e1e-47c2-8bc8-3efe24ad1fab", "sighting_of_ref": "indicator--4ae35587-843f-4f49-897c-05cf2fb481be", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74971668-019d-4fab-a762-5d2fe030f911", "sighting_of_ref": "indicator--739ec999-80a2-4b01-9f01-02a9565e2a56", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51595986-21cd-4021-9f0c-e0ae87d0c3d9", "sighting_of_ref": "indicator--f2620d46-337e-4dae-969a-9297088f50bd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc5a901-d5ae-48a9-8b9a-f2e5f7f4731f", "sighting_of_ref": "indicator--f2620d46-337e-4dae-969a-9297088f50bd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b318c0-94c5-4dc1-815d-cde870c6d35f", "sighting_of_ref": "indicator--6a9f5826-48f4-4114-a6d4-6730ada83077", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd54fc0-7d26-47e2-b2be-3333322af8f6", "sighting_of_ref": "indicator--b8951d3a-0f35-4e97-8460-2c2b48570807", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a00dd16-51b9-4d0c-a47c-e4308770dc95", "sighting_of_ref": "indicator--b8951d3a-0f35-4e97-8460-2c2b48570807", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677b4eff-c706-4652-8bfa-e7f6e0119b0d", "sighting_of_ref": "indicator--9d810942-00f0-4420-a059-bfd8828d55ee", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f645cc-a7f5-4c20-9695-6c476227cb3f", "sighting_of_ref": "indicator--18f65e10-1948-48cc-a175-c251e0707ec4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7639130a-e18f-4572-976c-0635aee57650", "sighting_of_ref": "indicator--273bde96-0caf-4275-a0c2-95e0e4e0c037", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3959599c-970d-4a27-9a5d-4ccac3f2d1aa", "sighting_of_ref": "indicator--c994ff9f-4d6c-41da-b4db-7a864def93b6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a30c13-55fd-4427-b5df-ae456cc10192", "sighting_of_ref": "indicator--a162b63f-e771-43fb-a814-99714a3c751c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9670ad7d-7c26-4ceb-8429-91c42bf0f11b", "sighting_of_ref": "indicator--a162b63f-e771-43fb-a814-99714a3c751c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee8d784-66e4-483f-9a81-d308dcc6017d", "sighting_of_ref": "indicator--35fab9c1-777f-44cd-a8a4-252e343de76d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0515dbb3-50fb-42cd-a884-b2101033d297", "sighting_of_ref": "indicator--bbe2a511-bddc-4f6a-9e56-fef02144a4fa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946ba414-7123-4d63-84e5-ea4c0ad4b53a", "sighting_of_ref": "indicator--bbe2a511-bddc-4f6a-9e56-fef02144a4fa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80843f27-7439-4650-8a73-4a5a79674403", "sighting_of_ref": "indicator--87e89908-7d33-4229-8a39-bf39af403f6f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076bcd91-3322-416d-bd47-a571a45a27c1", "sighting_of_ref": "indicator--f60919dc-906b-4108-937d-faab1752475e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66001c16-a711-4ab8-8f9f-d1fa5ce6e0bb", "sighting_of_ref": "indicator--64859493-a91c-4d92-b115-e40eb1a49406", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ff342f-35fc-42e7-a480-d607c1e0a785", "sighting_of_ref": "indicator--e323ecb3-dd1b-4d0d-ac0b-6c716ac0439a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5ddd2c-8c43-46cd-8c4b-38050c86c8a9", "sighting_of_ref": "indicator--71a7c2e5-1ef6-4da4-8bec-e88b9a9ec2d0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d8817e-11ff-4ea1-8b2d-68d5a7df1a76", "sighting_of_ref": "indicator--71a7c2e5-1ef6-4da4-8bec-e88b9a9ec2d0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ede33f4-9e47-4bde-91f3-64f4348ee32f", "sighting_of_ref": "indicator--1cba7e2e-0b97-454f-a69e-fbfd1d4455be", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84bcc97a-e0ce-4966-9cdd-9ce0d8cab5d5", "sighting_of_ref": "indicator--1cba7e2e-0b97-454f-a69e-fbfd1d4455be", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9c9966-3a7a-4786-b23e-a4a8192327bb", "sighting_of_ref": "indicator--491877f9-36d2-4ec1-96c6-0348abe2c855", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584b424d-b8b5-4191-855a-ef1345dfdc92", "sighting_of_ref": "indicator--a5935fea-bbab-4ffc-8cd8-2fc193774688", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de8f528-1d2c-4dd5-845a-f74feef10615", "sighting_of_ref": "indicator--a5935fea-bbab-4ffc-8cd8-2fc193774688", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c103064-2136-4572-89bf-26b4ed2633bc", "sighting_of_ref": "indicator--59a3f4a7-7177-4ab9-a6a9-323255f87b3d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac6ba8e-e14c-4e48-b3d8-b87dca098558", "sighting_of_ref": "indicator--de55351c-bd5f-498e-b0ee-5fae98ea481d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6607ff97-a9c8-46c8-8530-90f4455641fc", "sighting_of_ref": "indicator--de55351c-bd5f-498e-b0ee-5fae98ea481d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4234f3-2555-4064-a9aa-e88619224496", "sighting_of_ref": "indicator--217e1c69-4d9f-485f-950a-e617a5c33539", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07ed12d-5c16-4376-b88b-988b719364f4", "sighting_of_ref": "indicator--fd536386-3b94-44fb-b3d6-2c17c073c317", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9db23f1-fc96-4d55-a2da-8f7cd4f4a213", "sighting_of_ref": "indicator--f609fc47-748f-475c-9e6c-461f967ed4ad", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc58642-eeca-4e60-9f98-7f24d8df0e85", "sighting_of_ref": "indicator--28099ce2-9f76-46a5-8367-967e0c4fd407", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a16aafa-0329-4ced-b089-0d2013ceee64", "sighting_of_ref": "indicator--28099ce2-9f76-46a5-8367-967e0c4fd407", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d06136-b241-442a-8701-2511b97fea9b", "sighting_of_ref": "indicator--19fe0c9c-7cb7-47a7-9bf4-e4047c9db5fb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2e9f73-08ba-44a0-b3bb-9886b42ebc65", "sighting_of_ref": "indicator--13033248-f7c4-45e2-8e24-3d6fa4cdeea3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa219a47-a77b-4153-95a3-18d41c0bae0c", "sighting_of_ref": "indicator--7be202ae-274b-4d0c-8484-5f3ed418166b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225929e2-9433-48a5-9a8c-5cb356bd3125", "sighting_of_ref": "indicator--7be202ae-274b-4d0c-8484-5f3ed418166b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c876bb-9766-4023-8965-a71a7ed5e726", "sighting_of_ref": "indicator--5f51c48d-5203-449c-ab96-5bbc4e43d6ad", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa7ce22-c541-4e9e-813a-ae4e9847195c", "sighting_of_ref": "indicator--455ed163-130a-4a30-887a-7a99fdc5d779", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120b4387-0385-4526-8770-215f33c8167a", "sighting_of_ref": "indicator--c9d93131-9f1e-479c-9e33-6733c007a370", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a584ca-a094-4290-8a3b-c4053353019b", "sighting_of_ref": "indicator--28fff7e2-1335-42fe-b3fa-5a962e964470", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9d86c5-35d4-47f8-81cd-21b5ada2602c", "sighting_of_ref": "indicator--65ddacc5-07f3-4b73-9f9d-ab246799bde6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092a4568-1f63-4768-bc01-e8988b7dba67", "sighting_of_ref": "indicator--65ddacc5-07f3-4b73-9f9d-ab246799bde6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c1cfff-1e9d-4bf7-93a9-31e74c168345", "sighting_of_ref": "indicator--492a714b-57fc-4cc5-b504-ba3712933769", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cc8cb3-d867-4cda-988a-707be51941cb", "sighting_of_ref": "indicator--e1cc504a-538f-4649-9e15-782366328a95", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f27095a-1ffd-49e7-9433-2a6092da09a1", "sighting_of_ref": "indicator--aa9b1b16-a45e-4e87-8032-bab54dee6bae", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552403bb-a4be-4d1c-93fa-2b3492994423", "sighting_of_ref": "indicator--15863596-e703-4c90-a8d1-f9cd7900c7fc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6c1054-d3ab-46fb-b229-ed10509d196e", "sighting_of_ref": "indicator--d8f1e3bc-ade7-4ca4-8a6e-0a4d17125616", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d314a57-d870-4581-9e2c-45844511c21e", "sighting_of_ref": "indicator--6cfce75c-ba8f-4c63-8a92-618731ab50f0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e14fb40-cc2c-4525-aa93-5e8055195c1b", "sighting_of_ref": "indicator--6cfce75c-ba8f-4c63-8a92-618731ab50f0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f627c2-bf75-4ef6-9b69-37248a3ae2ba", "sighting_of_ref": "indicator--73c1d5e4-5902-4913-9088-152fe9c9dd44", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3e2e6e-7b94-404d-85bd-314035c50025", "sighting_of_ref": "indicator--73c1d5e4-5902-4913-9088-152fe9c9dd44", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3071bc-1966-4372-a8f1-fcd5d8356aee", "sighting_of_ref": "indicator--1891f52f-7306-4ff1-b440-2e4ce87d41b3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f2c449-e90b-4547-9d5d-40e6e8fde240", "sighting_of_ref": "indicator--7e5f1ded-b9ef-4730-8994-898382857cc8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8122ff97-d6eb-4bb9-bda6-8add9063941e", "sighting_of_ref": "indicator--7e5f1ded-b9ef-4730-8994-898382857cc8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c827ce-9ef5-44b1-bfe7-fbdccae9c525", "sighting_of_ref": "indicator--e471b244-dd82-444d-9abe-47737fdc3dc1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ee04ba-c1ac-414f-b9cc-2eba9ea657af", "sighting_of_ref": "indicator--e471b244-dd82-444d-9abe-47737fdc3dc1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479c9dff-14d3-41f1-84ee-77e2904a5ac0", "sighting_of_ref": "indicator--e4c0399d-bece-420b-8905-767a68d92ef8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5968dc-d260-4ee2-97f5-30b5d5c7630e", "sighting_of_ref": "indicator--c6d4028c-5094-4df7-b353-7a5d32609135", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbef644b-5c6b-4410-9ba3-92e075559e2a", "sighting_of_ref": "indicator--7a0273b7-3fe6-4167-8e37-4bd832703099", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf01c3e0-b607-4b82-8e42-30c5799c5705", "sighting_of_ref": "indicator--7a0273b7-3fe6-4167-8e37-4bd832703099", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252b6387-1eb0-48d6-aae7-222356f9119a", "sighting_of_ref": "indicator--848e83e7-0017-4f04-9188-7ba1e1d33d19", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0d3798-84d8-47c5-bd51-d1af225a7518", "sighting_of_ref": "indicator--316b49b5-5679-45b6-8a70-b59901e4fc02", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7055cb86-8770-4f08-88e5-90bacb018e9a", "sighting_of_ref": "indicator--3c2939d2-67f5-49b3-8f7c-6a3c3b0416d2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc90932-4809-4489-8b3e-0dbb679f8493", "sighting_of_ref": "indicator--c849309f-bad5-4eee-9695-c12504bec4cb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7ea827-e319-4719-9ccd-6039ad1cc51d", "sighting_of_ref": "indicator--1bc42baf-cc77-47fa-8305-28e8c8a400b7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e2d84a-c03b-46eb-afbb-5af757a34e33", "sighting_of_ref": "indicator--d1e4f269-7804-4e69-abbd-ac05487d7a7d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d946dc5f-0b55-44f8-a69d-167974338a65", "sighting_of_ref": "indicator--0310986f-f8fc-489e-8cff-00a498d32277", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07214ab2-f14e-4d03-bcbe-98e9823d9823", "sighting_of_ref": "indicator--0310986f-f8fc-489e-8cff-00a498d32277", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5e1ce2-85e2-459f-a1ce-bae7e7b8ef42", "sighting_of_ref": "indicator--9b1bb965-b408-4faf-987d-81d84505a6c1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f7aa0c-09b2-41d9-8e08-7083363cbd9b", "sighting_of_ref": "indicator--c6ef8334-a28f-478e-b8b9-43604543ad43", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34b5373-885f-4726-abb9-b38a9617a76c", "sighting_of_ref": "indicator--486dcf33-a33d-42c1-bf5b-c66928b971be", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e16edc-5258-4d36-99ad-9cdfbba7154f", "sighting_of_ref": "indicator--242838b6-c5b8-4cdb-a265-65e1a5658486", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391cccab-f6c8-4575-aa85-9fb97e3dfdda", "sighting_of_ref": "indicator--242838b6-c5b8-4cdb-a265-65e1a5658486", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b3f6b0-b376-4917-b8e4-3c2adb83f80e", "sighting_of_ref": "indicator--acc3482e-6557-4040-b1d0-1c026db2ec5c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9882c5ca-f037-4f6f-ac99-d4cb56414b29", "sighting_of_ref": "indicator--acc3482e-6557-4040-b1d0-1c026db2ec5c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2887ca8f-3187-45a3-9795-de72f1456198", "sighting_of_ref": "indicator--863b0fba-fae3-4fcc-ba94-105c4ff87efc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03397834-c2d1-463f-a6dc-3b2c7af7d350", "sighting_of_ref": "indicator--3a58dd4a-7807-4a8a-ad75-7646534ce496", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5bf352-e347-4cbc-9a03-3565c4508282", "sighting_of_ref": "indicator--72f40c7a-0e56-40d1-bfb0-584a6c9200bb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac3f2003-4b29-493f-b070-431565ae5260", "sighting_of_ref": "indicator--b72a6746-0fec-4383-b1f2-5c8d04bdba56", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42962838-45e3-4267-89b9-bf5d14dca8e5", "sighting_of_ref": "indicator--19626e8e-b631-40f6-9dec-072d7f86caba", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3f076f-19ac-42cb-9794-815152561731", "sighting_of_ref": "indicator--2ced43b5-803b-44e8-af4a-f52379beb9f8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3e3969-0928-4597-b399-731f61a5ac57", "sighting_of_ref": "indicator--980a9446-1aa4-460c-9e2d-ce6be72eb4a8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e119bfd-1bce-419d-9318-2d028aab6505", "sighting_of_ref": "indicator--3c5d48a7-3172-4c24-b87f-aa1e381f3df5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe9b147-b826-4657-82a6-5fcc3fc637fa", "sighting_of_ref": "indicator--77224fab-095f-4602-86fd-355b4be213db", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fbc1d69-3d0f-4750-8b0c-ac224798a999", "sighting_of_ref": "indicator--90b7ee1e-bd3b-43b8-a086-157db7aaa6d5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d189ad8-bb36-4444-8a9e-341024ae1335", "sighting_of_ref": "indicator--90b7ee1e-bd3b-43b8-a086-157db7aaa6d5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062dce5d-b3d3-4a7d-b52c-b6a849036f1d", "sighting_of_ref": "indicator--aa78045e-9b84-4dab-af46-0675388b83a8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c0ef81-24e6-4da2-971c-efe0279dcb72", "sighting_of_ref": "indicator--c8b62fa6-7fe4-4a2c-ae8d-707ec2367fd2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd94061-0b75-4a64-8a2d-4082bea0992f", "sighting_of_ref": "indicator--f1bbe1b3-d6ea-4b75-816f-f68371868cf8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921566fe-8ee5-412f-a777-2fdd9e178d69", "sighting_of_ref": "indicator--f1bbe1b3-d6ea-4b75-816f-f68371868cf8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7159000e-6a60-41fa-b285-7b6e51e05f4e", "sighting_of_ref": "indicator--25d1678b-1b6b-4465-896b-18ba7320dc4a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a73265d7-5c73-41a6-9020-bbf38cc9c487", "sighting_of_ref": "indicator--11028f9c-99df-47e8-b84c-0728634d7abd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9bea6e-d399-4ceb-88cf-c12949a820cc", "sighting_of_ref": "indicator--2aac3e04-698c-4c47-b9cd-5a21dc1b38b5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51768af-be58-47a3-8fba-bcc7f7bf11c9", "sighting_of_ref": "indicator--f1149b8a-f70e-4530-9448-11ed2f8e7d92", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770a6485-490b-4186-92d2-e5bf5cb22b2e", "sighting_of_ref": "indicator--d5197a36-f0b5-4ca9-8d1c-62e900e4bfda", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0109a4-9d41-441f-990a-3d30fbe3ea29", "sighting_of_ref": "indicator--57b17b78-7292-42d9-8166-447a7d623546", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb604029-5eae-4f00-8014-8beeeb975b79", "sighting_of_ref": "indicator--23adf21a-dc28-4d4c-be3a-59592eb3122a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73911ac3-1823-47ad-b4ec-0a6d57b6e22b", "sighting_of_ref": "indicator--23adf21a-dc28-4d4c-be3a-59592eb3122a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114ab12c-31fb-442b-909d-42a7f82cfd9b", "sighting_of_ref": "indicator--e93b611b-632e-4cf8-ba01-8ae2c5d0a7d7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b834f98a-386a-4b1c-9f97-4667dd6749ae", "sighting_of_ref": "indicator--448f2254-a91b-4d67-a2d5-da84275c9e02", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50eead12-aeab-4575-8c58-1380177e5879", "sighting_of_ref": "indicator--448f2254-a91b-4d67-a2d5-da84275c9e02", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de1e749-029b-4ceb-bf55-b60d1ce88aab", "sighting_of_ref": "indicator--a2a3076c-d024-4c14-9bef-f58a22f676ed", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d893151-f1e9-47cd-b800-47351a0bc52d", "sighting_of_ref": "indicator--7b797af5-ce3b-49f6-9b4d-485427e2342c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82206a25-8aca-4ca4-876e-515da2d9ab76", "sighting_of_ref": "indicator--7b797af5-ce3b-49f6-9b4d-485427e2342c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e8d45c-f628-4d80-93f9-968ff3770414", "sighting_of_ref": "indicator--ffcd88c5-a452-4e78-91a4-7a9f50b0c179", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc437b42-d3f7-41c3-81ac-493ad4302090", "sighting_of_ref": "indicator--82f7abca-9f89-427d-afa6-136df1b478af", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49931f6-0cda-4d76-ab69-9be792ac4eb7", "sighting_of_ref": "indicator--9c557ae9-470e-4435-96bf-90af8c7f476a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79f1c6c-ef63-4573-83d5-d5434c5ecd8d", "sighting_of_ref": "indicator--21821d35-c76d-417f-bda5-c85848378a51", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d23ea38-230e-4e6a-ae63-1612fbf7bbec", "sighting_of_ref": "indicator--6ee4ec94-f633-4d9e-b5e2-293bdc281010", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92156d7c-f74c-423c-81c1-bbfb8b6807ec", "sighting_of_ref": "indicator--6ee4ec94-f633-4d9e-b5e2-293bdc281010", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b9984e-fd02-43b3-aee2-f9ee4bf7bd19", "sighting_of_ref": "indicator--0b3c6240-954e-442f-9000-eb5fb62232c4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--443a8b6e-36d4-46ea-b1f0-6970cbe76684", "sighting_of_ref": "indicator--db324964-0261-40d5-8b21-25bdad32db64", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9914ebc-c10e-4b02-9d18-440060292604", "sighting_of_ref": "indicator--db324964-0261-40d5-8b21-25bdad32db64", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4f5a3f-1f1d-4ed2-845a-b0a1f776c0dc", "sighting_of_ref": "indicator--18fd3d55-e91a-4d92-b04c-9e23063158da", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad4dda5-4203-41fa-8f05-2adb49a4302b", "sighting_of_ref": "indicator--18fd3d55-e91a-4d92-b04c-9e23063158da", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f383a9ba-652f-4543-9438-1cb96fda1852", "sighting_of_ref": "indicator--e2665906-de80-48bc-8b7a-1b600767e134", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc832ad6-2698-4081-8082-71687a7d48fc", "sighting_of_ref": "indicator--e2665906-de80-48bc-8b7a-1b600767e134", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23254fc6-371b-4289-ba35-61baadc3065f", "sighting_of_ref": "indicator--baf43dd8-eec8-4c27-b08e-eda5a3aa568a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e48bb0-91a4-4462-8b73-c03a6c689aca", "sighting_of_ref": "indicator--669b28a5-802a-4f3d-a24e-ed5ddf84639e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb81c3f-f235-4d06-a932-85a02bbb8fbe", "sighting_of_ref": "indicator--5cb87005-6d5e-450a-a027-1d0a186fc226", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd466b3-9a0b-4200-9b6d-b4c1384fbfb4", "sighting_of_ref": "indicator--38e0cf5e-6fd5-48f6-add5-e26edea1cc01", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fde3761-dc53-4b95-a67b-29049d447951", "sighting_of_ref": "indicator--54628dae-4313-4ee9-bbdb-c719667b4c57", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ec85e8-78ad-4a76-a688-af33615c53aa", "sighting_of_ref": "indicator--46bfd862-67bb-4b29-9443-1361f18c2c6c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fceb4fe5-b9f2-4caf-934a-0af7d3e96e37", "sighting_of_ref": "indicator--c51e79ff-1965-48c7-9b9a-b8747ec215de", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d567ad89-3840-4902-a916-b1a4017f9b67", "sighting_of_ref": "indicator--d15d2e92-26b6-4b4f-863d-4879a614ece5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cb83d0-b9d3-46ee-8cac-dda5cee4bf48", "sighting_of_ref": "indicator--3ac6fe05-efe0-4557-b3f5-2898023a7242", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4e8ccf-5c59-49fc-981d-a96ccb5a4f7f", "sighting_of_ref": "indicator--de0eb5aa-5ccd-47f3-a097-0da47cff5bdb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11296922-51b3-4cb6-8115-5bf4e1f78ecc", "sighting_of_ref": "indicator--b14a5261-d56c-4801-9a33-4e39b2b20d4f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd5aea4-f7fe-43db-9930-3a833d5b283e", "sighting_of_ref": "indicator--3cfce4af-4056-466f-b4ca-03ff4b1b99c5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1544509c-dbf7-4cf1-ba3b-a41fa02870fb", "sighting_of_ref": "indicator--b21daa58-394b-4e09-9f3c-c41f8cd3c33d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff22261c-0482-448d-8aed-53b21b33b1b7", "sighting_of_ref": "indicator--f3999028-32eb-40ad-8ced-465fcfdf2c60", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe6f62a-e001-4868-8e89-de3e49176e35", "sighting_of_ref": "indicator--fd5f3cce-7690-47ca-be7a-466d2149c5a9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfce08ad-2cc9-46cf-8615-04e700ffe367", "sighting_of_ref": "indicator--f38c2c6a-7afe-44a4-9266-78b4d2827a09", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12495fb9-5b9b-4ea2-b7f4-add9bddeee95", "sighting_of_ref": "indicator--a6c30af4-3f2d-4596-876a-6d926c9d5297", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d60208-432b-4a60-9c7d-ba0c87b5eb97", "sighting_of_ref": "indicator--a6c30af4-3f2d-4596-876a-6d926c9d5297", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2269360c-d69e-4dda-b3b6-b0035f187e57", "sighting_of_ref": "indicator--d1d32185-2ba9-4ca5-8c75-d552b11811bd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1622d8ce-4086-4915-8fd2-6312eb1b1e69", "sighting_of_ref": "indicator--18b505ba-2678-4222-8517-69c88f9033a2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25ef3f8-21a2-441f-bfa8-56660eac09f1", "sighting_of_ref": "indicator--8a85653d-93bb-4e08-bf68-3bb7c8cdf109", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1ab92c-a87e-49d3-8b91-33612dcc8c19", "sighting_of_ref": "indicator--728bcfa1-5ff9-4b5c-ad7d-34cd48474d69", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--186347e1-ac7f-4e9e-8ff6-e48e3725e2ee", "sighting_of_ref": "indicator--795f0685-8e9c-4cd6-b551-db280882be21", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f21789-e01c-40c7-8201-0e848950bb08", "sighting_of_ref": "indicator--72bfb186-67bb-4e10-bc7d-384ef27746f4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f10e3759-99d8-4a78-9a81-f8825ed2d324", "sighting_of_ref": "indicator--6a868802-30a4-4cbe-86ce-5bb0a4599471", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4cc8be8-87c2-48d6-98b7-d85d5aacedae", "sighting_of_ref": "indicator--b2b0a5b1-ee80-453a-a7ea-9f4f9d03d5f5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af2f2c95-60b1-462e-8556-c9ec7be44cf2", "sighting_of_ref": "indicator--b2b0a5b1-ee80-453a-a7ea-9f4f9d03d5f5", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8dff0fa-a2e6-4fd5-b3a3-822361eca491", "sighting_of_ref": "indicator--b2b0a5b1-ee80-453a-a7ea-9f4f9d03d5f5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d98cb8-98a7-47bc-b12d-a13cf998e968", "sighting_of_ref": "indicator--633df143-acc4-4e91-9d73-5d02c87fcc02", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b5c546-5789-4a7d-9520-2a235b890c2f", "sighting_of_ref": "indicator--97472b60-4fa7-4206-81bc-ef640323e8ca", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d9722d8-ae8b-4805-9d65-6005cf3806ab", "sighting_of_ref": "indicator--4730956d-7728-448d-b8fd-d69c2618cb5c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd3bf70f-262d-4ef0-97b8-81d749984e0f", "sighting_of_ref": "indicator--93f53f71-f521-4d4d-935d-927b099f09e6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4db6f4c-b558-4a19-b504-699479aea480", "sighting_of_ref": "indicator--4bc6009b-edfc-47b6-96d8-53f1678adfc9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e62b5b-83dc-4497-9605-66a37a3b4ec2", "sighting_of_ref": "indicator--4bc6009b-edfc-47b6-96d8-53f1678adfc9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c627c8-8b91-4306-8e5b-65d28447378f", "sighting_of_ref": "indicator--a2082dac-019a-46d3-9737-584f4a52142c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf7d93b-45aa-42c2-ac30-6354f9db4f4b", "sighting_of_ref": "indicator--a2082dac-019a-46d3-9737-584f4a52142c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c97efa3-8bdb-4a74-97a1-f136d4d61f64", "sighting_of_ref": "indicator--a9848865-3cfd-4373-b8db-dfa677f9582d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938858dd-6fed-44fb-b8ff-e80c75cd0f0e", "sighting_of_ref": "indicator--a9848865-3cfd-4373-b8db-dfa677f9582d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db556598-fb1d-4b8a-8180-7ebe4f496161", "sighting_of_ref": "indicator--55ca52aa-b412-4898-90d0-f1702de77bd6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7937874-29b7-4d55-ac3c-bd0358af876b", "sighting_of_ref": "indicator--b0f79404-4d75-49a9-a5f3-d86b43c8a42e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639ff394-dc3f-4341-b9dc-e87e3bbce1e9", "sighting_of_ref": "indicator--b0f79404-4d75-49a9-a5f3-d86b43c8a42e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b13f16-be64-43e9-aee2-6ca91ce1a4e8", "sighting_of_ref": "indicator--092e0702-578b-4504-b39d-8479fdd329d9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc9d183-366d-4753-82f9-68206a70b549", "sighting_of_ref": "indicator--089e3d97-c13e-4ef8-8ae3-46b337c40ebb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff07ae7-9072-4e8c-889e-86d6bb6b2c1d", "sighting_of_ref": "indicator--089e3d97-c13e-4ef8-8ae3-46b337c40ebb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776f0e7b-49ea-449c-8608-ddbdeb01de99", "sighting_of_ref": "indicator--b9e59b6b-7173-43ac-85ea-5cf74a326cf4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c831960-6d7a-41ee-8b3d-da6835224cf5", "sighting_of_ref": "indicator--b9e59b6b-7173-43ac-85ea-5cf74a326cf4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218b0ef2-7bf8-4204-b0c0-96b2c6776c0c", "sighting_of_ref": "indicator--cac1beb6-eae7-4da9-9eea-e15e3fff5648", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7b6cdf-7f7f-4ece-ab7f-6caa69f380a1", "sighting_of_ref": "indicator--cac1beb6-eae7-4da9-9eea-e15e3fff5648", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29da45e-179e-4a90-9cf6-4ed775b303ba", "sighting_of_ref": "indicator--d27d5cd4-2b97-4c2a-865c-d3f5bb7eb9d4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ef288f-f1d2-47d1-8798-1232b42a4143", "sighting_of_ref": "indicator--d27d5cd4-2b97-4c2a-865c-d3f5bb7eb9d4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06235b4-b3a7-42fc-b641-0d79238ed0dc", "sighting_of_ref": "indicator--aa661531-2835-425f-8da3-4a8f92cf9b98", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c71f4e-2d7b-4473-a14c-6f1e1a94dcc9", "sighting_of_ref": "indicator--aa661531-2835-425f-8da3-4a8f92cf9b98", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e196eb-97a6-4ddc-b22a-58d2c7812c8f", "sighting_of_ref": "indicator--a2f96990-8f79-46f2-a428-344adfc74ebc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ec78dc-0c04-4fe5-a2cb-31664b7b26e4", "sighting_of_ref": "indicator--a2f96990-8f79-46f2-a428-344adfc74ebc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60e604c-c5c6-4d20-8b8e-9f5db1f25a22", "sighting_of_ref": "indicator--8d79adcf-5c23-4f88-9abe-721c32617966", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea61a70-3202-4394-bfd3-386b14dc0e35", "sighting_of_ref": "indicator--a8ed82fd-054a-4a35-9a93-3ef2928a5995", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d991a896-78ce-40a3-8acc-745cae2bfce5", "sighting_of_ref": "indicator--a8ed82fd-054a-4a35-9a93-3ef2928a5995", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9119ce-194d-4521-b963-73931e884362", "sighting_of_ref": "indicator--b6061459-abf0-4e9b-83df-35f0acc57bbf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dda0fbb-a5bd-41c4-ae0f-dbedd705a125", "sighting_of_ref": "indicator--b6061459-abf0-4e9b-83df-35f0acc57bbf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b164d00-4050-4d94-952b-01553e63484f", "sighting_of_ref": "indicator--02dbc8a7-8ab1-47e3-8645-0949c22e6f0e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51d82ec-e0c6-41a5-a0a4-9f80d4148efe", "sighting_of_ref": "indicator--02dbc8a7-8ab1-47e3-8645-0949c22e6f0e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0ca1350-1331-49af-a48d-cabdd3e59e2b", "sighting_of_ref": "indicator--842c16de-55c7-4a56-a0a4-16a475787098", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b48bbaa-57d6-4d0c-a542-39c15b99f12e", "sighting_of_ref": "indicator--119f4fd9-047d-4b1b-a5f5-5f7c398796be", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1dfcc20-7a4f-4841-93ec-428f0105369b", "sighting_of_ref": "indicator--fcca90b2-d8cd-46b4-a660-b3c286e75f26", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13a449f-c228-40c5-83f0-d4e0adad083d", "sighting_of_ref": "indicator--ad21a898-9807-4942-b1fc-c996930f0334", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--841ea1e9-5589-4234-8ec7-687d10b4468f", "sighting_of_ref": "indicator--7e4cffae-c178-4bcc-ac31-4dcc83d359ac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44cd9872-3dd0-444c-a1cd-3b1ef0d34ee8", "sighting_of_ref": "indicator--5ff6db20-1558-4ff6-b1df-a12be5bf0e84", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a48c06-cbfe-4dcf-b65d-3f4ccbf686da", "sighting_of_ref": "indicator--f7564c0f-a97f-40e7-8661-7006919a689c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d7698e-9456-4508-95d8-6a64c8ef35b7", "sighting_of_ref": "indicator--9f53d74b-367f-461e-90cc-7c8cf9820195", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11281885-3ebe-4efb-9c8b-1ca7f8936bcb", "sighting_of_ref": "indicator--e7aa4bad-9b89-4eac-9d52-ce65782dd7b7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--656709d9-d835-4415-880e-4720c5e00b58", "sighting_of_ref": "indicator--3dc08813-047f-4e87-b0f2-1f36ba75940d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7541d2a-b8b9-4f0f-af4a-f6c25169639a", "sighting_of_ref": "indicator--7112d611-7fb5-4341-91f7-4a9d53e08144", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610b5cb7-3461-4d11-bb73-ea0e529741e6", "sighting_of_ref": "indicator--09ef9369-45ea-4680-8a03-5141a3079d91", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05718c7c-89fe-4a1c-8564-277f570f4e98", "sighting_of_ref": "indicator--2cbfb287-2c38-459c-b0b2-49b7923f5357", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2136de7-934e-40f8-83a3-3d26f078da34", "sighting_of_ref": "indicator--f504515a-d6a1-49d2-bfff-084bc32aa1bf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--febc56a4-9d0c-4eb8-a161-54e11c0fc57a", "sighting_of_ref": "indicator--14b72333-bf1e-4915-91dc-3424cd8fe1b7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97352ada-d282-44b3-8ebc-6f7dd5243891", "sighting_of_ref": "indicator--99e5f453-1095-42fd-9ab1-f4ab4fbaa3e3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ada756-2919-435b-81cf-d619faafa2bc", "sighting_of_ref": "indicator--dabb96bc-e5ba-406f-9b55-eec9f314c9b0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a85b1ad0-5aff-43c7-abf6-075bbe4c69ab", "sighting_of_ref": "indicator--9b063b91-7322-4f5e-8eff-7cb1cedfb98a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1e2611-9986-4e6d-87f1-e6ad55da2fb4", "sighting_of_ref": "indicator--d1bc504b-0618-4f4d-ba5e-a48b2e177783", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90dbb55b-19fb-4217-93fe-09afecddc3c7", "sighting_of_ref": "indicator--d1bc504b-0618-4f4d-ba5e-a48b2e177783", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f42dc7-308e-4d44-af43-b251aeced69f", "sighting_of_ref": "indicator--74c87569-a078-412e-a4d7-3ff59a4b0256", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb09d34-3fa6-4201-8359-1c3c306eb067", "sighting_of_ref": "indicator--b0248872-159e-4f62-a822-36cd7bc1a027", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d10737-c908-46fe-82de-40b42c0d510d", "sighting_of_ref": "indicator--b0248872-159e-4f62-a822-36cd7bc1a027", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904744dc-283c-4efe-ab83-463d6cf91073", "sighting_of_ref": "indicator--73a2db75-ff0c-4e01-bfab-c7e759087f63", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7a140e-2e8c-49b5-b5a5-f8fa7934867d", "sighting_of_ref": "indicator--73a2db75-ff0c-4e01-bfab-c7e759087f63", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0bcc772-5588-4dcf-bebd-82f4fed49b85", "sighting_of_ref": "indicator--544417d9-30ca-4193-91e8-c9b8bfbceb35", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450706de-0f6b-4605-a93f-f7b9c46d79fd", "sighting_of_ref": "indicator--544417d9-30ca-4193-91e8-c9b8bfbceb35", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ed3445-2eef-40a3-8d32-9b4eaa56fa21", "sighting_of_ref": "indicator--09e2aea2-5abf-46bf-8b02-76abe70f28fb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a451c5-7512-4e9d-922e-aab0c899705e", "sighting_of_ref": "indicator--977c3442-f559-4610-b3fa-1041f86c1490", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968bdc3b-4fd8-4772-822e-d472dc733def", "sighting_of_ref": "indicator--977c3442-f559-4610-b3fa-1041f86c1490", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73129afc-a869-45f7-bf3d-8a23163f98ee", "sighting_of_ref": "indicator--9ecaeab3-7b2a-4234-986e-678433665e4e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d6b134-ac0e-42b6-a3f9-82635fb39041", "sighting_of_ref": "indicator--1b178a7b-398c-4c32-822c-21922be70d8e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764201b6-02f6-4b24-989a-148646bae3bd", "sighting_of_ref": "indicator--1b178a7b-398c-4c32-822c-21922be70d8e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675a7885-0e43-4a7e-89ac-8de9a5ba3e78", "sighting_of_ref": "indicator--e7a7057b-fb0c-429f-9e27-ea3566a4f49d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d34b1c-6cd3-4648-b556-144a5d5d4cbb", "sighting_of_ref": "indicator--e7a7057b-fb0c-429f-9e27-ea3566a4f49d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1dced3-cd9c-4d15-8237-f369ced6f040", "sighting_of_ref": "indicator--dfc7914e-c37c-431a-8e9d-144ac041ac70", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd2f73e-6473-487a-9ee4-9dfbedc1f635", "sighting_of_ref": "indicator--dfc7914e-c37c-431a-8e9d-144ac041ac70", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae81a8e6-cbac-491b-ac85-b9e670e8cb4b", "sighting_of_ref": "indicator--ed89ff5b-cff6-4461-ad29-4ea38e0559a3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aabace69-9785-4115-bc73-c0c6b1db31e6", "sighting_of_ref": "indicator--ed89ff5b-cff6-4461-ad29-4ea38e0559a3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf618d9-d017-4a30-a1e0-586fcc73728f", "sighting_of_ref": "indicator--da5a8e0d-9dc0-4552-b681-8299dc780975", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1179212c-5bd4-4e86-b895-2112eb0dd778", "sighting_of_ref": "indicator--110a4c2b-d7af-4a46-b561-c0e565c02b46", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e11c07-c311-4e48-8477-8178297ff802", "sighting_of_ref": "indicator--110a4c2b-d7af-4a46-b561-c0e565c02b46", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c74655-d6d3-45a7-883c-0d1cee438848", "sighting_of_ref": "indicator--5930ba45-9afa-4ad9-b5ef-b8724c49e0f7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20fc4223-7cb7-4b21-81fa-abc8b87096b9", "sighting_of_ref": "indicator--d55f3a66-31f0-45ab-bfc4-6a0b50ec2b89", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb0a85c-7601-4f57-a6a7-5e3df06cd9be", "sighting_of_ref": "indicator--bf6d32aa-50e7-4f95-88ff-c6c3d4e45dcb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00512fdd-2444-47cf-9590-14d0509642e8", "sighting_of_ref": "indicator--3be6f99b-5c64-4c4b-b4f6-dd2fed3bc02b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a578d1d3-1dfc-4d1d-9d06-71a519efdb25", "sighting_of_ref": "indicator--3be6f99b-5c64-4c4b-b4f6-dd2fed3bc02b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee0f145-12f1-4b81-86ac-2a1d1fd539fd", "sighting_of_ref": "indicator--c38d02fe-5bc6-4897-bef5-cd4c1025e4b1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048a5335-7ffe-42b1-8222-4b0aeba4c826", "sighting_of_ref": "indicator--3b4b90d0-8c36-4062-bfe8-8bde2cb9e121", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc876f22-2d18-4bca-93e5-f7b4a56f4475", "sighting_of_ref": "indicator--c2c5891d-b375-4140-8cc5-d8da0bf5b30c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f17abc-c4e2-4f9a-ad63-2ecc12ef2582", "sighting_of_ref": "indicator--fd727b49-f3a3-4078-8f39-efe1cca566e4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1828ba-b836-4e08-ae3a-9fdbbff7fdb1", "sighting_of_ref": "indicator--ddc01463-a868-4701-84ee-3e798aa2db38", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0539d00-f4d5-410e-b444-20b4b3ad5b4f", "sighting_of_ref": "indicator--ddc01463-a868-4701-84ee-3e798aa2db38", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d52a723a-3403-4b42-a419-39918b17cc17", "sighting_of_ref": "indicator--e495b9c8-8fe1-4971-9eea-2420d91e5bb7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b51f5e9-5d9b-452a-8ffe-0b7b18f86289", "sighting_of_ref": "indicator--140b60af-4deb-4e91-8905-fdc7ed4a0730", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290c9f01-4b9a-4aa3-8d1e-df9043a549e8", "sighting_of_ref": "indicator--140b60af-4deb-4e91-8905-fdc7ed4a0730", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16b5937-2364-4a5a-9831-cc247903e261", "sighting_of_ref": "indicator--6c18604c-7126-4f26-b4f6-8fe15725883a", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3f097a-c6b2-49a4-b94c-a88e340a3ee6", "sighting_of_ref": "indicator--60c862d5-0988-4291-8723-70de46e69e9e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf08682a-31af-485b-9531-39f5d4dc7341", "sighting_of_ref": "indicator--65167829-94c0-47e5-81c4-cfff593b7081", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519e3468-855d-46a7-b945-ea825cdded81", "sighting_of_ref": "indicator--95b888b7-bf9c-469e-9569-bd5c8aaa03cb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc91fd7e-509f-47d5-93ef-8e973287618f", "sighting_of_ref": "indicator--95b888b7-bf9c-469e-9569-bd5c8aaa03cb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b566bbc-3087-4dea-8c06-69ffc0039d03", "sighting_of_ref": "indicator--fcce812d-8984-406b-b6a3-db7000bf2e50", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e5b45b-716e-4177-87d0-6841634a483b", "sighting_of_ref": "indicator--f4b0d3a8-8264-4faf-91a3-039d642cea9c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad5e301-a6ed-4e8a-92cd-88439816aa75", "sighting_of_ref": "indicator--3ff94f05-0ee6-45ce-9614-a0bb9e2859e9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53db886c-1421-4612-b7af-e9d641ea355d", "sighting_of_ref": "indicator--97cd1ac7-544b-43b6-a55b-deeb73f15750", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44639354-50ee-44ed-9c1b-a46235a4674e", "sighting_of_ref": "indicator--3c0d30fd-e949-4fe1-92e5-19687113f766", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39eec8c-2dcd-492e-a4a4-005601a52bbc", "sighting_of_ref": "indicator--e86052b7-5d9a-411a-9b10-7814b3614b0b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6088675c-57fa-431a-95af-3c75f24c7149", "sighting_of_ref": "indicator--ea502c5a-58b7-439b-a051-b72d1f65d6b1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11104d35-1707-44f1-869a-c2fb8c128ca8", "sighting_of_ref": "indicator--40ae951c-70d8-4d01-81b4-a3e61e7b4728", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41bceab-aead-43b2-a9d1-3a624f54e6a8", "sighting_of_ref": "indicator--c491f306-1a4f-4ee1-9a50-e901db2665b2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb747d6-c455-4ea5-a256-807d6bc9f35e", "sighting_of_ref": "indicator--676506a3-9b08-4885-aed2-4dc87e52e5ad", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2aeabf-f19d-42b4-ae9a-95f07571556c", "sighting_of_ref": "indicator--ce59eabf-ebf9-4a51-a9cb-ee751719747c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685774c5-ce1e-47c1-81f3-f1ba2a642d04", "sighting_of_ref": "indicator--ce7aab1d-3e79-4dee-b31c-a77a904a489e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246593b5-a267-40e7-b195-568ddfabdd3a", "sighting_of_ref": "indicator--ce7aab1d-3e79-4dee-b31c-a77a904a489e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5492e2f1-7921-4bda-b3c5-cc1a75c53748", "sighting_of_ref": "indicator--10e610ee-226b-4362-bd85-88ff57999c74", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1006f72-7df7-4801-aeb7-b6c3abc7798f", "sighting_of_ref": "indicator--10e610ee-226b-4362-bd85-88ff57999c74", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a6625c-d5ac-4aa5-83bd-1ec035e454e6", "sighting_of_ref": "indicator--495a83ff-25af-46d3-ac21-9fb26463464e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20705256-5cbf-49b2-9135-d3f05165398c", "sighting_of_ref": "indicator--495a83ff-25af-46d3-ac21-9fb26463464e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54159938-afdd-432a-a1b8-9cadba161bb7", "sighting_of_ref": "indicator--ec8a1c51-13c8-46e9-b182-5789407f229c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25cfe948-7ce4-45df-8bf0-a1924c826425", "sighting_of_ref": "indicator--ec8a1c51-13c8-46e9-b182-5789407f229c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6093e90-e9fa-4219-9268-cae9870f0e53", "sighting_of_ref": "indicator--1b9d9baa-5f2f-4d3b-a763-3e90b5a7d19c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17aafda4-5bcf-4606-881b-b00c44d693e1", "sighting_of_ref": "indicator--1b9d9baa-5f2f-4d3b-a763-3e90b5a7d19c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a713552d-297f-42b9-8141-45ff91514ba6", "sighting_of_ref": "indicator--fae4fcc8-d240-47e7-a5ff-f5f7697f3b2d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f23e399-4ea7-48f1-bfa9-1863fb64c73f", "sighting_of_ref": "indicator--fae4fcc8-d240-47e7-a5ff-f5f7697f3b2d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f3fbbec-cbb0-4fe7-971c-2ed293091d15", "sighting_of_ref": "indicator--5b1fdca7-c83c-40ee-832b-8d2aae029eda", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61166282-3bec-4f15-b1a9-3d9f9b406b42", "sighting_of_ref": "indicator--5b1fdca7-c83c-40ee-832b-8d2aae029eda", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbaf4614-f7d3-4ed7-aa4f-a6a77503bc14", "sighting_of_ref": "indicator--acc2a606-7b10-40c9-8be9-8ab576a8d448", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b0a27d-8890-4e03-8e76-e0a2814db554", "sighting_of_ref": "indicator--acc2a606-7b10-40c9-8be9-8ab576a8d448", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72819667-2cfc-48ba-8d84-593f2ae4b68c", "sighting_of_ref": "indicator--3761019e-57b7-4d56-8c26-ebf0211bf6ef", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc851e54-a6b7-456d-b152-c759fa2d1c6b", "sighting_of_ref": "indicator--0fdbf9c6-6f14-4cb6-9908-1828f44efa36", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--accee5cd-b7bc-4491-b72b-584fdfb7862d", "sighting_of_ref": "indicator--17bd98fa-7383-43d1-92a4-547fc6e56bb0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48069d4e-f455-4edc-aba5-b92aedda5722", "sighting_of_ref": "indicator--db0dfcac-a458-428c-9c9c-c59e0c61a5c6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd8bbb4-27ed-481b-b459-f8a311196aa9", "sighting_of_ref": "indicator--db0dfcac-a458-428c-9c9c-c59e0c61a5c6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c1339d-ee88-4bee-9cf6-ca04688c0269", "sighting_of_ref": "indicator--e866749e-b58a-4644-b7f1-34ccd700be8f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a4714b-f309-4a3b-a85e-bcbfcbd64a07", "sighting_of_ref": "indicator--ce102640-1d3f-4218-8c7c-09e955aefac7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22ceaa9-3dea-4d38-8516-07f87d9825fb", "sighting_of_ref": "indicator--92c32e2d-2526-45ae-bd5c-51bd1d3507aa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33fc7dcb-4d29-4ff6-927f-ebe22ce1d5fc", "sighting_of_ref": "indicator--dfd1a96b-2548-44cd-b11b-443212382563", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc794be5-356a-4ad5-862a-c004814138cc", "sighting_of_ref": "indicator--a77ffc04-e7d3-47f8-b569-9145d23bbe94", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f19d293-d474-4759-bde3-aa7e808a6b56", "sighting_of_ref": "indicator--9c842023-8552-4f7d-bca8-95d99c068ecb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689828cf-640b-42e7-ac4d-fe2600b4c576", "sighting_of_ref": "indicator--9c842023-8552-4f7d-bca8-95d99c068ecb", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387206d7-9256-4c12-b5c1-2b8002f8eb30", "sighting_of_ref": "indicator--9c842023-8552-4f7d-bca8-95d99c068ecb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d124dd-611d-4831-b1ea-93d6f489c7a6", "sighting_of_ref": "indicator--4329f12b-87c7-44f9-aae8-66bf40a8b01c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99b1f8c-21c3-4d6c-aad3-06cdafafdc1a", "sighting_of_ref": "indicator--d2848599-5fdb-47a6-b2db-fdde2ee1dee7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b399fe6-fc02-4bc0-afe3-a5d5c9b781d8", "sighting_of_ref": "indicator--4fdb5758-0ba4-49c2-94c9-42f9b15ded00", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da259a74-e5a7-4fd5-89e0-05a495e57d17", "sighting_of_ref": "indicator--4fdb5758-0ba4-49c2-94c9-42f9b15ded00", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9a24a0-4f2b-47a7-bf68-84b21a1bc8fe", "sighting_of_ref": "indicator--4fdb5758-0ba4-49c2-94c9-42f9b15ded00", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262e1910-0311-416e-b515-d13d11370a64", "sighting_of_ref": "indicator--1465fbcc-c486-4854-9ebc-9e7241dd489f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836bdb01-3d2d-49eb-ba3b-5ed8ee5c2522", "sighting_of_ref": "indicator--e8f041f4-a682-4553-a82e-639725b66e31", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf881f6-d4d6-4670-bf01-84745bddea48", "sighting_of_ref": "indicator--a6d5c2d6-14c9-495d-b128-2a7b914c5add", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a275d49c-8674-49f3-958d-ccd0a03a6836", "sighting_of_ref": "indicator--a6d5c2d6-14c9-495d-b128-2a7b914c5add", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25211940-08f4-471f-a593-602104927476", "sighting_of_ref": "indicator--a6d5c2d6-14c9-495d-b128-2a7b914c5add", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740bafea-47df-4e7a-a6f6-27152798ea32", "sighting_of_ref": "indicator--5f5f317f-17e3-4749-bdb6-bff2c14992c0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94715fc0-c5a0-4c8b-8097-888a64358446", "sighting_of_ref": "indicator--5f5f317f-17e3-4749-bdb6-bff2c14992c0", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52b98f2-a464-4a80-b9dd-0a9c4d5cd6aa", "sighting_of_ref": "indicator--5f5f317f-17e3-4749-bdb6-bff2c14992c0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72bb65ed-160b-4eca-b9ab-e293bf08183a", "sighting_of_ref": "indicator--3e092d65-2953-4f2c-9656-a520fb72d93c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c22e7f7-df04-4152-b087-776d131b9160", "sighting_of_ref": "indicator--d49e7b44-271f-4ff3-8e56-2679c9140f20", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f947df-5b31-4c8a-b332-3d783b8138a9", "sighting_of_ref": "indicator--4f69c4fd-7db5-45fa-b82a-9e57288f1789", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c60d40d-003f-49f1-bb70-8cacbaff60f6", "sighting_of_ref": "indicator--4f69c4fd-7db5-45fa-b82a-9e57288f1789", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67204d53-a0cc-4179-8a18-d67ff6174269", "sighting_of_ref": "indicator--d974cb7c-42cb-4cb7-9807-9eeb43029ca1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97c65a7-25db-461c-98fa-d22ab39f4c94", "sighting_of_ref": "indicator--1ff71f2c-5979-4c58-8648-c4595ffec274", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e2b54b-a11d-49c4-9b17-526f08e90873", "sighting_of_ref": "indicator--74e4b42b-ff8c-4b65-aee1-a92ea0becbbf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c69dc7e-44eb-4de4-967e-6ba9be81bef2", "sighting_of_ref": "indicator--a029329e-24b0-43ca-965d-656f35b616ac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263c55a9-ed91-4ab5-9c6e-32e7079d9360", "sighting_of_ref": "indicator--e4cd5d5c-bfd2-4948-988b-3c514613724b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4711953-0e0d-4efb-816a-fbdc537fdb0c", "sighting_of_ref": "indicator--7b942100-a119-47eb-9d07-8e4034da1ba0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93bcf045-c7ff-4ddc-bc34-b3b50eb5a2db", "sighting_of_ref": "indicator--c31d639d-3298-4445-abe5-a00013f1dc9e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8799b7c3-5e93-4d03-bfd7-53ae15981174", "sighting_of_ref": "indicator--5b26ed9e-b06d-486a-8936-c8f3f5203139", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db749adc-7dd1-40a4-8438-5aa4f91f2b39", "sighting_of_ref": "indicator--5b26ed9e-b06d-486a-8936-c8f3f5203139", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b316082f-21e1-4708-86f2-324840ba2a2d", "sighting_of_ref": "indicator--c931a257-e078-4f34-b286-182879606aa6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f6761a-896c-4414-bea1-7ec2e4e17d26", "sighting_of_ref": "indicator--d2c3219a-b50d-4f89-baa5-27b7b6ff2ed6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2671229c-a9aa-4a91-bbf6-ab54033b9634", "sighting_of_ref": "indicator--e453d509-2424-4522-b8b0-49eca07eeb67", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dbc2b32-9b73-48c2-93ed-1b69ac480c0e", "sighting_of_ref": "indicator--e453d509-2424-4522-b8b0-49eca07eeb67", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ea7a99-d3fa-441c-9484-6c7ba98a08c4", "sighting_of_ref": "indicator--0b1ee60c-1c23-46b5-9cef-07d1b8c732b4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b754f4-5c90-41f3-abb0-f6cf82353d0e", "sighting_of_ref": "indicator--0b1ee60c-1c23-46b5-9cef-07d1b8c732b4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf28622-876c-4906-9888-c7e80c38654f", "sighting_of_ref": "indicator--2dd23c61-3e86-4cdd-85d1-2f238274b8c1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1998a413-0749-41c5-9d51-94f4cc62eaa5", "sighting_of_ref": "indicator--381197c8-9051-4532-9205-db7fa694a597", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902a4733-cd1d-447c-9d1b-b6ac8787b727", "sighting_of_ref": "indicator--e1256d60-0dd2-40a9-8283-d1e7621bf873", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c116c4-e3fc-4589-8c67-f0487f4c8fbd", "sighting_of_ref": "indicator--1ba75d91-e0fc-481d-a01f-44290ed51041", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce14dfd5-aa62-46ff-aa7b-f6a3d8640879", "sighting_of_ref": "indicator--03452abe-3c7f-4936-9464-37aa56ca1913", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8e5718-edbf-45cc-95cb-7cbde3de3cd7", "sighting_of_ref": "indicator--9878e21b-87f3-4b91-bde0-9b949076d86a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec926c6-a99e-4743-9cc0-1edb28617013", "sighting_of_ref": "indicator--9878e21b-87f3-4b91-bde0-9b949076d86a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36801d8f-8ae2-4cfb-9a01-36df35098036", "sighting_of_ref": "indicator--1486719a-577b-48b6-bb01-c3e5fcedfcd1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4841d5e6-8ff5-4e5b-9902-1101f3db896a", "sighting_of_ref": "indicator--63f01474-7586-48b6-9910-d103c8a00e3b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f49c4ec-e962-4806-8da9-23bb7e7bc020", "sighting_of_ref": "indicator--0d8f035a-c51c-4e25-823e-5c3373241c0f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e9d672-1370-4ef3-8dcb-26dcbe76da09", "sighting_of_ref": "indicator--a20cf377-3574-4467-9a9a-c65eda378819", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39df7fd-9268-4d63-829c-37aa5df3ec8e", "sighting_of_ref": "indicator--c1dc17f4-390c-4ade-b46d-c1734cf60e71", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11b807f-ae3b-4be2-995b-f0e939e4691f", "sighting_of_ref": "indicator--3d5002f4-b1b5-4588-845e-cdf9e6734e81", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb6b070-7fbb-427c-82e9-ce44b594235b", "sighting_of_ref": "indicator--2289859d-fb68-45ad-835e-12cbe2662aa4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1bbfc5b-c0aa-40ce-a699-ffc4451793eb", "sighting_of_ref": "indicator--4816c777-aabb-4c3a-b661-70fa355ec291", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b09bc1b-5fd2-4530-aa0d-8b5c6bad7d0f", "sighting_of_ref": "indicator--24300977-3af7-438d-97b7-e2a0b3a7f98a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca2af08-6140-4919-a9ca-33d3b7dbb819", "sighting_of_ref": "indicator--9d260c4e-be8a-483e-9fe1-ac58249ef5b0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a6efbc-77d5-4de2-b499-f03a236ab6ca", "sighting_of_ref": "indicator--95ec6832-45b4-4052-9a7b-3ae672a4d9dc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1adce31e-8a57-493c-97ff-7494035c14ee", "sighting_of_ref": "indicator--10daf552-e5c3-4c21-96ed-6c371c23261e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58188d25-d5c3-4c6f-9f83-e9416845228c", "sighting_of_ref": "indicator--0db91094-361c-462e-af7f-8b0bf4663241", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6f86e5-962e-4ca2-9cbd-7c2c4c8c6205", "sighting_of_ref": "indicator--eb18da26-e2e2-4878-b687-89ecbbf69424", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4e865a-c5d6-48fd-9c7a-fba38c9d649e", "sighting_of_ref": "indicator--c75670c1-535d-40e5-b3ad-9fa131680c99", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98e0ac2-c44d-4b7c-81ac-6f4b6a4431b0", "sighting_of_ref": "indicator--f2da00fb-3a8f-431f-9c33-9cfff291dbc3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ae8cc4-e3b5-4931-8f3d-601927682c5c", "sighting_of_ref": "indicator--f2da00fb-3a8f-431f-9c33-9cfff291dbc3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97b667f-4843-457b-954b-503764f4a607", "sighting_of_ref": "indicator--78dc06ab-fd62-4868-a00d-0bdeb192cad3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94a3076-6ca1-4121-a080-3f42b07ed96e", "sighting_of_ref": "indicator--7d5c8295-1694-4a16-b69a-a3795245d123", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3880ff5-0adf-4243-a151-f3bd368319cd", "sighting_of_ref": "indicator--23e42c75-a773-4b8e-bf2c-6da07bc5286e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8809b670-cdd0-41e7-a24b-125935688bcf", "sighting_of_ref": "indicator--c5eca80d-b09d-4afc-8a51-44582194048a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65f63c3-731c-422a-9bb5-5583c0f55a8c", "sighting_of_ref": "indicator--fb9cd551-fda0-4ca0-883c-33acf353d8ba", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2257826d-03a2-442e-b37f-89aa3e649bea", "sighting_of_ref": "indicator--fb9cd551-fda0-4ca0-883c-33acf353d8ba", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0a0ff6-d10c-430d-ba78-de6a66fb6e70", "sighting_of_ref": "indicator--459a27a7-e9ed-476a-bb86-5ca59239eb5c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2628eee6-3ba4-4059-b6e5-3a261f729f8d", "sighting_of_ref": "indicator--2ea771e1-8a07-4106-b91a-7c990ed3fc8d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a2e6b1-9299-42c3-91e7-0fd7d38e53ee", "sighting_of_ref": "indicator--d7d86def-a4f9-43f3-be2a-995b439f2c30", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d623749d-e281-4a37-b5b1-c83f2f22bbbb", "sighting_of_ref": "indicator--d7d86def-a4f9-43f3-be2a-995b439f2c30", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5d8b32-06e3-4706-b253-8e3026823a1b", "sighting_of_ref": "indicator--7533450a-f3c5-49d2-b1e0-ef4767f16c20", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97559a56-faf5-4aef-bbbb-708459c1f630", "sighting_of_ref": "indicator--7533450a-f3c5-49d2-b1e0-ef4767f16c20", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099bf29d-9fc7-4d13-9c0f-6a00821b46a5", "sighting_of_ref": "indicator--127b681d-aa2f-48bf-b77b-b0259514c4d9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f957787b-c3ce-4f0a-a536-8624b4ba93e7", "sighting_of_ref": "indicator--127b681d-aa2f-48bf-b77b-b0259514c4d9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a062cb-213a-4a0c-a465-152c9ef7cbb0", "sighting_of_ref": "indicator--ec34a934-027c-4277-8331-bbbc02097c40", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745fa729-1ca8-4feb-99b7-0784bfdee751", "sighting_of_ref": "indicator--ec34a934-027c-4277-8331-bbbc02097c40", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03ea6f6-ad81-4cc9-a9e0-15df28199d3b", "sighting_of_ref": "indicator--649041d1-af57-4067-89ee-eeb5d1725fad", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d493b42-3d1a-4418-ae79-c6e2b0744406", "sighting_of_ref": "indicator--649041d1-af57-4067-89ee-eeb5d1725fad", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25334d46-e37a-4f76-8f11-27e26dca08a2", "sighting_of_ref": "indicator--18e876ef-56a8-40e8-a80b-caecb8a0516f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11f4077-c081-4f20-97f9-a614f0971e2a", "sighting_of_ref": "indicator--18e876ef-56a8-40e8-a80b-caecb8a0516f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf98d289-5244-4d2a-b22b-1585db9386e2", "sighting_of_ref": "indicator--92a937d1-7d86-4faf-9fed-936ee40f243a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4a25b8-8a0e-403d-9f97-69d467b02ca2", "sighting_of_ref": "indicator--92a937d1-7d86-4faf-9fed-936ee40f243a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a60c74-d556-45eb-ab3b-573d786f256b", "sighting_of_ref": "indicator--3538dfd2-4fc6-4bf1-bde4-08199d964eab", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca81c18-7906-40e3-ac0b-375420c9b13c", "sighting_of_ref": "indicator--3538dfd2-4fc6-4bf1-bde4-08199d964eab", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d483b3-1dc9-4e5a-a087-2528f8a76e0e", "sighting_of_ref": "indicator--1344ed91-650a-4923-ae12-aeff8bcd9fbb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9573955-38ed-40a7-a890-42d0c86cc487", "sighting_of_ref": "indicator--1344ed91-650a-4923-ae12-aeff8bcd9fbb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd4919e-9747-4cc4-ad92-02df35ae1b32", "sighting_of_ref": "indicator--8151a388-e5cc-470d-8f8d-e6ed5a45b5a6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eea7142c-381c-4340-8a36-d8dbf315711b", "sighting_of_ref": "indicator--8151a388-e5cc-470d-8f8d-e6ed5a45b5a6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b256a1f0-dffb-42c7-b0e2-e34f47d9b2c1", "sighting_of_ref": "indicator--585a903e-4372-46b2-b247-457feae45e6c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e54da25-ae75-42fc-acc2-3af714267854", "sighting_of_ref": "indicator--585a903e-4372-46b2-b247-457feae45e6c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc580b5-845e-459b-bbb4-10fbc7d54b32", "sighting_of_ref": "indicator--03ecbe97-e221-4647-8b45-08bb72eff2cb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a45366-1c9a-4181-a3ee-145a9e1037da", "sighting_of_ref": "indicator--03ecbe97-e221-4647-8b45-08bb72eff2cb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234e7f91-9374-4cfe-a89c-9b41fd0fbea3", "sighting_of_ref": "indicator--d0a54f51-8e7b-4f3f-a6e8-66153d9528f1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617373c3-94c5-41db-a1d6-bc42678f2999", "sighting_of_ref": "indicator--d0a54f51-8e7b-4f3f-a6e8-66153d9528f1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e5208b-b8aa-464b-a609-fe5bb1dcb441", "sighting_of_ref": "indicator--8de97169-19dc-49fe-aa6a-c20342d1ebb2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3794a208-44a0-4bc4-a05d-d36c2e085b1a", "sighting_of_ref": "indicator--8de97169-19dc-49fe-aa6a-c20342d1ebb2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b1ffe2-c6cd-4e9c-a2d3-1f3a96b04c1b", "sighting_of_ref": "indicator--7f3caa19-c2cb-4352-b2b5-c9ed0deca097", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d887410-bad0-44c5-bddd-0fb26f40131c", "sighting_of_ref": "indicator--7f3caa19-c2cb-4352-b2b5-c9ed0deca097", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e485c4-8d86-420d-905e-3a49356b509b", "sighting_of_ref": "indicator--55d6fcc8-7b09-49fd-a6cf-3ce555def260", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ec8e2a-3e79-46b7-86c4-65a5b22e833c", "sighting_of_ref": "indicator--55d6fcc8-7b09-49fd-a6cf-3ce555def260", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484f8571-4ab7-4791-b2f8-8677e4f44c12", "sighting_of_ref": "indicator--a8697f87-4970-477f-a70b-d383c3200a6e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5833da68-e409-463a-9924-1740c5d864fa", "sighting_of_ref": "indicator--a8697f87-4970-477f-a70b-d383c3200a6e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10f902f-e556-479e-b115-61dadb5c759b", "sighting_of_ref": "indicator--030cf547-28e9-45d9-8f56-a275af4906fa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64531c9-83a6-4a6e-a5a5-c0117e61eb38", "sighting_of_ref": "indicator--030cf547-28e9-45d9-8f56-a275af4906fa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9dcb01a-b278-4148-b491-4ffe86349832", "sighting_of_ref": "indicator--e914c7b2-521e-40fc-bdce-c0259a72d0d2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ffc847-ce0d-4c08-9e46-55635311500d", "sighting_of_ref": "indicator--e914c7b2-521e-40fc-bdce-c0259a72d0d2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46c6ff1-2612-4313-be78-a8270370b85a", "sighting_of_ref": "indicator--bfdc6437-6ea1-43e6-a18e-1087b63ef700", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3600010f-d5e5-43c6-ac44-16b9d0150e01", "sighting_of_ref": "indicator--bfdc6437-6ea1-43e6-a18e-1087b63ef700", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60480e80-5147-4fa4-90fd-c7dece9a878f", "sighting_of_ref": "indicator--f574d692-a1da-43cf-84c5-344abd5eb328", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1854fde2-ae76-4190-a07e-dca2d03afe5e", "sighting_of_ref": "indicator--f574d692-a1da-43cf-84c5-344abd5eb328", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf73bca4-b735-4877-9818-decddea41809", "sighting_of_ref": "indicator--35c8b801-ef43-4c63-8284-6b6d12f25bce", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382e97c2-25a6-47a6-ae49-d90b885cead8", "sighting_of_ref": "indicator--35c8b801-ef43-4c63-8284-6b6d12f25bce", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5987756-8f06-4473-9048-ef91624458fb", "sighting_of_ref": "indicator--4c688de3-211b-46c7-b15f-09147a623e22", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f61e07e-2183-4634-9067-b4f9dc813ca9", "sighting_of_ref": "indicator--4c688de3-211b-46c7-b15f-09147a623e22", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afa77e3a-9ab8-46c1-99fa-ab0eed43e96c", "sighting_of_ref": "indicator--5ea59b29-d687-4be9-bcf8-5a3cab259be3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2400d7-f533-4ee7-88a0-4da8771242e9", "sighting_of_ref": "indicator--5ea59b29-d687-4be9-bcf8-5a3cab259be3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7d82f1-b2c6-41bb-8d4d-1222d304b693", "sighting_of_ref": "indicator--661a3cdc-40ed-4a0c-b488-b8cc1a8a25c8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03a5f44-2b28-4e00-be92-61b03b7e2ebd", "sighting_of_ref": "indicator--661a3cdc-40ed-4a0c-b488-b8cc1a8a25c8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e16e369-6665-480b-9189-4269b5a18939", "sighting_of_ref": "indicator--969268a4-8b12-4c57-aee3-811e930581df", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44119980-9eff-4dd1-a534-9170f5b311a6", "sighting_of_ref": "indicator--44b353f4-871f-47ca-ac09-9b747eeb34b0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c1759e-c871-4c7b-8106-d80209f3a462", "sighting_of_ref": "indicator--44b353f4-871f-47ca-ac09-9b747eeb34b0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ddfefe-71af-4867-93e0-69b08ce5938a", "sighting_of_ref": "indicator--9e411fbc-fd00-4291-a117-4c475e75d0c5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d43caa-423c-4654-85d0-e630e758e621", "sighting_of_ref": "indicator--9e411fbc-fd00-4291-a117-4c475e75d0c5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440bf69b-1b1e-48b9-8b70-04aa5e1361c4", "sighting_of_ref": "indicator--f29b33a2-ca05-4377-91d6-cb9a5cc19130", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40633c4e-e900-4eb6-bc6f-58a54c1c23c9", "sighting_of_ref": "indicator--f29b33a2-ca05-4377-91d6-cb9a5cc19130", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e8935e-91f4-4f62-992b-0bf481406398", "sighting_of_ref": "indicator--5711acf8-fb1b-4f97-8147-8ff6a4827080", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc34231a-3d5c-40f7-87e3-e99368123fce", "sighting_of_ref": "indicator--5711acf8-fb1b-4f97-8147-8ff6a4827080", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d657ee-259d-4e6c-8980-76cc36a93004", "sighting_of_ref": "indicator--d98361d9-3eda-472e-a5f5-aa5d84087b96", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e597c76-eb38-4222-b70a-3515153530ae", "sighting_of_ref": "indicator--d98361d9-3eda-472e-a5f5-aa5d84087b96", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32a8735-e8e1-4794-980a-77427551c94d", "sighting_of_ref": "indicator--7a2d4482-5141-44bb-955c-6d7c3c59f44b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e8f199-9eeb-4217-ba13-e96f6214e2aa", "sighting_of_ref": "indicator--7a2d4482-5141-44bb-955c-6d7c3c59f44b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87a2965-e940-4d28-81e8-7f276911970c", "sighting_of_ref": "indicator--af22a5e3-bca4-4673-9812-5bd4d1791328", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03a2953-e168-4fae-a143-ee8a5c4f2f73", "sighting_of_ref": "indicator--af22a5e3-bca4-4673-9812-5bd4d1791328", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41de04c5-f5b0-4c22-adc6-dfb95c229817", "sighting_of_ref": "indicator--e3e8c086-2837-4eec-81d7-7a31b8c8127a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86af252f-2923-42a9-a76e-967d69f5dc3d", "sighting_of_ref": "indicator--e3e8c086-2837-4eec-81d7-7a31b8c8127a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0463457f-f42b-4f4d-9358-6faac1bc5595", "sighting_of_ref": "indicator--a5170690-3f1a-47ad-8cb3-18468ad02c2c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233dc766-b30f-443a-90fb-e9c197eb8635", "sighting_of_ref": "indicator--c0894fb4-b880-4aef-b3a5-294724f7b851", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e571c8ed-4e23-4830-a47b-1882a5ee69b9", "sighting_of_ref": "indicator--bc9a9425-6c89-458a-a468-99a4361d3d42", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b41448-d4f6-41a1-9e68-a913a49b0f4e", "sighting_of_ref": "indicator--ac67ac32-16d1-4497-bd83-e5a33da91662", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67dae861-260e-4a34-bace-3f0d11d8d63d", "sighting_of_ref": "indicator--ac67ac32-16d1-4497-bd83-e5a33da91662", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518a25ab-2b7c-4095-9826-43b178e825e8", "sighting_of_ref": "indicator--8888ddd3-ca4a-4d75-a1b5-5a131f6ae47f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3caef75a-16ef-41ae-81b6-fe2d7ebe7ebb", "sighting_of_ref": "indicator--8888ddd3-ca4a-4d75-a1b5-5a131f6ae47f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1777981-7920-4f06-81ba-c2ab7d7d27a2", "sighting_of_ref": "indicator--2c413654-87fe-4fc6-bcbb-f8acd3d5058a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0febbc5d-66de-4bbb-a904-4355f7e62777", "sighting_of_ref": "indicator--2c413654-87fe-4fc6-bcbb-f8acd3d5058a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7e0b6a-cafd-49b0-8f5e-cfea23b42f5d", "sighting_of_ref": "indicator--cb6cfa66-0958-4406-acfc-6d83a68349a1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eae0741-032b-4751-b29d-5948abcca2a5", "sighting_of_ref": "indicator--cb6cfa66-0958-4406-acfc-6d83a68349a1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6af6444-7062-4a1c-a09d-6c82f1025477", "sighting_of_ref": "indicator--fb1de1a2-bb37-48f9-b4fc-8d71300bd4c5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c04c296-b6c3-41ec-a4f2-94f74faae419", "sighting_of_ref": "indicator--fb1de1a2-bb37-48f9-b4fc-8d71300bd4c5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a8c97f-3a87-445e-b23e-86019dd49c7c", "sighting_of_ref": "indicator--d9131c57-5686-4eb8-91ad-5990596ab6ed", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f553efd-1e7d-46c2-a106-fba6e42dee03", "sighting_of_ref": "indicator--d9131c57-5686-4eb8-91ad-5990596ab6ed", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f55f6bf5-2573-4998-91e3-016e435b9dd7", "sighting_of_ref": "indicator--8dcd2847-7ae5-422d-924e-1dd5da472b69", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a12c17-5867-4204-990d-ff3a5feb7e2c", "sighting_of_ref": "indicator--8dcd2847-7ae5-422d-924e-1dd5da472b69", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36640bde-6fcc-4037-b6ea-cb559546ec6a", "sighting_of_ref": "indicator--b3587758-2843-4f56-bcb9-0b47728fd741", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d5a073-cc4a-474e-9759-827bb46bb73c", "sighting_of_ref": "indicator--b3587758-2843-4f56-bcb9-0b47728fd741", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b969dc-c069-43f5-ae90-3f291c31d7bd", "sighting_of_ref": "indicator--ff0f727d-8184-48df-8d4a-9a6ef89e134e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86840c53-1b68-4102-8fad-5fb669b38cfc", "sighting_of_ref": "indicator--ff0f727d-8184-48df-8d4a-9a6ef89e134e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bece0aa-b994-47bb-97ab-d4dc1ee2520b", "sighting_of_ref": "indicator--aa9faadc-1ded-47fe-8c07-c102a0be7ddf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60da69dc-4b75-4979-89f0-79a38a219671", "sighting_of_ref": "indicator--aa9faadc-1ded-47fe-8c07-c102a0be7ddf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5fb9b8-28f3-4e47-8500-76fe49b49534", "sighting_of_ref": "indicator--94e97070-7768-435f-b439-37c58c1564ea", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c901cb96-0592-4f02-bce7-493133f06224", "sighting_of_ref": "indicator--94e97070-7768-435f-b439-37c58c1564ea", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c424f5-d7f6-4180-b023-cad6f4eb938b", "sighting_of_ref": "indicator--b35d241a-f9eb-463a-b6c1-716eb3bc7471", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205580fe-bd0c-4f0a-a468-82088c1cbac8", "sighting_of_ref": "indicator--b35d241a-f9eb-463a-b6c1-716eb3bc7471", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee42eed-c4d1-43b2-a053-bf95849a4ee1", "sighting_of_ref": "indicator--d70c447b-e420-4308-847a-04125c485350", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43c61ab-60ee-4917-a638-f01b8b921dfc", "sighting_of_ref": "indicator--d70c447b-e420-4308-847a-04125c485350", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4146a92-3f93-4f75-a6bb-93e07daf05d4", "sighting_of_ref": "indicator--4df8d95c-65d2-4d7f-aedb-cfc8f1bd7c9a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f6690b-654c-4134-8052-f7a2f377e997", "sighting_of_ref": "indicator--4df8d95c-65d2-4d7f-aedb-cfc8f1bd7c9a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a714bc-ce8f-4c85-a0b3-1b0bf098c3c7", "sighting_of_ref": "indicator--5cf2e5c7-0a0a-4264-9c68-eb5cc364d16d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af808349-8df3-439d-852f-9f3b99702c01", "sighting_of_ref": "indicator--941cd733-0a09-4b0d-81dd-bf132d6dc66f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764331f9-4c51-473e-9375-099ac85376ac", "sighting_of_ref": "indicator--274eeecd-857c-4f72-957f-e711dda46f51", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7886508e-c111-4683-8223-cda9498d2ffd", "sighting_of_ref": "indicator--274eeecd-857c-4f72-957f-e711dda46f51", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8038130f-a0b0-4bc0-a9b0-b4572653426b", "sighting_of_ref": "indicator--472aa061-a940-4a70-911d-46069b55706f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95cce1b-1a34-4422-a8c2-0165f5bf2f07", "sighting_of_ref": "indicator--472aa061-a940-4a70-911d-46069b55706f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70cba4cb-6614-49c7-b5f4-87dc5d3cc8c1", "sighting_of_ref": "indicator--3ed07cca-291a-492f-8ca6-af467d726711", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097fd4c9-f162-40de-a64d-12196ec9e4e0", "sighting_of_ref": "indicator--3ed07cca-291a-492f-8ca6-af467d726711", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d59122d-76c2-4068-ad4d-0b716999d0f1", "sighting_of_ref": "indicator--9b97666b-0264-4f82-9416-a5eecdfe2177", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b407ef71-cb9a-4d72-b40a-69b681c82fc5", "sighting_of_ref": "indicator--9b97666b-0264-4f82-9416-a5eecdfe2177", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851b3ddf-eed7-4906-8344-d406040ef6a0", "sighting_of_ref": "indicator--5e06242c-0a90-4f1a-a4f3-38803da22e3b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbbdf0b6-8b56-42c7-b1f7-db6c591d3eb6", "sighting_of_ref": "indicator--9901aa44-90a9-452a-900a-b2ca60dc52e2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af849ab7-87b1-4d23-a240-502fad31674a", "sighting_of_ref": "indicator--33a198e0-1fd5-43de-805a-8b33746b06f2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4a4294-7510-4f79-ad28-ed075e1b6ee7", "sighting_of_ref": "indicator--eabc0b70-46ff-40fe-be94-b1ac8d28c7cf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b814f26-6135-4528-8f2c-6fff6d8dc423", "sighting_of_ref": "indicator--2e66c979-efc4-4f5c-8765-b3ffb1d8e55a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431fb508-7469-4f98-8527-f31fddbfdbd5", "sighting_of_ref": "indicator--9aa87faa-ac69-4fc2-b765-37c86a908e44", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58360f7-21a1-4b9a-91c7-ab8375f22d5d", "sighting_of_ref": "indicator--827cc233-107b-4a38-83a9-feb1ebb0d1d0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1349f5-165a-4895-be71-ea2cee8551c7", "sighting_of_ref": "indicator--8a7fe96a-f798-4ff3-87b0-4a0b4c0eb06b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be3a86e-d260-4df5-8a7c-3b38b33c9ad9", "sighting_of_ref": "indicator--230ef21d-0a97-4d37-82ad-f86e03c3bb68", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9b0a1d-c97a-41d1-9cc2-5a758d4dee1d", "sighting_of_ref": "indicator--230ef21d-0a97-4d37-82ad-f86e03c3bb68", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5883be-452a-4ddb-b22c-9b1acb96bbe1", "sighting_of_ref": "indicator--c3d1ff1d-a60f-44cd-abfd-98f80c86e535", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c11652-1cb0-472d-93e7-bca20ef715a3", "sighting_of_ref": "indicator--c3d1ff1d-a60f-44cd-abfd-98f80c86e535", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538cb4f2-8a1b-4689-84c3-a564f3ba8ae6", "sighting_of_ref": "indicator--f5c5f55e-32c4-4c14-a8ff-30ed2abd5824", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdef4023-6a17-4255-a64b-d926e6401bc1", "sighting_of_ref": "indicator--4069e8af-ecc3-4c21-85c3-77eae15d5b2e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3ca3ee-7add-4298-9b51-99d52c98da33", "sighting_of_ref": "indicator--4069e8af-ecc3-4c21-85c3-77eae15d5b2e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3b836f-5f1e-4366-ae42-c8d6ac212c3c", "sighting_of_ref": "indicator--c917bf5e-e554-449d-814d-9e8376389445", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd0e81c-5ba3-4a0b-9d94-c79cdeb7d799", "sighting_of_ref": "indicator--733739b0-ce11-4265-b34a-be32643768b4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac8b9a3-eb0f-4e0a-860b-e97f6ac14b9e", "sighting_of_ref": "indicator--94083b9b-01f6-45c0-aefa-922a03d790ed", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba96fa3-f82d-4a27-8986-a8e474b25097", "sighting_of_ref": "indicator--ad982fb0-efd7-4f91-bc28-f8ebf85b6051", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c797832-7c0d-4cdd-9150-bb770ef4a781", "sighting_of_ref": "indicator--3880a3fe-43bb-4c5e-97f9-01acb20d7f6a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b1be56-e0f5-43f3-aaad-7fac22a95d4d", "sighting_of_ref": "indicator--e369a45e-17a9-485e-8e61-5ab82270ddc1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc0cd20-8c74-4f59-a662-7773083bb251", "sighting_of_ref": "indicator--0f96e8ba-2967-4352-a865-e80fc2b9e1b0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98b8330-4eb7-467c-9ef9-b2711850a70d", "sighting_of_ref": "indicator--662c0fbf-7f39-482a-a4f5-b424902b6b50", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a35218-5e58-49df-842b-9ab6933f3b92", "sighting_of_ref": "indicator--662c0fbf-7f39-482a-a4f5-b424902b6b50", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3513f9fb-da2f-4b9c-817a-cffc18152f9b", "sighting_of_ref": "indicator--8a967c49-2481-4755-95bc-53241d6ba00c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b49045-a5ab-4618-89d5-901d69255fc5", "sighting_of_ref": "indicator--564ca862-441c-43a8-819e-deead0de9df3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d749ac3-cbad-4347-8a44-1f6c126215e1", "sighting_of_ref": "indicator--564ca862-441c-43a8-819e-deead0de9df3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e4a9b4-9ff3-4aaf-b24d-5c470ac74dbd", "sighting_of_ref": "indicator--f9db7233-6e29-4d61-ac3f-88403c4079b0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e2d7f6-af9c-438e-86f3-6d80701329b0", "sighting_of_ref": "indicator--c90c30ab-e3a9-42a2-ace9-f15a49110765", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a805969c-6358-465f-b134-0ce6393b8c23", "sighting_of_ref": "indicator--6b8af4ab-8298-4bb9-af19-35449e8a4025", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7ed88a-83d7-4d63-87f5-476cd2925819", "sighting_of_ref": "indicator--58115acb-f7ec-444a-846e-58a427f85385", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8098442-3694-46f8-9532-466366f3438d", "sighting_of_ref": "indicator--58115acb-f7ec-444a-846e-58a427f85385", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe3ec28-cd3a-4daa-8390-eff675b6fda3", "sighting_of_ref": "indicator--c09e7de4-e7bd-4960-b9df-27dde25b9e23", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21e4a72-8564-4c73-9f28-81fda40e176a", "sighting_of_ref": "indicator--a7326f9b-5af0-40d7-ad3e-278c0b1a35fe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3266dd20-e317-4ef5-a73b-691e390bbb21", "sighting_of_ref": "indicator--fd2c2c0f-d6a7-4566-9e4a-9eb37c64efd2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11edb39f-9656-463e-b05b-3166f8f9a70d", "sighting_of_ref": "indicator--fd2c2c0f-d6a7-4566-9e4a-9eb37c64efd2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac7f340-b467-4040-83ce-ec8a8bd33cae", "sighting_of_ref": "indicator--92ad6ceb-2c0c-43cb-adec-31aef0953a95", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84bdeb02-6b56-4707-8f54-bb8821efb6a0", "sighting_of_ref": "indicator--43741342-ae3d-43a0-a725-733b807b9889", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b60810b-dafd-41ac-83fb-861ff20b2856", "sighting_of_ref": "indicator--43741342-ae3d-43a0-a725-733b807b9889", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb39df09-bea5-494b-b419-9689a4a0b3fc", "sighting_of_ref": "indicator--1cfac06d-41ac-4d54-bd1f-6c85f8038d5b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e160020c-adcd-4554-b67d-1f2b9bbb6f8f", "sighting_of_ref": "indicator--1cfac06d-41ac-4d54-bd1f-6c85f8038d5b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf26735-e14e-4508-9384-f45b9abb96e5", "sighting_of_ref": "indicator--02d98015-282a-4288-ab97-80c6cd649f14", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4ec158-f989-4857-878a-aac7410fd8ad", "sighting_of_ref": "indicator--02d98015-282a-4288-ab97-80c6cd649f14", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62728854-a0cd-4482-be5c-b731ab7cd14b", "sighting_of_ref": "indicator--1c951f78-4d2c-4162-914d-e07598f9e954", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb004711-9f32-4195-ab0c-fe7d302deb7c", "sighting_of_ref": "indicator--1c951f78-4d2c-4162-914d-e07598f9e954", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a688dd-5c53-42ca-b34d-b595fab33687", "sighting_of_ref": "indicator--0422d07d-b221-40ea-9474-4ee8ea5b6c2d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654b2121-69f3-4dbb-a7bb-4cd026be0992", "sighting_of_ref": "indicator--0422d07d-b221-40ea-9474-4ee8ea5b6c2d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3465251-6f18-42a2-b605-898c23c0c803", "sighting_of_ref": "indicator--89250b31-6b06-482e-9bae-e211864fbda4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822368b3-4820-4c89-a93b-d04ff15726b1", "sighting_of_ref": "indicator--89250b31-6b06-482e-9bae-e211864fbda4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1651cb-ea57-465a-be1d-bbb4cecaf0e6", "sighting_of_ref": "indicator--0e76c580-b21d-47b4-a5f8-0f9299fe579b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81dbac81-b333-414f-aec7-43e1e0bfd69e", "sighting_of_ref": "indicator--0e76c580-b21d-47b4-a5f8-0f9299fe579b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60466b2f-5b24-40ba-a3ed-3768339e8927", "sighting_of_ref": "indicator--c06f7dbc-a001-427e-b98d-b47a7e7fd3d5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c3d30f-c233-48e4-986f-2be23e5624e7", "sighting_of_ref": "indicator--c06f7dbc-a001-427e-b98d-b47a7e7fd3d5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446bf500-f2b7-4f8f-b26d-be921ad4676c", "sighting_of_ref": "indicator--2aab92f2-7cfb-4f74-98d8-346e68094338", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128336ae-a973-4917-977a-0ffe07ca3530", "sighting_of_ref": "indicator--690f6927-20bf-4add-9211-fc05685af1cb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26cb71eb-1d1d-49a3-b60d-2daea6c75878", "sighting_of_ref": "indicator--a9f735f6-9a63-4818-989d-ff2272af754c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abbf2fc-33a4-4ae9-b05d-a5e2a83ea249", "sighting_of_ref": "indicator--f3155282-2b8e-4c3e-bc0f-83616d4a7eb3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04dfdda4-bc06-48e9-9cc6-539fd2cc95d3", "sighting_of_ref": "indicator--ccc6e02e-74a6-44f1-a0f9-828e76494c96", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18908ad-7408-405d-ac52-e99d2f07b332", "sighting_of_ref": "indicator--60bc3df5-d70a-428f-b2cb-e8a46586a916", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa038591-6b08-46c5-adb9-298fe98d4292", "sighting_of_ref": "indicator--cb389581-6e43-4acd-b399-ae14b5ccc641", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87fbcc2-78c0-4ff5-bb66-c6a624b2289d", "sighting_of_ref": "indicator--c06bd808-6dea-444b-9b2a-9937f9c525fd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca00ca6-75a4-4b55-acc7-cd93350ef466", "sighting_of_ref": "indicator--b3c0aa59-95a7-4fea-9301-46301c9f53f8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1573957e-f229-498b-bc6f-33454a1e8471", "sighting_of_ref": "indicator--80d5b2c1-936a-45b0-9dcc-027a51d9ba41", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c13a60-a26a-46ca-83db-982a21199319", "sighting_of_ref": "indicator--233f472d-beaa-428c-a42a-42ddb7ae16f2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb759ee0-255a-4cf2-b3b3-6d850a8b0a6b", "sighting_of_ref": "indicator--d0836f7a-2677-4c00-b028-4aef356b7f8f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba00fb74-b585-4248-9a53-9637afb6e9af", "sighting_of_ref": "indicator--d0836f7a-2677-4c00-b028-4aef356b7f8f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8871d6-0def-4055-9ed7-4eecb34cd8c0", "sighting_of_ref": "indicator--2610eee7-a63c-4574-92c3-23368786703c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f24a0d7-7723-4aed-9e3f-070380140ef1", "sighting_of_ref": "indicator--2610eee7-a63c-4574-92c3-23368786703c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05291757-1d21-4ec3-b312-e732f6fe1a7a", "sighting_of_ref": "indicator--5bd6c6a5-b295-4a17-b9a9-317943ce46f3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ffaa4c7-f6b8-4a4c-baa3-b9c4c96d7884", "sighting_of_ref": "indicator--5bd6c6a5-b295-4a17-b9a9-317943ce46f3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a96374-69c1-44ae-8c64-b285691c4dec", "sighting_of_ref": "indicator--af4bd3e5-0aa1-4b40-8c48-40aacf7e6462", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f8cc9a-a25e-4dca-ab68-45df179a8580", "sighting_of_ref": "indicator--fe411784-f374-43f6-af7c-760445f498ad", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8084f55f-bbd5-4f93-924e-570f63beac1a", "sighting_of_ref": "indicator--8f3db3da-11f4-4280-8761-6e0c5e80b78f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f46319d-5033-452a-a5a4-4499de7c9ada", "sighting_of_ref": "indicator--bf282922-3c63-4d88-baa5-daa01d97de75", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6923dd63-e385-4a22-9a63-193125857549", "sighting_of_ref": "indicator--bf282922-3c63-4d88-baa5-daa01d97de75", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0dc4482-5791-4448-b229-d72301022dff", "sighting_of_ref": "indicator--478f9912-f5ea-4cb6-a47e-f7e34f645247", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe5fd3a-dd30-4ce1-936a-da88578494fd", "sighting_of_ref": "indicator--1e76835f-6582-4665-af7c-bc0bb10e2f47", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93abb59-aab7-4636-ad16-39a258aa7fc3", "sighting_of_ref": "indicator--dafa1ef9-1271-4aa8-9c8a-b1cdde97fca6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a580b29e-ec63-4ec1-a056-21eafe2c90de", "sighting_of_ref": "indicator--c4cd7cd2-e032-4c56-bfcf-d847fa9a8ff6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788cecf5-e2a7-4613-8a45-32c2b6fae648", "sighting_of_ref": "indicator--b11943aa-45a6-4c4a-8f79-dd608c6711d2", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6e00a3-450f-4e73-910b-66eea54880b9", "sighting_of_ref": "indicator--171ead1a-f374-48e3-b53e-0a8a3c5d3bae", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2f14bb-4665-4633-8dca-2f5a2ff73d96", "sighting_of_ref": "indicator--37576f62-1263-4aac-b312-a5c68ae74ac5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c6fe89-7a2b-4ca4-aae9-3574fd484eba", "sighting_of_ref": "indicator--f660fd4d-1dde-42f2-8dd0-f81e947ce0cb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b4bb1b-095b-4e60-945d-7b8392f08a49", "sighting_of_ref": "indicator--1bd9561d-e30d-4639-a005-bd1e13eca2ca", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90fc2f9-80d9-498e-8d7e-2577bb8363c4", "sighting_of_ref": "indicator--61763186-943b-4357-b9e7-cb1ba89b340a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287bc81f-644e-4452-97e6-0397da704d60", "sighting_of_ref": "indicator--2f651535-7f87-4d83-b21f-0b3617d23c46", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731e67cc-314e-4a9d-b809-ff63de207ff8", "sighting_of_ref": "indicator--ed88dc7f-f773-4eea-9ffa-6dd9d492ad25", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9603f1-8c9b-42e6-825f-7f3e60e018c1", "sighting_of_ref": "indicator--356f1f2a-b441-4b09-ad4e-8a914e3b08e2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0efd0d0-28c7-4d47-b524-49c9b386e027", "sighting_of_ref": "indicator--7db53bc0-7090-4418-8c6e-4d28220e9997", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06387ffa-ed52-428e-93f1-162938e69159", "sighting_of_ref": "indicator--66bcb52e-c437-47d9-9ec9-c3523c50dd46", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4adf01d5-f381-4603-a6bb-8f7bc66c2041", "sighting_of_ref": "indicator--1d0dc596-ad45-4e93-b80e-536a5292454d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6beff5-72ff-4764-ad4f-b3d2d6a00842", "sighting_of_ref": "indicator--6df800ca-d91f-4bd9-957e-3254afee23d9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a5b99e-cdc5-44e7-bea4-be84a3e5e6f5", "sighting_of_ref": "indicator--6df800ca-d91f-4bd9-957e-3254afee23d9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8080382-59b6-434c-98a1-10c398aa752d", "sighting_of_ref": "indicator--e2b1f58d-e448-4339-aae9-ff7b7ba38365", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e2c587-d754-48b6-b57b-d8bf371c683f", "sighting_of_ref": "indicator--e2b1f58d-e448-4339-aae9-ff7b7ba38365", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beaeadd7-af97-455d-a422-1e1b5ff85b81", "sighting_of_ref": "indicator--5e624d4d-35fe-438c-a111-8207e3d72c07", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e16c8f-1c8b-4d6c-b9fa-7181558f7f65", "sighting_of_ref": "indicator--5e624d4d-35fe-438c-a111-8207e3d72c07", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bcf2a4e-4079-4eee-9b5a-6d0141a721e6", "sighting_of_ref": "indicator--66840794-0b2b-4bae-ba48-69dde2f6e361", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a608540-4372-4cbd-8a24-c45b4f210d6d", "sighting_of_ref": "indicator--39f4e24c-cc8d-4f0f-adb5-07efca7ff39e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07a06d7-325d-4389-8e6a-db5e563e5d42", "sighting_of_ref": "indicator--39f4e24c-cc8d-4f0f-adb5-07efca7ff39e", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65a694f-cfac-4ef6-af84-6c72e3b6c9b5", "sighting_of_ref": "indicator--39f4e24c-cc8d-4f0f-adb5-07efca7ff39e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8197ea0-ccb4-4bb6-8e41-5e89162682f8", "sighting_of_ref": "indicator--6ac9c3e9-9d15-4b25-b315-ae5bd466f6c2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3558d6-9481-4eb9-af58-0749e12cf701", "sighting_of_ref": "indicator--6ac9c3e9-9d15-4b25-b315-ae5bd466f6c2", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ee9514-47a3-4910-8ea5-3b8d9a86efdf", "sighting_of_ref": "indicator--6ac9c3e9-9d15-4b25-b315-ae5bd466f6c2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b9874f-0e7e-4e3b-8f90-74c2f41257bf", "sighting_of_ref": "indicator--bce1ba53-2728-4aa0-96ca-de591a665567", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30144cf1-06b5-4709-b528-61b936d39d65", "sighting_of_ref": "indicator--bce1ba53-2728-4aa0-96ca-de591a665567", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1146718e-9f8f-49b1-bd43-9269ecef6d1a", "sighting_of_ref": "indicator--ec8d1af3-fcee-4802-816d-15040b116043", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2697b9-c58c-48fe-ae64-3b54878a2800", "sighting_of_ref": "indicator--24adc8c0-bee6-42b4-aaf8-44f22c1a1f3e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8fe502-3f7a-4e3c-be52-b077cd820314", "sighting_of_ref": "indicator--fb470d42-eccc-4b85-80b6-8eff10a5619e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dda42c7-b867-49dd-ad65-e4d61bbb7ede", "sighting_of_ref": "indicator--d41ff6d7-3ba5-464b-b3f1-0093c261a86e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f76fc8e-d559-4fb2-85d6-ddd865114330", "sighting_of_ref": "indicator--d41ff6d7-3ba5-464b-b3f1-0093c261a86e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964ba666-f60a-4085-b156-6efcfff9e7f7", "sighting_of_ref": "indicator--75492521-29ce-4f1d-ac79-00d0eb72a2f8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93322578-209e-46ee-9f58-11901bec695f", "sighting_of_ref": "indicator--75492521-29ce-4f1d-ac79-00d0eb72a2f8", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d6f7a5-3409-4886-9f58-3bc182cfab68", "sighting_of_ref": "indicator--75492521-29ce-4f1d-ac79-00d0eb72a2f8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33cb2ede-551e-438b-bcec-14b90bd892e8", "sighting_of_ref": "indicator--80e059af-3bd5-4ccd-9f66-aa3d55a92a36", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f9f4cc-c184-4716-8911-d31f0a35cfe6", "sighting_of_ref": "indicator--19beeb34-3ff4-4fb8-bdbc-51dbdc667f08", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7042eafa-8ae2-4a16-b772-181879c39481", "sighting_of_ref": "indicator--19beeb34-3ff4-4fb8-bdbc-51dbdc667f08", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee7d7c1-b2ab-4994-bd61-f2333ae9e26c", "sighting_of_ref": "indicator--1336efcf-829c-4736-ad39-55e5b6347ca7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0cfdfa-d6a7-425d-a6ec-2989935b7638", "sighting_of_ref": "indicator--1336efcf-829c-4736-ad39-55e5b6347ca7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689dba40-c9df-4eaf-a4ee-d449d646ffef", "sighting_of_ref": "indicator--54768b6d-6441-4da1-bbcd-59cd437e3749", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b55f593-e973-4d4f-980b-77734f6f5e92", "sighting_of_ref": "indicator--54768b6d-6441-4da1-bbcd-59cd437e3749", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527a8e6d-50b4-4185-9f75-d2d38e8a5505", "sighting_of_ref": "indicator--e22b2827-9067-45ab-989e-f4986cdc4cba", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5fe2b3a-acdd-4182-8929-6bea6f64840b", "sighting_of_ref": "indicator--e22b2827-9067-45ab-989e-f4986cdc4cba", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5dd2f9a-22f5-42fe-b58c-429e8b9b41af", "sighting_of_ref": "indicator--ab200796-4176-48b0-838c-fc6833fac278", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12ceb0f-7a96-49e4-bacd-76deaea90b12", "sighting_of_ref": "indicator--ab200796-4176-48b0-838c-fc6833fac278", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c7d5f8-323d-45fb-a413-48f97c2299f5", "sighting_of_ref": "indicator--86e58642-4321-4860-a70d-a641db90b1be", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55322258-602e-4d51-8a37-f2424bf66625", "sighting_of_ref": "indicator--86e58642-4321-4860-a70d-a641db90b1be", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a11bd44-f98b-4329-9ae5-c2ebde98f2ab", "sighting_of_ref": "indicator--fc0825bf-5cb5-42fe-b2ef-22506869bf7a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3c4fac-9a86-4221-8a88-4170c8db0ec1", "sighting_of_ref": "indicator--fc0825bf-5cb5-42fe-b2ef-22506869bf7a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e4f6a27-cadf-4ee8-a8c9-13ae5c8f2fba", "sighting_of_ref": "indicator--438d2e8b-595a-4193-a32a-81a86a4976fa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0891f3d2-69c9-48a0-8346-c83cd65561e5", "sighting_of_ref": "indicator--438d2e8b-595a-4193-a32a-81a86a4976fa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3994ffe4-74f9-4b4b-9734-846005ac4bc4", "sighting_of_ref": "indicator--f64921b8-020d-4663-918a-ec141304c863", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6574956-0662-4b1e-b3b2-aeb955ca2f11", "sighting_of_ref": "indicator--f64921b8-020d-4663-918a-ec141304c863", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aba1c59-b144-4e12-bce4-05598c14b0c4", "sighting_of_ref": "indicator--1195ce8c-f2b7-4cc3-836a-fa4db84c4e8d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610619ff-4fa6-4e9d-8ad9-c9fae6c17c52", "sighting_of_ref": "indicator--1195ce8c-f2b7-4cc3-836a-fa4db84c4e8d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f6a1f7-2e1c-4d28-be4b-c4e3104ee842", "sighting_of_ref": "indicator--c2afb5c5-1817-43ce-999b-b913459c732a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36921893-4ceb-43c4-bbc6-93fb0053e88c", "sighting_of_ref": "indicator--c2afb5c5-1817-43ce-999b-b913459c732a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b05ca44-8bcf-4c6e-8d04-87de92f2c42d", "sighting_of_ref": "indicator--cdca7f8e-ab42-43a8-a0a3-b8dafe47a276", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9224a242-5d1d-421f-bf38-dd85e37832c9", "sighting_of_ref": "indicator--cdca7f8e-ab42-43a8-a0a3-b8dafe47a276", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db5101d-1701-41a8-8088-c8f44e1b1f16", "sighting_of_ref": "indicator--1b60368c-0605-464c-81d9-d428c4538164", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97585e26-f95d-48e8-befe-edc845d5f675", "sighting_of_ref": "indicator--1b60368c-0605-464c-81d9-d428c4538164", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f55d8e8-bbff-4c7f-aba5-a1db1214d61b", "sighting_of_ref": "indicator--0e692c88-059e-43b8-a45c-78c69541caad", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed804be-93bf-4e3e-b263-56822b707d23", "sighting_of_ref": "indicator--427d36d8-9702-494d-b91e-223ad5b852ae", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a27d67-bbe8-407f-9441-1e5fe0be13b8", "sighting_of_ref": "indicator--fa2f5434-6499-4fe3-8a83-2a00e4607cad", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48edf936-30a0-4038-9da5-577d6eb8d56a", "sighting_of_ref": "indicator--b87496fb-5fe7-48ec-8684-9c280655dc3f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6372f265-cd86-429b-9cbc-cab80f727f55", "sighting_of_ref": "indicator--04b4d279-7e8c-4571-936f-2f034f05b0f4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f6baf5-0b9d-487d-8bf1-dc197318f433", "sighting_of_ref": "indicator--04b4d279-7e8c-4571-936f-2f034f05b0f4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49181755-6288-4fd6-a2c3-d8325225cd74", "sighting_of_ref": "indicator--1bd26cae-ab84-44ea-9fa2-324946cba1e6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7aa660-cd20-4c25-ad4a-613970ec3667", "sighting_of_ref": "indicator--525f9ad1-f9c1-439b-847d-3086fd446347", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b248216c-1513-4b5e-bede-e9c05b83d65d", "sighting_of_ref": "indicator--cdd09288-d47e-4da6-8a46-53ef92881f65", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c279a9d3-1692-4916-a441-393baede0e2f", "sighting_of_ref": "indicator--81ecf394-b985-4484-8b0c-6fb037a72435", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f629cf59-223f-4009-8d84-bf3fb4bb8f29", "sighting_of_ref": "indicator--924acb20-4a8d-4d0a-a80a-9c882651036c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7463b0c-29bb-43a7-b217-2eff988cf175", "sighting_of_ref": "indicator--efcc3c60-7857-4c4d-a8da-6a1fd627c619", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904dbf9a-9760-4845-8b40-f3022540e5ac", "sighting_of_ref": "indicator--45a96cc6-829e-43ca-bd8a-8fc48ecb72ff", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4af5b69-7e50-49d4-b291-00f1d467eeee", "sighting_of_ref": "indicator--45a96cc6-829e-43ca-bd8a-8fc48ecb72ff", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46ad4aa-dfbf-43e7-ba8c-2a2b62e6583c", "sighting_of_ref": "indicator--45a96cc6-829e-43ca-bd8a-8fc48ecb72ff", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904094a5-af36-4b85-93a5-302fe2b490a3", "sighting_of_ref": "indicator--c59163e5-31cb-4019-84e0-2e2da00f247e", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe63e5eb-781f-493a-aa48-6dfc55be8ce0", "sighting_of_ref": "indicator--066c0eb1-0787-4b05-ade6-8fdab4ccc0b5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d0c8535-4cde-49d9-918b-032c0bfff57e", "sighting_of_ref": "indicator--637f869a-ae46-4789-a1ef-14ce65a36f18", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce57cd0-813d-4f85-871f-b180cc9ed7ef", "sighting_of_ref": "indicator--64816eee-b00e-47de-aacd-cb7ff6da06dd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85dccc62-ca71-4431-9426-978881042f67", "sighting_of_ref": "indicator--73fa071a-1296-475f-8992-c759f1ba2655", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9b6f43-484d-4cad-80a5-a729e0482b5f", "sighting_of_ref": "indicator--73fa071a-1296-475f-8992-c759f1ba2655", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72baa09-b693-4d4d-b292-b24fba8e8170", "sighting_of_ref": "indicator--28398bfb-a2c9-4019-806a-14a7b64b26b2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--293c0f44-a6e0-4f5f-b61c-59bae0b121cb", "sighting_of_ref": "indicator--28398bfb-a2c9-4019-806a-14a7b64b26b2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7cbea56-9ed4-457e-97c4-5a9d6569b738", "sighting_of_ref": "indicator--918c7116-fb0c-4b27-9a1d-679650daeb23", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24631ed-fadd-4d85-8823-6a238b40ae1c", "sighting_of_ref": "indicator--918c7116-fb0c-4b27-9a1d-679650daeb23", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d71fa63-4e88-4c08-aaab-0f65a3f71cd8", "sighting_of_ref": "indicator--556f831c-081d-493a-b4e3-e13ebfa0fe6c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689c93f5-f1c3-4bbe-9bce-2b80ed7dbe27", "sighting_of_ref": "indicator--556f831c-081d-493a-b4e3-e13ebfa0fe6c", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba861f4-c379-43da-acd5-810bd048ea68", "sighting_of_ref": "indicator--556f831c-081d-493a-b4e3-e13ebfa0fe6c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea85b6b3-c4b6-48e5-bca8-5099e644ac69", "sighting_of_ref": "indicator--2b490af6-9c33-404d-ada7-9510919c7a82", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fae9d76-bfeb-4417-91d4-10ca6b94a890", "sighting_of_ref": "indicator--43f8f971-5bd9-44d1-a1fa-3ca1ed217f86", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51966267-5da7-4bb2-915e-439329e15a83", "sighting_of_ref": "indicator--43f8f971-5bd9-44d1-a1fa-3ca1ed217f86", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23258ed0-c341-43be-8fc5-5c24c9f9a7f1", "sighting_of_ref": "indicator--43f8f971-5bd9-44d1-a1fa-3ca1ed217f86", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb27213-fa4b-4b30-8ff0-366f49b39a0e", "sighting_of_ref": "indicator--70dfa750-fe24-4f46-88c5-3c1d65b9f9df", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c4f79c-e998-4f40-8247-a33efffdb3cf", "sighting_of_ref": "indicator--edf181d3-9e77-4256-8504-f060b7069086", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279f83f7-5821-4a7b-9636-331e48d027ef", "sighting_of_ref": "indicator--35c139ad-7eee-4096-9cac-5e0bc29b0eb3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d45f0c9-d939-4057-9aca-6c4aaa496fde", "sighting_of_ref": "indicator--dba2caf7-0118-411a-85ea-637167730532", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31dfc3d0-f02a-4bb8-a0c7-58ddeaf588d8", "sighting_of_ref": "indicator--96eb194a-6eb6-4161-8721-00113f410cd5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8441280-27a4-4341-b364-5794b345d0d0", "sighting_of_ref": "indicator--a004dd24-3ae4-4760-85c9-8321d06a1b7b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6103b9-26bd-479c-a639-c42f07405484", "sighting_of_ref": "indicator--36445a5c-c289-477c-8ca1-0b3b11aca6c5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5689a46-ddb5-4122-9853-d9607bbc4e9e", "sighting_of_ref": "indicator--36445a5c-c289-477c-8ca1-0b3b11aca6c5", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbd4070-911b-4c6d-b82f-67e4a9deddb6", "sighting_of_ref": "indicator--36445a5c-c289-477c-8ca1-0b3b11aca6c5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0159c847-4450-44e4-8f9d-5e9a0af83e3f", "sighting_of_ref": "indicator--b52a4c01-3463-433e-8b75-ec37fc6db81a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e817c4b-e243-485a-b600-14691cf0a32b", "sighting_of_ref": "indicator--9ac7955e-f771-464a-8e10-6ea97f40a9f8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84053b35-1c72-40df-8c20-a3c4561f95af", "sighting_of_ref": "indicator--b4e8d241-bde3-454f-b75e-c97f4314dd03", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67f5749-0481-4036-9e62-e77f4ce25c87", "sighting_of_ref": "indicator--7700f19c-3257-4796-9b01-5713a7449330", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91d8859-8b43-4bd9-8eec-d1294414768f", "sighting_of_ref": "indicator--7700f19c-3257-4796-9b01-5713a7449330", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37be3139-91e4-46df-a4c7-9b0fcabc5513", "sighting_of_ref": "indicator--b75704a2-3284-4d58-84b2-100cc2358fba", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9ba692-6cfb-4f40-a9f3-5b4148a33db8", "sighting_of_ref": "indicator--b75704a2-3284-4d58-84b2-100cc2358fba", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c79f360-719d-4a27-a745-84a4c7c7b60a", "sighting_of_ref": "indicator--48ddcccc-d0be-4667-9e82-9de3e5ca8ebc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2456b295-31ab-400b-ba74-92b33df7a56f", "sighting_of_ref": "indicator--3977aa9d-0a68-4eb2-a738-eb60c085df69", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c581830-351e-4650-a8fd-5bb5716eadc8", "sighting_of_ref": "indicator--3977aa9d-0a68-4eb2-a738-eb60c085df69", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b524a46-9190-4546-8aed-99a2a314d87f", "sighting_of_ref": "indicator--3977aa9d-0a68-4eb2-a738-eb60c085df69", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11751007-8a58-4cfb-b5fb-2b171a8783bc", "sighting_of_ref": "indicator--363e43e9-bb9b-4ba0-9d40-6c281dd53475", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c0ae57-2f12-46b6-acf9-b454834ec09b", "sighting_of_ref": "indicator--105cc083-b797-42ec-bfc0-ffb598f8255a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8638ea07-b3cb-4dbf-9184-174194f5fde4", "sighting_of_ref": "indicator--105cc083-b797-42ec-bfc0-ffb598f8255a", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c447f54-312e-444d-9542-5ad2f07ee8cf", "sighting_of_ref": "indicator--105cc083-b797-42ec-bfc0-ffb598f8255a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc94c62d-3111-4374-b325-2cc5a9ac3390", "sighting_of_ref": "indicator--54eae058-cdc2-49f3-a684-d5ecd23e25e3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c9e523-c56c-40b8-983d-b91c2c56fba6", "sighting_of_ref": "indicator--99cffb2f-e754-4d0c-9352-5443c4620289", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60c2101-4fce-4dbd-885a-53294f2d1825", "sighting_of_ref": "indicator--e7fc57ff-94d7-42cc-94eb-169a6f7b2fbc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f627dde8-2304-4fe1-b1e7-970c3a3567c8", "sighting_of_ref": "indicator--6acc33e7-2f4c-46ca-948d-da9d2148c036", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8eddd1b-9c6e-49fc-944a-c7cf7c6c8028", "sighting_of_ref": "indicator--5a05c7c8-e9c6-47f8-b69a-883541c17735", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb9e354-45a5-49d1-85f2-62c026be6826", "sighting_of_ref": "indicator--5a05c7c8-e9c6-47f8-b69a-883541c17735", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d1dde35-b7c8-4915-9f57-4fee82d426fa", "sighting_of_ref": "indicator--5a05c7c8-e9c6-47f8-b69a-883541c17735", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ecc819-8922-43ec-9ec7-1746569df9e2", "sighting_of_ref": "indicator--6243e0b9-b7d9-4620-bf3c-056d9282c77a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476c2070-40bf-4014-98da-2590a81a2f2a", "sighting_of_ref": "indicator--6fdc023b-b813-4255-ba7b-f25471ffd35e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564a2fb8-99cc-4d7d-87be-bd112c8343eb", "sighting_of_ref": "indicator--b9814048-4302-4b5d-866c-a3832ffa8cd1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829246bb-ba68-40ef-b577-68cd68ddec02", "sighting_of_ref": "indicator--ca66d363-86c6-4739-bf99-d4dc0c154942", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c236ad5e-f17f-4c7a-bd31-70f4be947baa", "sighting_of_ref": "indicator--ca66d363-86c6-4739-bf99-d4dc0c154942", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4ec414-f843-4c6a-b564-e6bf90d65832", "sighting_of_ref": "indicator--d4c803f4-ea27-47df-8fc8-a1d38234d6b2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc15088-369d-44ce-9e8e-314cbb5d2402", "sighting_of_ref": "indicator--d4c803f4-ea27-47df-8fc8-a1d38234d6b2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff77f8bd-9626-40da-a6c8-3652c7d6ddef", "sighting_of_ref": "indicator--a8cf5c96-5dc1-4ace-8ae4-d4df8164a1ec", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137a040f-f90a-4dc2-9b5f-3bc34411626a", "sighting_of_ref": "indicator--e69ee9c4-2a65-4da4-b43b-f6e9ae8054af", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d0281c-80b7-47f1-b36f-d2518a7b9b2d", "sighting_of_ref": "indicator--e69ee9c4-2a65-4da4-b43b-f6e9ae8054af", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab21c330-ffc0-4c66-aab2-ca13d3a4fbb9", "sighting_of_ref": "indicator--6e6a9c29-87a2-4517-a910-6c1b11ac5fb1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81b110f-4f08-4c5e-9786-7bfdf86a84c1", "sighting_of_ref": "indicator--6e6a9c29-87a2-4517-a910-6c1b11ac5fb1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41c924b-989e-454a-921c-8437bc151cf1", "sighting_of_ref": "indicator--f8e500b5-8e33-44f9-a35e-ba44044762f7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a516d3fb-cdb1-45b7-8348-9659e3705bf0", "sighting_of_ref": "indicator--f8e500b5-8e33-44f9-a35e-ba44044762f7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ae6324-9a3a-4bc3-9e25-d35c4bfe2dc0", "sighting_of_ref": "indicator--d2383c62-f463-4a4f-9a7b-d839f659f0fc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a7773c-c214-4c25-8264-3ec6d535e008", "sighting_of_ref": "indicator--a13ef235-5f72-4f51-a859-90544ceb7da8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd263b4-18e2-4868-972a-96fa0cb9a401", "sighting_of_ref": "indicator--6f7b322d-3e05-4716-86b9-ee0e7e67a875", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2972a9-c0fe-4520-a98b-67934bb4d38e", "sighting_of_ref": "indicator--6f7b322d-3e05-4716-86b9-ee0e7e67a875", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca564fc-fa14-4a4f-91b3-7b468347821a", "sighting_of_ref": "indicator--43a15170-365b-4b37-a6ad-62c62fa02197", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592d5743-5caf-47b8-89a9-2829b19a8ca6", "sighting_of_ref": "indicator--4b589feb-b328-4903-bea5-e275cb69fcdf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22812d9f-0163-4a68-9a31-76707d0d89a4", "sighting_of_ref": "indicator--c688ac89-8f64-401c-b996-dbbff12584ee", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a1d5abb-4b53-4bdf-a9ec-957da85b26fd", "sighting_of_ref": "indicator--8b19139d-cf24-4320-8db1-425beaee2f12", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2b5c59-e02a-4bef-b48d-36d60c301a03", "sighting_of_ref": "indicator--8b19139d-cf24-4320-8db1-425beaee2f12", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d033d23-bf51-4eee-b021-a7540b7e2a45", "sighting_of_ref": "indicator--1c341cdb-2ef2-4560-9e59-7cc6c2a65cef", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ebc4c6-0f20-423f-8db1-c821ac302d46", "sighting_of_ref": "indicator--1c341cdb-2ef2-4560-9e59-7cc6c2a65cef", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bade0e2-56fd-4419-88c5-0d41ea5c2950", "sighting_of_ref": "indicator--33e6925d-135c-4f99-9f92-96987eb0d1b7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af792ff8-5fde-40e5-a642-4d83901cb5b2", "sighting_of_ref": "indicator--33e6925d-135c-4f99-9f92-96987eb0d1b7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a5a3ba-1238-4e37-b68a-44d9261838c1", "sighting_of_ref": "indicator--9fab301d-66e5-4da6-98b7-d8010a36921b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--571b7869-dd26-48af-abb9-9d4f8f0aa41f", "sighting_of_ref": "indicator--9fab301d-66e5-4da6-98b7-d8010a36921b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf36c90-6eef-499a-9a2a-2456e5d8b9ca", "sighting_of_ref": "indicator--956681b2-f64b-485b-9bd3-b9e4d699e6f4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--078441f0-ccb6-416a-8dfd-a3ecbd234f56", "sighting_of_ref": "indicator--e7d86b5f-50d8-4d5d-b21e-97e26e58cc7a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1be0afc-020c-4a4a-92f7-243f16daa1cf", "sighting_of_ref": "indicator--875bfb1e-50e0-456e-a224-ce223f0bc884", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ccd3a2-11f0-4b20-b717-a664a2a917d1", "sighting_of_ref": "indicator--aebe0334-a890-4058-a7a6-c51072a53704", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3ecdf1-8dd3-46ec-a8db-a9578f491aeb", "sighting_of_ref": "indicator--773c1a18-20d0-4e03-b37d-94ec6921c830", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce2615f-46d9-4830-9c5a-55d18f253392", "sighting_of_ref": "indicator--0f79206d-6330-4562-9bcc-2dadf1bfec0d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e971bf1d-455e-4eb9-9816-309ce3694d33", "sighting_of_ref": "indicator--39f6c4fc-246c-463c-bde4-7cc5af9179b2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f215a44-f989-48aa-9000-b239ace2f80c", "sighting_of_ref": "indicator--a4a27abd-c629-4d7c-8ed6-6490615877aa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e28c22-994f-4f90-a552-d5fbc1bb61fe", "sighting_of_ref": "indicator--ea2e046c-c9dc-4118-9bb6-ba3d567c7515", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830792a5-3ff7-4b5e-8c6d-0e08e0f88cce", "sighting_of_ref": "indicator--8a122806-7280-4859-aa91-46841be94b58", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51abcb46-4ed8-4d9f-90be-fd43cb04cc42", "sighting_of_ref": "indicator--8a122806-7280-4859-aa91-46841be94b58", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e04f01b-a9cd-4d3f-ac61-c1c778cbec10", "sighting_of_ref": "indicator--480b997a-16de-4fe5-a9ad-f7cbbfa8d211", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8812916-a09c-4c71-95d4-8f0c5d3988bc", "sighting_of_ref": "indicator--480b997a-16de-4fe5-a9ad-f7cbbfa8d211", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7f8560-8681-4194-8a98-208dbd106a5b", "sighting_of_ref": "indicator--5abfcb5c-c981-40b5-afa0-768bdb2dcc2d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2870ff2b-783d-4834-9dc7-fce03177c74b", "sighting_of_ref": "indicator--97efd8c5-f21f-4189-9eb6-f6403281e226", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70a2277-6044-4028-a375-1229ce40c94b", "sighting_of_ref": "indicator--0c27bbd0-4210-4fc6-a946-95ca92b0cfc3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75794156-45fd-4b74-909a-a0c0a5d219d6", "sighting_of_ref": "indicator--bc89fec2-dee8-46e4-8bdc-4da8309714c4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a2f341-ac8b-48b2-aa00-ebd16b212d79", "sighting_of_ref": "indicator--7d182c08-9aaf-4b36-ba6d-52b5141f8c40", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8425b32-960d-430d-9d9e-28e4778e3fc4", "sighting_of_ref": "indicator--c05a19df-5d01-4042-8e0f-301504c940e7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c92742-79d1-42bf-88a6-8120b6d9c5df", "sighting_of_ref": "indicator--c05a19df-5d01-4042-8e0f-301504c940e7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d9b8cdb-f4a9-4f09-8f42-faa7565603f0", "sighting_of_ref": "indicator--9066ba68-b781-4cc0-b3bb-623904c25cde", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81214e4-880b-4d3c-b2cd-e8447755745f", "sighting_of_ref": "indicator--40daa900-f3bf-455f-abd1-bafc834a5052", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec02051-24db-46e2-ac01-e9d24351a113", "sighting_of_ref": "indicator--40daa900-f3bf-455f-abd1-bafc834a5052", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3676ba7f-8603-4038-ac22-961d02ea4e05", "sighting_of_ref": "indicator--40daa900-f3bf-455f-abd1-bafc834a5052", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf50e4e-63cb-4e8b-9141-0562a908d8c7", "sighting_of_ref": "indicator--b7a0467e-51bb-4015-850d-2c5a92f66d4e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f12253-ced2-48b6-ad1f-4516c5ec0dc1", "sighting_of_ref": "indicator--b7a0467e-51bb-4015-850d-2c5a92f66d4e", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd6d5f8-b8fc-485f-822c-6057cabb6d38", "sighting_of_ref": "indicator--b7a0467e-51bb-4015-850d-2c5a92f66d4e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206d7bf3-901b-46bf-bb93-1306812f99f8", "sighting_of_ref": "indicator--a8e8f6a7-cb29-4cff-8ace-5ef9184789a7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afdb768a-b249-43cb-9049-23cb27dc6a91", "sighting_of_ref": "indicator--91a27c41-e988-4dac-9938-3d40de2831e1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6078f029-1512-4d8c-b168-1389e52c99ff", "sighting_of_ref": "indicator--4d05c86f-a598-49bb-be4e-e253ba1036e8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd69f88-c6f9-4881-b6e3-d646dbb78816", "sighting_of_ref": "indicator--fe338d57-e029-443b-9edc-acb8dd96f988", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44389e77-d99c-4fa9-8586-2cf2fdd84580", "sighting_of_ref": "indicator--18cbfea5-1439-40d5-af73-61c5f93703a4", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1656ae94-76db-4aee-8dbc-83e9f166a47a", "sighting_of_ref": "indicator--5cafe401-4ccc-4c0b-8386-eba919bf3e9e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70acc9ac-ddbe-4f43-93c5-ba337901aab1", "sighting_of_ref": "indicator--c11fdf62-4e09-4400-8887-3a15e3ee2368", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22453e7e-cc62-402d-94fe-b330f54673fd", "sighting_of_ref": "indicator--2e0aac97-dc9a-4437-99f1-665bd00475c0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a5b523-6e08-46b5-a6c0-0d1c7a930178", "sighting_of_ref": "indicator--bf2e00c6-9fdb-4793-8300-f8b652a3f952", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a525e0d-1e19-4c54-9d82-ab593a0b854f", "sighting_of_ref": "indicator--7db877fa-a1c5-40fb-b5e1-09ce03af93a3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34960489-5af2-41ae-990b-25c36a7c60be", "sighting_of_ref": "indicator--65bae6fe-cb2e-42ae-b9c8-873dd6c2b887", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0567048f-68a6-4173-9bf2-80b63ee8f306", "sighting_of_ref": "indicator--e3f7edbc-d79b-47e2-ac3d-5287c6597280", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4cd109-4d83-4a89-ac29-21bb8a47091c", "sighting_of_ref": "indicator--d44f5b73-f9a8-48c0-a0c4-8c4adaaa7d72", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f49df3-7b3a-4a31-a489-bf5937dd03ad", "sighting_of_ref": "indicator--7fb7b457-793d-42a6-a33f-6dfd81c4ec2f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ac9a28-bb67-40d0-99ea-f60b3cd20174", "sighting_of_ref": "indicator--7fb7b457-793d-42a6-a33f-6dfd81c4ec2f", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e51cf1-8d7b-4459-b155-f13871751f3c", "sighting_of_ref": "indicator--7fb7b457-793d-42a6-a33f-6dfd81c4ec2f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96101932-e91a-4d65-ab7a-037dab510821", "sighting_of_ref": "indicator--70e442aa-e67f-4a40-8b28-aa3bd9af08d1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c5668f4-affc-4b02-87c4-8630199302fa", "sighting_of_ref": "indicator--bfb7206c-c49f-4ff8-a017-5acbcd2e2399", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0bcdd0-ab5c-4269-b37b-1737fad9fac9", "sighting_of_ref": "indicator--bfb7206c-c49f-4ff8-a017-5acbcd2e2399", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c56a28-1519-4225-bc0f-e73c9612a7d4", "sighting_of_ref": "indicator--bfb7206c-c49f-4ff8-a017-5acbcd2e2399", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39ce84e-9c1e-4413-9d40-b125f5c40dc3", "sighting_of_ref": "indicator--0f0857ee-a863-45a1-8d9b-c0e6cbaa77e9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77fd112-59d9-48ac-b070-cdfc0fdb7d3c", "sighting_of_ref": "indicator--fe604ac9-c5c9-4ce3-9ef4-44f4cb72c286", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17627d43-bf0f-4126-9c5f-4a49dddf3493", "sighting_of_ref": "indicator--e14b6b7b-d812-4f77-a1d3-07ac6d8c3b9f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075b6c1e-a664-4f2a-bc17-9785164ff81b", "sighting_of_ref": "indicator--e3a90741-6b22-491c-b88f-e3ef9094f239", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c846cd8-6b6c-4fd3-9b62-8eb4921983f7", "sighting_of_ref": "indicator--4ae4a3f2-b2d0-487b-a9fb-c2e5efcdd941", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bce8dd8-2122-4ed4-867b-d31400242b23", "sighting_of_ref": "indicator--21074011-ee56-4f79-ad38-ffaf4a202448", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ceac3a-65ff-4817-a774-667a17711be5", "sighting_of_ref": "indicator--d59b1f2e-7bf5-42ec-8550-d960d0dcf5ac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a911fb8-f0fc-4a62-afef-841d4302906c", "sighting_of_ref": "indicator--0b7804dc-ac7b-427e-91f0-f7e958603c56", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d63243e-e7e0-40d0-b7fe-4afcaebd7c47", "sighting_of_ref": "indicator--d989854d-3781-4db1-acb7-d20f2f4f87ce", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6a9514-6e12-4d41-90bb-fa736d578545", "sighting_of_ref": "indicator--366d4d20-070e-456a-a52d-ee945dcebf02", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0f4d18-cb9c-4226-a9cc-dec828a9c3cd", "sighting_of_ref": "indicator--c270597f-96b6-4f05-a8f2-92bf2cd5facd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124d24fd-7b21-478b-ad10-0ddf668999cc", "sighting_of_ref": "indicator--3598e0ad-7b33-4197-906d-995e9d41016a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb063be-cfd7-4e11-9007-3a0deb625645", "sighting_of_ref": "indicator--de1c7824-ffe2-4886-8d99-d551a7a81edd", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7593686-c256-46f6-a2db-bc7c3d6bf44e", "sighting_of_ref": "indicator--d6953b7e-ef6f-4ffd-8a52-7a1bbe7a53d1", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca734ee-6877-484a-b9e9-148dd516e360", "sighting_of_ref": "indicator--58c854c2-d864-4d0c-a12f-798d778ac865", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be082055-99f0-4122-9582-62f272af6e25", "sighting_of_ref": "indicator--1fc40c5c-428d-4439-80a9-42442748dd42", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca38eba5-5814-4ae5-9c34-6ec489d20f33", "sighting_of_ref": "indicator--cd7c239a-0d4c-4eb8-8911-3dcdbf08a3fa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8388bf-d17d-426b-a9f8-20191454f0b3", "sighting_of_ref": "indicator--827bc28e-cb1a-481f-ada0-a5f0ac5d5f7c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79c189f-8655-48b0-a7cd-f93375f6c5eb", "sighting_of_ref": "indicator--68060501-fedb-4f48-bb3e-757e06088128", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977b2326-7c06-4080-a329-8efa783d9fbe", "sighting_of_ref": "indicator--11d8a0de-6a2d-4dff-b5ff-1fc5475d976a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289d3486-b3fc-425e-bd82-ec963763844c", "sighting_of_ref": "indicator--31e9db6f-5599-4101-8f0e-900ff22ef44a", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5205cbfa-e4ac-4068-8e4f-c0afda4a37cb", "sighting_of_ref": "indicator--2268df4b-6586-472c-98fa-7ceff7bc13e7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41aacedf-a508-4898-8925-56ecc0da7705", "sighting_of_ref": "indicator--941720a2-9eb3-42e2-8c36-5fdeadad73e7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945d73d5-29ce-4432-b9a2-c269b89be362", "sighting_of_ref": "indicator--55a4d066-95e7-45e5-8613-2d026b5c215a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf62461-4431-4474-9f31-abd577a244ef", "sighting_of_ref": "indicator--c913eb72-b987-427c-ac49-9a1577168b7b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464f9ab5-9e98-45e6-b9c5-eeaa9ef67695", "sighting_of_ref": "indicator--c913eb72-b987-427c-ac49-9a1577168b7b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0430c0-b5be-4805-8636-33cc1abd119e", "sighting_of_ref": "indicator--f58e1b12-6e57-4eb7-8435-0bd60318748c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5edcab5-10c7-4fc9-89ec-288a098744fe", "sighting_of_ref": "indicator--614867a2-38a5-4f88-8cdb-60d847a4e650", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ddec29-9701-49f0-b338-fdeb4ce21ead", "sighting_of_ref": "indicator--614867a2-38a5-4f88-8cdb-60d847a4e650", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca0c126-dc2a-4c90-8385-e7c446d37f02", "sighting_of_ref": "indicator--614867a2-38a5-4f88-8cdb-60d847a4e650", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e33b312-7d93-48a7-9e4b-d4dd3a4bb39d", "sighting_of_ref": "indicator--b338c187-a71b-4455-8949-1bcf269d4508", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b242e16-36e4-4981-86e8-f45248ddd59d", "sighting_of_ref": "indicator--b338c187-a71b-4455-8949-1bcf269d4508", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f7272b-903a-4b40-8192-84333b5420c9", "sighting_of_ref": "indicator--b338c187-a71b-4455-8949-1bcf269d4508", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5c0c66-65d6-4b3a-b221-5124b6ac061c", "sighting_of_ref": "indicator--91df6cd0-be00-44f0-af83-e6b34d173fb1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea14592-5c32-4e8a-a5b4-393bea082be3", "sighting_of_ref": "indicator--91df6cd0-be00-44f0-af83-e6b34d173fb1", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b581bd20-c590-474e-8d0e-03487b98fbc5", "sighting_of_ref": "indicator--91df6cd0-be00-44f0-af83-e6b34d173fb1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476f2dad-53da-4e07-9d2e-4ae631a08f5d", "sighting_of_ref": "indicator--b693be3a-5b67-4846-9094-34eb59426f18", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8ba412-0987-48fe-8b68-c31b97ec91b5", "sighting_of_ref": "indicator--9da1799a-b06b-488f-9a93-98d05fde3bef", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163ba1da-699a-4fe1-85d6-db9df088c76b", "sighting_of_ref": "indicator--f1ca42f9-b6d3-490a-adc2-bfae095ff43a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b21a715-9779-4944-a3c5-11ee596f8b8f", "sighting_of_ref": "indicator--f1ca42f9-b6d3-490a-adc2-bfae095ff43a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a264be8d-57db-4b96-b80e-d40e5d3a6eaf", "sighting_of_ref": "indicator--e0eac88e-2720-4086-9ae2-960a7e420b7a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387f50b9-d305-42d4-928e-718d6d640119", "sighting_of_ref": "indicator--f3217f4f-c47c-429d-bee9-21b5f7a1074c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8df4cc-6639-4be6-bd6a-e57f49aa083c", "sighting_of_ref": "indicator--f3217f4f-c47c-429d-bee9-21b5f7a1074c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9fe923a-44bc-4a47-9672-7ee9135bbfb7", "sighting_of_ref": "indicator--a6a50631-4a3f-4e60-8562-a7e184faa4bd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b947ce-d860-40c2-9ef4-a9112eda1a1e", "sighting_of_ref": "indicator--fb58c679-4eba-4e0d-a5b9-36a41baefa09", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93240fa-a3e7-4582-bbe5-3b55b6309acb", "sighting_of_ref": "indicator--b6f799e1-c2af-4562-9af2-2d88c406a8a8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8032557e-a92c-4cb3-bc8f-ddfadad2a374", "sighting_of_ref": "indicator--ac6769bf-d2bb-422a-97e3-dc80f547a082", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea753a2-9cee-43e4-9ef2-1bf09352e876", "sighting_of_ref": "indicator--6d419d4e-be94-4498-b1b5-2f45a5fd8586", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe6c163-2e4e-47dd-af75-85f9a79dc475", "sighting_of_ref": "indicator--e497c7a1-ccfe-4827-8c1a-57ddeebe8eff", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c30550a-75fb-4549-945c-08ed6de6cf36", "sighting_of_ref": "indicator--e497c7a1-ccfe-4827-8c1a-57ddeebe8eff", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32eb099-5a62-4bef-a2e8-3600f1b496a0", "sighting_of_ref": "indicator--944ec33f-86c7-4ba4-95ff-da1cded3d939", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d9624f-8432-42d8-ad54-a3162ad614c1", "sighting_of_ref": "indicator--469d57aa-6091-49a7-bece-c98bdad7fc5a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2becb1c-940a-487e-a2cf-018bbeac6c99", "sighting_of_ref": "indicator--b8ab4884-7c78-4584-b369-96f5c4213d78", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c4d07d-31ce-4202-8ee8-605172e75f12", "sighting_of_ref": "indicator--75007cc3-a711-482c-b806-2848a44542d9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee48852-32d5-4b53-adda-574ea82976a5", "sighting_of_ref": "indicator--4b5e4451-f5a4-447a-b1f9-166a56d56c26", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd3345c-adc7-45d4-b1c8-e53126790f90", "sighting_of_ref": "indicator--fd5af8ff-0f36-40b6-aeaa-dbbd796f64b3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0686c001-3255-4ce0-9438-5e3692007603", "sighting_of_ref": "indicator--62b40d9f-f113-434a-88dd-d2325d169172", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c6118b-d290-49c7-8296-a8b371b2df8a", "sighting_of_ref": "indicator--62b40d9f-f113-434a-88dd-d2325d169172", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f8589b-c57a-4e50-9bc5-99068029131c", "sighting_of_ref": "indicator--f5bd7d7f-46c1-428d-b775-8649408ce5de", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a291c0-72c2-4eac-bd45-10654f76ddf2", "sighting_of_ref": "indicator--d7d0ca73-35c4-485b-bc50-d9d40b5737aa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64aaa98c-9a91-4133-8009-e0dd9e1fa11a", "sighting_of_ref": "indicator--3c1aa38c-c146-4b8e-9502-8b0a9f2f270c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff3315e-c614-425a-bfe5-c5ae747f9b6b", "sighting_of_ref": "indicator--d8cfe9f2-6ff6-47c3-a2a7-79a84b3d354e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--713a4d8a-f61f-4bd2-b55e-e1806f413579", "sighting_of_ref": "indicator--3a431478-eff6-4bd4-a02c-797d2d43aab5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88b0f02-b12a-4e9b-bbfa-0578c44d196f", "sighting_of_ref": "indicator--5c52231e-0aae-4a7c-81d6-bf8e6dfb45f2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b73b963-a6d0-443e-9222-8548483257c2", "sighting_of_ref": "indicator--499ee05c-870b-471d-8544-939c2279a558", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047d72e0-2aad-48d0-83fb-3cb8466107c5", "sighting_of_ref": "indicator--af1ae233-a3b4-49ae-948c-eef5d6b2ccb4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ad76e6-6cd2-4827-bc14-c6a05d2a4e1d", "sighting_of_ref": "indicator--391fb2c6-1f50-43de-a87c-ad7d4c0e74d6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc9ba74b-d487-45d4-a133-c208af444bc3", "sighting_of_ref": "indicator--a64d63da-e75a-410b-912a-b62a687cc2ea", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8944bdb2-0d20-4dac-b9e1-060f20674da3", "sighting_of_ref": "indicator--091f6e39-fccf-423e-b1bb-3ca5e2b168fa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271a0980-b0db-4a6b-911a-1a1cc5799c60", "sighting_of_ref": "indicator--e8cc50cb-4c35-422d-aced-fd8dc1c51918", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec2a066-fc5c-4987-a791-ba77fbea334e", "sighting_of_ref": "indicator--c0814e70-3609-4615-b262-4dddbd88df2d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e182bdec-4516-4b8b-834a-f32624f5a4d2", "sighting_of_ref": "indicator--b6bf8775-7ed9-46b2-a381-5879105d229b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f8d58b-1611-424b-96bb-99b42e582a7b", "sighting_of_ref": "indicator--b6bf8775-7ed9-46b2-a381-5879105d229b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7e38b0-cffa-40ef-9196-f0f9f6ee1137", "sighting_of_ref": "indicator--a8bcb04e-bd1c-434d-a15b-5c5807df943c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373185f3-7370-486b-a62a-de773969b256", "sighting_of_ref": "indicator--62520430-f46d-4eb5-90e4-5232cb0dac70", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcda7449-aaf5-429c-97e3-5a12c841252e", "sighting_of_ref": "indicator--86078214-79fd-4c38-b783-d380a39b3072", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40654cee-4e5e-4739-be81-512fd54e7a76", "sighting_of_ref": "indicator--9e46a3e3-90ac-4940-aa5d-a92f1a12bdda", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b9a8f4-4ccd-49fb-9bf1-c3f206f34935", "sighting_of_ref": "indicator--9e46a3e3-90ac-4940-aa5d-a92f1a12bdda", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbcb41e8-1f2b-4ca6-b790-cdd30305b574", "sighting_of_ref": "indicator--04135ce5-8148-4d11-a8c8-84e90e2cf049", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20220555-b090-47b0-8ffe-b888954a4dea", "sighting_of_ref": "indicator--3da79180-d885-4312-8dcc-338df1787011", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58d380c-4345-4b77-83e4-ca47180d4799", "sighting_of_ref": "indicator--c1c015c9-a73d-4064-8a89-e2e4547bd7e6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4fe136-f698-4f75-9963-49a4b7e204a8", "sighting_of_ref": "indicator--09d0aeb7-445b-41f3-a433-f76c01d56e3f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd1603a-1291-4cd0-b53b-5776188348b9", "sighting_of_ref": "indicator--e54909cb-ad59-4e7a-bcfa-29d086b898ef", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3c9114-d9f1-4846-8be9-0b7e24e871a5", "sighting_of_ref": "indicator--77272e36-f603-4268-b216-411d10755ff4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412aab3a-8089-4eca-b09b-d554bb4e14d8", "sighting_of_ref": "indicator--80216b20-28c1-4944-a551-dacad5ea902b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f151cf1-e427-4639-b5d7-ffa5b4951568", "sighting_of_ref": "indicator--9abc72a0-f8aa-43b3-8b1d-c9683f0a2989", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af293f43-052f-4e38-85fe-3e230bd6580f", "sighting_of_ref": "indicator--06401b9a-1d9f-4fda-9d7b-399d75b642a0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f45fdc6-cddb-45de-9acb-f5acbd4b4c14", "sighting_of_ref": "indicator--06401b9a-1d9f-4fda-9d7b-399d75b642a0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5128c4d-93a7-4315-b4a3-14057524d343", "sighting_of_ref": "indicator--f7dff029-165d-407e-826d-43bd6af0b627", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c29b80d-8d31-4bac-a0fe-f9bbdce67089", "sighting_of_ref": "indicator--f7dff029-165d-407e-826d-43bd6af0b627", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623e1e58-dd58-4bca-9799-9a497fa65fe2", "sighting_of_ref": "indicator--763a552c-371b-48c8-b9f8-75aa1b93e5f4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124f4f80-bf2b-4829-a242-386f763af25c", "sighting_of_ref": "indicator--763a552c-371b-48c8-b9f8-75aa1b93e5f4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9a09df-1ed9-407e-a23d-1e89fff39f51", "sighting_of_ref": "indicator--aa843754-9b11-4dce-9267-633d2d4f0025", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c301dcb9-8887-402f-b21b-0778652e3c5f", "sighting_of_ref": "indicator--e03f7c2b-275d-4867-9b97-94bf78f42d7d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf07444-ae11-4ad0-bff5-0d11494ebe4b", "sighting_of_ref": "indicator--6a7343df-1d23-4bd4-ab06-a2cd63dbc940", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae273e8-4600-402b-8a97-06b4b005054f", "sighting_of_ref": "indicator--6a7343df-1d23-4bd4-ab06-a2cd63dbc940", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94cda5b-e964-4f06-8776-347d8f11017b", "sighting_of_ref": "indicator--f03fdf69-2a9b-41df-b399-48d54bb29046", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f779af-a5d3-4730-b514-0787ddf0bab2", "sighting_of_ref": "indicator--f03fdf69-2a9b-41df-b399-48d54bb29046", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17ce4fb-0289-4e57-b1e7-de3c5853ce39", "sighting_of_ref": "indicator--e9a070e5-254d-4c57-b7d2-323410c5db44", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0d86fa-c443-4b1d-abfe-1cd6214f3a99", "sighting_of_ref": "indicator--d6b6ce6e-3f31-48bd-a275-d058ef013d7d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751c20e6-1068-41bd-90c3-65366dff0672", "sighting_of_ref": "indicator--1e1fd71f-b6a4-487b-9134-079b7b632400", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea43288-637a-40cf-8893-7c56a4b5244e", "sighting_of_ref": "indicator--2dc6001b-e74d-4235-bb02-530d58bea25d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451f4e1a-68be-450b-83d4-01c8437eb891", "sighting_of_ref": "indicator--2dc6001b-e74d-4235-bb02-530d58bea25d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a786095-9d63-4803-88bd-1f4f53024a5b", "sighting_of_ref": "indicator--2c689b16-e103-4ded-9c16-213684616383", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3ad316-03aa-4482-ba96-4a46f6bbba30", "sighting_of_ref": "indicator--b9ec5c28-758b-4620-a07f-c30078f5dfcd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2c4f2e-c361-4c3c-8177-f733878ca307", "sighting_of_ref": "indicator--33f7a903-45c4-44cd-8216-738095a33a60", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92e7b95-68c8-4693-9175-2e6c273181ef", "sighting_of_ref": "indicator--33f7a903-45c4-44cd-8216-738095a33a60", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--858dd647-fca7-4326-b279-846507d289c1", "sighting_of_ref": "indicator--327d73df-06de-4730-9fbd-db1bdb5d582b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be42c78f-a54d-41fa-ba21-de6192828982", "sighting_of_ref": "indicator--ca184310-548f-4921-9fd6-a5123cf118b4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69bcc801-9a09-4373-bcc4-00c4b16c16a4", "sighting_of_ref": "indicator--268e2503-d4a6-493f-b76b-4cc50daa0360", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114d9b9c-bccb-419f-bf24-b38029b5db23", "sighting_of_ref": "indicator--268e2503-d4a6-493f-b76b-4cc50daa0360", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ace1a1-25d2-4624-a94b-c0c2d177643e", "sighting_of_ref": "indicator--28842f44-91d3-4df6-850a-0df0383872e5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f04ac4-ffbb-4d23-8bf5-2d82a6e5e857", "sighting_of_ref": "indicator--05ab5993-e515-49c6-bd21-b68f3a0b3240", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b985f80-e029-451b-ac1e-30f7ff5fcea7", "sighting_of_ref": "indicator--05ab5993-e515-49c6-bd21-b68f3a0b3240", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefaeaf7-0267-421d-ab9f-503bc228406d", "sighting_of_ref": "indicator--05ab5993-e515-49c6-bd21-b68f3a0b3240", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55fcc7b2-ef4b-4b27-9e35-e7aa52b83425", "sighting_of_ref": "indicator--02d023dd-4830-499f-8800-7ac62c93befd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e01b854-bfbd-48fc-a0c3-996978cd395e", "sighting_of_ref": "indicator--a020059e-5c67-4664-b130-53060e983451", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c12470-b03d-47a0-91a4-e1216bf583b0", "sighting_of_ref": "indicator--a020059e-5c67-4664-b130-53060e983451", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718f0ad7-9074-46e8-ab84-7cbad0d9f86d", "sighting_of_ref": "indicator--a020059e-5c67-4664-b130-53060e983451", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ebc7442-4922-4d2d-9a87-fb6a57e8fc64", "sighting_of_ref": "indicator--2d12a7c3-a4a7-483e-b7df-919f1dc6c965", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379b0920-4c6d-45a1-92cd-3795f9af602d", "sighting_of_ref": "indicator--e8172eb1-26bc-4876-bd93-c6170d508491", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2172fdc2-d1fd-42e7-87d7-0533f89fc371", "sighting_of_ref": "indicator--d37f2074-0bad-4817-8b28-3b9252ff9fac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd540a5-01b8-492b-9bc2-eb32e07c2876", "sighting_of_ref": "indicator--da065c95-1968-48cb-abb7-2c33b9c160b6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9baff5bb-8d42-48bc-a387-93980a89381b", "sighting_of_ref": "indicator--da065c95-1968-48cb-abb7-2c33b9c160b6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667722c4-6665-4618-a569-5ab186fc126f", "sighting_of_ref": "indicator--13e80109-ff62-4f42-909f-ae72282210ff", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140e2260-b398-43e1-9124-1efb3e388d0d", "sighting_of_ref": "indicator--ecbf97fb-eb65-4a28-9e6f-ea4714449171", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb0834c-311b-43cc-89a5-35cc592eca29", "sighting_of_ref": "indicator--ecbf97fb-eb65-4a28-9e6f-ea4714449171", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f978018d-a36f-4da4-9678-b314f2ef6839", "sighting_of_ref": "indicator--1f53c17e-0e3f-460d-bdf4-a091bcb8b3cc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0bdeeb-6fb5-4dab-aa6b-96e160d1d80f", "sighting_of_ref": "indicator--c64b0c66-8e39-4025-9498-a10c699c197c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb018b41-579c-4a1f-b33d-2ab5912ce08d", "sighting_of_ref": "indicator--c64b0c66-8e39-4025-9498-a10c699c197c", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff8aeb0-c241-4bed-b719-3de149cbf0dc", "sighting_of_ref": "indicator--c64b0c66-8e39-4025-9498-a10c699c197c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ee1eae-390d-4608-9d7d-399cd1a50c56", "sighting_of_ref": "indicator--0482c7ce-b962-40d9-90cb-4dbf59dd7dbd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e501d1e-b32b-488f-bb27-d181b7af3475", "sighting_of_ref": "indicator--0482c7ce-b962-40d9-90cb-4dbf59dd7dbd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0597888-d55d-4127-89ae-bc914f074fc9", "sighting_of_ref": "indicator--92380fcd-f605-4f90-81e4-5b6007f4b0bc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b6c994-5479-484c-9a82-6aef7eb71b29", "sighting_of_ref": "indicator--31a433a7-d91f-4b37-85d2-ac5f4afbbca6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ee0a61-82d8-47b2-a420-cbd1ca47ce1c", "sighting_of_ref": "indicator--31a433a7-d91f-4b37-85d2-ac5f4afbbca6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--398cde8b-98d6-4957-80dd-b34bfcfdba72", "sighting_of_ref": "indicator--13192d00-9e37-4a71-863d-3102350c2d2b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68b9e5c-3fba-4b65-96d0-d2c5ac9c1ad7", "sighting_of_ref": "indicator--13192d00-9e37-4a71-863d-3102350c2d2b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b745ff6-87fd-4b36-8092-1a857153ab32", "sighting_of_ref": "indicator--5efecaf6-7fe7-47e3-b097-3290ca47c7a7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42613a97-5cc9-4cb6-a3f4-8e5f19a60010", "sighting_of_ref": "indicator--cf0ad19a-6b1d-418e-a352-af24dda64376", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c869c1d-e814-4faa-b7d7-eb9a7d68d049", "sighting_of_ref": "indicator--eb0b7096-759b-49ad-9ee2-0aa391c0b3c8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee3d226-78bf-435b-936a-cc92b4217813", "sighting_of_ref": "indicator--c10aad7c-abb0-4c6c-a159-b0cf78c5983f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ecd8ed-81ac-4f45-8ab8-60acb6dbf5d7", "sighting_of_ref": "indicator--29d5a963-4c91-4167-b96c-9655ce2813fe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d3c2cf-43a3-4d55-bd02-69f03551bc70", "sighting_of_ref": "indicator--a89a074b-8e47-4d69-af2c-a0779888fc74", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6cc77e-9da5-4670-aa76-cb19a0f23147", "sighting_of_ref": "indicator--29237a81-143e-4dbc-b92b-0e34f4822c5f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e25c37d-b7a9-4d86-bfd8-e736c8d2935a", "sighting_of_ref": "indicator--c887ee16-bac2-4791-8689-2aea820793e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb8ff82e-ba6a-478d-9cec-1fe170b45a3d", "sighting_of_ref": "indicator--a4667014-db42-47c6-b199-d3f61d9d21ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32264a9a-c696-449e-9357-7d4a026d00dd", "sighting_of_ref": "indicator--a465e756-5362-4333-8c03-3cdeb74a9dda", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6f7e96-b9ce-4d47-9b69-9656b1d7b206", "sighting_of_ref": "indicator--73f4d238-ae7d-4781-b530-f5de8cd35cc7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb74247-5789-4207-9c9b-efad10f01b46", "sighting_of_ref": "indicator--d7346fe1-fe2d-42e0-95ea-88d2871c6c33", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b27227d7-6b6c-4a01-b809-c5fbe3a36d77", "sighting_of_ref": "indicator--47872c51-0184-467d-b2cf-ae59b925fe31", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bccbb7eb-bad6-4523-9592-46e284292abe", "sighting_of_ref": "indicator--72f23d42-a104-49c4-97eb-350c79a383de", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5bf694c-7e7f-40bb-9773-9987db9ac8d4", "sighting_of_ref": "indicator--0f8cafb4-7d3e-4a0f-a77e-3e390aa14c1a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a00d405-cc13-4c2f-a3a4-5a5152d7a662", "sighting_of_ref": "indicator--c54a6a15-96c2-4eca-8205-8af394aba06e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31cfc1b-95cd-4ee6-becf-ad013c27ccf4", "sighting_of_ref": "indicator--c3606293-ed98-4f28-9c76-bf29b6961b40", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5bfdf21-bd08-4c10-bcb9-89ec7d6e2913", "sighting_of_ref": "indicator--9cf5f60f-23e4-4f12-8601-784e9f792e3a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5423f67f-95b5-4532-a63c-9c0c5c6bdcdf", "sighting_of_ref": "indicator--01f79b70-5ee7-4ac3-96d2-71c002e3c858", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7825922-7937-47e7-80fb-016af80b0b83", "sighting_of_ref": "indicator--a1692b28-8788-4472-bce7-c8304e2bca63", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7d9505-d15b-4c64-b01f-392d89260f4a", "sighting_of_ref": "indicator--0693ced4-d9e0-45c2-8ace-f0af8a0d2cf9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee8c15f-c11d-49d8-bc82-9299011c9a1a", "sighting_of_ref": "indicator--9546dd7b-15c8-4364-9b8c-8998cba4ca03", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c2f1c8-a9bc-4cf6-a336-86b19483f108", "sighting_of_ref": "indicator--9546dd7b-15c8-4364-9b8c-8998cba4ca03", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11fc2ac-34d9-4f4b-a4ce-8c34a1ddf566", "sighting_of_ref": "indicator--b1f88f2a-c172-4c88-a3b5-f0b72fb965b8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7541b464-8a51-4513-9682-f3eedda2c51e", "sighting_of_ref": "indicator--b1f88f2a-c172-4c88-a3b5-f0b72fb965b8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde7c038-bfe8-40b4-a3eb-c090b68fefef", "sighting_of_ref": "indicator--7fb81578-5e62-418f-bf1c-1e599460c269", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03140511-6a69-480a-92cd-1b8fe3039634", "sighting_of_ref": "indicator--7fb81578-5e62-418f-bf1c-1e599460c269", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6bcc50-0fbf-4e0c-8e73-16f0c079d5d3", "sighting_of_ref": "indicator--605255c2-4637-4a7e-b2e7-bebd36284955", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19487f7-900f-4b33-a47b-0a11ec6cee56", "sighting_of_ref": "indicator--605255c2-4637-4a7e-b2e7-bebd36284955", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d41fc3-0270-494a-b943-a3447bb7a63a", "sighting_of_ref": "indicator--ab778052-046e-4ecb-8d52-7ae6208b4fc3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11423f5-cee3-4c1d-bc0c-23169fd55dc0", "sighting_of_ref": "indicator--ab778052-046e-4ecb-8d52-7ae6208b4fc3", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb37cc6-eed4-4727-b96f-e5f90cafa169", "sighting_of_ref": "indicator--ab778052-046e-4ecb-8d52-7ae6208b4fc3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dab08d5-f139-4cd9-a54d-743efb91fed0", "sighting_of_ref": "indicator--a61b973b-4c59-4be5-9d35-2861e7c9c1d7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851de4ca-229e-478e-b197-6a5b12a41cb6", "sighting_of_ref": "indicator--a61b973b-4c59-4be5-9d35-2861e7c9c1d7", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18edc630-d269-4484-b60d-a7215663dc6a", "sighting_of_ref": "indicator--a61b973b-4c59-4be5-9d35-2861e7c9c1d7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70740e1-e927-40d2-95f1-94e579e2c3d5", "sighting_of_ref": "indicator--5540edaa-20c3-4191-9cfb-937746efb588", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7d0a2e-7ec8-4b93-b2cc-83270ae92429", "sighting_of_ref": "indicator--5540edaa-20c3-4191-9cfb-937746efb588", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e75e7e2-592c-4a8e-b1fd-ccacd85f628c", "sighting_of_ref": "indicator--fdc4d87c-c58f-4968-8dd2-9668cf5e8d72", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda08feb-4c9d-41ed-8999-91669979a153", "sighting_of_ref": "indicator--80f9bae1-b22a-4eb1-9bf4-3764d50b057f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9efeff2-907f-4740-9584-faede222c508", "sighting_of_ref": "indicator--8f3656de-fe01-46df-8b6d-1a5c111be55d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a10a3b-532c-4bf4-8ece-7541dd6032c7", "sighting_of_ref": "indicator--d4dab01a-08c9-4f4d-b76e-fe1a2260c08f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317e9a39-d28d-4393-8e08-ace1039c7f15", "sighting_of_ref": "indicator--0a9f88bb-3260-4855-aaa8-4da2db396c1b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11f33dc-48de-4cdf-9fa7-980fe7011c34", "sighting_of_ref": "indicator--0a9f88bb-3260-4855-aaa8-4da2db396c1b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aadf60a-fd03-40af-be1e-b3864601451d", "sighting_of_ref": "indicator--aeabff84-50b3-4d64-a0cd-16f08bf56405", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484f9e9d-34a0-4301-a5ac-7156a2a569a3", "sighting_of_ref": "indicator--deb603ea-6355-4f1a-a210-bd1eda8ec8a9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeff6237-86a5-48bc-a42e-245e20c66d4f", "sighting_of_ref": "indicator--deb603ea-6355-4f1a-a210-bd1eda8ec8a9", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8013e67b-41ef-4efd-9a2d-ec1ea26bb836", "sighting_of_ref": "indicator--deb603ea-6355-4f1a-a210-bd1eda8ec8a9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99717338-37b7-4eb4-94aa-60ff5aa92529", "sighting_of_ref": "indicator--1c715bc9-2aa3-47e0-ab19-cf5427d8db81", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9bbf887-895b-4c89-943a-fc168fb2d0b9", "sighting_of_ref": "indicator--3602fa8e-c1a6-4541-823d-1115e69f6f24", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b57bf62-a60c-4da3-8d82-c1fe02bc780a", "sighting_of_ref": "indicator--04733f39-35bd-4ab1-ab14-6665d0006b84", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb31295-ec8c-4a9c-8f36-746417aa3783", "sighting_of_ref": "indicator--93231f7e-4c93-42e8-9065-12743f3fa476", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64bf298d-44a9-4f9a-8953-dc7c7aab2f0d", "sighting_of_ref": "indicator--ba50559d-f372-410c-8303-ed35027da033", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21209bbe-3823-4c22-9e4a-fdf3f7f8294c", "sighting_of_ref": "indicator--f0a29a96-d51c-4a83-915e-5da0229bddde", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2d2a52-4f0c-4ab1-92b7-bf9d607d36d0", "sighting_of_ref": "indicator--8dd0fcde-8293-4760-9c0f-10cf8e3fb40e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c376da7f-78a0-4cf7-96d1-ba358048861f", "sighting_of_ref": "indicator--7cd1d533-c9e3-4dac-a123-74fd55a3205d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d0e738-8240-45de-a3d4-c2146a552af1", "sighting_of_ref": "indicator--7cd1d533-c9e3-4dac-a123-74fd55a3205d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e096b63-79bb-44fb-9f2a-e4589e3a1d25", "sighting_of_ref": "indicator--2204c612-39ee-4002-bcc2-193856cd80fb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daea0eee-6125-45c4-96ff-d684ee6fb8c2", "sighting_of_ref": "indicator--10dffe60-23e6-4f22-9b98-ee018bcffd17", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2760b072-6585-4c92-9e54-33c105480006", "sighting_of_ref": "indicator--873c7b09-a90c-4bd8-a80b-8b9a05d32f3d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7113d090-565f-4062-8ce0-635b7f922b18", "sighting_of_ref": "indicator--069c3dda-97b0-4115-b75a-e10fdf3c42ed", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301ad785-799a-4c10-8712-a528a21d0cba", "sighting_of_ref": "indicator--a83860f2-a816-4403-9c7e-726d01e43fb6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62325350-cf70-45f6-9d46-37c1b1e431e6", "sighting_of_ref": "indicator--a74f42b6-f35b-483b-bb25-e7eb589d83a9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae654a1e-bd0d-448b-abec-0bd73acecead", "sighting_of_ref": "indicator--40109837-2cda-4abd-a747-406d34231a25", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b6c05d-6f0f-4d59-bb26-bad45cb65931", "sighting_of_ref": "indicator--40109837-2cda-4abd-a747-406d34231a25", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd97e43-9d8f-4840-a25d-d61a64e539bb", "sighting_of_ref": "indicator--17b9e907-1cf4-41ef-8926-9d78dc969789", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842b804e-c2ba-4a20-9307-33a750cc53f6", "sighting_of_ref": "indicator--7f89f36a-0fa8-4077-bff0-e94af9229974", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd54e14-bd50-44cd-819a-116ce116670d", "sighting_of_ref": "indicator--7f89f36a-0fa8-4077-bff0-e94af9229974", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e822380-fe03-4bdf-8fa5-9417995609be", "sighting_of_ref": "indicator--7f89f36a-0fa8-4077-bff0-e94af9229974", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e81aae-366a-47a9-99a1-2e86716128e2", "sighting_of_ref": "indicator--39d7d2cf-8c7b-4872-859e-50a38baff0de", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52d3b02-2aa3-4360-8c4b-ace3b6876e65", "sighting_of_ref": "indicator--39d7d2cf-8c7b-4872-859e-50a38baff0de", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e7b506c-8ea1-470b-b7f5-820eb9451745", "sighting_of_ref": "indicator--b2e3d82a-58fe-4d40-84c6-730db4bbd2d0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8a9510-09e2-4934-8adc-bd377c9418b1", "sighting_of_ref": "indicator--bcf7caec-743e-4a46-8af9-35fa174da812", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b85cc8-6adf-4a2e-af15-bd7937a2ffe3", "sighting_of_ref": "indicator--8f66274e-aa0d-4a3d-b47f-5ec3f62ab45c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fdd490-e404-465b-8ad8-b51ec8dd76ae", "sighting_of_ref": "indicator--8f66274e-aa0d-4a3d-b47f-5ec3f62ab45c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7348968f-11f1-4f66-8c67-33469c6cdb59", "sighting_of_ref": "indicator--72ea06d0-2122-4e8e-b061-7dd5cb3bc0ed", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe0638a-1158-4492-9338-b50a2ba1edf0", "sighting_of_ref": "indicator--62be9e8f-e1da-4c78-b2a4-c0f31fdf4f0f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61495ab-d85b-45f7-bd18-f23ce2c58887", "sighting_of_ref": "indicator--62be9e8f-e1da-4c78-b2a4-c0f31fdf4f0f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b012de-4af6-41f6-9659-ffef90a03f82", "sighting_of_ref": "indicator--f93f76a5-e114-44b0-835d-b79ab52cfd7e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966de17c-69db-48bd-921e-4da7aea48e90", "sighting_of_ref": "indicator--10be852b-d435-473d-bc20-8a1388ab7495", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cddb09a-8178-4467-a587-91e45108d4b5", "sighting_of_ref": "indicator--13385d6e-4753-4ad8-ae82-a2a908712dba", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f30231d-99b3-44e1-b572-9edbee468461", "sighting_of_ref": "indicator--e57124cc-5ba0-495f-ac12-b760c7f9e9bb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae54b4f2-0aa9-455f-b03f-63b19dedfbab", "sighting_of_ref": "indicator--04ad869d-af5b-4d2e-81a4-1deda7661bcb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60e9cfe-bfde-4f00-9e00-9136fdc5d586", "sighting_of_ref": "indicator--d9d0af92-21da-47a6-98a9-245164ebb63d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95bd403e-aeb4-4eb8-bdb9-12fbd73426a4", "sighting_of_ref": "indicator--d9d0af92-21da-47a6-98a9-245164ebb63d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce99ddf0-8600-43a8-9fba-44316324142e", "sighting_of_ref": "indicator--2c9862a6-6f41-46dc-a638-245fb5380662", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7dfbde-845c-4829-be6b-2a9cd914d475", "sighting_of_ref": "indicator--b411ef61-f751-49aa-bdc4-108c78c1b5f9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc8f7c83-d060-45b7-bee0-8f35f074ea87", "sighting_of_ref": "indicator--b411ef61-f751-49aa-bdc4-108c78c1b5f9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22b6420-1a90-421b-80e1-8411a9390911", "sighting_of_ref": "indicator--6bb0fb90-a453-47b9-8c96-04bd7c3db5e0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65f3059-cc99-4fb9-9931-7a26c0866d71", "sighting_of_ref": "indicator--6bb0fb90-a453-47b9-8c96-04bd7c3db5e0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609b5a70-d349-4f74-8794-2f98d5b916a9", "sighting_of_ref": "indicator--c03cadd9-6610-404f-9b7b-b2727e2a22cf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a84b51-a39d-432e-864f-6ed7064ae403", "sighting_of_ref": "indicator--237dcea9-0dd5-4410-a63e-99390504c80f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54741c5f-a3c6-4297-986a-be35f7cfceda", "sighting_of_ref": "indicator--521ed1c8-29f2-4f77-80e1-b49d3aebd5d2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6f6336-6a98-456c-9869-14dacaab0458", "sighting_of_ref": "indicator--23442caa-a11a-475d-abe8-94f5403176ea", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3478e193-9635-4e64-92ad-315298318bb5", "sighting_of_ref": "indicator--ec524e1d-e61b-47a2-abd1-ea48f8edb628", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e8546c-c743-4166-bba5-4a3d68751d16", "sighting_of_ref": "indicator--ec524e1d-e61b-47a2-abd1-ea48f8edb628", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b35df9-63b7-4c93-ab30-f22cf6489db5", "sighting_of_ref": "indicator--1a8340bf-d219-4db2-9e1d-a246185e3b4f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6fe75e2-417d-4541-ae34-7e5213423832", "sighting_of_ref": "indicator--3b0829d2-25ba-46ec-8cb2-e42a46328f32", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1976c12-d1e7-4521-b7d7-bded6720c330", "sighting_of_ref": "indicator--3b0829d2-25ba-46ec-8cb2-e42a46328f32", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ca6db8-6a4b-496f-bc4a-9cb844dadf57", "sighting_of_ref": "indicator--3b0829d2-25ba-46ec-8cb2-e42a46328f32", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19214a51-8e97-431b-85b9-5d1bc7dc3267", "sighting_of_ref": "indicator--0572c578-2bae-411e-aecb-a7d1b905b1e2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ef50c0-24e6-452d-b64d-217ef99eb29d", "sighting_of_ref": "indicator--0572c578-2bae-411e-aecb-a7d1b905b1e2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69616a65-1ba5-456f-a224-2c6044cc4775", "sighting_of_ref": "indicator--9665c9c1-5a69-4245-a57b-ba952793eca5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a2b053-ff12-4cea-acde-8937dd801cbb", "sighting_of_ref": "indicator--9665c9c1-5a69-4245-a57b-ba952793eca5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04cda421-5ac4-41ef-95a7-a74604b036f9", "sighting_of_ref": "indicator--a1dfe815-b0b7-4964-974e-5beae03fb5d3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b56f6a0-e8d2-4a16-9fdc-f5445b067197", "sighting_of_ref": "indicator--6ac53844-bb9d-43ed-9059-864655392794", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c5bd96-78d1-422f-93a1-167d4efc7ef0", "sighting_of_ref": "indicator--59815205-ac8e-4118-8b5d-14e286ab4b81", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd828f6-8c9c-4413-a99f-a5e8e3f5a518", "sighting_of_ref": "indicator--e8bd2306-7363-467b-9d2b-c3269a96e806", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8acd704f-c7d7-4fa0-ac8b-eb782876e782", "sighting_of_ref": "indicator--76fbde46-93b8-4e43-9745-26d8f05815f8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e5d4fa-89b3-4ce1-8a84-d48385285de0", "sighting_of_ref": "indicator--7125f8da-7c97-4616-a847-8080b507196d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60a0302-ef22-451e-aec0-749b682b5e79", "sighting_of_ref": "indicator--e043893a-881e-4f35-996d-8ff0a58b04ae", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad9014e-f9b0-40d2-b514-8a5d7dbf9f77", "sighting_of_ref": "indicator--41dd8c9f-1ff3-41fa-859a-3d87414b0176", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666e9eb3-3fdb-4d3b-bae8-bdbe7b4247a7", "sighting_of_ref": "indicator--226147e2-78d6-43bb-8c5f-f563bc68e7be", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e79a20-cefe-4389-9037-99d4b3b6a0a1", "sighting_of_ref": "indicator--310b6402-e0a8-4a1c-b34b-9d1de187b45d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b25c740-291d-4763-b1b4-57e3888170a3", "sighting_of_ref": "indicator--dfdce371-9384-412e-8e9f-d61c0b2fc50a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82cd16f8-e2b2-4272-b3da-40374516966c", "sighting_of_ref": "indicator--3a1b9611-df16-4e3b-b349-fe8ebe0e2772", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e161e3-4f5a-4f19-8413-7e9c56675052", "sighting_of_ref": "indicator--a7163d41-4d37-493a-9ed5-b72744000485", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9627c9c-17e0-4e87-ab51-5c4922d07a44", "sighting_of_ref": "indicator--74242b4a-d987-42d4-8adb-f3839e582f82", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01047572-9246-44d9-8c85-db41df841f2d", "sighting_of_ref": "indicator--e19142ac-0632-4fd3-bb64-dd2ef29179e5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a71f144-40b3-488d-88a0-601fd6190190", "sighting_of_ref": "indicator--e19142ac-0632-4fd3-bb64-dd2ef29179e5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2715df4f-fbdf-4359-a804-ede010cf63ea", "sighting_of_ref": "indicator--d2e65c1a-f027-4b0f-86fd-af5153520602", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5218d890-f97f-4edb-8013-f25b29af53b9", "sighting_of_ref": "indicator--d2e65c1a-f027-4b0f-86fd-af5153520602", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb9ca18-d4e9-4dde-ac19-a57e3b5597fb", "sighting_of_ref": "indicator--d2e65c1a-f027-4b0f-86fd-af5153520602", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c307b799-8dbe-4a90-a195-026f29586ae1", "sighting_of_ref": "indicator--78e2bb48-0002-466e-99bf-17f3d8e249cb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e56e24-95f9-42dc-a102-baa8fe0242e5", "sighting_of_ref": "indicator--1ace5160-db21-491b-8972-3d2e046c2678", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ba14cc-8199-441b-83ba-3f86dc603f3b", "sighting_of_ref": "indicator--1ace5160-db21-491b-8972-3d2e046c2678", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15bd5622-de81-4547-a408-865928560ede", "sighting_of_ref": "indicator--1ace5160-db21-491b-8972-3d2e046c2678", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a55d46f-a30a-419e-94e6-3b02f86c226e", "sighting_of_ref": "indicator--4deca97a-0e9e-4304-bb14-4976090b4e9c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abf99bd-bff4-4f61-919b-b516bf54d741", "sighting_of_ref": "indicator--877222cf-c403-4268-b4ff-93d01af48b0f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b23045a-5800-4539-91dd-85b74911a93d", "sighting_of_ref": "indicator--97987269-8eba-407e-b255-66c7c44a9d1a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c93ff09-cecd-4cf4-90be-12151a7481fe", "sighting_of_ref": "indicator--97987269-8eba-407e-b255-66c7c44a9d1a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c02f18e-9a26-4419-8416-acb894f1122c", "sighting_of_ref": "indicator--c99ed785-b93a-4b9e-8ac5-b151b101a1c8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dafa19f-62c4-4788-8b7c-42aff25837b7", "sighting_of_ref": "indicator--8c872b01-70e6-496b-8db6-1ee560b90cfb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f61f022-0d55-4110-a3c0-bd23f3ba26a5", "sighting_of_ref": "indicator--17564991-e6a5-4833-a82b-419273e57344", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbcf8f7b-d69d-42ec-ad66-d179db232357", "sighting_of_ref": "indicator--17564991-e6a5-4833-a82b-419273e57344", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8cb39e-6067-45f9-9bbb-55e63c64ff01", "sighting_of_ref": "indicator--2106e627-a678-4ca9-802f-a37b266cbe80", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085b61de-ce33-4fc7-877f-f657896d0177", "sighting_of_ref": "indicator--2106e627-a678-4ca9-802f-a37b266cbe80", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef112b2f-a1be-4959-afa3-858b7e3ad6a8", "sighting_of_ref": "indicator--b5916969-69eb-46f3-bc87-2d234d99093b", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe93b0ae-4945-461d-85d3-2690b6e0de75", "sighting_of_ref": "indicator--8f3ff370-8473-453a-9461-620f2f76ecc2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb73a72-b94d-44ba-aab2-b225a53706ca", "sighting_of_ref": "indicator--8f3ff370-8473-453a-9461-620f2f76ecc2", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f7f3eb-626a-4594-8126-1db77578f90d", "sighting_of_ref": "indicator--8f3ff370-8473-453a-9461-620f2f76ecc2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c506c55-95df-4d98-a619-b8edc86052c0", "sighting_of_ref": "indicator--373c09d7-85ad-434f-aa8b-b259d7ccd65a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82cca60-d8e9-49ec-9432-bd440aedc4aa", "sighting_of_ref": "indicator--fbd0b658-bab0-41d7-8f5c-dd09c3602494", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc98fa37-a417-4729-8e8f-cebb3384e69f", "sighting_of_ref": "indicator--43ec1a66-5b93-4602-8724-dea44264053c", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11294f81-756b-4eb9-8570-3a0c64d3b8c6", "sighting_of_ref": "indicator--d9dfca7f-9eba-4d21-8efd-2690dd56a03e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0905d9-703d-49e0-9b14-afe4c19c1d88", "sighting_of_ref": "indicator--d9dfca7f-9eba-4d21-8efd-2690dd56a03e", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c899141d-bc28-45e8-9851-d5e116f2a1ea", "sighting_of_ref": "indicator--cab05d55-766a-42db-b1f1-321e4c3ed31b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80beb7a-e186-4793-bcd4-48b784b45033", "sighting_of_ref": "indicator--6980fdf5-5010-4461-818a-74760b796e2a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc333a5-f10c-4e48-8103-3da0cd37b3c8", "sighting_of_ref": "indicator--6980fdf5-5010-4461-818a-74760b796e2a", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da210e9-0f07-4c43-ab34-6cf9825f51bd", "sighting_of_ref": "indicator--6980fdf5-5010-4461-818a-74760b796e2a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f31d374-4ebd-461b-8916-2ffae258f7df", "sighting_of_ref": "indicator--8d8227df-4205-47c1-b264-dd4eb11fc13f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262f542a-7ac5-4fe1-b141-8247deaab25e", "sighting_of_ref": "indicator--8d8227df-4205-47c1-b264-dd4eb11fc13f", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab27247f-6ba5-4615-a3a3-1702a662475b", "sighting_of_ref": "indicator--8d8227df-4205-47c1-b264-dd4eb11fc13f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0bd5e6-df96-47f1-98ab-fda728a30491", "sighting_of_ref": "indicator--a6db5d11-22a3-4217-b6db-34c2d5e6f679", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a05345-f8ce-4b7b-8788-32053fc41346", "sighting_of_ref": "indicator--a6db5d11-22a3-4217-b6db-34c2d5e6f679", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64da8b5a-5ff6-462e-a21e-bc9a2f308038", "sighting_of_ref": "indicator--08d52d63-da71-47b1-abc6-97f0bdcaf283", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afbf46fd-fa16-466b-8aba-b8cbf12ed1b7", "sighting_of_ref": "indicator--8266b364-742e-4f8c-982c-461208eb226c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef695d56-ee74-456a-96dc-3cad813034ef", "sighting_of_ref": "indicator--9443849c-81ff-4cca-8071-ec47496ac401", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958c66ea-856e-4878-80b2-bde714d9ffdc", "sighting_of_ref": "indicator--9443849c-81ff-4cca-8071-ec47496ac401", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63054137-469f-46c5-b462-1bd0b527ff18", "sighting_of_ref": "indicator--9443849c-81ff-4cca-8071-ec47496ac401", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000ac4ba-3996-4f0d-8f45-15da8c5a7569", "sighting_of_ref": "indicator--5b97ffc9-b076-4378-bc4b-be649d7c782a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb36b92a-1af8-4482-a447-73bca597e278", "sighting_of_ref": "indicator--cc5d011f-0c61-42b8-bb8c-ce3059f042af", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7071c97-d440-4764-ade9-af36c7a9e184", "sighting_of_ref": "indicator--37142a09-e79e-42a4-a61a-36cc85f4969f", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919d85d6-0cfa-49ba-b619-b7bff9f9bb29", "sighting_of_ref": "indicator--b8862dee-3a9e-4003-bfe0-f61cf27c2f25", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf28e65-5945-4746-b029-35f933641f84", "sighting_of_ref": "indicator--cd9a1c68-38f5-400a-86e7-b8183a176bbe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad041d4-8a0b-4731-955f-cc8c4f102b49", "sighting_of_ref": "indicator--f1bf6b62-7328-4c02-8489-67ed7bbb9605", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df69c314-8e8f-48b3-a3ee-82142792d669", "sighting_of_ref": "indicator--b652c68b-a42f-4172-83ce-97d73bd23b86", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be84dc4d-edc1-4422-a017-fbbeeda39d12", "sighting_of_ref": "indicator--55d1d940-12d2-476f-98fa-c9809c60152e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141e599d-1dfb-42c8-a43a-e1f8b2bb3ad2", "sighting_of_ref": "indicator--21a7bd1b-ffec-4050-9e4e-af70406bd3fd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc1a62e-ef66-4aa5-acd7-70d4530a3ff1", "sighting_of_ref": "indicator--21a7bd1b-ffec-4050-9e4e-af70406bd3fd", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8bc252-fbb1-4b89-a2b8-b89be97650f6", "sighting_of_ref": "indicator--21a7bd1b-ffec-4050-9e4e-af70406bd3fd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042e9639-d62c-4fdc-8247-2fa68b57ac8d", "sighting_of_ref": "indicator--9cc6393c-6c1d-4cbb-be9a-56673443d0e2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9bb4bb-fc09-4891-808f-ee7694df2755", "sighting_of_ref": "indicator--9cc6393c-6c1d-4cbb-be9a-56673443d0e2", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff39881-e1c2-4c0e-bfe0-312f0b61d8ee", "sighting_of_ref": "indicator--9cc6393c-6c1d-4cbb-be9a-56673443d0e2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1314f0-b30a-48c9-9fd3-7298e949e753", "sighting_of_ref": "indicator--da93d871-4308-4109-bf4f-30ed98c2299f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdcc50b4-258f-4f5d-95ce-22b70c1dcdaf", "sighting_of_ref": "indicator--d9740665-9499-47f6-bb47-308c39ebdb41", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf6d244-a766-408a-b51d-768801633d05", "sighting_of_ref": "indicator--af3550d6-e78b-413e-a5f2-59dc925d5ef2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20696b7-126d-48e3-a633-1dae7cbe4a1b", "sighting_of_ref": "indicator--af3550d6-e78b-413e-a5f2-59dc925d5ef2", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f8616b-c36b-474f-82dd-73eac5c2acc0", "sighting_of_ref": "indicator--af3550d6-e78b-413e-a5f2-59dc925d5ef2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea338e4a-1100-4af5-bbd9-b308ce1fb363", "sighting_of_ref": "indicator--c63940b3-a83f-4e3e-ad74-598a262cfeeb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6858d36-8f26-4706-907c-f4cf29593a4a", "sighting_of_ref": "indicator--c63940b3-a83f-4e3e-ad74-598a262cfeeb", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e683236-d334-4947-8763-a72b52d3b929", "sighting_of_ref": "indicator--c63940b3-a83f-4e3e-ad74-598a262cfeeb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236aa758-79fe-46a2-aeb9-0927033b1db7", "sighting_of_ref": "indicator--86ac1cf7-fe70-48d4-bbd5-ac4f2598b071", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9cfc65-4656-48a6-be00-7c7cf8d1bae2", "sighting_of_ref": "indicator--73470c04-c5b1-4cf3-9c35-d64be59dfaf9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ae27c7-8766-4854-bd1d-95738a2a092f", "sighting_of_ref": "indicator--934fe85b-35fd-4faf-892c-a1a131ade0dd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66637915-a621-4f04-bea3-77bd2648d065", "sighting_of_ref": "indicator--12278dd6-9ca9-466a-bf97-8bc460e9f626", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfded9ae-9e4f-4cc8-a830-d07a4469cc02", "sighting_of_ref": "indicator--517b8e7f-705d-4b8a-aacf-3d05152c86a3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc47cea-faab-419c-9d06-9b45ba602a01", "sighting_of_ref": "indicator--517b8e7f-705d-4b8a-aacf-3d05152c86a3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee6506f-944e-4100-8aea-96b69067aa1a", "sighting_of_ref": "indicator--4efe8d91-1075-4fae-b0b5-683e093c19f1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84151650-f20c-4a2f-a6a3-eee2b634acfa", "sighting_of_ref": "indicator--4efe8d91-1075-4fae-b0b5-683e093c19f1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cd93e9-d243-45e9-a0a1-fca08e2c3c95", "sighting_of_ref": "indicator--4a3fdb1e-ea5c-4fab-a61c-335f2732b108", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc0857d-2dd2-42a9-9c29-ccd165cd92c5", "sighting_of_ref": "indicator--157c1886-6d7d-4d5c-b21c-94e33f114c7d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c8ea1f-5e6a-4f32-b7e0-ae3bb57d90fc", "sighting_of_ref": "indicator--157c1886-6d7d-4d5c-b21c-94e33f114c7d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7847c27f-d2eb-4f08-89ac-c8949dfb767b", "sighting_of_ref": "indicator--c7149545-4dcc-4b82-ab7c-0a48f1d2bf6b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf04a47-5e28-458a-8dcf-21046c1e76a0", "sighting_of_ref": "indicator--d757fedf-347f-4ea8-89b2-c1c04d3c39cd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb41afdb-285e-4a99-9352-89cb635a98e6", "sighting_of_ref": "indicator--968cd380-dd88-4f4e-a593-702dddf44c58", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc48cf09-32c2-4073-aaed-ccfb39aa5d4c", "sighting_of_ref": "indicator--12a24daa-b8e5-4f0b-823d-0b0920883f54", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e992e4-c54f-4c0f-9042-1ae3000bb361", "sighting_of_ref": "indicator--12a24daa-b8e5-4f0b-823d-0b0920883f54", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212a6a01-c286-49f4-8452-e89fce7ca4ff", "sighting_of_ref": "indicator--92ee6485-4917-42d2-85f9-5e52d6208000", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623e8018-3c9d-45a5-a250-1b0e4c1b37b4", "sighting_of_ref": "indicator--4f89f977-503a-4682-8f51-c925d753932c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16dd20f-3ebf-4e9f-ae0b-186e471e37d9", "sighting_of_ref": "indicator--f8ce233f-150d-4289-8ec3-e87031553dca", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c6c8d4-0024-41f3-a1c6-4567b121c7fd", "sighting_of_ref": "indicator--6c33efbc-5a6c-4cf3-aab9-435982589042", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4286377-5d68-4db1-ba63-6141bffec2d3", "sighting_of_ref": "indicator--6c33efbc-5a6c-4cf3-aab9-435982589042", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e317871-8cb6-4373-9f98-d068634297f1", "sighting_of_ref": "indicator--6c33efbc-5a6c-4cf3-aab9-435982589042", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffdcd32-2c35-4908-98b5-7cc88bc7f8b1", "sighting_of_ref": "indicator--25e53326-9b72-4b8d-a7c7-20c4cc38f438", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23017867-c233-4052-8e54-d75936e6275e", "sighting_of_ref": "indicator--0466e9cb-3238-4fbf-9eba-75e45ddebd4a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2743021c-de2a-4c44-84ca-639b4a62394e", "sighting_of_ref": "indicator--0466e9cb-3238-4fbf-9eba-75e45ddebd4a", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed91fbca-f4a9-4117-aae7-2447e20c2492", "sighting_of_ref": "indicator--0466e9cb-3238-4fbf-9eba-75e45ddebd4a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0640f1d5-fc53-4245-97d4-0884d8731ecc", "sighting_of_ref": "indicator--7831e0c2-24a0-4aa9-baf7-4c4563dafba4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad3f7cb-cf15-4bc0-bf7b-ad3c9f9d0af9", "sighting_of_ref": "indicator--59ea818d-646d-494b-929a-76ba2c92fbc6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d716b78-b3d7-4606-8736-57ea9a689e11", "sighting_of_ref": "indicator--2e08aa1f-2cbd-43af-98c2-71eb3d96add8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05224205-720b-4250-a18e-dd8d62fb83b2", "sighting_of_ref": "indicator--2e08aa1f-2cbd-43af-98c2-71eb3d96add8", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e10120d-892e-4f99-871f-ca7744cf8733", "sighting_of_ref": "indicator--ca1fb0e7-9baa-45ab-bfc0-f93f24cde4f3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37723c0-af18-4502-9aa5-500cbaac2bc0", "sighting_of_ref": "indicator--ca1fb0e7-9baa-45ab-bfc0-f93f24cde4f3", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144c28a5-3878-4e89-b30b-8a5d2a13d42b", "sighting_of_ref": "indicator--0b9d18b5-bb17-4fb3-afd8-fde32a11666e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c1556e-96b8-4fe3-87d0-0c3fd03dea99", "sighting_of_ref": "indicator--8247cd8e-582a-4b36-9cf5-44a4472ceedc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1662e6f4-3b4d-47de-bb31-7288e8518b94", "sighting_of_ref": "indicator--05fdcd88-2b7e-4185-99a6-2af5f84810d4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1d77cb-6d68-4aec-8861-e386df0e2fd3", "sighting_of_ref": "indicator--0f013450-3593-416a-b5e1-ebddf71d8f82", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13aa75ac-f460-451f-9860-c151ce0fbb3c", "sighting_of_ref": "indicator--3e7d88e5-f989-456c-aaa2-62d94ece2765", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b74cbab-7b8c-4d66-9c51-c8e1d3f7f5aa", "sighting_of_ref": "indicator--1f2f3324-c6fd-491c-8323-5d673dc7000d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672f6626-1b8a-4f27-b04b-f9a038c1b733", "sighting_of_ref": "indicator--c4f56167-9971-44cc-841e-d5e240ced8cb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cf37bd-97c6-4f6d-8799-e75d9049d665", "sighting_of_ref": "indicator--6f52ab1c-cbf5-481c-a369-65240c10550d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6001d5-e1fc-4230-a722-babc59dfb57f", "sighting_of_ref": "indicator--6f52ab1c-cbf5-481c-a369-65240c10550d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5427a29-f2b8-4943-a331-607414bf183a", "sighting_of_ref": "indicator--0ee44fc2-d117-4570-a8ba-bc5640c452a8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f7dcda-b2cc-4500-ad42-c0ec587ffd8a", "sighting_of_ref": "indicator--0ee44fc2-d117-4570-a8ba-bc5640c452a8", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc54b1ff-825f-4997-a80b-b0542b39d632", "sighting_of_ref": "indicator--0ee44fc2-d117-4570-a8ba-bc5640c452a8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902fb70f-580c-4c7a-b5b9-b535c9e1c33b", "sighting_of_ref": "indicator--63564807-7bfd-4f1a-b5b9-fa1eb3a99af9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234b3872-bd50-42b2-8223-a858c2537e3c", "sighting_of_ref": "indicator--63564807-7bfd-4f1a-b5b9-fa1eb3a99af9", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e396e49-56a9-42f8-95c1-89bc16cf2566", "sighting_of_ref": "indicator--63564807-7bfd-4f1a-b5b9-fa1eb3a99af9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133bdeb3-400d-43b8-80ad-3733f182139f", "sighting_of_ref": "indicator--68cb10ab-1af6-4ac8-b8f4-427818f31197", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98cd6c5-e8eb-4e68-99b3-b0852c2678e6", "sighting_of_ref": "indicator--ad74fb32-2d1a-4499-a3d1-dc8a03995fc7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b88dc00-572c-446c-8cca-81134c5972e9", "sighting_of_ref": "indicator--2f7bcf02-6973-43ca-b036-e1c305023fa1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95c8f9f-6a67-44a4-80a5-f0218a33a3fd", "sighting_of_ref": "indicator--2f7bcf02-6973-43ca-b036-e1c305023fa1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747a1ec7-0bf0-43b3-8ab3-0e1716ab79de", "sighting_of_ref": "indicator--cbc92601-3825-451f-b84a-c755f22f0300", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee002d3e-a8c2-41ad-9504-8d31891f2651", "sighting_of_ref": "indicator--cbc92601-3825-451f-b84a-c755f22f0300", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0293f5-77a3-43e3-9fa4-bc78e9ed3656", "sighting_of_ref": "indicator--f151dff8-69bb-4952-825f-d3e99c458280", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587631ce-c0ef-4f9e-9afb-d9eb960f2f4a", "sighting_of_ref": "indicator--8df70af1-df4a-481f-9955-effedf982a12", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a59148-27b1-458c-91d1-8800d2fd5805", "sighting_of_ref": "indicator--dc8a5173-1b0b-42e1-a80c-f888587be2e4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7f66ae-1706-466c-b3c7-9a626be045ca", "sighting_of_ref": "indicator--f0705e6e-3aa8-4cbd-b513-b51e8ab36e3c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175df37b-c072-4c54-bf6e-531ab9e1635e", "sighting_of_ref": "indicator--ec7f3cc1-521b-427f-ba52-3d5043d5c06d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55630fe8-bb40-4b9e-95f2-c7c594a41ede", "sighting_of_ref": "indicator--af570cfc-f67c-4897-a6dd-bf54b8c27047", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7d2ac7-1cd8-48b0-9ae8-5a02652cc2ac", "sighting_of_ref": "indicator--af570cfc-f67c-4897-a6dd-bf54b8c27047", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b5bcf6f-5e53-401f-9253-df57cd4a8166", "sighting_of_ref": "indicator--66deba07-5b68-401e-8155-913bd753283c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28edd1ac-a332-4650-9c35-bc2b6781c2c8", "sighting_of_ref": "indicator--3e9dc2bf-b96d-4e3f-a95b-26ab0ce8386f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f51994a-d53f-4cfb-bd80-8d7d8724766f", "sighting_of_ref": "indicator--3e9dc2bf-b96d-4e3f-a95b-26ab0ce8386f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0108ad-6943-4368-84a4-15b5e7978730", "sighting_of_ref": "indicator--260b3ea4-e585-4190-8203-8b8136a00ee9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f4b24a-4836-4dbf-ab09-f6fb2c846526", "sighting_of_ref": "indicator--260b3ea4-e585-4190-8203-8b8136a00ee9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067ba8a7-351c-44dd-985a-02ecef168d2d", "sighting_of_ref": "indicator--2c7cf564-c9f4-4180-a601-1174dbf89445", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00747f7-6976-474a-b211-1ad1e65a5518", "sighting_of_ref": "indicator--dc55c80b-56c5-477f-abf0-2cdfdee374c9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12ab8d7-10a8-4c56-b580-7f491eb087a4", "sighting_of_ref": "indicator--8cc3f658-d338-4e30-a7ee-0e19f299aeff", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b913a3-afa2-420c-b1b8-5bc6c5b93a67", "sighting_of_ref": "indicator--8cc3f658-d338-4e30-a7ee-0e19f299aeff", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3c047f-82c6-4dfa-ae2a-21e8f95d55f3", "sighting_of_ref": "indicator--ad260525-3e1f-4015-9ba9-99a310ddd794", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17643567-7c44-4a48-9a02-b4e6d02c9377", "sighting_of_ref": "indicator--8d0f00d6-e047-44e3-8874-22088a3f5134", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dba2bca-23ed-4ef7-bf29-fe099efdcc39", "sighting_of_ref": "indicator--844a20d7-0913-454e-9ea4-614f28aa1d2d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c203c043-d151-43b6-adfe-c8a678ccd6c6", "sighting_of_ref": "indicator--eb3333bd-26f3-4e72-8e28-03147cafa8b5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed8dda4-ae3e-4374-9835-aac929be4c94", "sighting_of_ref": "indicator--eb3333bd-26f3-4e72-8e28-03147cafa8b5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7383ca-d579-43b4-98ee-c5c2d3dfc2b0", "sighting_of_ref": "indicator--9bb4d159-06d2-43f4-9bcf-a6c214277a5d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3e2ef9-e73c-432d-8c98-f2827b040c47", "sighting_of_ref": "indicator--8d2ea366-92e9-483a-8062-e58a9151e72a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8cf64d3-f955-4e50-8597-60cb7f8bbcb3", "sighting_of_ref": "indicator--7e876d6f-0bf1-4b9f-bbe4-a5b7f7898969", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb3aad5-7a54-4e1e-836f-132ae2cde771", "sighting_of_ref": "indicator--cc6e90be-491d-4ad2-95b0-bc36839d4fbc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be6efdc-a06d-4a34-9be3-f96a6ad0471e", "sighting_of_ref": "indicator--f937b50b-245b-4c5e-8fa9-95e93bf09922", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d265eb08-e0f1-448e-9063-0f31d1247593", "sighting_of_ref": "indicator--f937b50b-245b-4c5e-8fa9-95e93bf09922", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce02ddb2-459b-48d8-b3dc-3d67bf721c3a", "sighting_of_ref": "indicator--d046b830-9985-4b7f-8a3e-99ee303c38b2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26660ccb-eb32-41b2-b8a9-a3dff3aa0b2d", "sighting_of_ref": "indicator--d046b830-9985-4b7f-8a3e-99ee303c38b2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daabc339-96a9-4416-a960-d0d210459231", "sighting_of_ref": "indicator--28c80237-01f7-4123-af12-c3f78cb326bc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56888834-67e9-4229-a042-ca6beed2fb0b", "sighting_of_ref": "indicator--28c80237-01f7-4123-af12-c3f78cb326bc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918e4f1d-c485-48e7-9750-f35f46aaad52", "sighting_of_ref": "indicator--01ad5dbc-80c0-49ea-ba58-54c8b069880c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c17bdd-6b7b-4a18-8d38-5f250b78720d", "sighting_of_ref": "indicator--c7cce201-3e8e-4115-82c9-fe8649fbe7b7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2117c18-b8d7-4eb9-ac7a-8f5005a57a3d", "sighting_of_ref": "indicator--c7cce201-3e8e-4115-82c9-fe8649fbe7b7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7515973f-6e58-4c5c-b7f4-cf3a665705f1", "sighting_of_ref": "indicator--b1673c74-35c1-4dc3-a1e6-8640239e91db", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa2250b-d2fc-4d90-8d76-cb000628bc0f", "sighting_of_ref": "indicator--b1673c74-35c1-4dc3-a1e6-8640239e91db", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb074fc4-1dee-4f4c-a57d-dab8b704583b", "sighting_of_ref": "indicator--e71fa421-ce5d-4852-bcc4-012a0c2ddb12", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b89ab1-9770-480a-83b7-b21615b81b35", "sighting_of_ref": "indicator--e71fa421-ce5d-4852-bcc4-012a0c2ddb12", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a27bbc-92b2-4f25-affb-c9b559c9b28f", "sighting_of_ref": "indicator--546b6242-89d6-427e-870f-f8527a89fd15", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11de122c-1992-441d-999f-2ed079065805", "sighting_of_ref": "indicator--6996ab18-48e6-4d07-9ebd-6cd42baf8622", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baad9e83-8a96-49d0-af23-44264c451cd2", "sighting_of_ref": "indicator--6996ab18-48e6-4d07-9ebd-6cd42baf8622", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555b8268-121c-4fa4-9b0a-f8e71e594cf1", "sighting_of_ref": "indicator--f20fbaf5-6046-46be-8f84-b66654c3edf4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b78613-bccf-4733-aa9f-7f9258d6691b", "sighting_of_ref": "indicator--f20fbaf5-6046-46be-8f84-b66654c3edf4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72abdc07-4f70-488a-b648-0d53a02c18b8", "sighting_of_ref": "indicator--dca2f608-b53d-4cf0-8c02-0874fdff6365", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4c5bdc-ebd0-4beb-ab43-c4564cec1377", "sighting_of_ref": "indicator--dca2f608-b53d-4cf0-8c02-0874fdff6365", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de89b66-a2ed-47c0-803f-8dc204767b7b", "sighting_of_ref": "indicator--7075a084-3e42-440f-8029-977b5ed97cdb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6a6acb-9e35-46cf-82c2-b39d7ba96700", "sighting_of_ref": "indicator--7075a084-3e42-440f-8029-977b5ed97cdb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea8ac32-5e20-4bce-9598-7b78ea646ec0", "sighting_of_ref": "indicator--abe3fcf2-e321-43a3-8ed4-82f9d4f7e8f6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3b37e7-2334-440d-927f-a03f191a8254", "sighting_of_ref": "indicator--bdbc3445-630f-429d-a3b9-580eb0bd566f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572b218c-d53a-443f-bb04-38044487b614", "sighting_of_ref": "indicator--50c27469-7718-4779-bc7e-1240c57c2e12", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8e0b3d-dfbf-4ee6-8089-90387593a641", "sighting_of_ref": "indicator--8da007e5-5f3d-4fad-8a54-9221a7bf4524", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55eb602f-c3f2-42e3-b067-53b5b218e8d9", "sighting_of_ref": "indicator--78ba9540-cca3-49ba-8d5b-f7299520d4d7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21acf7f0-bdf2-4fc3-8b96-1e01dc7105fc", "sighting_of_ref": "indicator--e7a4136c-e054-4592-beac-f46fd1ff10fc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7029cb53-241d-4e42-8f4e-3751cb372355", "sighting_of_ref": "indicator--51b68cc5-8f78-4db8-a842-241ed5924edd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d769ec-d849-419f-b2d4-1a893480411a", "sighting_of_ref": "indicator--6e7f7fb5-9c11-4be4-adea-a5b70bf859a8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02dbfa18-2af1-4f60-bbd7-4168c11691c2", "sighting_of_ref": "indicator--23211dd0-26d4-458a-be58-d8e8616bd0ff", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c18f093-de91-4e9d-adc8-23904ca94334", "sighting_of_ref": "indicator--23211dd0-26d4-458a-be58-d8e8616bd0ff", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10164cf2-519a-4944-b189-2c992ad9275a", "sighting_of_ref": "indicator--c6c354fe-ffaa-4492-a0f9-25be34920c83", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff4325b-4284-4315-a7f7-9cba627a60d2", "sighting_of_ref": "indicator--0354e104-1b5f-41b0-910f-909bfa067bec", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73468613-97b3-4c36-b8fc-1f601221ae85", "sighting_of_ref": "indicator--0354e104-1b5f-41b0-910f-909bfa067bec", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e118f8-158f-4c09-9fe9-6fd27bf2dadc", "sighting_of_ref": "indicator--a6f445a6-33ad-4175-b388-4d1f95d0bd36", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796a11b7-ba73-49ca-a512-97e61bc36ad3", "sighting_of_ref": "indicator--1347ad25-a61b-41d4-a9f9-1659ae16eb6a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b4f893-d925-4f65-b04c-b5431ba821b5", "sighting_of_ref": "indicator--6de99d6c-a389-4fc6-b563-2b88a6e91bf1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3362c56-ea61-47a3-84f6-c6417ab7b7d6", "sighting_of_ref": "indicator--86d3832d-6a73-4fa0-9b29-f74b603c3759", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc8a5e3-a441-457f-95ad-2f20bce18271", "sighting_of_ref": "indicator--8a1e3ea5-a7f7-43ce-8a66-ab841de3021c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a93b07-cced-4ad7-8df3-5a7bc7d231f3", "sighting_of_ref": "indicator--07fc3fa4-ded2-44c1-a459-b6568240adba", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375566a9-0ef6-42e4-88fb-f4b060a541f3", "sighting_of_ref": "indicator--7fd07708-c828-49f0-a8b7-83aa99ff76e7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b952e0-3867-45a5-94dd-02984b6043b1", "sighting_of_ref": "indicator--bf7cafb6-c498-465a-b901-22ffdb3154e5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c44c7b7-a19c-49a0-a810-658616347513", "sighting_of_ref": "indicator--42c44032-041b-4148-9706-b4f0ae10fcff", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed99be0b-6af4-4c98-a011-ea0b087f6fdd", "sighting_of_ref": "indicator--b2e71aee-4f70-4f8c-88cb-300fd2f534fe", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef5ff6e-19a6-4d46-98d0-d2c9fea7e3e1", "sighting_of_ref": "indicator--a8b88028-2dfc-4c70-ac8e-59503d8be91b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7835ce-c349-43d9-a5db-a5dd720913ea", "sighting_of_ref": "indicator--6225f44b-3d4b-4793-8091-48c968b3da7d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4119b635-da82-48b5-8e3d-12e9a4187126", "sighting_of_ref": "indicator--cef705aa-dc48-4341-bf91-e2fa7256ea0b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192a39b9-568a-4e6d-ac7d-f64d0bafdc56", "sighting_of_ref": "indicator--8d836c15-e6ab-454f-804b-a2a2596b7666", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33eee6e5-abde-414e-915a-f441990a66cc", "sighting_of_ref": "indicator--52d0ac16-e4e3-4081-8962-f3a68cfa29ec", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d96fc9b0-58ea-47b0-9bfb-5eca56b5ba34", "sighting_of_ref": "indicator--5a51829a-d922-467b-bcfc-b8279fdd2a88", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f083b8c6-51e5-4cd4-b1eb-1d63cb8d01dc", "sighting_of_ref": "indicator--02649547-99db-48cf-b797-1036050b7f3a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62322ad9-7a3b-4f52-9839-46b2f251af61", "sighting_of_ref": "indicator--e2e58522-898a-4438-aa82-7c03b69a4334", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac96c542-684f-4473-802e-bdcd2887a4e5", "sighting_of_ref": "indicator--b794cd82-8445-413f-b827-890c8db8ca7e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfdaa7da-39fd-4d8f-8168-c96ed9ae105d", "sighting_of_ref": "indicator--3ba3c81a-9487-408f-8e69-f2e6274e1cf5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39046f50-1e43-4eb6-9c0e-dc617e1c0a94", "sighting_of_ref": "indicator--0b85b90f-f25d-4276-8f8f-5b293ef6aca2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e304d3f-79bd-444a-aec8-8b1a24890b0b", "sighting_of_ref": "indicator--8221d745-2ba1-43c5-9b78-620145a32df1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205bc236-5682-4928-8726-89a481ef8536", "sighting_of_ref": "indicator--899b7df4-e46d-4592-8c9e-54c2daaca284", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e610e80-ea2c-4c97-ad70-a28d7e516b16", "sighting_of_ref": "indicator--a3ac7200-04d3-4fe0-85d4-c6e97cbddf2c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ccc22d4-ef8a-40a1-ac57-146dcb64025b", "sighting_of_ref": "indicator--7639746f-34ff-4d12-8a7b-a7beaf181d35", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86fc6d94-6e32-46a2-85bb-5f4c9cb28b27", "sighting_of_ref": "indicator--ab5b2847-7774-4e27-a9b7-77edabd731e2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efccc9ae-c9dc-4f16-858e-e3a051f8b948", "sighting_of_ref": "indicator--c4e2dffb-49ce-40ef-be8a-cc8780107fcb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df604b9-8912-4e73-99bc-7b20d43f2572", "sighting_of_ref": "indicator--605622dd-b487-4420-82df-0be3b49143eb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a388d5-2845-417e-ba30-7ad3373a0a42", "sighting_of_ref": "indicator--3a0e4954-1083-4fc6-9f12-1e6d9a7282dd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e26e65ec-c933-4fc5-9750-6b410b1f91ee", "sighting_of_ref": "indicator--aaecc689-5039-44f8-ae85-363cf65a322d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef4d66b-9b6d-40af-b2b8-49be857cf46b", "sighting_of_ref": "indicator--a6033f8f-671c-491e-9441-0eccc59079b1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69631e18-33d9-4f8a-8139-7e9e7d9fb191", "sighting_of_ref": "indicator--e68a29aa-ec1e-4f07-bb1b-cab1a485f35c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da673274-95c9-4739-875c-4444af9352d9", "sighting_of_ref": "indicator--d02a5757-3b5f-4d6c-9fed-ea11fa959c13", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9163059-a5b1-4b1e-9ad7-01b928220b60", "sighting_of_ref": "indicator--36b6d4cc-9f39-4724-8564-6a4b82e12c25", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770d6dd0-87b3-4340-886c-567eee657165", "sighting_of_ref": "indicator--30b1e615-5e00-46c2-9ff5-74a9d6f1f4a0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72273744-b596-4d7c-8db8-5ae7afbbe3cd", "sighting_of_ref": "indicator--01f4f3d4-b835-4555-9e9d-4dac1b179139", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aebb0c57-02aa-4cdb-b83a-f187d152a126", "sighting_of_ref": "indicator--56323de9-5c15-4469-9b6d-4ff473bcadf5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5515f53-8316-4de7-a3b4-93dd8f172516", "sighting_of_ref": "indicator--71b79079-9bd9-4d66-8e55-9af534f4b3f2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d90de48-306a-4bf1-96cd-161ad35c2924", "sighting_of_ref": "indicator--880eb4da-5b08-4e00-9599-9ab02517c11c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a04655-138c-4d4f-bd1a-8b54e8857340", "sighting_of_ref": "indicator--bb1cadd1-acdb-44ef-8f7b-0ed284679f66", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f03c84-c505-4670-98f9-e712df2bc5d3", "sighting_of_ref": "indicator--d45d0df9-a7b9-4176-a456-b850c887ce78", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb1066dd-3cb1-448f-a61f-e7fa25a92461", "sighting_of_ref": "indicator--57019f06-09ac-49b2-9010-3abb73060392", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d51f3a5-07a8-4855-ad52-1eb7a22b2c55", "sighting_of_ref": "indicator--5671c8c1-7826-4b3c-a019-2a9fcacee777", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274663d8-a4fc-4420-bb61-a5244d39e5df", "sighting_of_ref": "indicator--cbcfc199-bc13-42b9-9eb3-934ea5242d9a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4504d797-f4d1-4cfa-8ee4-efc5e132a8ca", "sighting_of_ref": "indicator--42329333-88f0-4a32-84ff-d285a4876801", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666cde13-bbab-4ef5-b73e-b7b9148453cd", "sighting_of_ref": "indicator--b581ab09-97e7-439f-b663-f2b61bf53b0f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847b38b0-3538-43aa-b5b0-5ea8eed0eb1b", "sighting_of_ref": "indicator--1cdc4370-34d5-45ad-83fc-bab2ba7ddb9f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2744b89-0671-478a-875c-2e7f3ff49fae", "sighting_of_ref": "indicator--b7edaab2-264c-4816-b2de-20e38a1c5c7c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a5f03f-0d44-4b70-9dc4-6a389d35d796", "sighting_of_ref": "indicator--6738a850-b9d5-4c5b-8879-76e7e33f0210", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83a2040-9733-46f1-818a-ed973ba9faa5", "sighting_of_ref": "indicator--c18d1b5a-2e0b-4be0-9a65-a5e6012a9ca4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb219dfb-6a02-4b09-b936-32760aee815b", "sighting_of_ref": "indicator--d7cd1f9e-383c-4863-a1b4-3ac63b15e93d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2318482a-cde0-4241-bb2c-bf714b07cd8f", "sighting_of_ref": "indicator--3b41be65-0ce9-4da5-937d-5a93be237350", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4e5ade-a610-4c06-91f9-00ac658f4f89", "sighting_of_ref": "indicator--eb8f4150-ed9c-4b9b-8dcb-c4cafd241100", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95acf9f8-6aeb-4e88-8cc2-c74d9af968a8", "sighting_of_ref": "indicator--34a276ed-be7f-4f90-b520-fa3fc17b24f2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbe4993-b7f5-4085-a485-cea2f3892dd0", "sighting_of_ref": "indicator--34a276ed-be7f-4f90-b520-fa3fc17b24f2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec8e2e7-75d4-465d-95a7-2384106856b3", "sighting_of_ref": "indicator--830f766f-97c8-4be2-ba6d-02276aad3e4c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad5a675-da01-4f86-b9ba-3af05aca1fd1", "sighting_of_ref": "indicator--ac8f1623-d279-49d9-a4c8-da40fb0ccd79", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09726338-223d-49a5-814c-4f267b3c5749", "sighting_of_ref": "indicator--44311fbe-4325-4d85-b48b-b10705a27160", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65152f85-2aa1-4d67-8394-ec44a1e70cb1", "sighting_of_ref": "indicator--28fdcafc-e9ef-485e-9567-6c010ccb8a67", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d9f525-9a9e-4fb4-87b2-65571fc89ae3", "sighting_of_ref": "indicator--d8d72e18-83dc-468c-a847-0368c5162a1b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adefdfe9-4eab-4112-83d1-2a829f914b57", "sighting_of_ref": "indicator--e1c4b638-37f6-45dd-9202-51b844acfa8d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c4bf2f-4b7a-4f4d-85c2-92d5a01b17ea", "sighting_of_ref": "indicator--18a393aa-46cc-4dc4-b0f2-ae0e63a41103", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67981d16-e7c2-41f6-bf0b-621b4f9d42b9", "sighting_of_ref": "indicator--e850ac63-093f-4633-9623-311e1e85041b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce338e8-77a8-4d83-a175-93a0dc8ffe2b", "sighting_of_ref": "indicator--6318ff7b-236d-4659-b5ea-ae1ecde7bb16", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55083394-ef85-4b0e-bb45-3cade3a025cf", "sighting_of_ref": "indicator--81ffb2a8-41d9-4065-802b-4ae926495b9b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ac303d-4fe2-4dc0-bb65-62891211ad2b", "sighting_of_ref": "indicator--a1677e3a-1f4a-4d4a-8d86-29c2ec9ccf5f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52753974-4185-43d6-ac0b-6d8cc30a1ccd", "sighting_of_ref": "indicator--e0e0ec5e-5f29-43f2-a91f-f45c0eea2c17", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9b3b39-cc69-4bd5-8ef1-0cd5d8e7bb69", "sighting_of_ref": "indicator--474e9e81-8369-42e9-a16a-360baeb29475", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04401ad8-078e-4300-92c3-d31b93e94e29", "sighting_of_ref": "indicator--00b52209-e18a-4a4d-b0bc-71453e00bb33", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8024ab99-ecc3-482c-9d13-ae9c3fc133c1", "sighting_of_ref": "indicator--97082b13-e6a8-4587-b310-edd89052848d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d68e33-0e0a-46a8-9099-7768c1058711", "sighting_of_ref": "indicator--be942b2a-1e35-4c28-ae57-8966b0d0ff90", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34cf2802-3d1c-4a90-b656-0536e5d1cad9", "sighting_of_ref": "indicator--1eee6363-dd6b-4ac5-9c3f-46c8bd339083", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63109f3f-9108-4b1f-ae57-69d2dcfc261a", "sighting_of_ref": "indicator--443a6e93-48d2-409b-9eaa-4bed809574b7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76aad0da-c0df-4cf1-aeb9-a37e6129f8a2", "sighting_of_ref": "indicator--7f0f4eea-3837-4b65-a226-f7f070b1a89f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b8c7340-0f02-426b-a921-ee8cdf668d81", "sighting_of_ref": "indicator--90230a7b-e15a-4013-80bf-63967dfd4e65", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92948d16-1a2e-4ce7-be9b-6f9bbe255bcc", "sighting_of_ref": "indicator--4ec3085e-b0e0-4012-ba9c-d5c0e5a01010", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c940583-5756-4ce2-9cee-df50b580e9ba", "sighting_of_ref": "indicator--93df3d78-6665-44d0-b3a3-81c7dfa987c4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad02ac10-d35a-4959-8c1a-5790292bdbd5", "sighting_of_ref": "indicator--7beaf797-a8d2-4a04-b1aa-9ef9afdf9aa9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7259f78-01c3-4d49-a1ac-ed5630cd154f", "sighting_of_ref": "indicator--8f627cf1-3237-4e4d-9173-4c8694a1424a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3aad58-4365-4a30-a2ff-b82cdffdb56d", "sighting_of_ref": "indicator--8f627cf1-3237-4e4d-9173-4c8694a1424a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ab3619-f6d0-46b6-a606-20e5abd67d39", "sighting_of_ref": "indicator--86289041-f371-4e20-a5de-3dab7b53aaf5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e9ab8d-ea55-432b-befa-be257f17084a", "sighting_of_ref": "indicator--947d9734-f77a-47c1-a55f-79b08c1ca23f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f516549e-9609-41ef-97a7-ffddb8ba07fb", "sighting_of_ref": "indicator--947d9734-f77a-47c1-a55f-79b08c1ca23f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc173fbc-e83b-4a3e-bda5-2fa2e8c00edf", "sighting_of_ref": "indicator--cf8fd806-70df-4319-8de6-621d9d148614", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119be87b-69bc-4bc4-aeda-7c000168a0b0", "sighting_of_ref": "indicator--cf8fd806-70df-4319-8de6-621d9d148614", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd97a9bb-e950-41da-a292-38459c7ebb4f", "sighting_of_ref": "indicator--1aeaaf9d-5a30-4591-a85f-c29538180885", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a05712e-d8e3-4584-bcaa-7664e6e458ea", "sighting_of_ref": "indicator--2fd8dc7c-a199-4ec5-a4e9-e40717712e02", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0a1a89-e3d2-460c-be0e-2336686654c7", "sighting_of_ref": "indicator--e46e7e09-b347-432b-bd1d-d6c5b4490732", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b1b8372-d8f3-4a5a-8dce-63c9af0ef192", "sighting_of_ref": "indicator--c6045698-ca63-4a61-b1e1-0e26360d626d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a789cce-a4e2-4e36-a259-4e71c6fabc61", "sighting_of_ref": "indicator--5681b4d2-24ff-4cc7-94c2-ef2c6f972d61", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7c61328-ab74-45ed-a653-ca9752338341", "sighting_of_ref": "indicator--c92a3f61-41ac-48c5-a026-491521cea3c6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8498fa96-9bda-4af1-ac55-c8dbee07e12b", "sighting_of_ref": "indicator--f1dac903-b41a-4795-a5ae-98cb14c71f8f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abce8b3d-8191-4e48-9d3d-b74bcca8a511", "sighting_of_ref": "indicator--6daf978a-5c75-45ed-af39-e97d122c1f11", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585dee64-6dd9-4bc1-8bd6-e08ac6ac0fbb", "sighting_of_ref": "indicator--fe158494-a585-4ba0-8f3c-ae7f1af98366", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e309ba3-a676-43d7-9332-78c8fefbc092", "sighting_of_ref": "indicator--ef3ca517-c1f4-4f55-820f-1ebaefc0908b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8767040-1142-40a5-97fc-ebe61942f7d5", "sighting_of_ref": "indicator--ef3ca517-c1f4-4f55-820f-1ebaefc0908b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1038d1c-7dbf-40c3-afbd-b85dc89bff23", "sighting_of_ref": "indicator--e64e5cb0-d6d1-44ab-b315-ae72522748b2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357f532c-59e9-40b8-a99d-b10a40e4e951", "sighting_of_ref": "indicator--e64e5cb0-d6d1-44ab-b315-ae72522748b2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80969978-ee1b-4f49-9338-70e641d75110", "sighting_of_ref": "indicator--d1919780-0c08-41eb-a478-94976e55446e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98084959-37ed-4102-a850-da5560823dc2", "sighting_of_ref": "indicator--d1919780-0c08-41eb-a478-94976e55446e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139d3a03-961a-4f97-8e46-3789f20824d4", "sighting_of_ref": "indicator--eb4e5745-4654-4a8d-99c6-c235d3ef9ace", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4725e055-d2ff-40d1-b33f-81ceb385f7e8", "sighting_of_ref": "indicator--eb4e5745-4654-4a8d-99c6-c235d3ef9ace", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173ae57e-90ab-4ad4-a40e-d4df829633e9", "sighting_of_ref": "indicator--eaafd4c9-395f-4768-bba9-341d64e0f0cd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c142b4-3dad-4b19-92ae-7d438f6fdc44", "sighting_of_ref": "indicator--eda31cce-6a33-4dc3-8117-b8a27369d256", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b04f818-171c-4b7a-805c-37a1567fa916", "sighting_of_ref": "indicator--6e5b35a1-cebb-44e0-beb1-fedc437f8564", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6bfbcb-36b9-4c2b-b48b-7c46451aeb5f", "sighting_of_ref": "indicator--116187ec-cdc3-4631-98fe-38c4593c7c11", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439cc83e-bcf4-4d27-ad74-2bc9d079cf20", "sighting_of_ref": "indicator--116187ec-cdc3-4631-98fe-38c4593c7c11", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde07504-72ef-425b-9aa7-61fbf9618b37", "sighting_of_ref": "indicator--3efe39eb-682b-406f-909b-441c2afb4a87", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7953cb17-d732-44b5-8088-67b5b6a5e055", "sighting_of_ref": "indicator--d9028b16-15de-4a74-93af-c08d48eeee43", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c7adb8-5319-4474-90b4-52d8801d9eff", "sighting_of_ref": "indicator--a3ca7d04-480a-41bf-b960-659a77befb5a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed440fb-9356-4cac-b081-81689cb73562", "sighting_of_ref": "indicator--a3ca7d04-480a-41bf-b960-659a77befb5a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f328153-1766-4cb2-a41e-bdf123470865", "sighting_of_ref": "indicator--ac618dd9-da5d-4840-a73f-a6775d5096e2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a616933-819e-4f4e-92cb-a74e3cfbea55", "sighting_of_ref": "indicator--83a38596-a823-464b-98bf-ba63ed673909", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f6cef8-bccf-48ae-a334-ad520a57d7a8", "sighting_of_ref": "indicator--380fd1bc-f6e7-4dfb-9011-e81e69f40b8b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3040f375-98e0-44be-a639-5c72cf2cc9b5", "sighting_of_ref": "indicator--46868f7d-2b39-4263-924b-6e7c38f189ad", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e979de-661e-473d-9c47-fd852da4d8fb", "sighting_of_ref": "indicator--46868f7d-2b39-4263-924b-6e7c38f189ad", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7db7c4-2256-4d78-8f29-05b70d4e7a8a", "sighting_of_ref": "indicator--38997a81-8372-4f17-ad4b-867cc25fedd9", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf2d6c0-0192-442e-a854-f8a823f82ead", "sighting_of_ref": "indicator--c6f6a806-aad8-4c65-9286-ce8df494d770", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27276fd4-503a-42a0-ab5b-73a73407b894", "sighting_of_ref": "indicator--16d1de1b-7a53-4d0a-bf5d-46a550c7e331", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18f0f25-2121-4840-9636-19966f2eae81", "sighting_of_ref": "indicator--c32c8fe6-c3f1-4cf3-9a1d-c0005d9ec7b4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae6097c-f7dd-476d-9ac1-932a7dabd6ca", "sighting_of_ref": "indicator--c32c8fe6-c3f1-4cf3-9a1d-c0005d9ec7b4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32946a62-49ff-4f3e-8e7f-67739da72886", "sighting_of_ref": "indicator--5851480c-b54d-460b-aca4-1c36a66337c3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87ca090-07d1-4209-9acd-0c7a447ca003", "sighting_of_ref": "indicator--5851480c-b54d-460b-aca4-1c36a66337c3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc752a0-dda7-4ecd-8c74-96d2e73780aa", "sighting_of_ref": "indicator--68c19011-5a9a-418b-97a5-f95b40831f3c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f57402-0055-4da8-8134-2ab685aae0d9", "sighting_of_ref": "indicator--9ce50448-de6a-4ec5-b4a5-41fff573f411", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44edd25-6c67-4701-8028-c2bdb3cbeac0", "sighting_of_ref": "indicator--9ce50448-de6a-4ec5-b4a5-41fff573f411", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd79b00-294b-4733-bd93-84153dee56fa", "sighting_of_ref": "indicator--d87a8ced-ed45-4bfc-a4a1-900945203d25", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99312de3-8b6e-40f8-8e29-fc8d8e34c506", "sighting_of_ref": "indicator--d87a8ced-ed45-4bfc-a4a1-900945203d25", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b978b6-116e-4514-9255-9972d8b35264", "sighting_of_ref": "indicator--26a6cee1-a927-4358-a0cb-931be8afe34f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dfc8e3a-403b-4b5b-a759-f8260b9578f0", "sighting_of_ref": "indicator--26a6cee1-a927-4358-a0cb-931be8afe34f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4447d2-50cd-4e26-892c-9f17d8dcabef", "sighting_of_ref": "indicator--6318c5d9-9f10-4bc9-9bf0-959ae962ba5b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ca1bfd-f811-4aa0-bbf8-65174bb613c1", "sighting_of_ref": "indicator--04e5a52d-7480-47ec-b09c-6bbcfda65ef4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ece3b4e-dd97-448e-9da3-f0ff39c56b02", "sighting_of_ref": "indicator--cf11391a-8ded-4724-b138-1fbfed17c1b7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379b5a96-1766-4a63-8467-7c2ff1ddba60", "sighting_of_ref": "indicator--673db28f-34f5-43d2-ae15-29aadce9db16", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5fa61da-0ad5-4419-b838-7f2cde942fb6", "sighting_of_ref": "indicator--9f7ad251-2aec-4ac3-98ef-2cb204248d1d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5984617a-4ed0-4ede-bbd9-41d71fa8b8c2", "sighting_of_ref": "indicator--28195b13-bb77-4f32-b376-6da6b6454d25", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a9432d-2b8e-4cf6-b9ff-4d8f3bd712b9", "sighting_of_ref": "indicator--8122c730-6d5e-451c-a152-24173bcc7892", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f259f7-cc04-4ccb-b917-1f3ff8f42c92", "sighting_of_ref": "indicator--e63e8c7c-82b6-410a-9123-46e773912361", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491dd9e1-4824-45c5-9ccc-84a6be3f0f1d", "sighting_of_ref": "indicator--b0006033-cf08-4b02-b105-4a6914777702", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c79230-341c-4cb3-825a-0f0dcb727588", "sighting_of_ref": "indicator--9475c407-90ae-432b-86a1-19e10be7d38f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9108aa-137c-4d4d-a7f3-7b97e6c55ce1", "sighting_of_ref": "indicator--1f2ad6de-9918-41da-9b13-e6a9c2e21773", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e59e844-ead5-4b91-9315-b37726721aae", "sighting_of_ref": "indicator--5ea23552-a8f8-47bb-acfc-02702ccd6e3e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba05e88-7d6d-43e8-99b4-136eb901594e", "sighting_of_ref": "indicator--d9648d38-5137-4d31-bcd4-4977c2b3716b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53066568-414d-4d88-a825-b1ee3d36289d", "sighting_of_ref": "indicator--a6a830b7-3089-441e-b64b-883befe664c6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b64d3a-8c52-4cb8-9c9c-e901a0e42cc4", "sighting_of_ref": "indicator--6e9b5272-1f76-41b1-a984-b0f6a3d75ff7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3b3a1a-f93c-46ea-9fbf-c9110f9d3042", "sighting_of_ref": "indicator--768eb67e-c8bb-42e8-b5ba-1c4293a54674", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a226fa-9e21-470e-8461-05c8e90b26a4", "sighting_of_ref": "indicator--06816afc-18df-4f6d-b9f2-954a2091e422", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6165cb99-7294-44d6-9cf2-b2e33fea2e4d", "sighting_of_ref": "indicator--a791f513-cbbe-45e1-9289-658906388029", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e61ee3-032b-4784-b4c9-c602b10cc4da", "sighting_of_ref": "indicator--229eac28-d88f-4e31-ad32-284e6de07c2f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2247b79-d865-4214-8002-246fa5ae980a", "sighting_of_ref": "indicator--f6e6edc8-984f-4e03-91de-e35d44bd9226", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b484487-75b3-4164-8fdf-bf8a3942fe09", "sighting_of_ref": "indicator--79070812-a155-4304-b30d-86a9bd41711b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7fb399-3bbb-4631-896a-cf57d3753aa8", "sighting_of_ref": "indicator--79070812-a155-4304-b30d-86a9bd41711b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e4a47e-195f-4509-ac07-b863d7e5de9a", "sighting_of_ref": "indicator--c60e4d2c-f4cb-41a0-a269-3e4ccaf4263c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172bc7be-d65a-4c65-b9c7-52ca26afb638", "sighting_of_ref": "indicator--431a1eac-1707-44cf-9fa2-cf286b861cee", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a09f8e7-0441-40da-9f18-3d5169b833e0", "sighting_of_ref": "indicator--59632327-a190-47ca-8f5f-de1453a81dd1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5694cddc-8aa4-4b56-8b2f-e30a8181b811", "sighting_of_ref": "indicator--c8de5fc2-95c6-49e5-b097-bab9e2d0b180", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad03d87-9cd3-4662-89c7-877aba699528", "sighting_of_ref": "indicator--cc7588aa-36cc-4455-a579-d64cc6dbbfd0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9a9391-08c2-4a4b-b619-bbe6964372e5", "sighting_of_ref": "indicator--02d142cc-6980-4787-8f9c-b995d13c66fb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e640f9eb-4ef4-4ca8-80f0-898ec864e7bc", "sighting_of_ref": "indicator--aedb990c-1ed0-4913-bc69-04df09d8c195", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df265873-61de-4c80-8ce7-4f98752d35d0", "sighting_of_ref": "indicator--aedb990c-1ed0-4913-bc69-04df09d8c195", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9482aec6-3f93-4f27-8032-7872a54298d3", "sighting_of_ref": "indicator--89013bdd-fcf3-437b-a1f1-2804b83c193e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe38218a-cbf2-4357-9f88-811556d89d45", "sighting_of_ref": "indicator--7e5e7f83-3d95-447d-9e40-51fc1b71fc6e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a5aded-d35f-40c7-aa93-195241b8b8d4", "sighting_of_ref": "indicator--d9f089ca-210f-4ff7-bfe1-4f4b51f5f8d5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e52296-c5cb-412c-ad0b-3a4d1e04c873", "sighting_of_ref": "indicator--d9f089ca-210f-4ff7-bfe1-4f4b51f5f8d5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e0ab5a-3fc8-480d-b0de-79f5a90de0e7", "sighting_of_ref": "indicator--56c302dc-4f38-4b5b-8799-d24bb3296215", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f992b53-6134-4d60-a47a-6af3073e80fb", "sighting_of_ref": "indicator--56c302dc-4f38-4b5b-8799-d24bb3296215", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75a369a-c16a-4444-9b03-f859734ac053", "sighting_of_ref": "indicator--05bcdee3-c0f3-4413-b524-1ce65eb2c963", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92b5227-01d1-4ccc-91c5-81ecc708d65f", "sighting_of_ref": "indicator--05bcdee3-c0f3-4413-b524-1ce65eb2c963", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90807dcd-3da5-471d-b1bf-b6c608b0699c", "sighting_of_ref": "indicator--93abd9ec-ecfb-4cb3-8600-894c2f65d146", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4e2159-9cc0-4bd1-8d07-5d36cd1928b4", "sighting_of_ref": "indicator--baa3932d-32ac-4b09-a2ea-eb6e311f93fc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6eb038e-0027-458f-b6a6-eb8590c37e98", "sighting_of_ref": "indicator--2376734f-fcde-4939-a5fd-1601d3e91c84", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf3969c-3d70-4c0d-a038-c4ce583173a6", "sighting_of_ref": "indicator--5ce1d273-0587-40e1-87dd-1eccee6e04dd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a942e161-6de1-498d-8a07-def10d44b428", "sighting_of_ref": "indicator--1e7175af-6fe3-4011-852b-498c7af2d5c6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b0f548-3241-40b5-b4e0-c9c0bd355c75", "sighting_of_ref": "indicator--65e58ecb-83c5-404e-8f0c-2c8579272630", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131ba523-7547-4af3-80cc-54f64888b3b7", "sighting_of_ref": "indicator--956aa7ad-b22a-4454-af1c-1aa82b9fd0a1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d2922da-bbb4-4269-a8d9-7b71de5a1fa8", "sighting_of_ref": "indicator--42e5851f-2987-4a22-9cfc-599089ea66dd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3d4f76-9319-4738-83ec-81387653406a", "sighting_of_ref": "indicator--b55a8220-5103-4a75-8813-b5dc8050d61f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c0d637-1be3-4b63-9a3a-f6e63c03848e", "sighting_of_ref": "indicator--d199bb47-71f5-4218-a41c-a8ca22c13839", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc68bee-db23-4f86-bc95-736c8bcd7b6d", "sighting_of_ref": "indicator--7b43b5d7-dbe3-4292-bbc5-ab33267aa1c0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2dc674-2eaa-45be-8674-830e20885396", "sighting_of_ref": "indicator--a34cdd2d-9dcb-474f-a8e5-7707456680ba", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26906059-f226-46cf-ac30-52ff5f41a7ff", "sighting_of_ref": "indicator--20359782-7eb4-452d-8b8f-69dac7082a0b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb938d1f-04c2-4b18-a4bd-555a2cb0de67", "sighting_of_ref": "indicator--73eb177e-ad9b-4e8a-80a2-89d74f1dab95", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9561da9d-c4a5-4b7a-9363-280f7a6343ba", "sighting_of_ref": "indicator--5784118f-013f-4d94-9e1f-a44f57a582c0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d7d1d4-77ea-4a10-a3e4-e314b7b608c9", "sighting_of_ref": "indicator--78e1aac8-22c8-4acd-b505-d4afe091ad2e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e000eb7-f094-442e-b738-c0a52866b739", "sighting_of_ref": "indicator--181a491b-536d-42e7-8d27-f6cdffc5e580", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe71873-f6be-4858-afd1-a22850c46176", "sighting_of_ref": "indicator--079ba3b5-64f9-4cb3-b729-e32c9e079fdc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63562759-4303-41e3-91d1-ecdc2a74faf0", "sighting_of_ref": "indicator--153abf46-3b9c-4d74-acc5-82f04a14d11c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2adaa82a-50e8-468b-b827-0339643fdb0a", "sighting_of_ref": "indicator--61b86fc0-f445-49f2-ac65-79a2c1caad6a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7ced9f-5326-4a7e-bcf8-08415d98369b", "sighting_of_ref": "indicator--4f247ba4-653f-4167-b69c-d9a655abeb63", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1066d45-e7ad-4868-a25a-cae73bd3b1b0", "sighting_of_ref": "indicator--c2ba6d41-17dc-42d5-b562-943d5f50263d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30396d50-0e66-4322-b66b-4459609c59f2", "sighting_of_ref": "indicator--c2ba6d41-17dc-42d5-b562-943d5f50263d", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d6224a-bf20-4b8e-a3e3-749c0ccfa687", "sighting_of_ref": "indicator--c2ba6d41-17dc-42d5-b562-943d5f50263d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12b4a2c-9a65-4abb-a2d4-248820c3cfdc", "sighting_of_ref": "indicator--1860d6b2-9c5c-4719-a346-5503f52c85b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197d6009-222b-423b-b286-919947d9577b", "sighting_of_ref": "indicator--4e6e4ac7-2e96-4b23-a567-c1161c1c3b81", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7505072-d361-455b-8428-b615329011c0", "sighting_of_ref": "indicator--2607532a-432b-43bc-9d62-30dc240405be", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42232cf9-aba5-4f92-ba4b-d8ea540a1978", "sighting_of_ref": "indicator--a0b2f28c-0ba3-439a-82a0-dfdc9803d88a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c25404-b2c4-4b26-82db-91327ca24ce2", "sighting_of_ref": "indicator--b6b6a5f1-19ec-423c-9a7e-541e5c47f474", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47907951-79a6-443b-9766-6ef57e44e4cb", "sighting_of_ref": "indicator--c7d636c4-4d90-4571-b9de-709ed5125c9f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36abfff3-d80b-4244-92ce-abf03fd12cae", "sighting_of_ref": "indicator--3dfa5799-bfa6-4a89-a49d-711bf860faf6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46fae64-645c-4d87-ae4a-342254e0b509", "sighting_of_ref": "indicator--3dfa5799-bfa6-4a89-a49d-711bf860faf6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5403de64-2ea8-4c7f-b7e7-57b949d37a92", "sighting_of_ref": "indicator--caaa0ccd-2864-4005-9a2b-1c8b9087902e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d11fd6f-f327-4fee-b68a-1455bd24f5f9", "sighting_of_ref": "indicator--cf2b4039-0b10-4f5e-bb95-6cba14ece0be", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17d2ee3-483e-412e-a321-5a397c234ad8", "sighting_of_ref": "indicator--313133ba-c915-4f7a-b11b-c5055f0ec1c3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5f4be1-efcc-496a-ae63-cce56acab34b", "sighting_of_ref": "indicator--1c2b134c-3d02-41ab-b36b-e08c7fe48234", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef0f168-898b-4942-82cb-ee8f5077b637", "sighting_of_ref": "indicator--5c1817ef-b676-4175-9a46-516d65ee729e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbf5aa1-efab-43e2-9396-fee7623000fb", "sighting_of_ref": "indicator--2d3a5536-8e47-4881-b047-a54a1f061d50", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0005b9-4e97-48c7-bfd9-91bc4cc213f3", "sighting_of_ref": "indicator--0c54a30e-5fee-4af9-b78c-57cdd310d717", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3de1088-4909-4a11-9b1a-7729d73c325e", "sighting_of_ref": "indicator--99e39673-4271-4035-af64-8a71d982f639", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79241a62-488b-4ced-9f44-9b147d30679c", "sighting_of_ref": "indicator--ef9232c9-d978-49a9-8c79-a4dc40b7f7d7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cef78ed-122f-40ff-9c86-c5ca59fe4c3b", "sighting_of_ref": "indicator--6c2b1045-d196-4532-aa50-a0feda95d8dd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5dbe0e9-aa33-42d7-b1d8-bc995c7b0cc7", "sighting_of_ref": "indicator--3b2a555f-af58-4b3d-b205-52edede91b87", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797f5dbe-3702-4b6b-9f64-57fc04633a4e", "sighting_of_ref": "indicator--7d50e405-1e64-474b-93f2-e3628780922e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b56e95-eb25-4444-903e-15d72208369c", "sighting_of_ref": "indicator--7d50e405-1e64-474b-93f2-e3628780922e", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a870e77f-fa69-4c0c-b727-16ea88ab2657", "sighting_of_ref": "indicator--7d50e405-1e64-474b-93f2-e3628780922e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbeb5531-eb66-4ca7-8b81-af9497d39bb9", "sighting_of_ref": "indicator--232f9efd-fa1f-4f7a-b2e1-f08e24ef1889", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450c1e66-2983-4545-a3a1-8a386e45624a", "sighting_of_ref": "indicator--a4b67335-3d30-4799-a77f-dbf66c1a02b4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f71cbb8-2490-482f-b278-e3d558645798", "sighting_of_ref": "indicator--6c7a8b59-f95f-4d54-a985-af748bad8145", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3572f0d3-9567-4c9e-b2e0-181714cda0c8", "sighting_of_ref": "indicator--6c7a8b59-f95f-4d54-a985-af748bad8145", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6959208c-64df-4e05-857c-fd25f307aa2c", "sighting_of_ref": "indicator--8a9a97eb-8827-49a3-83db-4f95c18b3d7f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ebee78-3ca3-40c6-8ab4-44c711b277b9", "sighting_of_ref": "indicator--b7716548-5ae3-4c51-af2d-3d8566ded629", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07f3152-7751-44d7-8397-4b8c2eead4f7", "sighting_of_ref": "indicator--b7716548-5ae3-4c51-af2d-3d8566ded629", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21857ccd-3485-4deb-ac61-792b6b49af11", "sighting_of_ref": "indicator--9cf8da9c-aa9d-4383-a26c-378f7b49f224", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564d28c1-2983-4752-bd95-14e50757d47d", "sighting_of_ref": "indicator--007b23dd-c7af-4275-a07c-5bc3fcc383ac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0990c895-7d97-49b8-a009-63cb96603fe6", "sighting_of_ref": "indicator--007b23dd-c7af-4275-a07c-5bc3fcc383ac", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ae12e2-c763-42fb-aa4f-ecb67fd26ee9", "sighting_of_ref": "indicator--5a22de3a-cf9f-4582-9794-78542c1a158d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e26acc98-9491-429a-9ef3-d596b1b35ac3", "sighting_of_ref": "indicator--86d146a8-ddcf-45fd-ba1a-bfb9c0e824cf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2600e9bc-51fb-4ef6-b92b-d865e57e4b0c", "sighting_of_ref": "indicator--f6ba9768-9ea4-4a97-a265-64293804bf0b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1522ba5-02fc-42e6-9811-443f66f16ef9", "sighting_of_ref": "indicator--f6ba9768-9ea4-4a97-a265-64293804bf0b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8515af55-7684-4f58-9047-d11fd76a5c18", "sighting_of_ref": "indicator--e59521f7-8d58-4765-aefb-31019df30b40", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dabd7d8-e57e-4666-924a-7e5d347be43a", "sighting_of_ref": "indicator--e59521f7-8d58-4765-aefb-31019df30b40", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd38eab5-4c3e-40f9-b7ff-a31bd17a24f8", "sighting_of_ref": "indicator--a6f5ff58-2356-4da5-82b2-7b4875ecbe6d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174f778b-c62c-4fba-a917-5c160efc612d", "sighting_of_ref": "indicator--dcd0f2bc-5b90-4bb9-9e33-bdee7888081d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d95a09-1f45-490d-a575-30ac7b6bfed3", "sighting_of_ref": "indicator--1f6d8bcd-c80e-48e4-af50-131c06213abe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c57c3a-78b7-4e78-8b45-82cb6559ac00", "sighting_of_ref": "indicator--88f3c056-6b74-4a52-b459-1fbd4b5f8067", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc279a4e-e91d-4fed-af9a-282beb72a868", "sighting_of_ref": "indicator--fe853576-4ed1-4624-b4e1-9df9c2f58a83", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a40d4c6-93b4-4bd5-949f-3aaedb8d771d", "sighting_of_ref": "indicator--8160ccae-d92e-4d55-813b-cbc3cf8de6b0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b558bb-77af-441a-9041-cbf73108cdbe", "sighting_of_ref": "indicator--a8c6b798-f3ac-4f94-ad3c-701dbcbaeeeb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4043d8f-b216-44d0-a210-feabf82c81da", "sighting_of_ref": "indicator--1d22bf3e-d138-4adf-be4b-eaa60ab3ba7b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ab1fe8-73fa-4a34-86a0-4e019549d24a", "sighting_of_ref": "indicator--3a818297-5786-43c0-be1e-142fdfe875c7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29cc2d6c-9563-4121-90c8-aa4d63950358", "sighting_of_ref": "indicator--3a818297-5786-43c0-be1e-142fdfe875c7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc94da42-1328-4c9a-94a5-810ab13ade39", "sighting_of_ref": "indicator--6792d296-d8bf-4b69-a3f1-b6666a74d2f3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2e388c-2fb7-48ff-88ec-be5d8547d001", "sighting_of_ref": "indicator--6792d296-d8bf-4b69-a3f1-b6666a74d2f3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48f4f73-17a6-4b9f-adf7-dd5d80411071", "sighting_of_ref": "indicator--8479ef08-d0c4-448e-a733-df21893eb8f6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac8bfd5-f215-49f0-8a26-b089161012a3", "sighting_of_ref": "indicator--8479ef08-d0c4-448e-a733-df21893eb8f6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de3bb6e-223b-4b4d-830f-ceba9ec6332a", "sighting_of_ref": "indicator--a0fb6929-6c07-4634-9c1c-120de69fef72", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0153874-c63a-4456-9255-c41d1747b272", "sighting_of_ref": "indicator--a799837e-64f8-4781-9a88-eac44c834c20", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e055319-95bf-41e2-92af-97d700236012", "sighting_of_ref": "indicator--c8ba644e-8ba2-44fc-ad21-4056a1711af2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a442c8-f72a-4eba-bd0c-ba1acc0571ab", "sighting_of_ref": "indicator--c8ba644e-8ba2-44fc-ad21-4056a1711af2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79cc4dac-ee9a-491f-9736-a7db8314281f", "sighting_of_ref": "indicator--64f0a469-f816-470b-970c-537ab4c639a8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79c6b39-e53d-4df1-8089-7e106a71abab", "sighting_of_ref": "indicator--9ecabe27-9281-4f4b-9e50-5479d8ab00f8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9fd65e-7ca4-4bf7-a377-97555427e35d", "sighting_of_ref": "indicator--484e4880-636a-48a5-9a3f-082ff3a69f9b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b383e1d1-78bb-4b24-b1b1-649f68246086", "sighting_of_ref": "indicator--a430e07b-8458-4432-a579-22906ef7b634", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259d56ef-585c-434b-a711-a86d989511c5", "sighting_of_ref": "indicator--a430e07b-8458-4432-a579-22906ef7b634", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8a131b-34a5-49d8-bbee-3b89ec467de1", "sighting_of_ref": "indicator--1362adb8-0b95-4768-8efd-cd9ee11062e5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7936b6-c250-4e24-928f-b05cd94570b2", "sighting_of_ref": "indicator--ec20eef3-6178-497b-8dfb-9f421dfa6606", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978564bf-1122-4d4a-825d-9dca10a6f50e", "sighting_of_ref": "indicator--ec20eef3-6178-497b-8dfb-9f421dfa6606", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8073dc-1ce4-4430-be0e-a27aabdd9887", "sighting_of_ref": "indicator--6ff16f4a-610e-4d1b-a043-bc4655c411da", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c96b0f-9d94-45e2-a191-399230cc050b", "sighting_of_ref": "indicator--a09f265b-a6c5-4225-a9d4-0a18fe5bf6fe", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7af5edf-0467-4a57-8fb6-6ec657fb074f", "sighting_of_ref": "indicator--a09f265b-a6c5-4225-a9d4-0a18fe5bf6fe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ee038f-09a3-4fe7-b046-904f462b9007", "sighting_of_ref": "indicator--c1d6118a-dccd-4932-9d90-2866890de01b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766b92ab-0ef0-4854-8316-fad50f9c05b3", "sighting_of_ref": "indicator--be401f56-841f-4197-b278-16bee5415a72", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee0a792-b8f4-4043-884f-14e54e253031", "sighting_of_ref": "indicator--89dd7ceb-dcbe-4fa3-a2d6-0c2aa7ec3d77", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76562094-6ab5-4a33-8122-ccfc8d902312", "sighting_of_ref": "indicator--89dd7ceb-dcbe-4fa3-a2d6-0c2aa7ec3d77", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e00541-309c-44ce-8bd6-4b3b816596f5", "sighting_of_ref": "indicator--fb0f2ab8-7bf2-443c-9728-7c67de9e2368", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3fb4e37-7c22-4a33-bb6f-efad515f30c9", "sighting_of_ref": "indicator--8a0e8a1b-023c-4c65-a2d9-5a195507c78a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14711134-01b3-4c9b-8c38-8896c5d19598", "sighting_of_ref": "indicator--3c7f8c48-6192-414b-8e06-a1708dd5be65", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6d331e-e0c1-4363-926c-58499e4f3237", "sighting_of_ref": "indicator--204d02fc-2fe6-40a6-9bc6-90c5b56ecf14", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4abf856c-6d4c-4cd2-bde3-7e788631e57f", "sighting_of_ref": "indicator--e249f5e4-623d-435f-86e5-786e351d9f78", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab5eba4-0ea9-4cea-85db-ad240b871b18", "sighting_of_ref": "indicator--ee93641a-35fb-4f0a-9aba-0048bba0f2f0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d77767-68c1-4324-bd8d-2765507e4f2a", "sighting_of_ref": "indicator--b01d4fbd-1f26-495d-8a1c-30cd455f8b85", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c412957f-7018-4390-a76b-9b7232d4c8e1", "sighting_of_ref": "indicator--b01d4fbd-1f26-495d-8a1c-30cd455f8b85", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00a82f6-ae94-44cb-a7f7-08256003c6f2", "sighting_of_ref": "indicator--e92f2239-8b65-4552-9e3d-d8181fde6b1e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c3f39e-6148-417f-9612-d71ad697d23d", "sighting_of_ref": "indicator--e92f2239-8b65-4552-9e3d-d8181fde6b1e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2cdde3-c014-4f07-af5d-54c446314d21", "sighting_of_ref": "indicator--562bf7a1-5d2c-44c5-b06a-caedeea46fe9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c1ec08-ca47-4b03-bd50-d42a6f164ccc", "sighting_of_ref": "indicator--562bf7a1-5d2c-44c5-b06a-caedeea46fe9", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648379b2-bcfa-4854-8f54-6af105ec413c", "sighting_of_ref": "indicator--562bf7a1-5d2c-44c5-b06a-caedeea46fe9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb8f551-dbaa-438a-9b41-5ad8e69004be", "sighting_of_ref": "indicator--72c43345-927a-4253-8063-f4fd067736b2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361a1dd1-cb5a-4b44-abc3-4478cf258775", "sighting_of_ref": "indicator--72c43345-927a-4253-8063-f4fd067736b2", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aecfcea-6b38-4fa7-9e7f-0da8ee631591", "sighting_of_ref": "indicator--72c43345-927a-4253-8063-f4fd067736b2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7614923-f29c-4ad9-916d-c44493440966", "sighting_of_ref": "indicator--39e25191-326d-4f90-8061-ff3b1a9c81c5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13af8f86-30b6-40f1-93ff-fad54a6b4b44", "sighting_of_ref": "indicator--39e25191-326d-4f90-8061-ff3b1a9c81c5", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09db641-e54b-486c-8558-240be10f5646", "sighting_of_ref": "indicator--39e25191-326d-4f90-8061-ff3b1a9c81c5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a97cdf7-fb38-4dd7-85bf-9ecdba26b57c", "sighting_of_ref": "indicator--830b9dae-a769-46b8-91fd-a05e6303fa0a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e6335d-193a-4e15-ac3d-20fd33db6b4b", "sighting_of_ref": "indicator--830b9dae-a769-46b8-91fd-a05e6303fa0a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aea4dc8-75fc-4ddf-927f-02784d2e54c1", "sighting_of_ref": "indicator--9c55b922-8959-44da-9b12-50035621455f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75720c4-49db-49ff-bf1c-b1a8b0aaee04", "sighting_of_ref": "indicator--9c55b922-8959-44da-9b12-50035621455f", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9b3230-b62d-426a-ac6c-d41902bd7875", "sighting_of_ref": "indicator--9c55b922-8959-44da-9b12-50035621455f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e358c5-0971-46a2-aa6a-c904cf281b4d", "sighting_of_ref": "indicator--16c7d461-074f-4c8a-867c-a3819f8cade8", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151d11c4-49bf-457d-89a1-61ccb46e4a41", "sighting_of_ref": "indicator--6f785bb2-ba46-4c0e-b6b4-d729958dca6a", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ed44ec-aa47-4ab5-89cf-5d690adfbc5e", "sighting_of_ref": "indicator--8459e7b4-1600-47c0-92a9-11195da2efc7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16f6262-1210-4dcb-8aa3-67a0f0c08d79", "sighting_of_ref": "indicator--c852366d-ffee-457a-bab3-e5b2e646d116", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40ee178-5862-4243-9397-29d1d0e82518", "sighting_of_ref": "indicator--c852366d-ffee-457a-bab3-e5b2e646d116", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcec4212-cc2c-4655-bbf7-09247c750ff3", "sighting_of_ref": "indicator--1c5eaddd-92eb-4420-8d24-b8be524e29c6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d98c17a-fb4a-4d4a-911c-5eaa9c740ecd", "sighting_of_ref": "indicator--45cee5a9-b426-4407-8a27-7555a5a591c7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902848cf-48fe-4101-be15-cf3af191875f", "sighting_of_ref": "indicator--706adad5-94c8-468c-abe5-e7b1253d99f8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3be027-34d2-4d0e-8ca6-6653ba4ff637", "sighting_of_ref": "indicator--706adad5-94c8-468c-abe5-e7b1253d99f8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ca5b6d-cfda-4d12-ae18-148711a3c404", "sighting_of_ref": "indicator--9f594456-a7ef-4d85-8209-cab1c17c1cbe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835557fb-b029-4c0d-bff1-f761026e80a6", "sighting_of_ref": "indicator--9f296374-91d9-4f57-ba25-1097d73b8076", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52300379-c8f5-4ffd-b3f0-4d47c12cfc7c", "sighting_of_ref": "indicator--d416729c-ca92-4d40-bf49-5e02398e54c6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50805105-7fd7-494e-b11c-bfa69531caa1", "sighting_of_ref": "indicator--cf83874e-84b4-409a-bfe7-8ba06c09c8e6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46044ff7-caed-4a10-ba24-bc07840ac848", "sighting_of_ref": "indicator--4d747c15-1325-4345-bfb7-e9d77a3a9c55", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456c78d9-f272-412c-9230-83086615378d", "sighting_of_ref": "indicator--589b3e59-08e4-4146-8618-33cce1c1143d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7ca8a0-f019-42b5-a6bc-83016cd1ebf4", "sighting_of_ref": "indicator--bb44e1b3-8a09-489f-abba-c8aa11ef4801", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1cb9a57-6a5b-4a5d-89cd-26d965b1626c", "sighting_of_ref": "indicator--6453a601-1432-4daf-bb72-7a4a5d1ec06b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7cc063a-47ea-4ebd-acd9-face16cf8b8c", "sighting_of_ref": "indicator--e99328a7-95f6-4518-ae07-13a9021f3db5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997c4c35-b587-49fc-ad5d-137a98713d47", "sighting_of_ref": "indicator--07b373bb-775e-41ce-a4d6-6dab4e92641a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dabd61b0-7acf-4514-8948-0a5ffee169ca", "sighting_of_ref": "indicator--092c7d13-b61e-4b64-9962-994a7cdff63d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cbd887-db74-4b28-aa5c-1b7678f69550", "sighting_of_ref": "indicator--79e2211a-f757-4499-b046-b9136aa8c144", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d16269c-68a9-4e27-9f0d-4d91ab34472a", "sighting_of_ref": "indicator--7ab768ec-a333-4821-aa7c-50fff9a77d2c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759b7c7d-3d26-4a3b-a51c-ef54165851d1", "sighting_of_ref": "indicator--36eb0613-fc7c-4f39-8340-50ce0f9fa0cd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab49281-5f8c-4983-92f7-322cfe228211", "sighting_of_ref": "indicator--d3d82e97-19f2-4847-818b-be5e8b9395f0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4eb02ad-0bac-41bf-a6c5-d3bab65518ee", "sighting_of_ref": "indicator--4f8fb4bb-37fe-43b2-9126-192ac24f7470", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbca089-0097-4009-9322-cb598b39d423", "sighting_of_ref": "indicator--7634b780-7d50-4e76-9091-9690ddb32f5d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38314e1e-0aab-47c0-9c1a-9b89e8b780e3", "sighting_of_ref": "indicator--e5f742c0-00a7-4f99-99a8-b402ec417a19", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71adb174-9f74-410c-b22e-f68c97a62071", "sighting_of_ref": "indicator--153d7956-8843-4c5f-a9c3-0a8111ce4b33", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450d84c4-b0d3-449c-999b-b4fdca3d59d7", "sighting_of_ref": "indicator--45d3cfde-8157-49c7-b703-a67d5973b54b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70bb2321-429b-404a-8916-b73bf0bad3da", "sighting_of_ref": "indicator--54834e45-09ac-4703-8812-f99de3482618", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc453f39-4a11-4b21-a7e4-7ad47ce3849e", "sighting_of_ref": "indicator--fdc508d6-60db-4d94-8beb-ade5848529b9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5fa5146-2e37-441d-ad52-0610c4c9053b", "sighting_of_ref": "indicator--d68a66b5-ac18-4a98-b561-18dcf337e530", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577229f0-6af1-4d73-9f51-6c7185edce46", "sighting_of_ref": "indicator--68730b2d-0861-462d-8aa9-77d2843f4e6e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f7a0f76-0d57-4617-bd2b-9f30ac3ec925", "sighting_of_ref": "indicator--c5c98bfa-5ea3-4a54-bafe-198ae7fbd52b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f1dff5-2d9d-45dd-a832-34cf5c25e92e", "sighting_of_ref": "indicator--c5c98bfa-5ea3-4a54-bafe-198ae7fbd52b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd69d7c-bebd-4c2a-ba8a-9961543165ee", "sighting_of_ref": "indicator--bade380b-87cd-45be-b99c-42214240e76e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16842ac-4013-407b-9a67-6d27ffe4b251", "sighting_of_ref": "indicator--50249124-dec9-4a75-9b7f-f126579934e9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac997fb-16bb-4a74-8c86-364bbe09459e", "sighting_of_ref": "indicator--8eea50af-f369-42b9-a517-d77c3c268367", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8283bf9-3b3d-438b-a035-12078253eba8", "sighting_of_ref": "indicator--1bd54873-58fb-4d00-bf0a-ee30c2864fd8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da3ac23-11e8-4829-88f2-f3d4e314b5d2", "sighting_of_ref": "indicator--760b79a5-78cd-4565-8cc7-9da004ae8ffd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d855a2-837b-40b5-bc41-fa2723c4a53e", "sighting_of_ref": "indicator--bdedff56-481f-4ae9-b2ce-7987f842f356", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4343f01a-8a7b-4980-9a28-0b94f842e25e", "sighting_of_ref": "indicator--f44d1a55-e065-43fc-acd9-dc73a96bfb0c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd1fdce-3d86-4116-9ecc-074ba7b06370", "sighting_of_ref": "indicator--d7a448f8-7013-4874-924a-827cbafa3bc2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c230f4a1-dba4-48f4-84c6-8baaaa2c8127", "sighting_of_ref": "indicator--42d1e1d6-2994-4a91-a885-4f76148b6d98", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a726265c-522c-407a-89bb-c17c6386b2a3", "sighting_of_ref": "indicator--d02cbd22-10cd-466f-bdcf-aa1017c4fd30", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6068ef4e-e32f-4573-80db-3a4b0e47b0ab", "sighting_of_ref": "indicator--008e88b1-95c6-4628-8693-5617564267c1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30447941-efda-4fbf-88f1-ea9778ef4e2d", "sighting_of_ref": "indicator--27ecd021-5547-42a7-b2eb-e647a315fe88", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6447ce-e6f4-4076-b7e7-1002233e2795", "sighting_of_ref": "indicator--3e20fafd-6bbd-40fb-85d4-94a16a4c52f2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b74fe9c-ad06-4341-abc3-fd3f639d3d2c", "sighting_of_ref": "indicator--696d0157-b018-4ab4-a83b-5623c8ecc140", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df772f1-45bb-4a99-b2a3-74d2b4f631b3", "sighting_of_ref": "indicator--97d81766-fd42-43c6-a8e1-4968ae28dca0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0dea12f-f123-4867-8f65-4d5942057f9d", "sighting_of_ref": "indicator--b5a2ab36-37fe-4e0d-8ee7-f101fc07b5e1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be57489c-5706-4ede-adf8-1b4874f51a2c", "sighting_of_ref": "indicator--2656a6f2-5517-4bad-85af-62b53dcc51d2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f703e0-251f-4d5a-847f-a11b73fb0ce9", "sighting_of_ref": "indicator--f37e9528-9e21-494b-865a-92c79fd01007", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935e6f95-8ed9-4e21-9ed1-c799b99b0020", "sighting_of_ref": "indicator--9f78dd34-f8fb-4f7f-92a6-d34da64f393d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a51db2-4f11-4bf7-8b49-c7f397298f92", "sighting_of_ref": "indicator--e9410aeb-168e-4f9a-9417-adb3c2c55206", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f789de-9183-427b-8bb7-8a5439cf7a8f", "sighting_of_ref": "indicator--85f6d5cf-b87e-4405-a5e6-a20f8b4813ff", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff05401-dc37-44b1-974f-02e360c2627a", "sighting_of_ref": "indicator--85d06a8b-9c87-4606-ab64-be19c40f77a6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd483b9-72aa-4e32-8cf0-490a42d79656", "sighting_of_ref": "indicator--39a22255-906f-4a1b-af33-e816bc11a168", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3ed775b-9f78-48f9-980d-96d54b3d8860", "sighting_of_ref": "indicator--154f6241-2c2d-41bf-b73f-1fb9e13220c1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03e06f2-211d-48ae-befb-28d3c149036c", "sighting_of_ref": "indicator--0c60415a-6247-435b-912d-99094ae5268a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3cfc21-6e35-49e1-9e31-c4b1b6538e70", "sighting_of_ref": "indicator--31cc492e-a125-433f-9f98-72282080129f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025f0f9b-fc72-4c68-b521-ecb56d5d2832", "sighting_of_ref": "indicator--f47c62ce-3390-4058-9510-7eae5bbd039b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141fa81a-32e2-444f-9dc9-b9c9dee7ce8a", "sighting_of_ref": "indicator--0ee87d9e-dff4-4262-bb45-e80f7f84af7c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84de3fee-a3ed-42bb-91c0-5a5c0de4ecf7", "sighting_of_ref": "indicator--6ee6c806-eedc-4ebb-847c-f0d6ad13ad31", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db5c0c4-a308-4d3d-bcfa-1aa9e32969a3", "sighting_of_ref": "indicator--70c6fcce-5699-4dab-abf1-909ea05607d8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136cf32d-b24f-434e-8930-91a80529e19f", "sighting_of_ref": "indicator--2b60f1c4-8048-41e8-8e85-0b3770f93a5b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--161039a6-09d5-4100-b601-4d09bac293cf", "sighting_of_ref": "indicator--2a4a0703-9733-43a0-8593-f3ba77ac32ca", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae70130-f644-4a2f-a026-f5e92811e858", "sighting_of_ref": "indicator--90d50582-3b6a-48cc-a59d-14b841c63d0d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77304ef3-2438-4274-9c7c-b696ca59da9e", "sighting_of_ref": "indicator--d99fce17-7980-4d95-9874-ea138a3fbd8e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee1060c-71ef-41d1-b2bb-ead5c1818cae", "sighting_of_ref": "indicator--cc87a5d5-7a46-4dd3-9432-355bf351ef9c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97ab453-ee7c-414f-a5bb-d30828e8b515", "sighting_of_ref": "indicator--753e8639-48ec-4ebd-b311-cc0ee77d4a52", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06674e69-2654-4780-8e05-e40dd728444d", "sighting_of_ref": "indicator--5bfe36d3-6e68-445c-a8cf-ddf3cf5ad09a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30efbaee-9b97-4149-90f1-50577c23e5a9", "sighting_of_ref": "indicator--cd5415f1-9024-4595-b1d0-1b9686a8f76c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a419ca-e603-4be8-824e-6d059bac80e8", "sighting_of_ref": "indicator--27898dc1-6884-4f55-a8e6-e2770d843110", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5256bd7d-869b-4de8-b9b1-56fc26350159", "sighting_of_ref": "indicator--2e6ca9dd-11e1-45f2-a97c-2fd44a081799", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f53770-19a7-47f3-b061-ed63e744d102", "sighting_of_ref": "indicator--917ab156-75b1-4b7d-8f0c-1445b350f34d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e598de9f-3a4a-4898-b46d-b21d6e8193dd", "sighting_of_ref": "indicator--d74d17ec-a6f0-4e2a-9284-ccd8162ef179", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f048ecaf-e548-41ac-8f53-ec6c5236920c", "sighting_of_ref": "indicator--de9e3d1c-5a84-4131-8d78-56e4f987e4ab", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4ce92d-ab40-47aa-94ca-43b23a4aef2d", "sighting_of_ref": "indicator--5e99bb6a-7608-4ad1-ba0d-20ac1b88ec0e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8d45b4-6606-418a-ad3b-fe1ee8a4dc68", "sighting_of_ref": "indicator--1142b9f4-6858-43f8-a93c-155b6ecd9d2f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68578492-5fde-4d5d-95d7-2ccd0ff19fd1", "sighting_of_ref": "indicator--5cc78359-0546-44f8-af20-415183d150d1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52a8021-b0ce-49a3-9e82-5e2281415f81", "sighting_of_ref": "indicator--49fdc82a-4722-4ca9-8d49-5deb0a47f74a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc150ff2-b094-4b9b-87fb-55be2a81bef4", "sighting_of_ref": "indicator--7aa4385a-9196-4669-80a7-bf96879e1b4f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492d634e-3e7e-451d-bf48-3098fcbf40c6", "sighting_of_ref": "indicator--3a878b5e-ae4c-4a14-9777-827526e65536", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78c4dc1-0f8d-4c52-963d-6f35b3bd3109", "sighting_of_ref": "indicator--a1511ca3-da17-4ddc-b469-79c7f3ac0b03", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ed727b-3c38-498c-874c-ef021f1f4ff4", "sighting_of_ref": "indicator--8549d67a-f731-4945-903f-575c0d1361ad", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107394bc-2e62-4cba-aad1-ff866c72c88b", "sighting_of_ref": "indicator--1de01abb-1736-431b-9805-ca5efbb563b9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b424d859-8135-44a4-a4ed-6fafabd95cc1", "sighting_of_ref": "indicator--f8c9019f-f942-4aa8-8e9d-34b5a9f0a72a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e78f8e1-5e9e-4885-ac5c-f87006e113c8", "sighting_of_ref": "indicator--d87c55c6-8cea-46e0-92d8-4bd39da9ef33", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3a4740-c3da-49df-b5e9-01db6b4c839b", "sighting_of_ref": "indicator--3f670d0e-e00d-4f7b-9fda-8248c7e5d09b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f1d096-fce2-4ffd-9d2b-ee2d4b4eb26c", "sighting_of_ref": "indicator--f645fd6e-6afd-44bc-ae27-62a2aef2b55f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bab823d-0ad3-43fd-ae9b-3a435b948bc9", "sighting_of_ref": "indicator--aff46851-c2dc-4f74-ae37-461eb0189350", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70952296-537d-4b38-8c91-ce65337012c7", "sighting_of_ref": "indicator--541ca9ef-728c-4dcb-8e8c-586429a027e3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07ee504-d867-4ef5-99c9-9f5d884132cd", "sighting_of_ref": "indicator--fd5246d0-0ed4-477b-a042-4a6e341f4bb5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce6bfd7-f12e-4046-8d77-bf9d3693ffe4", "sighting_of_ref": "indicator--45aac769-743a-4fb0-a907-51849b5891a8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69dafe56-2993-4d70-99cb-923912099ca3", "sighting_of_ref": "indicator--52006cc9-90e3-4138-877f-2b29f16b7205", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8dd450-3dcb-4397-bc0c-34e87dfc4d16", "sighting_of_ref": "indicator--c3eb5f50-5245-4b60-9380-b6e371e4cfbf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d73e4c-7643-4bf8-b557-b8a601a33652", "sighting_of_ref": "indicator--27a9f4c8-9df1-48a0-be9f-ae967b2a03b2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7256f221-ba16-41aa-9d16-bb0d220f22e4", "sighting_of_ref": "indicator--b8cf004b-d816-4fbb-a7c9-f51c5627eb6e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85de904d-729e-4644-b30e-1333b9d11ba3", "sighting_of_ref": "indicator--b8cf004b-d816-4fbb-a7c9-f51c5627eb6e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71abe352-4de4-420e-b47a-e96b687e90f6", "sighting_of_ref": "indicator--b0051a1e-2b48-4852-b2b0-c0383da5d43b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1815c0-7466-4efd-930a-758a65429d1d", "sighting_of_ref": "indicator--6a5af48a-bffa-489c-b0cc-a4f69ab673ff", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--687308d6-cd2e-4e6a-8192-01390bd81373", "sighting_of_ref": "indicator--68b30f64-da62-49b8-b673-21333490fca1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a8b0be-6459-4840-96f8-cfd2daf3bec6", "sighting_of_ref": "indicator--2541a245-9fd3-4c64-868c-c8aa1eba99e9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44fc91e4-757c-4dfb-a512-32bf839d0d95", "sighting_of_ref": "indicator--5553b34f-c8b6-4248-bdea-98d9bc4f8a94", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c8fcf8-36ec-4968-8ee8-3309a5263eb6", "sighting_of_ref": "indicator--9a6de909-7d38-4b84-a017-9c2885a236d3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88c8cac-0254-487c-a7de-f87585239342", "sighting_of_ref": "indicator--6caadf9a-194b-4e11-936f-7327bfc7c089", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f435d3d-c5db-4a44-b4aa-f1c4c1101cc6", "sighting_of_ref": "indicator--dfc00254-f662-437e-a63c-b02dcce1336a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c546b8-60ea-43ba-9b93-2a97af88a739", "sighting_of_ref": "indicator--16513429-d4d1-4cf5-8fcb-4ca2923968b3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc7ffa1-5eb2-4002-bf11-d658c61b4709", "sighting_of_ref": "indicator--dd0d2b51-8415-46ad-82bc-450103c8729f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625ef22a-d08e-461f-9492-c6c113bda0f0", "sighting_of_ref": "indicator--ddb4b938-426e-4b6b-9bd8-1ba3b660dfde", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a7bde1-902d-490e-af08-10d01f833843", "sighting_of_ref": "indicator--a7f6fd69-a330-4abb-a673-841d15b18c10", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c85331-3588-48e0-9477-4e4edae9f54b", "sighting_of_ref": "indicator--d1b2381e-602d-4cdc-932f-c138cafc917f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8af427-7125-45d7-a973-8159654e0379", "sighting_of_ref": "indicator--1dc5650c-0034-4db6-9c98-75c76a51db05", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99a8faf-8054-45ce-b67a-33eea0141144", "sighting_of_ref": "indicator--265c2203-4398-475c-b959-3616752793b6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84d3d57-bbc8-4022-8f70-24c19115a58f", "sighting_of_ref": "indicator--f2f1c282-8fbe-40ec-ad37-2577df58dfaf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1bce4a-85b3-41e8-87ed-820876b68ef4", "sighting_of_ref": "indicator--61a7d2fc-7b7b-4ae6-962d-652c1b4c44ed", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6490698-670c-4311-920e-50bbd2e17819", "sighting_of_ref": "indicator--2a8a5627-889b-4bf8-8d17-f13f57605ffd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900d9114-9a8c-4878-b1f1-d053f58f9a1e", "sighting_of_ref": "indicator--5942f134-2c8c-4adf-828e-14dc9a4922d7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07af063f-d4f5-4198-b403-b21ccdb7d867", "sighting_of_ref": "indicator--c710ae7e-ead1-49bd-9bd5-fffaf1bd75e6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aee29e3-52d9-45b7-9c52-34ebe194a416", "sighting_of_ref": "indicator--c8f237cd-58c8-44db-abe3-3e99dbdff918", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba046a78-dce1-45d1-9f1e-110de0691629", "sighting_of_ref": "indicator--eb010222-14fd-4d2b-86fb-53d17d3edc4b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9133b7-428e-407c-8082-443dd0dd5f55", "sighting_of_ref": "indicator--0993cdd3-6655-47e9-868b-eb6fc103d65a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85fda91c-684c-446c-80a8-caa2661f0a59", "sighting_of_ref": "indicator--989386d1-8200-4bc7-ace7-3e0a38af5853", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a2da9a-6cfa-4d6c-a349-44c851fcf4e7", "sighting_of_ref": "indicator--7c7d6817-f6a8-4021-b342-17f44374cac9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31906a78-932a-49d7-808b-31087a4998a0", "sighting_of_ref": "indicator--db232edc-b6d8-4dc3-aa4f-ef882b8e9a34", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--308cfe5f-e2a4-488c-b99e-057874d3fd2d", "sighting_of_ref": "indicator--1c65a9be-2c35-4a74-b3a1-e2dbdb5032a8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8bff578-0183-44a0-a678-29e30932df7f", "sighting_of_ref": "indicator--a52eb750-7ae5-473b-80a6-159bda6099df", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df195bd-d768-48aa-9bc4-fc0af87891c7", "sighting_of_ref": "indicator--a610a580-f9c7-4858-9cb2-82125cff685b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e27a17-a815-4daa-b276-16dd533af598", "sighting_of_ref": "indicator--875d8121-df68-4529-8ab2-80fc6daef48f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30050f6b-db45-4bea-b26e-e0dfc8d0cf78", "sighting_of_ref": "indicator--05b2d6e7-615e-4852-bd26-01f821fb0565", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c98a58d-a689-48c3-b7d2-80824af76762", "sighting_of_ref": "indicator--00b5a5e8-26f7-4ada-adb4-a4d46f888c0b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ea39d8-0fd4-41df-aedd-9561e75790ea", "sighting_of_ref": "indicator--e364cf62-0888-43d2-bfe3-5d38769d93d9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2755edc4-9554-4b33-aa6a-29abcec0622d", "sighting_of_ref": "indicator--eef6e1a7-c14e-4ad4-8c15-c91bab8ab058", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433218ad-35a2-4d4f-ba92-5d0489a0d4af", "sighting_of_ref": "indicator--26ac4752-70d9-44c6-aa6d-deb3a617e95b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c7ecec-2997-4348-ade7-89cbd7e3aac0", "sighting_of_ref": "indicator--4660aeb7-337e-4e6d-80b5-07bd0391e881", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df19e421-07fd-427a-9b87-cc285c2e7ba7", "sighting_of_ref": "indicator--c983a1cc-7fff-4335-964d-9fe245a081e4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8882a52f-81c4-4555-b116-11188dca52bd", "sighting_of_ref": "indicator--c831f176-20f0-4e67-b261-add77f3567fe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d812f97-1d49-4565-9dc7-a1846249e738", "sighting_of_ref": "indicator--85838e83-6d57-436c-8129-63a5353efa69", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e9c7495-101c-43f7-be4f-5fa96eb6c525", "sighting_of_ref": "indicator--6325efc9-5bd8-4a6b-970a-8b6e7f58e60c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28bc4681-c7d6-400c-a843-14c29657e4a5", "sighting_of_ref": "indicator--c1767874-3b86-4f30-a516-88481f007a0b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a21ad5-15b0-46da-8047-d02b38b4039c", "sighting_of_ref": "indicator--9ad77c50-58b0-445a-a487-b2c25c6b6c58", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35f2536-9b47-4253-9505-18d0a989b689", "sighting_of_ref": "indicator--25466f26-9200-4af4-98aa-55825e84fdc3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d646f318-8134-4e17-a581-f92817710a16", "sighting_of_ref": "indicator--77922e45-0bb6-4560-80b1-6ea38948434f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f20ff1-9bd2-496c-a282-9587148a2873", "sighting_of_ref": "indicator--16419ac1-b904-47b1-ae60-5192ec5a2ee8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e0e444-8408-43b5-be66-49b5c841a333", "sighting_of_ref": "indicator--0378d365-37f2-44b3-aa00-dbb3f45867fe", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c19458-8ca1-4e20-add7-4b74d1666f4b", "sighting_of_ref": "indicator--671e0290-cee1-4a2c-b253-3dccc138cb7e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8716dd6e-7758-41cc-aab2-b3365eda5006", "sighting_of_ref": "indicator--d7dc1c94-2a2e-46f4-91f4-42bcf90ca1d6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c194d938-f7ba-4316-bebd-f2f88ec45db8", "sighting_of_ref": "indicator--71c91272-241e-47f8-a6e6-32fe2a0a7cf1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4641af68-6c7a-4c24-b2d1-16537247a0e1", "sighting_of_ref": "indicator--1b758877-e28b-4eb9-b658-efdb6550e912", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f94d6a3-f0d1-4454-9a6d-d33605aec9ed", "sighting_of_ref": "indicator--6370dec5-edfc-45d3-b151-b1eb5d75e25d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b117d97e-4146-4863-9ed7-92fd4fe8270c", "sighting_of_ref": "indicator--56dc36f8-3b60-4b79-8856-6d9e4d8bcd88", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f90cea-f305-4c88-a3f5-916a2ad10446", "sighting_of_ref": "indicator--a3912721-b80b-4091-ba35-5fd2b9364900", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d006c8-6ed2-4c1d-bf00-5108f5f66704", "sighting_of_ref": "indicator--c16cef52-d5c0-404e-8784-9211a8cd0bcb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8153b92-ac26-4521-b9c2-15edad2bc00e", "sighting_of_ref": "indicator--6df42062-2c87-4e27-bb78-d13a6628793f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--916ea1fa-a298-42a9-8cd1-9d3ee4e5c9f5", "sighting_of_ref": "indicator--1fb65603-448c-4762-af9c-bba91bf1ee9e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0555ba11-06b3-406d-b75f-c350e0bb22a9", "sighting_of_ref": "indicator--c98f8b7a-d97b-419f-8353-7a3097c3e61b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b083423-0ca4-463e-85a6-89e09910ffa6", "sighting_of_ref": "indicator--a3ed0abd-60cc-4c64-8d5f-80e22052ba97", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6fdaf9-8347-46f2-b006-db316132af78", "sighting_of_ref": "indicator--23771b4c-a0c2-4d7f-b990-0e5ce7f0b9af", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e016ff31-060e-4939-bb0c-f8cb60261b97", "sighting_of_ref": "indicator--0071a6db-3815-499e-bb30-d916babbfcd3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75513eee-52e8-4655-b6d0-171415e7038c", "sighting_of_ref": "indicator--734af897-e891-4835-ac50-f62a3639048f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac1257a-520c-46f0-a370-ec14f901dc3e", "sighting_of_ref": "indicator--e82730cd-6da4-4f17-a5eb-15c68b42244f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca24f5c-732c-40df-9666-d172e1aa2e2b", "sighting_of_ref": "indicator--57b0a854-9f14-4a5a-b38f-769ff13395bf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--632256db-17f3-4ab5-a7b2-3b7dd0aace9a", "sighting_of_ref": "indicator--2695e699-081f-4e74-81f7-bcd50d034023", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999902fd-36d5-4479-a1aa-79ed601be3d7", "sighting_of_ref": "indicator--2695e699-081f-4e74-81f7-bcd50d034023", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f3aabc-d58b-49e0-9397-9ad5a62c34c3", "sighting_of_ref": "indicator--25de9b71-c17d-461d-a178-9030904962b6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef237b0-ed97-43e2-8d51-b617a405c749", "sighting_of_ref": "indicator--25de9b71-c17d-461d-a178-9030904962b6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dedf60f-2ded-48c7-a8b9-11b191e5cdf9", "sighting_of_ref": "indicator--252ac272-41fc-4c91-84fa-925c3c58b7e3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1eba7ec-e681-4d88-be27-5798759d33b6", "sighting_of_ref": "indicator--252ac272-41fc-4c91-84fa-925c3c58b7e3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66fbc6b6-83cc-4422-a861-dfdf35c97a5a", "sighting_of_ref": "indicator--d90b8f37-a935-4a87-a5bd-fec0b199da0f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf76c8da-a8cb-4cfc-950c-cf7cfa3e78fe", "sighting_of_ref": "indicator--d90b8f37-a935-4a87-a5bd-fec0b199da0f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6edd3e-d59d-4cb1-9e38-94c44687e68e", "sighting_of_ref": "indicator--1b9ec25e-12f5-4d92-b183-5aa6c628f827", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c3ab1a-57fc-41c7-8f77-42c39b32b743", "sighting_of_ref": "indicator--f1dd2603-99e0-4066-aa3d-300184dcf296", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7348569c-a50b-44a5-83af-0e38f8729cb5", "sighting_of_ref": "indicator--f1dd2603-99e0-4066-aa3d-300184dcf296", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd62411-4143-44b5-95d8-0667175fb472", "sighting_of_ref": "indicator--c359db94-c091-43eb-b967-0f4208be7993", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6b5cec-71b1-48c4-9a6c-2f5d3bdb3f95", "sighting_of_ref": "indicator--c359db94-c091-43eb-b967-0f4208be7993", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45986b83-3251-41be-af1f-d61468f6e35f", "sighting_of_ref": "indicator--b7ce6d50-1de2-4f0b-b83a-22cbe9418e11", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e41129-5ca6-47eb-9749-a8cd2848aa4a", "sighting_of_ref": "indicator--b7ce6d50-1de2-4f0b-b83a-22cbe9418e11", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88b753b-1198-4f3e-b410-f349dd77fd8c", "sighting_of_ref": "indicator--41e25d01-2e8a-429f-9734-b513e33463c5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7ce0bd-09d6-471d-853b-0eca75285e12", "sighting_of_ref": "indicator--41e25d01-2e8a-429f-9734-b513e33463c5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef052d7-7604-405b-8bac-dfd4f94d7aeb", "sighting_of_ref": "indicator--336b4f13-7159-491e-afb5-3605e62bcdd9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26217c72-14d2-453a-b097-a61188c94a57", "sighting_of_ref": "indicator--c9badfd8-5ec3-4a14-ae56-3f352879163d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc6f1696-7331-4e6d-bfb9-464cc9c2d7bb", "sighting_of_ref": "indicator--c9badfd8-5ec3-4a14-ae56-3f352879163d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8036826-723e-4cf0-a781-b84f77514f95", "sighting_of_ref": "indicator--9021bf3f-7367-4234-be7e-64e485a4b1fa", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf274ef-2f6c-41d5-81f4-0c753eece90a", "sighting_of_ref": "indicator--a206d344-e07b-435c-b21e-340193598d68", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a6d3de-eb5b-4a79-ae48-c4fc600cd59d", "sighting_of_ref": "indicator--a4ec988e-96b1-4e86-b7df-e7a345a34666", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf6c438-7fad-43f8-a69a-45003276c510", "sighting_of_ref": "indicator--a4ec988e-96b1-4e86-b7df-e7a345a34666", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad49bec-dc22-4a9e-8428-d1dc482c206f", "sighting_of_ref": "indicator--ab316d70-b1aa-4f86-b9ed-cccdf2e71f28", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600e7223-eeb8-42d2-a711-2e0f5d0b0f61", "sighting_of_ref": "indicator--ab316d70-b1aa-4f86-b9ed-cccdf2e71f28", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f09038-d161-46b7-9b79-9da62ac04ed0", "sighting_of_ref": "indicator--078d9777-313e-4be9-8e04-d7a68633a6f8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14593a32-eb55-4ce3-b66d-26e460dea6d6", "sighting_of_ref": "indicator--21e9c9e1-26fd-443e-a74d-d4faafd84d33", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b672164-128f-4b92-a8e3-f67cd31dbb1b", "sighting_of_ref": "indicator--21e9c9e1-26fd-443e-a74d-d4faafd84d33", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e236a9f5-07e1-4823-9ea5-6697a2b3aa22", "sighting_of_ref": "indicator--80be45c2-36b5-4b64-8a27-c6238f06d04f", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6937c95d-52f2-44f8-a57a-e78276c8586e", "sighting_of_ref": "indicator--42963c99-2276-46ce-9549-0ecb7b3e4438", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2282d11a-e49c-44ed-bee3-979bb84d9b25", "sighting_of_ref": "indicator--b08058c6-9e74-4458-9333-d6c463da76b3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa45b6c1-78e8-4c50-b8b6-1a4abec3f791", "sighting_of_ref": "indicator--22844413-45b1-40a3-9347-927951c12a74", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ecb94c-e0b6-4973-8ba4-f424c4b74421", "sighting_of_ref": "indicator--cbc547f4-ff44-44d6-99f7-01aa5a6f6986", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20768d8e-edb2-4ec5-bc2f-e77b386cd98b", "sighting_of_ref": "indicator--dcf4a367-cb17-4b89-bd76-e123032d0390", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acdd935a-3ee0-4c7f-95d5-9d7d0c602e47", "sighting_of_ref": "indicator--2ba5d61e-41dd-411f-8405-8777a83e90be", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db7da41-2c94-49af-aa1f-48e14025b503", "sighting_of_ref": "indicator--baa1b5c9-da88-4d25-869c-b96491470e2b", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2783f11f-663e-4dd6-852d-dd268ee0ddf3", "sighting_of_ref": "indicator--2ab773ad-450c-434f-b4df-28b24f59acf5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7580855-aa65-44c2-b9a1-84413beacf4d", "sighting_of_ref": "indicator--4e3fb9ae-f0da-4918-8a01-482703cb5a97", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73579b11-1a25-4455-b347-4718d6ecc7d2", "sighting_of_ref": "indicator--2b056eb5-4351-405e-b043-672bf9da3d1d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0782844d-8414-49ef-9990-4fcbb2c605c9", "sighting_of_ref": "indicator--1784655a-922a-477f-b08b-5a6b69d0ab9b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0f1c20-5094-4840-a819-e0d5adce2d8c", "sighting_of_ref": "indicator--1784655a-922a-477f-b08b-5a6b69d0ab9b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19f13ca-14d9-4ee9-af69-9633bd709947", "sighting_of_ref": "indicator--7430dbc6-a511-4486-ae8e-3395c1d7b6f6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f102e1a9-ae41-4c2a-aa86-d836097f119f", "sighting_of_ref": "indicator--7430dbc6-a511-4486-ae8e-3395c1d7b6f6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafbf739-2c82-4135-977d-9dd2b3d669ef", "sighting_of_ref": "indicator--8ec0c7b0-d790-4825-a2da-f62c62250c94", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad238190-47a5-437f-a567-4e21b6ae1699", "sighting_of_ref": "indicator--bd966b0c-8cca-4f1e-be77-66acd90e70e5", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772c1703-036f-46cc-89cb-77227345de7a", "sighting_of_ref": "indicator--ee0ee1cd-aab9-4cac-a51f-eef1a8075460", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39db650d-5adc-4381-93c5-72ee2867b4d5", "sighting_of_ref": "indicator--e7d3a03b-1cd0-4980-8c9d-f9c189ff2528", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f6d73da-a8f8-4862-bacb-70c15f946b9b", "sighting_of_ref": "indicator--e7d3a03b-1cd0-4980-8c9d-f9c189ff2528", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f22265-8f87-4e53-8edb-c0c88b4dba86", "sighting_of_ref": "indicator--c6796dca-7448-44d2-ba36-08680ea6c17a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c40fcc2-f12f-4019-9cc5-23c659a347c0", "sighting_of_ref": "indicator--9df9e215-ad15-4a55-9f2f-44fca150bf0d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296ea19e-e3fb-46e9-a9ec-d43b88a7bb46", "sighting_of_ref": "indicator--9f18b182-990b-4cf7-8db0-c5c402a9e520", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e51367b-ae25-4d33-bde7-b93e99d12107", "sighting_of_ref": "indicator--2275d8a0-e65c-4ce1-bf4f-095c2ded4114", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4514d5b-45b9-42dc-8f06-da5c3e496eca", "sighting_of_ref": "indicator--2275d8a0-e65c-4ce1-bf4f-095c2ded4114", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679f9830-85be-4fdf-9297-3d1c21c02217", "sighting_of_ref": "indicator--0c4c5a46-4ad7-4c71-a88a-02b55d9b13e9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b416ac5-e75d-4ff2-b40c-a2cc44744c45", "sighting_of_ref": "indicator--0c4c5a46-4ad7-4c71-a88a-02b55d9b13e9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe912b0-f94f-4a23-8988-283658869739", "sighting_of_ref": "indicator--cad401c4-19a2-404b-b915-cf3c0b2adbd5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cfa6c58-51ab-434e-8601-7605a0e1e3bd", "sighting_of_ref": "indicator--cad401c4-19a2-404b-b915-cf3c0b2adbd5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a5de81-832e-45c7-aac2-fe93e1c72b18", "sighting_of_ref": "indicator--aff2b87d-772f-42cc-8e15-a5e3d53745be", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b68356b1-e86a-47b5-8d88-74951115dc56", "sighting_of_ref": "indicator--aff2b87d-772f-42cc-8e15-a5e3d53745be", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a363689b-5fdb-4896-aacc-e3a0e453686b", "sighting_of_ref": "indicator--4344cc40-13be-4138-9bca-a5e48d87035c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9fc22cd-f46d-46ac-af7b-f1053de5d065", "sighting_of_ref": "indicator--4344cc40-13be-4138-9bca-a5e48d87035c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63f82401-c753-4cd3-a923-7ed29952c18b", "sighting_of_ref": "indicator--9b705997-b032-4d2f-a825-2b6e304134de", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02edcec1-88b0-4709-a053-1c089ec462e5", "sighting_of_ref": "indicator--9b705997-b032-4d2f-a825-2b6e304134de", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34fb8af-7f30-452e-87ef-9551ceb2f6ba", "sighting_of_ref": "indicator--d08f67e1-72a0-4eaa-847c-744797c5cb55", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27aa10a3-5057-45da-abcf-c67f33f09d82", "sighting_of_ref": "indicator--d08f67e1-72a0-4eaa-847c-744797c5cb55", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f3669fc-ea21-478a-acbb-2ae353964e9c", "sighting_of_ref": "indicator--a64b9254-eb9c-4ac0-8e0f-ded8e90bed7b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045af6a4-26cf-4b14-ba7f-5c227fb71301", "sighting_of_ref": "indicator--a64b9254-eb9c-4ac0-8e0f-ded8e90bed7b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90e728c-9402-40ea-be3a-67b19d7d3b80", "sighting_of_ref": "indicator--e30d41b9-42a9-488f-aff6-6c53f0f420a2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c7dfe1a-8b58-4ce5-acb5-20d6729e5896", "sighting_of_ref": "indicator--e30d41b9-42a9-488f-aff6-6c53f0f420a2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c7e50a-fb31-4dcd-a9e0-1b19ae5e46d4", "sighting_of_ref": "indicator--1e1df0aa-d9bb-4b4b-8e5c-ec41cdb5feb5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b81fe648-363d-479c-82d7-124906f429ff", "sighting_of_ref": "indicator--1e1df0aa-d9bb-4b4b-8e5c-ec41cdb5feb5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4941984c-d532-4c9f-96aa-be5af2699d08", "sighting_of_ref": "indicator--38224da0-0bc3-4a6e-a7d6-38c8c63ba905", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650aa6e6-bb3e-4919-a065-3695f24f40d3", "sighting_of_ref": "indicator--38224da0-0bc3-4a6e-a7d6-38c8c63ba905", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b99dbc-fd15-43ad-b797-1acf2067be21", "sighting_of_ref": "indicator--6d2e4cca-be26-48d9-a8a2-c1bc9f310a13", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a15d4d3-4c76-4ba9-831f-2bab5871ab96", "sighting_of_ref": "indicator--6d2e4cca-be26-48d9-a8a2-c1bc9f310a13", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbc7e14e-4e71-4d80-b026-68931589dc9e", "sighting_of_ref": "indicator--c2737cbb-ca00-4413-baf2-7553cb4689b2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58df246e-5db5-49d8-add4-41c6f5f2c48a", "sighting_of_ref": "indicator--ae117e72-589a-4a98-a57a-ef4c39738c9d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cfd9503-9cca-4f21-9652-6d1f0827e699", "sighting_of_ref": "indicator--ae117e72-589a-4a98-a57a-ef4c39738c9d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae1da27a-3876-4396-842d-4a45ff75d955", "sighting_of_ref": "indicator--ec6a5f03-9649-4eba-bfa7-653342d7235f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9cc46e1-cb15-4d66-8aab-3f8353e12f44", "sighting_of_ref": "indicator--f62e1aab-6957-4879-b12a-2964502d5641", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6029fc2d-9c35-4e81-baa6-15a1066725f8", "sighting_of_ref": "indicator--51b24ec5-504b-44e4-a301-a03725bff41a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3baa7e6d-c753-4516-ad81-e939206b0d2e", "sighting_of_ref": "indicator--51b24ec5-504b-44e4-a301-a03725bff41a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4636179f-9586-44f4-8095-d9f0299576f9", "sighting_of_ref": "indicator--5260fad9-6d51-4c0c-85cc-c2c5e8839d8f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6168378-6cc4-4d45-915f-8ccdd0808d4d", "sighting_of_ref": "indicator--36b40b68-77e4-46dd-81e3-37878c2d0246", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58bd414-536b-4a75-82e5-8e9ce678fbb5", "sighting_of_ref": "indicator--36b40b68-77e4-46dd-81e3-37878c2d0246", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb354a9-a46d-4332-9429-ac4086c70a9d", "sighting_of_ref": "indicator--f5981195-d95d-47e9-beff-05defb13d554", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace961da-e8b8-4c75-8199-23e240c10f53", "sighting_of_ref": "indicator--5ac86564-edba-4990-970f-0404b881e3b2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecbf6cdf-cb46-4007-aaf5-6a588eb0d908", "sighting_of_ref": "indicator--5ac86564-edba-4990-970f-0404b881e3b2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283f6981-8e86-4dba-9a7b-d6064d39ec43", "sighting_of_ref": "indicator--f98ce2fa-fc14-4785-adf0-7e0263a12786", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea3126d-c2f7-4f6d-a416-f2a40effaedb", "sighting_of_ref": "indicator--0200d511-319d-43ce-b89d-aa75f13d998a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce5ed94-3708-41ef-a584-fae6447d0f5b", "sighting_of_ref": "indicator--70446913-fd69-433c-9134-11a0c01b2779", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d23c510-701e-4ca4-b1cc-6a708bb04a4e", "sighting_of_ref": "indicator--70446913-fd69-433c-9134-11a0c01b2779", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd01840e-cb0b-47ab-b037-a75bac7c22e6", "sighting_of_ref": "indicator--4fc1cb28-675d-44c4-98c5-13aa562a9c53", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac3928c-a105-4408-8857-e8e2edffab8d", "sighting_of_ref": "indicator--0cf72edc-2fd7-43ff-b788-a96bf98bb231", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52374787-b75d-4914-b596-538bc397a6b5", "sighting_of_ref": "indicator--bbb5cc2b-7034-4a43-bbbe-604393f743c6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ed6595-55f4-44ea-bcd4-0478e99f541a", "sighting_of_ref": "indicator--d84fb9ca-d623-4111-8360-0a32d3937bed", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8b30a7-2332-4e07-99d6-91d0d91d7a12", "sighting_of_ref": "indicator--3aee650d-3515-4d7e-8a9c-b4bdb1035b8f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4b10c1-0e17-414e-afec-f812ee1e577b", "sighting_of_ref": "indicator--9850b4e9-bcb0-48f4-8385-e34faccf4a4f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ac951a-9063-4fa5-8150-5a54fd88145e", "sighting_of_ref": "indicator--dd72a997-b2d8-4d96-99d1-24a959fa0ed3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81540bb-bdc4-4288-b984-08c95c7b61e6", "sighting_of_ref": "indicator--dd72a997-b2d8-4d96-99d1-24a959fa0ed3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f028d7-e6ac-4584-a09e-96aabf0c30b6", "sighting_of_ref": "indicator--8592d465-0c86-4191-8d16-6cf94d3418f2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00343c3-3acf-42e7-9b1d-3a4aaf14939a", "sighting_of_ref": "indicator--f5d2d03b-9ba2-459b-b36c-fc34aa739fae", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60173c0e-d04f-475d-b6f0-0dd0d300f0f3", "sighting_of_ref": "indicator--17f7c318-e0c1-4ef9-a707-92c5d5cf3274", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a6dcba-4544-44a6-8943-f7398c4c0961", "sighting_of_ref": "indicator--a62549bd-50e9-4ee8-b983-605f8d47a414", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d0955e-a76c-4eb4-b03d-de767634bd7f", "sighting_of_ref": "indicator--ff32e447-cf0f-453a-b11b-17cf24ab5753", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58bf16f9-6cf4-4183-b62a-eac0a96a4a72", "sighting_of_ref": "indicator--2e877448-77c0-4307-85f7-203726e80d1f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7201d286-11d5-4663-9eaf-4e8fea508cdc", "sighting_of_ref": "indicator--ade041cc-0bf2-41fd-ba0f-24d102e887bc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87be7148-5e8e-4458-a6fb-a0742da8142f", "sighting_of_ref": "indicator--7625f28f-8f56-4baa-ba3f-5bd5317ade8a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc37d02-91ec-4658-a586-69c3913b5025", "sighting_of_ref": "indicator--c4fe7d70-3d71-4ab4-89ab-d67beb7fdd3d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee4a96f-0378-47bc-b6c4-d06384f39867", "sighting_of_ref": "indicator--c3ef85d0-7b1e-48e7-8063-abde88d55e6c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240044a8-ad32-4cdb-8d34-bad1ed7266fa", "sighting_of_ref": "indicator--abdc286e-fca6-4a34-8a47-16535d1bf360", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbffe0af-f273-4f4b-853d-1626f76a8bf3", "sighting_of_ref": "indicator--7a6edce5-c5e8-4f9a-ba9f-6af990d67648", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6bb88c-01d1-4922-9f42-35fba1d0585d", "sighting_of_ref": "indicator--8bb21754-8bdc-44c6-bfbf-1b08d75a13ac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae6f3c5-50d6-4ecf-9a6e-c96b42a8057b", "sighting_of_ref": "indicator--f1607924-c7e9-4ec8-8422-0eeaa09c5e11", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1cb459-56e2-4dda-a92f-5873f74a3282", "sighting_of_ref": "indicator--6a1c2fde-a479-4a18-b7f2-94052a33d523", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfdb4afa-d194-4079-83d2-578a5131e4e1", "sighting_of_ref": "indicator--dc130592-fe37-4c4a-b023-87e0def0882c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec7bfab-6ab9-4feb-ada6-936633adc699", "sighting_of_ref": "indicator--e5c07fb8-7aba-475c-8666-5bd20d5bb27d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb03b565-047e-4580-b8e2-98c27ae59a29", "sighting_of_ref": "indicator--e5c07fb8-7aba-475c-8666-5bd20d5bb27d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a16ab7-8b08-4b0d-abc5-a74b4b5c468a", "sighting_of_ref": "indicator--02b8975f-ffb9-4b57-b902-3d6e90f25859", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c0a5a19-077e-4708-a7d6-02ca1cf5f213", "sighting_of_ref": "indicator--b47f5bbe-b5ab-46ec-89e4-4896743159c7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f423841-dc53-4312-81d9-3e8878ccd082", "sighting_of_ref": "indicator--763c3ecc-593f-413d-8fcb-ca6d5e223d72", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c822445-baf5-4ffd-9a86-8602af661eeb", "sighting_of_ref": "indicator--710fd228-a3b2-43e8-bab4-c95c6790d8c8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d29f6c6-68c3-4d68-bda3-9111de23add8", "sighting_of_ref": "indicator--11cf0643-fa5b-4217-bf53-d9cf00a538ce", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b90af2-9c6e-4698-82fe-ca40e53e1659", "sighting_of_ref": "indicator--0746773d-e665-4c77-81d2-47c43fcc8c87", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7ca426-c958-492f-951c-46d2943c6637", "sighting_of_ref": "indicator--0746773d-e665-4c77-81d2-47c43fcc8c87", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01682651-d75c-4e38-a295-bfbc8790d3c0", "sighting_of_ref": "indicator--06a52efc-4e32-47bb-8121-be16f51a7feb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5fb661-b081-4830-a6a7-67c765c07e37", "sighting_of_ref": "indicator--4c9f4e71-2275-4fd5-add8-a8ff089ef611", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02274c44-85c9-4d5c-95fc-c414647de72e", "sighting_of_ref": "indicator--87546da0-a8cd-4628-be1d-036df15af6d3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6eba7cf-710d-4c85-a34c-3346abfe5e56", "sighting_of_ref": "indicator--30f58478-0e55-42a0-86b9-54c1f94dc38b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073ce4ef-9320-4aa8-b153-763ffed33578", "sighting_of_ref": "indicator--06255344-afb1-4494-8f92-321e56ccdb58", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb679da-684d-429f-86e4-b02253f0723a", "sighting_of_ref": "indicator--50f4a6e6-47cf-4730-8e35-d007fbe23b11", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19accb69-4d0a-485f-97ef-d4a5411f36de", "sighting_of_ref": "indicator--3c6edbe1-a56b-4cef-aae4-d8ace5cc158d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344d8be1-3835-43f2-af07-736b00e7f842", "sighting_of_ref": "indicator--e703d568-ae9e-4b1b-998c-de15268517bc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47eeff67-dec1-4376-8d69-cbc84fb6ebfa", "sighting_of_ref": "indicator--e39272bb-e30e-4e9b-875d-0d6677a254f2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87debf8c-2f6b-4a69-9095-3a4461b020b0", "sighting_of_ref": "indicator--d6ac1942-2326-4845-a46d-cc478805c36f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b3afbc-bd48-4a21-ab0a-6cdd225318e9", "sighting_of_ref": "indicator--d6ac1942-2326-4845-a46d-cc478805c36f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcdf17ae-4a93-4ad4-babc-d17233f1fac1", "sighting_of_ref": "indicator--2f240100-e024-455f-bafa-97bd77c8e806", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca56b3e-e10e-494a-a903-8c11c79764f2", "sighting_of_ref": "indicator--2f240100-e024-455f-bafa-97bd77c8e806", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70646df-61ed-46f4-8306-d24d2afbccb9", "sighting_of_ref": "indicator--f75dbaa9-36e4-448e-a710-288d940090a3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae8de93-bc25-4ac8-bfa0-d57b9959931c", "sighting_of_ref": "indicator--f7d3a9eb-580f-4df8-a5a9-493548e8dca7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27cf671-68c6-4e84-9885-5cabe9eec86d", "sighting_of_ref": "indicator--7b6376ca-a852-44b0-af8a-cc264a8b2d63", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716f07d4-421d-4fb7-8dcf-717bdca6ddc4", "sighting_of_ref": "indicator--8f3fc076-d213-4bb8-a233-53fea066e83d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a59a8a6-2ebc-473f-815e-9b8d4ed98a98", "sighting_of_ref": "indicator--8f3fc076-d213-4bb8-a233-53fea066e83d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4e8cb7-3216-408b-8e9e-f01c1c601da7", "sighting_of_ref": "indicator--d8e9b551-e843-45f3-9032-4d2b25b24af6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c7d170-bc84-4d31-917f-4176b3776b1b", "sighting_of_ref": "indicator--d8e9b551-e843-45f3-9032-4d2b25b24af6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d678cbb-b1f1-4f41-a253-bfcd780690b9", "sighting_of_ref": "indicator--2d5960f9-d8ca-4b28-9606-48c1eb8d5383", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d854ee4-72be-4865-ab87-1acbbfd175fb", "sighting_of_ref": "indicator--3344f0e7-8a8a-4b03-9096-b738716db616", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd24974e-211a-40cd-90af-3669cf570f54", "sighting_of_ref": "indicator--c2f9bfd0-0795-4671-badb-b31482c7702c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4eef9f-4426-4a61-bc1c-1ef63a9c61ce", "sighting_of_ref": "indicator--c2f9bfd0-0795-4671-badb-b31482c7702c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203d6ec0-540c-4792-b427-34052251bae7", "sighting_of_ref": "indicator--f7ac0911-fe69-4ceb-982d-55b753130e21", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc4a03e-d719-4584-88cc-35ab60bfec1c", "sighting_of_ref": "indicator--4d1443a0-f668-452a-b4dd-25e7d146fb88", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e746fa-67e3-4948-8ef7-e7250181ea10", "sighting_of_ref": "indicator--4ea7623b-48fc-477c-874b-4a64045cf85b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7985592-b618-4b92-85d2-2a1aec738c7d", "sighting_of_ref": "indicator--4ea7623b-48fc-477c-874b-4a64045cf85b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46795a47-7ef3-4ccc-b354-fcc701016621", "sighting_of_ref": "indicator--f41ecb5b-fd4b-45bf-baa5-5cef61670324", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00918ed4-3453-45f5-b494-74ad5c969a21", "sighting_of_ref": "indicator--3b35f263-8e81-418f-8075-816d071e4ffc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6946390-be8a-452e-8966-edbc2e4a60f7", "sighting_of_ref": "indicator--b5d6e070-e30b-431a-9cd7-c37b3fc2d0ca", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434d36be-666d-4f84-9384-3402bccaa2b8", "sighting_of_ref": "indicator--f68c65e9-a58a-4ab3-9e7f-cfd5e9431775", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21a21d35-37ea-4f02-a333-d4b0ce4e9903", "sighting_of_ref": "indicator--f68c65e9-a58a-4ab3-9e7f-cfd5e9431775", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d4bbef-48d4-48fe-86a9-e5672f3da4d8", "sighting_of_ref": "indicator--3235b4f2-a46c-40f1-b44b-f34ebf0d0aad", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d27aac7-c137-472f-90e9-90c015311f0b", "sighting_of_ref": "indicator--3235b4f2-a46c-40f1-b44b-f34ebf0d0aad", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db95e3c8-4262-4377-bc4a-3f078a693c1e", "sighting_of_ref": "indicator--b02ea530-5ce5-40ca-9f9f-39c915568777", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912cb2f9-e84a-40b3-84c2-804cc05abb87", "sighting_of_ref": "indicator--d241a112-b45a-431e-8fe0-127ff216b8d5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35658674-0e95-4989-94fc-1b4f713f9e96", "sighting_of_ref": "indicator--d241a112-b45a-431e-8fe0-127ff216b8d5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510e81ac-b086-4617-804e-8a5da673e6e9", "sighting_of_ref": "indicator--c62099af-d810-4e3b-944e-4f64a4e80fd9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3b3d05-55a4-4e24-8c59-7d354fcbc059", "sighting_of_ref": "indicator--04a5fde0-6c68-47cb-8158-22570b53817e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1031b54d-4c88-4285-addb-68f89ab5d210", "sighting_of_ref": "indicator--04a5fde0-6c68-47cb-8158-22570b53817e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f82c61-9873-4f97-963a-1200e5a4c08d", "sighting_of_ref": "indicator--6a8e11dc-bf0a-4648-87be-3523727f2176", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ab35e1-63cb-4e07-a2dd-4988931e7d11", "sighting_of_ref": "indicator--6a8e11dc-bf0a-4648-87be-3523727f2176", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e997ee6-9fb6-4235-b25e-7c12c32eb3e9", "sighting_of_ref": "indicator--ec849be3-c584-4c1b-bc46-c7a85ca93517", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a71de8-f164-4d20-9f76-dc7a5d0b4c96", "sighting_of_ref": "indicator--1aa73674-2a88-43d0-8444-29c246e702c9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbba6da0-e4b6-49ac-a2a8-9c5762401234", "sighting_of_ref": "indicator--1aa73674-2a88-43d0-8444-29c246e702c9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2e2a22-47d4-4fc8-909d-04c45cef7807", "sighting_of_ref": "indicator--f8b365bb-be4a-472f-ae67-5d9ad68f66c2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790d519a-d62f-4eba-8615-62c7f3ec8f60", "sighting_of_ref": "indicator--95b36b34-efa3-404e-b21a-3d85a1313ffd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a46e27-bf18-4d81-9e2d-e5a47f3e44cd", "sighting_of_ref": "indicator--a2df773f-bfff-409c-bb5e-cdf01a9f7194", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c926ee03-d7f1-48c4-84b3-857dc6711569", "sighting_of_ref": "indicator--9810bc47-f00f-4d0f-a2c1-d10193a73921", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ec2f52-016f-4334-a833-5827f94b403a", "sighting_of_ref": "indicator--d9145c64-ca32-4496-b8bc-6d36e3ac311b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ecd716d-850b-444f-80cf-03fc17092777", "sighting_of_ref": "indicator--bc1a2681-d141-40dc-8c27-0f7d80ff9e4b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b5917f-2869-4157-a11c-5876c707f9f9", "sighting_of_ref": "indicator--11a25957-24b6-4ea0-a105-fac2c2aa6c8a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe862e4-0251-4ede-b1f2-3412f5780097", "sighting_of_ref": "indicator--cc9cf840-7914-4cc0-a01b-46017a3b2dd1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ed1eae-ac42-432c-bfb3-00f1b4547eb4", "sighting_of_ref": "indicator--ec529442-f1b7-48c2-9d4c-a7965d31fda4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e52d3d0-9204-49b4-9e13-eb11986c041b", "sighting_of_ref": "indicator--716a5c6c-4802-4951-bbee-868d4ad88a35", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f063586d-74d4-4f38-9630-43edff1e7751", "sighting_of_ref": "indicator--184928a7-ac54-499f-96c1-ad3dd19211ad", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89aef053-1a8e-46b5-a322-a40c4d8674ea", "sighting_of_ref": "indicator--13c2101a-eeee-473a-847a-92c6e6f9eae5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808fa582-7ce4-4d52-8be2-8786ec74ca44", "sighting_of_ref": "indicator--13c2101a-eeee-473a-847a-92c6e6f9eae5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c754139-ca0f-431c-a157-1bf31f273b4e", "sighting_of_ref": "indicator--a2a7e8c1-81e4-4627-8b64-2e4e7a2e06ce", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f117f12-f063-4ea2-a0a0-886b4414f39f", "sighting_of_ref": "indicator--a2a7e8c1-81e4-4627-8b64-2e4e7a2e06ce", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6508c7e7-f9b2-4a38-9624-367209404565", "sighting_of_ref": "indicator--03dbd382-86fa-40cc-8440-b25abeb3b4ab", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3745e46-9f6d-4273-b606-88ec133eb206", "sighting_of_ref": "indicator--03dbd382-86fa-40cc-8440-b25abeb3b4ab", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a572c45-35b9-49bc-ad1d-c6c2a801ef9e", "sighting_of_ref": "indicator--3941f509-15b7-4a33-825d-1cec90d40bc5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df2e3bb-7714-42e7-a0bf-0a9baab5f3d9", "sighting_of_ref": "indicator--ec6eb7e9-6f3c-4217-8590-b3d8a4f36150", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283c2267-38be-49fa-9feb-1151cfef35d4", "sighting_of_ref": "indicator--007bf06f-822e-4763-ac5e-29bbce04be6b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--183813f2-2637-4b63-9a61-987978fbfee4", "sighting_of_ref": "indicator--5b2025d4-c351-40ee-bb17-60642cfd2c57", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129ae68e-fe71-422c-880f-907df6ca763d", "sighting_of_ref": "indicator--6beaf6ff-0a93-4352-b56e-6abe72efc433", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f886bbb2-4581-4dc2-ae26-ec77126ae949", "sighting_of_ref": "indicator--6beaf6ff-0a93-4352-b56e-6abe72efc433", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc11b8c-952c-4c8b-bff7-1138912d4e1f", "sighting_of_ref": "indicator--28c01734-3be0-4ad6-b6d9-b5b201e599ad", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e8e944-a1cd-4620-a38f-ac034293f9ae", "sighting_of_ref": "indicator--89a3c030-e31e-479a-aec1-c39646989dbe", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cecc108-4f2b-4c25-8379-15d6c2c57d88", "sighting_of_ref": "indicator--f71d97ff-0faa-4961-b5a7-ee45789e94f5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed20729-2cbc-448c-a93d-d44e9200b1ee", "sighting_of_ref": "indicator--f71d97ff-0faa-4961-b5a7-ee45789e94f5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67278566-9a36-4c8b-915d-b479b9d46725", "sighting_of_ref": "indicator--2e2d4588-c586-44dd-a0e0-604770d50842", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74020313-7cc7-4234-8268-1681fc63e72a", "sighting_of_ref": "indicator--aef37c30-0d7d-4bf6-8d68-b1f91516c412", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef092813-8b38-45ac-b7f7-16635dc7fd4e", "sighting_of_ref": "indicator--aef37c30-0d7d-4bf6-8d68-b1f91516c412", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2ed25a-c98b-4b88-b2e1-4a6220d1b9e5", "sighting_of_ref": "indicator--7c07bbb2-153d-4ed1-9142-2899a265fda4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef0b1bb-6f5d-4324-82a8-f2f3c2224d62", "sighting_of_ref": "indicator--6b4dea7e-17cc-4da5-9b60-8483c5e38dc2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f331b7-03c7-470b-af0c-25bc27b79dd7", "sighting_of_ref": "indicator--b7c2a185-9f85-423a-9ddd-187eec7e8bb2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c5084e-e218-48e3-a1cb-9170c5555d69", "sighting_of_ref": "indicator--b7c2a185-9f85-423a-9ddd-187eec7e8bb2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684078ea-f828-44fa-865e-a6ace17442db", "sighting_of_ref": "indicator--caaa0910-b280-44ef-9815-dfcd9a03367e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e74395c-d3c4-43da-9180-085e2a22e585", "sighting_of_ref": "indicator--0e18d617-9198-4814-9d49-e0a5f60fc7d7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c2195a-670f-40ba-8f7e-cf2c4524a3ba", "sighting_of_ref": "indicator--3e24320d-2d94-465f-847e-a878c1528a88", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad2190f-6715-44a5-b90d-39f56bc85328", "sighting_of_ref": "indicator--01ae4039-bffa-4a57-9779-c5c4f6d77a4b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da26202-541f-4977-9d46-58cfe284c031", "sighting_of_ref": "indicator--eea0cd94-3df8-4385-8698-4315d439b868", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8fda44-9b8b-4dd5-ad10-518ba90ec66e", "sighting_of_ref": "indicator--c3a6d47a-95bd-47cd-9b0d-6b00f516a275", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3744f5-38b8-4085-9f02-204b8a9519cc", "sighting_of_ref": "indicator--f0712f9a-ec9e-499e-a4a5-614cf8de010e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffed74fd-01b9-4493-970f-17461c849035", "sighting_of_ref": "indicator--7e13cbbb-566c-426f-a5a0-0f74a807877f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4daa5c8-f655-4f24-b96c-224e8c387923", "sighting_of_ref": "indicator--2003b641-1747-47f3-8d12-fb313ecdacf8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a10f6e3-df14-4086-b311-68c88092bdc6", "sighting_of_ref": "indicator--2003b641-1747-47f3-8d12-fb313ecdacf8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4fc8c5-e065-47f8-8468-c62d3e678a52", "sighting_of_ref": "indicator--2bfce413-b254-421c-a409-c25c54f379fe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2592889f-b06d-4db2-8036-6f39e4299bd5", "sighting_of_ref": "indicator--dd58332f-0c04-4d70-8f9c-cba6f1919026", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c62071-bfa3-4820-8588-38052d9f78de", "sighting_of_ref": "indicator--e372830c-6e4e-48e7-a290-ae19f9b529b1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee802cb-46b4-4402-bc20-a153939c3df3", "sighting_of_ref": "indicator--ae89e60c-39d1-4d2d-929f-01052c84e723", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1852a636-2b90-455a-bfc2-c1270cfff477", "sighting_of_ref": "indicator--2e72864a-7959-4603-b4d6-fc4ce47f51d2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8645ab1f-83de-4e1a-809e-a5212a88d7d9", "sighting_of_ref": "indicator--2e72864a-7959-4603-b4d6-fc4ce47f51d2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1fbd1f1-fc40-4db6-b29e-f942a26e6774", "sighting_of_ref": "indicator--e2615f86-b173-46a1-ad78-b4fe8cb22c92", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e9bf9d4-c0fa-4d2f-af85-2b4b703f51f0", "sighting_of_ref": "indicator--e2615f86-b173-46a1-ad78-b4fe8cb22c92", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12fba17-a408-43aa-bf29-2ee2103bc0ec", "sighting_of_ref": "indicator--5c8bc37d-2ac7-4570-8bed-abae32544681", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dece10dc-aca3-4b39-84a8-3913a27f3a7d", "sighting_of_ref": "indicator--5c8bc37d-2ac7-4570-8bed-abae32544681", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f344e3f9-6405-4198-895f-54ee3a1f4748", "sighting_of_ref": "indicator--75c01628-4808-4774-8726-b3ee87ec6868", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2e7ee2-76bf-4060-a98e-faa96961c7f6", "sighting_of_ref": "indicator--7cf6bb60-e96b-4bb5-9b12-cd8545cdbfae", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444ac826-c1bf-4d7a-9382-a961c7d6413f", "sighting_of_ref": "indicator--7cf6bb60-e96b-4bb5-9b12-cd8545cdbfae", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a319f9-86d1-4683-8533-7f8570a00ce0", "sighting_of_ref": "indicator--a506ff8d-837b-4dc1-bf8d-10d3d6e12091", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21604c23-87cc-40b7-a936-ecebd5336c5b", "sighting_of_ref": "indicator--a506ff8d-837b-4dc1-bf8d-10d3d6e12091", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a125beef-0f1f-451b-a913-c93ddea1d616", "sighting_of_ref": "indicator--4fb1d51a-b78f-467c-83b0-6435db461f76", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e47b8db-dd44-494c-a821-e9f29a1548c4", "sighting_of_ref": "indicator--c9a7e859-34f5-47dc-91d3-f79b8eb9e1d9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f61d93-1a5a-471a-8b86-44e31c567a88", "sighting_of_ref": "indicator--9a021538-45d5-44ed-8754-2d17303a8ab6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ab40cb-bb04-4e18-9f13-0529ebb4d8b0", "sighting_of_ref": "indicator--0716e329-ea6c-4549-a19d-b6d9ef5a45e7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af26ad8e-44f1-47b8-84fb-11cc04acf685", "sighting_of_ref": "indicator--f389d80d-c8e8-45b2-b31f-410a032ee8d2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d18584-c7be-4601-a6d2-fee16970a816", "sighting_of_ref": "indicator--0d3cbded-ebf8-4101-aa71-ebf360090481", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8d5af2-0eaf-4253-8215-2551e098adb1", "sighting_of_ref": "indicator--b0c65ed5-3fab-4b40-a12f-c02873fcbb7c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560f9478-fba8-4fcf-adf6-97106efe10e9", "sighting_of_ref": "indicator--1fd48bfa-52a7-4f1a-babf-2c7a49a07ef0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865735c4-6f52-4350-bb82-74426c3dfde3", "sighting_of_ref": "indicator--f9f033c7-0e2a-48f4-b2e5-d417b70806c9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e455d274-5790-4c86-92ff-ac83df2cdbb9", "sighting_of_ref": "indicator--f9f033c7-0e2a-48f4-b2e5-d417b70806c9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d258613-feba-4eba-9672-e4d50607f05a", "sighting_of_ref": "indicator--13d9b2ba-0ced-4cc9-ab2b-73dcf30b0a9e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df855607-64cd-4086-b512-a208b974e453", "sighting_of_ref": "indicator--da78e006-d0a2-4c78-8e82-53b971080272", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c44fd5d7-a711-4857-bf56-e524bca3272c", "sighting_of_ref": "indicator--da78e006-d0a2-4c78-8e82-53b971080272", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fee9ffa-a124-4b6d-a3de-e08683e636f0", "sighting_of_ref": "indicator--b1b70e46-d882-42b3-963c-b4b5ac48089a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ead981-edc9-44ff-9d49-3c25385fb291", "sighting_of_ref": "indicator--b1b70e46-d882-42b3-963c-b4b5ac48089a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c03126-c36a-43a6-8bba-b7bae142f999", "sighting_of_ref": "indicator--f20f4c90-1feb-490a-969a-7d841e5e77a1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9d3d08-c5cc-4055-aa20-bc9c275e772f", "sighting_of_ref": "indicator--f20f4c90-1feb-490a-969a-7d841e5e77a1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3634ac6-261d-4e36-940c-6855fca01852", "sighting_of_ref": "indicator--a77a08cd-05d8-433e-88ef-925a97dad872", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3384ce1e-dab4-4805-ab95-9e8c1147b2d6", "sighting_of_ref": "indicator--210d2ec9-9594-40a5-bc90-cbfa3159c0bc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39cea973-9fae-4a54-95d4-48748f5f8c95", "sighting_of_ref": "indicator--c5a7a2c6-70c1-4859-bb66-532b7a2218b0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb68663-4217-413d-8a9e-a7966b896238", "sighting_of_ref": "indicator--c5a7a2c6-70c1-4859-bb66-532b7a2218b0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03435211-7364-4b98-bea9-3d751801c59b", "sighting_of_ref": "indicator--b16b6102-41da-415b-9041-d933cd97f323", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4595568d-9a7a-40be-832b-462d321c9b7a", "sighting_of_ref": "indicator--d448c07c-e3a2-48ef-9d04-37adc44c1e4f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f49569-0916-4f82-b6ca-de9def156c8b", "sighting_of_ref": "indicator--d2e89c49-b7cb-4e3d-8c97-3a5977694976", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89289341-460b-42e4-b3be-9811ea53147d", "sighting_of_ref": "indicator--33db245f-4a36-4610-993d-867657b24920", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5dc065-01ea-4b27-98a0-689b51b11bc4", "sighting_of_ref": "indicator--83ca3890-518d-46af-8609-92fe7c8181ae", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b53cb1-f030-4eb6-8fb1-e5a08ea328ff", "sighting_of_ref": "indicator--c50055e7-8ba1-433a-9afe-951e3696618a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d537a9-1dd5-4352-b708-e65e60f9c68a", "sighting_of_ref": "indicator--c50055e7-8ba1-433a-9afe-951e3696618a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7737a6-8263-476d-a3e5-2106dc1ad721", "sighting_of_ref": "indicator--1202f497-c1a6-4ba9-b59f-d4b760923970", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1062a9d2-abf2-4ddb-972d-53c5376bc5f2", "sighting_of_ref": "indicator--e0524315-f09e-47eb-89ab-684d0d33a646", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4a19c3-5b30-43de-ad91-d690dd19baa5", "sighting_of_ref": "indicator--e0524315-f09e-47eb-89ab-684d0d33a646", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a0d3b5-bb52-4294-a752-8d4f1a98d0c4", "sighting_of_ref": "indicator--0800a78a-182e-48b4-8562-2920fc95b66f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39733fb-24e3-4781-bfe4-227704405132", "sighting_of_ref": "indicator--c1a98761-d647-4bf0-bbbd-83057f9c7d3b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3cda20-91ea-49d2-8f72-08aebe708567", "sighting_of_ref": "indicator--c1a98761-d647-4bf0-bbbd-83057f9c7d3b", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e370c38-01a5-4bc3-b9c6-a4815256f640", "sighting_of_ref": "indicator--c1a98761-d647-4bf0-bbbd-83057f9c7d3b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b003eb0b-cc2d-46f9-a4fb-74e74303b8b9", "sighting_of_ref": "indicator--c5b599a8-c3a4-484e-b74d-e35cc41f68c2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6abd2e61-6dbb-4825-b4c6-11cd719448c0", "sighting_of_ref": "indicator--435a0ca1-6aa7-4cd8-ad31-735383f21c38", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ba0cf2-b7e4-4d4f-b84e-fc4f587a2351", "sighting_of_ref": "indicator--435a0ca1-6aa7-4cd8-ad31-735383f21c38", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e425a40-f4e0-48c8-b5c2-f817b039ab7a", "sighting_of_ref": "indicator--4bad06da-622f-4915-9d92-a77654f2689a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df5890d-e4b7-477d-9db8-8faddda095cc", "sighting_of_ref": "indicator--fbaa029f-d087-4523-826b-796f80e096f3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d92b55-9e98-49cb-a7c4-c577399ea036", "sighting_of_ref": "indicator--fbaa029f-d087-4523-826b-796f80e096f3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543d37e0-8e71-4fcd-8be5-0a8daada947b", "sighting_of_ref": "indicator--39719fc1-ae61-4fa0-8313-a30bc2ead745", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38efaf9-ea83-4e0a-ba92-e5e601a7b70c", "sighting_of_ref": "indicator--4f2e3b42-d125-48c0-9e1a-a981a17acb64", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590f368e-564d-4058-b4b6-1e9e7d690741", "sighting_of_ref": "indicator--1771191c-9411-4a91-b34b-f852b37ae9ea", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e07953-dd8d-4214-a2a9-8b077bcb65a8", "sighting_of_ref": "indicator--09a189c2-0f96-49ca-8b3b-36980311457c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18ff47b-be1c-4508-a1cf-7162c9df15b2", "sighting_of_ref": "indicator--7880c8f2-b70d-4215-a0b0-cc7c09f98c4b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdfb05c4-d9e9-4c94-9c92-a2b8402acf84", "sighting_of_ref": "indicator--03dc2b67-ea14-42f7-a3e1-bdd09c4f239b", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55180736-9a88-41f7-9ca6-1a420771f31a", "sighting_of_ref": "indicator--c3956b44-0d9f-40ce-8903-10a8bfe20af0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5229dfb5-f971-42c3-bf0e-c1dcec47754e", "sighting_of_ref": "indicator--3b00801f-bd30-4c5d-8983-19abe24556c4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b21ee3-e663-43df-8106-184b089a216b", "sighting_of_ref": "indicator--c58fd090-e002-4a14-9a74-407ff6469f3b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3d5028-e411-49fa-91d0-12d39da3004b", "sighting_of_ref": "indicator--c58fd090-e002-4a14-9a74-407ff6469f3b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33595645-5b27-4e26-a29c-d80b446f01a0", "sighting_of_ref": "indicator--8f381938-732a-4ff1-a446-e1ebecfb9904", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e0e55d-6e9a-45bf-966e-cb40f793095a", "sighting_of_ref": "indicator--d9bff035-31fb-4551-b3c3-9657e66019d3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212ace00-015e-4ae6-9059-a95be623c8e6", "sighting_of_ref": "indicator--d78d315b-bcff-4384-a78e-56377463894b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5640e9e0-839b-444d-b158-780c6630b107", "sighting_of_ref": "indicator--63382bf8-f1a2-463a-a4c5-cc8550b962a1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df16e01-dd4f-4a58-a490-f477dfdf2ba9", "sighting_of_ref": "indicator--775a24bc-8f6d-4ff8-8080-90168737377d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77dba04a-0a91-411f-a368-5799b0ee61bb", "sighting_of_ref": "indicator--294d0c95-370c-4d99-8802-87dffdb873de", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa9b758-5a77-4f7f-9a7b-b39c8ef3fb5b", "sighting_of_ref": "indicator--d4e9643c-eb31-41f8-8481-76d9d30b93dc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4425c1-85f7-4251-8f42-d239f3c35bd8", "sighting_of_ref": "indicator--c7b57314-d207-46c4-8803-c1640fade781", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14f88e6-1376-499d-bddd-b7aa9876fdb4", "sighting_of_ref": "indicator--c7b57314-d207-46c4-8803-c1640fade781", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba194013-615d-4fdd-bb97-f5cc1edb9c86", "sighting_of_ref": "indicator--64d2b110-f954-4536-b450-b030eee22c92", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4d4850-d0b7-4ad8-a983-7ec3cd466ca3", "sighting_of_ref": "indicator--64d2b110-f954-4536-b450-b030eee22c92", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317c7821-fe12-4750-8c3d-c1598a3dd575", "sighting_of_ref": "indicator--5374c8a7-3a47-4cde-8a72-2de436c257d8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85699e5-b14b-41cc-b313-c76fee082929", "sighting_of_ref": "indicator--5374c8a7-3a47-4cde-8a72-2de436c257d8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738a71d6-b71b-48ee-8f14-33a9e0e16262", "sighting_of_ref": "indicator--8eaf8b40-7f2b-42db-9cbd-2cecbe6f4319", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8c4807-7111-4b99-88f0-521329b4f021", "sighting_of_ref": "indicator--982a2536-d185-4ee8-a933-6f43909a0d88", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd4be61-aaac-47c1-afb0-628f279cce25", "sighting_of_ref": "indicator--982a2536-d185-4ee8-a933-6f43909a0d88", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f3e95f-694a-41e6-99b5-b6614e405c83", "sighting_of_ref": "indicator--c11bd89c-5be9-4f3a-8fc3-e641e83b0e72", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23421f07-7221-4669-ad30-6993d85db3bf", "sighting_of_ref": "indicator--c11bd89c-5be9-4f3a-8fc3-e641e83b0e72", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e493b9f4-df2f-48fb-92ff-7b29eb637be8", "sighting_of_ref": "indicator--e430eae3-8549-4277-85b1-f1319a94bb09", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c419a1d-7ca3-418d-b826-ae74f4a48fe7", "sighting_of_ref": "indicator--e430eae3-8549-4277-85b1-f1319a94bb09", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6cdcc3-81b0-4e0f-8b20-c234c4d5bb02", "sighting_of_ref": "indicator--f054a9f4-4973-4e52-bc79-c6e2c4b92c15", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46395a42-d9a9-4a17-a444-614272277b17", "sighting_of_ref": "indicator--f054a9f4-4973-4e52-bc79-c6e2c4b92c15", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18bf1ff-a399-4c20-a36f-f54c4ddca15b", "sighting_of_ref": "indicator--e14612e8-328d-4d4d-ba16-661bc8a259e5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e3861f-8679-4d90-b1fb-21a8ae49b178", "sighting_of_ref": "indicator--e14612e8-328d-4d4d-ba16-661bc8a259e5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ea769c-d946-484c-b766-d33a93f33fcb", "sighting_of_ref": "indicator--675fd6bd-3bfe-4f9f-a81b-3972ce5b2506", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c183905e-83c3-4a5c-aa74-2b573ef8ed1c", "sighting_of_ref": "indicator--5d6e67fb-d99f-481b-9460-d02a80e5032c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08dbb16b-a5ab-4b42-a98b-1a6ac8686507", "sighting_of_ref": "indicator--5d6e67fb-d99f-481b-9460-d02a80e5032c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840e631f-9500-4d0d-a859-52195cfcd885", "sighting_of_ref": "indicator--df98c3b6-b2f5-4672-befd-5911ab959845", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14a118c-65d0-43d7-8cd7-1f5a21d8f5df", "sighting_of_ref": "indicator--df98c3b6-b2f5-4672-befd-5911ab959845", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1ae309-0999-4a78-858a-f5cf11c27536", "sighting_of_ref": "indicator--9fd824ca-1c07-412a-9325-2e48f69bd3e5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60bdccbb-31da-4e1f-a471-7beff54c1653", "sighting_of_ref": "indicator--9fd824ca-1c07-412a-9325-2e48f69bd3e5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f748b3-8c41-4b02-b1de-189ef7a9afa1", "sighting_of_ref": "indicator--c38cd170-d376-4ea3-988e-aa63a64df658", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7baefcfa-f0f0-4780-803d-79c3150adc80", "sighting_of_ref": "indicator--8edbd95d-4b40-4332-a150-75c05f2bba13", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e646c95e-51c3-497b-8f7c-93db86692171", "sighting_of_ref": "indicator--8edbd95d-4b40-4332-a150-75c05f2bba13", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7b157c-5a30-4793-a839-cf68bd03f0ff", "sighting_of_ref": "indicator--b43cf83a-5f6f-468d-bc04-d5314483e4aa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf43af6-92ac-4ad2-9afa-202e17a86915", "sighting_of_ref": "indicator--b43cf83a-5f6f-468d-bc04-d5314483e4aa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39bd00d7-3944-4193-afa3-617c8884777b", "sighting_of_ref": "indicator--eb4a60fa-182f-4b5a-bd24-4425171775d5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced8d216-6f8f-45ea-82a4-c3076ef854a7", "sighting_of_ref": "indicator--eb4a60fa-182f-4b5a-bd24-4425171775d5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9193b6-d622-48ca-8047-4db6dac132d0", "sighting_of_ref": "indicator--f5e9dc96-6ec4-4d53-9a32-c79730c6a3b6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d93eb63-89ce-4645-8f68-adee1d2c7efa", "sighting_of_ref": "indicator--73538d93-af36-4139-bd24-abe54d03f2a2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b96ffc0-dd72-4405-b9ce-3eac4a3e435c", "sighting_of_ref": "indicator--624f53d8-353d-433c-84e2-21a08e8efd00", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d018317-2bae-4895-b47c-abd8dac6f45a", "sighting_of_ref": "indicator--ee6dc72f-dbf2-445d-b784-35f6df39e69e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16172ca-c256-47e9-8aef-fb4b40758b80", "sighting_of_ref": "indicator--d4a9d46a-4957-4ecc-b1eb-4a570d755410", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02942168-b453-458c-8938-786d045a91b8", "sighting_of_ref": "indicator--2444a765-4f7e-4f3c-a9df-d6326277ee50", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f13cf7a-c50e-450d-8ad5-16840ef5e4b0", "sighting_of_ref": "indicator--12695abc-dcde-4784-9336-2d50196a47f1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3b7664-f7e3-4afc-bee6-24c68056abd2", "sighting_of_ref": "indicator--7ea69f84-c0a6-4ce4-8b0d-bb7796691621", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a774834-14c6-4e02-bb7e-ba6bbbc35442", "sighting_of_ref": "indicator--0b350b0a-7ce6-4bdf-89b3-84330b755afe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e1db60-fa1a-445f-aff2-03c3c54f9266", "sighting_of_ref": "indicator--0dc8ff88-a275-4e69-b513-fa1adfe77978", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a1b7fc-8416-4228-b621-b5612176555f", "sighting_of_ref": "indicator--bddfc6ed-ab02-472d-989f-7cdb948464bd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418602fc-6573-489f-a624-7f97dc76f497", "sighting_of_ref": "indicator--f6b5f109-24dd-4376-8a89-3971e41f7c2a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf17a5f-9778-40d5-a402-2d73e09ece23", "sighting_of_ref": "indicator--5aa52300-2aa9-40fb-bda8-d131b01584a4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbfaf93-4fbc-4442-a1ce-6e75672eb839", "sighting_of_ref": "indicator--d63ca70c-fb86-4893-a2a5-d9ec180201b0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c4dc2e-a791-4b43-a2f7-488d4f6026c8", "sighting_of_ref": "indicator--67e4d716-4c8d-4a22-9952-ec3c0f284c49", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcff5795-f6c7-40b0-b9b0-363c0fa229b0", "sighting_of_ref": "indicator--310ec5c5-c4d1-4bbf-8216-215b0171499f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6ce1b8-da55-4bb5-99ad-bd5285727030", "sighting_of_ref": "indicator--a036259d-bfee-4ce1-815e-d2e49a95ab42", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941197f8-3325-4e3c-90eb-f3951bc5bcbe", "sighting_of_ref": "indicator--f9fcd51e-5fdf-4632-a031-f82f74cd8d75", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9f5d36-3775-47be-9cf2-cdc820a5cdef", "sighting_of_ref": "indicator--f9fcd51e-5fdf-4632-a031-f82f74cd8d75", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa274eb-d041-4649-9483-e4f83d3c73ef", "sighting_of_ref": "indicator--1b41ab30-27cc-4505-ac18-614a3c30a7e1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e48cff4-17a4-4b7e-a246-76585191534a", "sighting_of_ref": "indicator--030500c7-dc20-42e7-879f-b93cda0fc766", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aed04f7-9754-4549-b6eb-862a62c445bf", "sighting_of_ref": "indicator--030500c7-dc20-42e7-879f-b93cda0fc766", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be63a2ca-b3e6-41b1-93eb-1b405e52e485", "sighting_of_ref": "indicator--613b3ee6-ea17-45b5-9433-930bf6eac6e6", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97255bac-9826-4235-bec8-75220c43c1f8", "sighting_of_ref": "indicator--613b3ee6-ea17-45b5-9433-930bf6eac6e6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c11eeb-9d45-4c27-8089-f8e8a8adbb6b", "sighting_of_ref": "indicator--4b261880-1aaf-4458-bfea-1b421df0d748", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f370f3-9664-4fe7-8421-2f4243feafac", "sighting_of_ref": "indicator--43946bab-abc8-4864-8db3-5fe834904d1f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40359451-5725-48ca-a366-c9826e680c23", "sighting_of_ref": "indicator--82a81bc7-702b-4456-855e-cca7d083cfc0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d414369-edc2-4b92-a12c-de930bd74110", "sighting_of_ref": "indicator--70d3dc83-0f06-40b4-8050-59c61529e5f1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e92dd1e-e47f-4ac2-90ec-8d3739aeefe0", "sighting_of_ref": "indicator--33627f25-b2b9-4bce-947f-fb7332838990", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e743bb60-c31e-47b4-82e9-7cb53d8a8067", "sighting_of_ref": "indicator--2e44d27f-c068-471d-bc0f-20a2864f8d01", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8862ecb-b6a5-445a-84ef-d934eace533e", "sighting_of_ref": "indicator--5718a3b5-5064-44b2-bca0-c0ed8546ce7b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8736a31-4b39-43b3-b31e-ecd6b7e52230", "sighting_of_ref": "indicator--acba297d-f501-46d8-a916-dfaa11cbb586", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa683b1-dbc3-4c8e-b7b8-513f180df9e7", "sighting_of_ref": "indicator--bd73162d-24b6-4eeb-ab6b-4c64edaa7e40", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3772ea7e-e1f0-4dbf-88aa-62c1ea9e6eb6", "sighting_of_ref": "indicator--17ef7cec-aa69-496d-8d4b-68f861562660", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9d1b78-9431-4331-9a5b-a444fb2dbf3f", "sighting_of_ref": "indicator--dabbf474-3881-42d2-8b44-1815bae22a82", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a58f910-02d6-4bf5-a4f0-7f56e1c8228b", "sighting_of_ref": "indicator--d9aa6b55-d657-4d49-9f13-384ecad39787", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a19d4ba-55a6-4c8b-b4db-4ed96547eb97", "sighting_of_ref": "indicator--8653c30a-3084-4422-8053-86793e24abe3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e84bb7-d3ee-4068-a654-8be42b5c4438", "sighting_of_ref": "indicator--622262d7-e271-4374-a56f-28896704905a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dce85ee-2506-4db4-91a5-3acb0db795d7", "sighting_of_ref": "indicator--d22f177b-81f2-44c9-9831-2cf0803ccf62", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f80c9f-dfcb-49cc-bbdd-b08d6c2abbba", "sighting_of_ref": "indicator--1979887d-d361-4743-817a-70fa0eec6ce0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d6d7b3-1ba0-46b3-94e7-524933bd4075", "sighting_of_ref": "indicator--f51f6450-b79b-4791-8d8a-12f329ae3873", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c6523f-f598-4435-8268-fbbd518d355b", "sighting_of_ref": "indicator--829fb003-d304-4d4a-8b90-488b9d897b14", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb64a4cb-19ce-4895-adf9-eab6bd8bac48", "sighting_of_ref": "indicator--9d6eacb4-443d-4db3-b352-bce6e1b0e2d2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6a5bd4-9b11-457f-9c3f-af794fbe0182", "sighting_of_ref": "indicator--7c938c83-ef6f-42df-aa8b-8d994f7ae732", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73659429-a9d0-4675-a953-cc12f49e5a80", "sighting_of_ref": "indicator--fa81cbb2-9cb9-4bdc-8f17-8b1b51d5ed8f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777f3dbc-e78c-4699-9fcb-124a19c6c085", "sighting_of_ref": "indicator--6d02dd84-8539-4439-8f96-e04aff683715", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139dd58e-ee11-43dc-8795-27222d945668", "sighting_of_ref": "indicator--9a9fb2d8-8665-4803-b4bb-cbdf7e8e37de", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c85053-6cf5-4eac-ac86-2e6e0e9fb7d6", "sighting_of_ref": "indicator--8528e5ce-ae11-4f16-a4b7-1e083a5bfba3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d706e8-e20c-44b0-9a39-50425d1102b8", "sighting_of_ref": "indicator--5af13d93-a984-4f28-b23e-234a55eaa8b4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1476e633-047c-42cf-af91-47de77ec212d", "sighting_of_ref": "indicator--61d0429d-1cc7-4ca0-b2cb-62924bcf0bc4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc1326b-4ba0-45c6-a82d-834fc5a0906e", "sighting_of_ref": "indicator--53ced23b-2354-4ce7-b1c8-cdeee848df44", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45acc585-0093-4037-b04c-7975bc429190", "sighting_of_ref": "indicator--87261f6a-3215-4329-8234-04954c79df2a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855072b0-a6ae-4590-8d10-00a87345e247", "sighting_of_ref": "indicator--8bd7ca02-92be-4de7-acad-dc5b03a07ab8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80463deb-0d90-45e9-94c8-69e1b9ec355e", "sighting_of_ref": "indicator--ee97fb9d-5bcd-49aa-b784-30627c72c05b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb06f85-2092-48bd-8e86-88181219a29e", "sighting_of_ref": "indicator--b1a6d14d-ef3b-4f67-9b33-1a72f44b926d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c310e8-11bb-416f-b416-19bd776b24ba", "sighting_of_ref": "indicator--437a5536-24a9-4c59-93f6-f0898bdfdad6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0dc8b4-53b9-4a57-8b5a-afbd1de06452", "sighting_of_ref": "indicator--a83e4471-a591-4a4b-86ad-c26b99ae6fdf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8170a7ea-a574-469a-b32c-9db0a6f76176", "sighting_of_ref": "indicator--4d246bd7-2668-47f1-a739-6c1a7f1fd1d8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484ba4c3-7f91-4cf3-9edb-a49b90a58d6e", "sighting_of_ref": "indicator--230b1b8b-a7b3-4421-af87-b18a9b662545", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b978ee93-0f22-4770-8bf6-533d2d678088", "sighting_of_ref": "indicator--bcc0d955-d357-49d2-83d6-846c104b74ec", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60f5cb5-f138-462a-81d9-cc64108be9c0", "sighting_of_ref": "indicator--48f48ef3-9480-4235-aaed-6936cd2cf0eb", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0f4be8-50c3-4854-9a64-810c563c1b56", "sighting_of_ref": "indicator--ec4cd9f5-db6e-4031-b505-1e5ade7e816b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2722c3-6902-4160-9568-6881e8606ecf", "sighting_of_ref": "indicator--ec4cd9f5-db6e-4031-b505-1e5ade7e816b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8dfec7-0abb-492c-85af-2261d0c0d29e", "sighting_of_ref": "indicator--8fd22401-b554-4212-88cc-d4703d0811be", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b930fa2-5a82-4607-9743-d5362c61f7eb", "sighting_of_ref": "indicator--6f1eaeb2-d071-4ef1-b176-fbf880abd07c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f0b0d5-d172-4019-b164-efb7b6ff9e97", "sighting_of_ref": "indicator--6265aa7a-0c05-4764-8ae5-d4b5b06d9322", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89933ad-1281-4b94-99c9-2e0bcb051c96", "sighting_of_ref": "indicator--78b6d555-d6ae-4569-abf1-21fc9357bc90", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e980b8c0-afb0-40cd-9e64-bb8a78004cc2", "sighting_of_ref": "indicator--b5325f59-97b0-4ad2-b922-b80e28be1000", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d846783-c248-416a-b92c-2c07a195af30", "sighting_of_ref": "indicator--32993d37-8457-4360-9f4f-91082045991e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3860cf-1e85-4bce-8a3c-8b828f530622", "sighting_of_ref": "indicator--3aaca178-9dc9-4375-bd95-6b265df62018", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c2cb46-6c50-4cf9-b52c-0be940f72f57", "sighting_of_ref": "indicator--48dac1a4-1cf1-42ec-9945-6b464c90695a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd1d07c-3b17-4551-8e78-d4c6dd26fe53", "sighting_of_ref": "indicator--8f93d9ea-9dfb-4fcc-92d3-3b5a74d125b8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a45528a-5cfb-4ca2-bfad-54d6b550d3f7", "sighting_of_ref": "indicator--05d5350b-040b-4aac-8ad2-e9f13c80bd12", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585e6b54-4b3c-438d-837e-bbef5bbd30a3", "sighting_of_ref": "indicator--32d78679-46f8-485b-90bb-b49abd0aef83", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1371fa25-d998-4cbc-b117-5ff7c7abd298", "sighting_of_ref": "indicator--baede8bb-7b7c-4f1f-9f10-f8147cbf600d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fdb6f59-1464-4d4a-a05f-31e9d01fe1eb", "sighting_of_ref": "indicator--ea72349a-4f7e-4e58-b97f-d8681d1d5e96", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119a2c8f-37c2-4c00-a036-469652244157", "sighting_of_ref": "indicator--55632348-5a92-437d-8c70-1d2d139983de", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff81e1ea-6d66-4c6b-911e-089a0de01629", "sighting_of_ref": "indicator--d74468ec-9d53-46a7-bca5-899a9d90576a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8b6552-5d44-43e0-a43e-6e585fb4c66c", "sighting_of_ref": "indicator--4a2c1784-daa0-4a0a-8673-e8239646eaaf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1c4ecd-a082-4f02-b9ac-e36d0e39238c", "sighting_of_ref": "indicator--f3853824-a73d-4834-bfe1-019654c2ad7e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7797031b-b060-45c2-9081-aa39243f3792", "sighting_of_ref": "indicator--0dc2bdc8-7e33-4c95-b59c-95b0d37c9f6b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53369192-2110-4a59-ac40-76cb37ef6253", "sighting_of_ref": "indicator--e6617b83-07f5-4450-ad5a-cddc756a9e1a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a185397-ba3e-45f3-a450-90e8c9d18a8c", "sighting_of_ref": "indicator--74ede954-2de4-484b-83b5-df6d3783acdd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494426d7-bd7d-4044-9f24-dc91ef661925", "sighting_of_ref": "indicator--aa8365d4-6c2c-4afe-b31e-ab10e7c65b67", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd3844bf-e422-43cb-98c9-0461e8d32ae0", "sighting_of_ref": "indicator--aa8365d4-6c2c-4afe-b31e-ab10e7c65b67", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842904e2-3e02-4b22-a137-69990237559c", "sighting_of_ref": "indicator--505ddaae-a68d-4e15-9a29-549ed875449a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf440051-dd0d-4764-831a-5d80f55ae96c", "sighting_of_ref": "indicator--989f6f49-0612-4468-ae03-62c33965b46f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdcda188-af4a-4aa5-b617-940117f2f6b5", "sighting_of_ref": "indicator--35c47a69-f6fa-4c68-94bd-ad1695b959cb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742a8b9f-167b-4237-bb61-56b47b8064e1", "sighting_of_ref": "indicator--5b139800-fb15-4497-9a02-9072797111f7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7fe728-c4bf-4162-9e5f-e626090f561d", "sighting_of_ref": "indicator--e0f7eeaa-9aae-44f8-a4b7-f04297af7142", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ee0c89-ae05-418e-b862-988a0876e765", "sighting_of_ref": "indicator--9a6ef4ec-f32c-4a6e-b486-8897f295c42d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b656b4-7dc8-4149-af7d-81ed37ab024e", "sighting_of_ref": "indicator--6b170a49-dc2e-44eb-a477-bb7a981583f3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c6bda1-6b08-4dfa-9d10-a1ccf397eba1", "sighting_of_ref": "indicator--c18c9ade-96a5-4be8-a3e9-955d7b53b870", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab5dcf06-725d-450c-87cd-99412be3283e", "sighting_of_ref": "indicator--bf58dd9a-0a75-49d4-a5a1-6dcd2258fcac", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4cbe28d-98d8-4f64-ba5b-f7b938ae3e9a", "sighting_of_ref": "indicator--165f9b41-feb8-4550-b7ff-85790e7247e7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1365e6-f2e3-4a20-a855-3d55b1560556", "sighting_of_ref": "indicator--bff50fca-e8cc-4aa0-9e04-c3cfc71a5a05", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0212bbec-9236-4689-b34b-4b70b24ca98a", "sighting_of_ref": "indicator--8e717251-b288-4795-a134-63be757fa153", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd65759-9466-45d4-bd42-d82748ba0e7d", "sighting_of_ref": "indicator--5ca133d0-590b-4618-94de-43a4987cb47b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725fd031-4b99-4fc0-85fc-d4e9539aefa6", "sighting_of_ref": "indicator--3ee0346d-6901-41f7-8d0c-2a3019bc935b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e042e669-1ee0-4c5c-86f5-f7db91c00439", "sighting_of_ref": "indicator--3aefd0eb-7a90-492c-b9e7-7e438ed229b1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8655daa-4b1e-482b-9033-dd556a7a43f6", "sighting_of_ref": "indicator--204becac-eae7-4164-adc7-95a709928c75", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bde3881-cca7-4848-8c9f-59dd3011e32d", "sighting_of_ref": "indicator--918a69ed-d651-4311-9bb3-26c3417506bd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d887d7-c764-4e00-9b46-362f4d6f808e", "sighting_of_ref": "indicator--bdfa98e8-d0e3-4bd7-af6e-4ba9a0344728", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d990b09a-57ed-406a-9ab8-60dcabbc37d8", "sighting_of_ref": "indicator--c1c9b34a-2a2f-4de7-a327-680003230670", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4348caa4-310a-4fa8-bd10-a06cc23ff20e", "sighting_of_ref": "indicator--2320f24f-879c-4801-a29f-a7ee7eea7302", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d420194b-dcbf-4322-8325-c7fc38baebcb", "sighting_of_ref": "indicator--74fed43f-034a-487c-8230-83d294c53a60", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d1ad46-2fc2-4a4e-858f-d08302562dea", "sighting_of_ref": "indicator--a6f3fbe5-e300-4ab6-871d-ce501b0e410d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd94deb-c936-482c-a779-b298313afd2a", "sighting_of_ref": "indicator--fd5da5cc-8b4a-40f3-9aa0-468b74124232", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785b03ac-d9d6-4e28-b3e1-82d8a6c95aec", "sighting_of_ref": "indicator--fd5da5cc-8b4a-40f3-9aa0-468b74124232", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778a06d3-7653-4777-a921-c7d5126d19e7", "sighting_of_ref": "indicator--ff1cceb0-6ac1-4ef2-ac01-02ba0b464923", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c54cc5-a251-4586-8bc7-66054dcba61f", "sighting_of_ref": "indicator--17af0fa0-5e33-448f-b938-ea58b70ccdc7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15e95e4-4995-443b-a3de-2473d3abd500", "sighting_of_ref": "indicator--00f7d04f-8dcf-4344-aee4-e36af7371b95", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae281c31-b033-4510-b94b-64f7db8a0d9d", "sighting_of_ref": "indicator--00f7d04f-8dcf-4344-aee4-e36af7371b95", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d29896-b10a-4109-8be8-53c93df0de86", "sighting_of_ref": "indicator--b8e84a39-8a95-42c7-bb4a-0eb80f8666f3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--011eb08e-22b7-45c6-8fdb-2898bb1db632", "sighting_of_ref": "indicator--21c87653-1407-4e91-b2a1-609b39058c0e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2e5998-ec30-42b2-87f8-67866e77e309", "sighting_of_ref": "indicator--21c87653-1407-4e91-b2a1-609b39058c0e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126fccaa-ed13-4fc5-9f67-8f0b5fa53ab2", "sighting_of_ref": "indicator--1e76fc29-44b2-484a-bb85-eac054838eff", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d85d933-e1ed-4ebd-9730-aa91bc8460f0", "sighting_of_ref": "indicator--984d1703-16c4-402a-98c3-1cf66482c232", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c5b6fa-c5e4-4865-b8f5-e2e8e35c75ce", "sighting_of_ref": "indicator--84b63246-67bd-4f12-a139-8fa192b88a1b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8232ef0b-3956-471e-aaa6-d0b11361bae8", "sighting_of_ref": "indicator--02bc5330-8011-4a0c-96be-4912f9610110", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a977a78-7540-409c-b860-f2f171bb20ce", "sighting_of_ref": "indicator--b9790a4a-c3ca-47c5-ba0b-1db7b3c180f9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc70446-d069-4463-8501-450c0b862f6a", "sighting_of_ref": "indicator--022cf27f-98aa-4195-8a45-c3a20948faec", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc588b8-72a9-4dbf-9ecd-370b112222d7", "sighting_of_ref": "indicator--4475b0ca-1719-4104-b68f-174892a786bc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3887e494-644a-480c-bd22-f72b98433da3", "sighting_of_ref": "indicator--71ce59b7-16ff-4f86-a2c8-a6905f6ecae8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c599b47f-cac6-47ec-a6c6-cd17bd587bc6", "sighting_of_ref": "indicator--6dc1f1ec-47f9-4d99-a077-863089ceff50", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e87622a0-3aee-4c15-9b31-85e4a5d244d4", "sighting_of_ref": "indicator--f2cf2371-cf5f-405f-94ce-637b8b0800c0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbb3d6e-940a-4321-aa8d-608c6d045807", "sighting_of_ref": "indicator--9bd4f60d-c933-4861-824b-adefecb45257", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd96505-b553-4f01-bb27-711c118d248e", "sighting_of_ref": "indicator--ea12a94c-874b-4098-aad6-2ae25bdf9cc5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406e3de9-1b47-4c40-9f27-a138a44ea5a1", "sighting_of_ref": "indicator--c8e87f9f-ac15-4f24-831e-556635cb0954", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3c7ed5-0e56-4467-8ae1-f0934e04d59d", "sighting_of_ref": "indicator--27d3361b-13da-4ed0-824a-7d660304c79d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc43fe2b-33f7-4062-8d96-b8216831d926", "sighting_of_ref": "indicator--bdf032ac-b000-4a68-91c6-aa31bf235077", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f613471-72f0-4aba-95dc-f054a42cf5c8", "sighting_of_ref": "indicator--872f6bd2-2740-4bb4-9766-d79cc4bda8a4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e92b1936-eead-46f9-bf64-84d61678aab8", "sighting_of_ref": "indicator--a4dbf93a-af0b-4471-9358-23004bbc76cf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638535e1-e1c8-4793-a7b6-022b85328b9c", "sighting_of_ref": "indicator--7bd8f426-7957-44d7-a284-bb7574f302e0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8e3a0d-e585-40c4-94f0-29cddabf6252", "sighting_of_ref": "indicator--f2014f84-9b27-476a-a7bb-2c679b9c63da", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ffde24-56d2-4bd7-95fd-0e122cdece8f", "sighting_of_ref": "indicator--0b645c69-6b8f-40ac-b421-bdf291454b76", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd11b10f-2a19-4edd-befa-d6c7ef2ab74a", "sighting_of_ref": "indicator--a488535b-ed7f-45e8-bf87-8294dcbe24d5", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b678c182-b17f-41f4-ba94-d01c4cbe2871", "sighting_of_ref": "indicator--eced03ec-624f-4757-95d4-071d6ac596d6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8dab3c6-e950-43f8-b641-26c8dcb43a98", "sighting_of_ref": "indicator--d1cff4b2-10eb-40d5-8941-a11a9b4b4a5a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c68e44-8a3c-4d6a-b1a9-63bd19a252f4", "sighting_of_ref": "indicator--cebcce1a-f374-44fe-bbf5-3c20e77b7a05", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f558702f-70d0-4c7d-aa3d-ae0063a91547", "sighting_of_ref": "indicator--8f7fa811-b5aa-4aab-ade6-8b4de23ec181", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d60d58-ddbd-4815-b801-32486133628b", "sighting_of_ref": "indicator--4d34dfc3-721b-4c09-b74e-74b4595246d5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8627bdde-033b-4d25-99cb-75317529ba54", "sighting_of_ref": "indicator--8d074a36-0ba3-4496-83c3-e3a5974a0c56", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8727b5ad-fdfa-45c4-aa89-01006de77758", "sighting_of_ref": "indicator--490cfabb-beaf-48ed-b5a4-1f2e255a7d80", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d0aede-858d-48e2-b1ff-84d6033be290", "sighting_of_ref": "indicator--ee97a300-60d0-4215-8fbf-33706bc69e6f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--308b1d0f-e056-41b6-84c9-07b34f84b0d6", "sighting_of_ref": "indicator--a68d12b8-b7d7-4b42-a63e-dc0563400834", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3edbf686-2c9c-4512-9a52-8667810dbd0b", "sighting_of_ref": "indicator--75a38b00-ff02-4d2f-b6f4-1f28f39e831d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c2a64e-7d34-4a23-8ab0-efa76a2fb603", "sighting_of_ref": "indicator--87dd5d9a-f8d2-46c6-875a-e2d76d131e58", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda97162-a414-4cd8-a251-dbdc1c5a3eb1", "sighting_of_ref": "indicator--7791f569-86bf-4d2d-b4da-ddcb612ed4eb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36a2ff8-f52e-45b0-b7f4-ebb8362fb7e3", "sighting_of_ref": "indicator--8f3d942c-7aca-410a-87be-eebf5025839d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73f1fb8-18f6-4154-9b4e-2b629ef45b04", "sighting_of_ref": "indicator--044b0c57-105b-4b9f-a06c-4e598b3b0610", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcdedd76-d446-4f8e-8ca3-09a5236c0ef9", "sighting_of_ref": "indicator--e23850c0-51a4-4b15-bc02-12bf36205f89", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268d1664-6a29-4456-86c6-8802c7024100", "sighting_of_ref": "indicator--2c242f59-c7fe-4dab-baac-f8b2dfde6b96", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5e40fb-8801-47b7-997c-0aa1eb1a01c5", "sighting_of_ref": "indicator--552f53d0-306e-4890-8846-1e429cce9dd5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--166e9154-1ad1-4239-980b-515e986d3248", "sighting_of_ref": "indicator--e1b03875-465c-484f-be2c-5d68104c8d7a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2a4961-ee34-4e84-b653-b2d17081889d", "sighting_of_ref": "indicator--1a3cacf1-7184-4b5b-8646-e740c64e2869", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeec947e-8d32-4363-97ea-3e033acb0d51", "sighting_of_ref": "indicator--4e2a2f2f-eb4d-47b8-bd66-0029196a8563", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d57c50-c45a-48f3-b937-f70f3932765c", "sighting_of_ref": "indicator--4e2a2f2f-eb4d-47b8-bd66-0029196a8563", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62809e6f-64b6-4796-a72c-71f9eb0e82b0", "sighting_of_ref": "indicator--8fd65c80-f33c-421a-ad1c-79ab4e4824b4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db692a05-852e-4fb8-9cd6-8291f018fd46", "sighting_of_ref": "indicator--d0d52877-23a8-439a-bedd-318e8b12efe3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420401d8-8b9e-4f01-9335-3f7d1d8685c5", "sighting_of_ref": "indicator--d0d52877-23a8-439a-bedd-318e8b12efe3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc15cb70-db87-4c44-b2bf-b65e39485ddc", "sighting_of_ref": "indicator--83ed7dfe-dd7f-44d5-94d9-03dbad79506d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc23e9b-a767-4819-a232-898681073f2c", "sighting_of_ref": "indicator--83ed7dfe-dd7f-44d5-94d9-03dbad79506d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d7b54f-ca5a-4b0b-abca-22381a89c57c", "sighting_of_ref": "indicator--cd3c0f75-49ed-4983-8caa-5e7bd8fd7b73", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fa1bde-dfff-4cbf-b9e1-e341e778208e", "sighting_of_ref": "indicator--5d6bfb9f-6741-4089-bf1a-24f6bc95d788", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc821d56-9e8c-4785-82f1-320e15bfd285", "sighting_of_ref": "indicator--24ab3033-0ab8-452c-8f57-37817314f2a2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97ff758-801e-4ac0-ae7c-d89bf8b3676e", "sighting_of_ref": "indicator--9fcd1e4a-aca0-4581-8d0a-f255436494dc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a0d9f0-0ae3-4316-9f86-f1b1285b415d", "sighting_of_ref": "indicator--74a30769-37e0-4325-bdbe-b1ac217accc1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b0a248-ee48-48c1-a690-051258f4d7a6", "sighting_of_ref": "indicator--03156a79-6d2e-48e5-8d17-fe800e17d0b8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a2525f-862d-4574-b552-bc80effa5bb3", "sighting_of_ref": "indicator--fa471e3d-29d2-468b-ac54-c27be3e7094b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7cdfb7-bfbb-42b0-ab1d-dbef685c9255", "sighting_of_ref": "indicator--8168c913-86b8-4620-8107-f80d758610f9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e786358a-0423-4e44-b670-16ca6767fde0", "sighting_of_ref": "indicator--8168c913-86b8-4620-8107-f80d758610f9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62197a1-f048-464d-92a3-0ba008f9e0fd", "sighting_of_ref": "indicator--d1331887-d2bb-4f0a-9dc2-0b19ab02cad8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21ec4df-6dde-46c8-bb4b-d9aabb2cd0ac", "sighting_of_ref": "indicator--6449a94a-2cda-4b1c-a8a7-7ee6f7daf1e1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582e6b59-e6bc-4264-b7bd-2e50b15410b8", "sighting_of_ref": "indicator--d4eb2de2-2174-4419-8e08-ef2d35b45dad", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43fdc17-6bb3-4b3d-a435-e6050dea19d9", "sighting_of_ref": "indicator--064363f6-3504-43f5-bab8-69b2cd915973", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ebb9c60-d7b9-443a-8a81-f03ef1be8b25", "sighting_of_ref": "indicator--44b9a2cc-c5a1-4e2d-92f8-e523bfccb05d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd08130-9ba0-4282-8f5a-3ac0eaf0309a", "sighting_of_ref": "indicator--1f5d8998-9dff-4ceb-a6ab-0c316083778e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba89ef0-397b-463f-8731-f7efdff3e26b", "sighting_of_ref": "indicator--f41fe364-7d27-480e-a788-05e2fa50d9bf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453cf305-9131-4c22-8f88-f03cfdb2883a", "sighting_of_ref": "indicator--1791e22d-c420-42f7-84d9-a8bffa5b82ac", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e84d852-0ca5-47ac-80fa-763f2f564404", "sighting_of_ref": "indicator--569436cc-4bf4-40a2-921f-f77b5e25f7d2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba17362-8392-4175-abde-db616911eadf", "sighting_of_ref": "indicator--4477659d-bb99-4dde-9c2f-be4bbd7d00e1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fad77ab-badb-4d7a-99b2-69a4204b0810", "sighting_of_ref": "indicator--e3d82b88-a1df-4f0e-a0a5-21f172f2ab53", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a795b6-17eb-43eb-8696-d1b1d0ee59c7", "sighting_of_ref": "indicator--c86876e8-c8ac-447e-b33a-e2a631271fa0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080c0046-dbea-4af6-84ce-377217392aad", "sighting_of_ref": "indicator--fc0c1856-249a-471e-8960-9a0cfbfca849", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b1bd03-786b-4ee6-9364-d977f8ce08e4", "sighting_of_ref": "indicator--f1c4a7dc-d950-4d9e-9444-0ac2db6d44ad", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa33d09-0323-4482-8b47-044f1aa3a65d", "sighting_of_ref": "indicator--5f79e2f2-93b9-441e-8368-7dcd7e2766a0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad424134-72f1-419a-8979-e697e88ab0a1", "sighting_of_ref": "indicator--10caaed8-5992-407d-9530-bdc6c05795f1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b48602-325d-4b25-bdb7-94e616f27b5c", "sighting_of_ref": "indicator--67d1d767-c8ba-4df9-92cb-4f30f09d5fdf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d82d1a-d987-4bae-9a25-90c09c744945", "sighting_of_ref": "indicator--606daf1b-cfcf-4137-90e2-9bebfbc0b8bd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23d57187-d8b1-4309-a30f-02dd6c093d6e", "sighting_of_ref": "indicator--bf4a94b7-54f2-44a4-8001-97eceacf64c9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f739fc7-8bae-4bc4-9cc1-c5813267ead8", "sighting_of_ref": "indicator--91edeaff-379e-451b-82f3-35f3f1bbd2e0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f85a02-588c-4e8b-a1ba-6bf0cd9ee738", "sighting_of_ref": "indicator--f5cb46cd-17b8-4a13-8d64-f05e9f3c377c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d32ff1-6722-4342-a44e-5449407908f0", "sighting_of_ref": "indicator--28d94971-419e-441a-875b-a7baedc7cc5a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53fb6ca1-d1ca-4252-aa6f-1c879a8bfdc0", "sighting_of_ref": "indicator--35449001-0d9e-49ba-8874-2874ae7e5cc3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153ee1c6-4dde-4241-944a-3eae99d0bdc9", "sighting_of_ref": "indicator--971da28b-ca47-47da-b6cb-8f1bc2d0e5df", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e5b2df-cab3-4233-95d6-bc3a3f8055ae", "sighting_of_ref": "indicator--ef901b57-122a-47bc-a20f-f82c57be4194", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c015ebee-28d1-4901-99f9-08a2953486ed", "sighting_of_ref": "indicator--ab5b76a7-7a52-4f89-a3cb-439e6f7eef8a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c5405c-9854-46f7-bfbb-0431e53138f5", "sighting_of_ref": "indicator--476859c6-c5f0-4ff7-a901-8bb3093a59c1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d712fc5-4510-4406-95ed-4af3f11b47bb", "sighting_of_ref": "indicator--165c3be7-e535-46e8-872f-6d770083746c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f568ae4d-a963-4ac5-b74e-78d18069dda3", "sighting_of_ref": "indicator--165c3be7-e535-46e8-872f-6d770083746c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6776ca2-8069-4a5a-94f7-fb303f973740", "sighting_of_ref": "indicator--c035ce56-bf12-4f6f-a60d-2b129945fb8a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb823a65-c823-4dd1-bf0c-462964d898f6", "sighting_of_ref": "indicator--28e90525-af86-4898-96a5-0a076221b818", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb66f0c1-0ff8-463b-9491-40276e42041a", "sighting_of_ref": "indicator--28e90525-af86-4898-96a5-0a076221b818", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7cd96b-0c3d-48ca-90d6-7dcad97b8fac", "sighting_of_ref": "indicator--28e90525-af86-4898-96a5-0a076221b818", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fadfad4d-9502-411f-b492-3df998def3d3", "sighting_of_ref": "indicator--49481b45-6bd1-465b-be6b-0455bdd98937", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c295b9-e58b-4032-acd4-59f4fb074268", "sighting_of_ref": "indicator--e22f722f-3536-4db9-9637-cfb9c93285dc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3cb509-f10e-4466-a09a-64cc7388ece6", "sighting_of_ref": "indicator--5c4e16f6-829b-4371-9acd-f069029f3783", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3100c26d-4170-4a87-99a1-b217adb307cd", "sighting_of_ref": "indicator--3f506845-145b-4da0-a2f4-407426c7b25e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6b4d3b-3d26-4e13-83cd-5f2fd571527f", "sighting_of_ref": "indicator--285ce48c-84a3-47ae-92f0-dfdc5ebf76c4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4161bb-2279-4203-aa8e-4fe63ecbf313", "sighting_of_ref": "indicator--c0b0a54f-4b86-4603-8780-8007acc182e0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d0b027-3878-4cc5-924e-7876bfde379e", "sighting_of_ref": "indicator--df138472-05c5-422f-85a0-0c5f67992bd5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f895e62-1c6d-445e-b711-8ad27876bf53", "sighting_of_ref": "indicator--9296501c-4a1f-4cf1-b48b-42bddbb30b32", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fdbf788-a5db-4cd7-a133-71f38d837686", "sighting_of_ref": "indicator--9296501c-4a1f-4cf1-b48b-42bddbb30b32", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e5d7ae-2d6f-478c-8ed2-05869dedf88f", "sighting_of_ref": "indicator--8fde55ee-77d1-4a4b-a311-0f0a4615036d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0959a23e-818f-495a-99da-60f45de514c4", "sighting_of_ref": "indicator--efd693ed-8d20-4fe0-8f14-35de7c84ab31", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3849f94-cdee-4f9c-abd6-8b4e4369c07f", "sighting_of_ref": "indicator--f4cb442d-c466-4e70-b465-1697581b289c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0832990-9dcd-4b3f-8604-0cfe404079a8", "sighting_of_ref": "indicator--40a42a10-9229-496b-8883-139e3e631ce0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d79d316-c463-4d5e-a8ee-64651a8516fb", "sighting_of_ref": "indicator--19247db7-02c8-4f87-9fad-2fe8f2d7eeb9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15cbe97-5d38-43b2-a395-e2b3678999ac", "sighting_of_ref": "indicator--136c21f9-73c9-439b-a5b8-83406dc9fafb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8ff89a-4fb1-4142-995f-0c3bc6d82bc0", "sighting_of_ref": "indicator--9e76e7a9-6d20-478b-87c6-9cad1e58974b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67fb3310-9c2a-4994-9a98-a3fa27fcaac9", "sighting_of_ref": "indicator--4992b2db-230b-4cd6-b6a9-c707873fae34", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f871b5-9a1d-486a-b124-07c6212b8011", "sighting_of_ref": "indicator--769a703b-d141-482b-bdfa-7c8ce57f7ff6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fecb0b-2d03-48c0-aa68-ea422124a6c2", "sighting_of_ref": "indicator--1dad8ba7-dd00-43da-bc12-ddafa5ca4f8d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c7e124-61bd-4b45-8660-47b750545418", "sighting_of_ref": "indicator--c66818d6-7c30-4b1e-9f7e-0e0575cfd1e7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b99d614-46a3-4fe6-8a9a-f61c55c63f45", "sighting_of_ref": "indicator--b2533407-a54a-4210-a38f-a6908000a614", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac8d4d6-0062-476d-a836-f029e7bb13cf", "sighting_of_ref": "indicator--50c938d9-7383-4f7d-9fd3-eb9b7ca4545f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef6b10d-c9e9-4376-b1dc-3fc8394bd73c", "sighting_of_ref": "indicator--f5348826-0d5f-4d68-8fc7-bb9ed860f942", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24e860c-3e13-4c43-8a20-fa958721146c", "sighting_of_ref": "indicator--89253797-f864-4d7d-a1c6-9c3603e44f28", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--617abefc-6212-474c-9d7a-a994b00a246d", "sighting_of_ref": "indicator--6dc41ae5-80b7-43fd-b308-31cab2bcfd3b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7e045e-036e-44cf-87f7-510487b6dd6b", "sighting_of_ref": "indicator--7dc1126c-8d1a-4554-97a6-27e4465b12f5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7978208e-3254-4ab2-a54d-887a8c2bed31", "sighting_of_ref": "indicator--8b17bd87-c56a-4a89-b318-d35b11c0fb91", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e793de79-c0a5-420f-b4f3-f43395b40721", "sighting_of_ref": "indicator--256343a7-bc96-4ad6-ac30-feed67126e3b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444902d8-ff25-4eff-b744-eb43d68ddb4b", "sighting_of_ref": "indicator--b96c54da-82bf-4e26-bc86-047c48f1a6fe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153a3d4c-d121-40d6-9016-591641671b10", "sighting_of_ref": "indicator--5b3f4204-c18b-4a84-b8fe-c166fc538f30", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6cc26f-963f-4621-9c18-f43fe3156571", "sighting_of_ref": "indicator--7a404598-f02f-46de-b3cb-2169bc9729f2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc78bd85-99f0-493d-821e-0056fe46126e", "sighting_of_ref": "indicator--f7b40841-d8ee-4370-b10d-86cd8db89f2f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5126e4-9b80-403a-bd7d-21c74b01d674", "sighting_of_ref": "indicator--dedc3bd5-f046-441a-89ae-4230650af7ed", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52864db9-4861-4d98-ac70-bc3b11d871cd", "sighting_of_ref": "indicator--f4052a28-87e7-459c-a3e3-3b47d9860ed4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1cac8fa-2f86-4bec-8cea-510246ee6bc4", "sighting_of_ref": "indicator--5d1528ca-47ff-42e7-a5bb-2d85b934e7e4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c705f12-c3ac-4957-875b-9129b0e9ad4b", "sighting_of_ref": "indicator--ef6bb3e7-85b8-40da-9494-4bb2c29aa9b4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b42d52-4203-48e1-a77d-d40077010d52", "sighting_of_ref": "indicator--ccad5456-01ce-441a-b61b-5c2c60c1fbda", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73c1ff2-ed8d-429c-918e-b1bc68668eb6", "sighting_of_ref": "indicator--82236e81-1f30-4e70-814a-4b316cf8e460", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a63130-27e0-4164-b7ec-863ad00262c8", "sighting_of_ref": "indicator--82236e81-1f30-4e70-814a-4b316cf8e460", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df0c748-c2ac-4dba-bc19-555d6b5c830b", "sighting_of_ref": "indicator--5903fcf8-5a67-498d-9b25-a1f322ff820d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55e0de4-63eb-47ca-86d1-153862a6d142", "sighting_of_ref": "indicator--62bef243-2675-48c4-af10-7db51a70c6bb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b75d56e-eaf4-4613-a241-ab75570a1939", "sighting_of_ref": "indicator--eb57902a-46a6-4c82-ba31-7c6af2d68449", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c06c9ec-aac6-48f2-a378-1e210089ea87", "sighting_of_ref": "indicator--b0837ec0-d301-4ca6-819a-43e8c9af90da", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785049fa-2bf0-4989-b32e-127ec9d87069", "sighting_of_ref": "indicator--eedfba60-2004-4ddc-97cf-dcc214cd4a1f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d3b394-416b-4b3d-96ce-381dfbfc6745", "sighting_of_ref": "indicator--a27b3abb-5351-4748-87f4-bdb537791b04", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fea043b-35fd-44f7-89a3-1b7bbecd3924", "sighting_of_ref": "indicator--787ae905-3a28-4f3c-9d99-5ebf129d238d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c269e1-4f4f-4c7c-90be-66d25f72ccf3", "sighting_of_ref": "indicator--46dbad4f-c3ac-4b6a-a186-c5c3cd1388fb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edcaf5b5-4a39-4064-a7eb-e0b631818229", "sighting_of_ref": "indicator--6b078562-50e5-4c3d-897c-941d0a6c5789", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8746a8c-3dbb-48a5-8976-b14f6e21afc7", "sighting_of_ref": "indicator--3c08dfdb-a679-48a5-9ee5-36c1dcd5642a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1ce423-1d86-403d-89d7-77c7498822d9", "sighting_of_ref": "indicator--eb636749-441d-43ec-b7f6-328404cd5305", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7361cbd7-d566-4007-93fe-5febadb5406f", "sighting_of_ref": "indicator--cc9f8a09-4b09-4a96-9665-3ae55badeb2a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bb4ea4-931f-4e1a-81f6-4a38f101d70c", "sighting_of_ref": "indicator--c2f685e0-888a-422b-ad05-4f4b5e134c28", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954aa9ff-8105-4f1f-806a-d2da66334231", "sighting_of_ref": "indicator--82e2871d-b48f-498e-8e67-59b3b44b9f1c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696be728-045b-424b-8881-deaa46132b1d", "sighting_of_ref": "indicator--82e2871d-b48f-498e-8e67-59b3b44b9f1c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb3e27e-e739-49e6-a710-e2b93216dbc9", "sighting_of_ref": "indicator--4bc8e0b6-1cea-4d60-a74f-6896e22c81a6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd4ffed-e3b6-4aa1-aeb8-450e58d1ee2b", "sighting_of_ref": "indicator--4bc8e0b6-1cea-4d60-a74f-6896e22c81a6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eebcdd9-b356-4808-ae52-2aa40e3b87ab", "sighting_of_ref": "indicator--b3020184-5d91-4cb3-bd6f-3e9890bd16e7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72246b90-4e80-48ee-a8bc-d42027deb842", "sighting_of_ref": "indicator--516ce569-8081-425d-86d8-24c43d172949", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820d3c3d-a720-47d4-a779-26688cc2c0c5", "sighting_of_ref": "indicator--324e118a-7601-46cc-aa43-e47e906ee99b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6c0e12-1cd0-4ef9-b26d-ca7f6c01bb22", "sighting_of_ref": "indicator--a2592117-b1fd-4c27-869d-abe52430200c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0459740-2803-4a48-85dc-685de0e22425", "sighting_of_ref": "indicator--f22a3eb2-716e-489f-a1c6-91b3373efb86", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e408f33f-7d91-42d3-91ba-87164ab8c771", "sighting_of_ref": "indicator--5b981723-8f52-4c63-8210-1bdaba164a8c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8192876c-b931-4be5-b114-edf48cb066ac", "sighting_of_ref": "indicator--593180da-def0-4195-8879-78c3ebbdbef7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17a2415-79b8-4a6c-abe0-6a66245bf111", "sighting_of_ref": "indicator--013fc537-e839-4cc0-87e9-f8f8c9fa7b59", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4bb5a0-8a0e-4ace-a369-56141ad1e06a", "sighting_of_ref": "indicator--97f68cb8-cf27-4d6f-a14b-31209b2d415d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf37513-f74e-4922-ba5c-60d37573fdfb", "sighting_of_ref": "indicator--454ae465-f56d-41f9-8c23-cfb7a36146b2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d7e76e-cfc2-4e9a-81d0-d7e6b94772ae", "sighting_of_ref": "indicator--917c5da0-f4a4-4c4f-ac32-c7cc1645446a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552a9410-1898-4cad-96b4-1b5bb0fb8513", "sighting_of_ref": "indicator--ac81b2ac-129d-4d27-9d43-7d38c74492b3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521a58e5-8642-48d7-b44b-dd6994bb9e2d", "sighting_of_ref": "indicator--66081053-2cc3-47e2-87ce-435ff35d7e7a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e602b0-8a1b-49e4-b97d-d600216b45f3", "sighting_of_ref": "indicator--5b723279-c48a-44d1-8acc-f9cb3be63b6c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c4d1c0-b656-4fa4-889c-fa9ca6f61224", "sighting_of_ref": "indicator--87d6d625-dbf0-4b4e-938c-a2043121e5f6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002a0d37-9ceb-467f-b867-99f68a25e3b9", "sighting_of_ref": "indicator--87d6d625-dbf0-4b4e-938c-a2043121e5f6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df92263b-f8ad-49d1-af69-6cd9d4fc9055", "sighting_of_ref": "indicator--73e2fcf8-4c68-4ff6-bd5c-89d1acf1244a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ff0f7e-4977-4150-8aa7-f30fbb19c5a1", "sighting_of_ref": "indicator--2f162771-150c-4e20-b61a-071f8311ec2c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb94644-39fc-4247-9111-bf372ab7da6b", "sighting_of_ref": "indicator--a3f43294-9688-48af-88ce-105cc09ed9a4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0d50d0-d833-45a0-997f-38bcfa61cc3e", "sighting_of_ref": "indicator--6cfa5448-7ea5-4ebf-a227-2e7d12e9e67f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2f6ce6-17c3-4683-a9c1-ffd511a27499", "sighting_of_ref": "indicator--d93ad94d-2865-46b8-bbe0-2440b9db77f5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6281f24d-f8ff-4e7b-b2d6-119f114a5978", "sighting_of_ref": "indicator--1629f430-98eb-46f3-8cb3-adcffca3bbbf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8dafe95-f347-4767-9bfe-e8a623f876bd", "sighting_of_ref": "indicator--1bf37e4e-19e6-4916-9a4b-3f9f6495b58c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01691bb-7ce6-4fd8-b1bf-735324d45cc1", "sighting_of_ref": "indicator--1bf37e4e-19e6-4916-9a4b-3f9f6495b58c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f03b1ef-6021-45de-a93d-665f11af5f0f", "sighting_of_ref": "indicator--8f0d24df-45af-4ac2-b5f1-68691f3899d8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc987d4-bd25-4b8c-99b6-95d2bf7da79b", "sighting_of_ref": "indicator--d5029678-2d59-4d0e-a49f-8e5c41a60780", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c9093e-0e98-4b30-84e0-7fb16ed8bce6", "sighting_of_ref": "indicator--4be127a2-3e38-430f-97f5-a8ef814e677f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a131b6-e282-4cfa-914e-2920f76812b4", "sighting_of_ref": "indicator--17ec439c-65b1-4fcf-9d32-7ed75e050ade", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8fc0499-cfe1-4e65-9b24-09f9fbf28ed9", "sighting_of_ref": "indicator--cb5be47b-8822-46fd-bc7b-2f9c8d634b3a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13902310-aa76-43c4-9d02-0595c1d9b548", "sighting_of_ref": "indicator--105b820d-f5ba-45c9-a451-a9cd2a3f497d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4eede8-7e2b-4423-8c22-7548ad23cb81", "sighting_of_ref": "indicator--8a047986-c64a-4b5c-b6f7-543e94133f2d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33fd08e9-b3b5-409d-ab51-e986e3b038e0", "sighting_of_ref": "indicator--8a047986-c64a-4b5c-b6f7-543e94133f2d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb7288b-715f-45ba-b1f9-6bfc2509483d", "sighting_of_ref": "indicator--fb3ff0ec-74e8-4090-a138-74f023941735", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52344548-f6da-48ef-948e-589498ec414c", "sighting_of_ref": "indicator--49f73c92-6ccd-4f9a-afcd-7c244209912c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8097a999-aa64-4a1e-b7ef-3cd11b8494c2", "sighting_of_ref": "indicator--ed16c685-0f9c-460c-a4e7-bcad5404af4a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f1a47a-4dd0-45cd-9210-82b68b409ded", "sighting_of_ref": "indicator--9b5a7f94-ba52-4b29-9a5a-2496eb9cbf85", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5552f8-3250-4206-9a65-c36636374a6b", "sighting_of_ref": "indicator--85ffb923-a2c0-4929-9ef0-920dbce735c2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f9c74c-3dcc-4077-9742-ab320a9e980f", "sighting_of_ref": "indicator--4a2683b3-42f6-494f-a0c5-877df92b361f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d978788-02ee-47de-a113-0a7d123fadd2", "sighting_of_ref": "indicator--db14ba97-9468-4431-a90d-68089d980673", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf7cce2-862c-4d1d-9256-61c8c1bff1b7", "sighting_of_ref": "indicator--f111e939-1b83-47f6-b0b8-5ec88ff879cf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae52057e-e90f-4ef8-814f-d4ff3a8719f5", "sighting_of_ref": "indicator--e893d71c-d8e5-4dc2-a6c7-1a2d4ccf9da0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35247b4-598f-43b1-8890-b0d8be6bf62e", "sighting_of_ref": "indicator--4eb1ada3-9f37-4776-aac1-36d09259c635", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d707cd0-0bf0-42c9-9169-4e2fc10aaa11", "sighting_of_ref": "indicator--33c84154-d58c-4dc9-9cc4-1535e002279f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1aadbce-8f40-4396-a9cd-6c9f6024eafe", "sighting_of_ref": "indicator--9d0e251b-d73b-4776-9144-886ca3173562", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0335a8-305d-4b0a-99f1-0753da7b46bd", "sighting_of_ref": "indicator--9c1e56d9-dd4f-4cd8-92db-0b7269c3712b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6988bf85-fe64-4964-bbbf-f2095048cacd", "sighting_of_ref": "indicator--c49e3ce4-cd83-4969-afd0-68b7b1ec8239", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c79ca8b-7dcf-44ba-a416-f58852829119", "sighting_of_ref": "indicator--c42afc5b-784e-4320-8df4-d60ca6b3c2ee", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17649fe7-81d8-46e1-b7bb-dc9422afd9e6", "sighting_of_ref": "indicator--45858fc2-a069-4ffe-ab38-397bf70294a1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0958bbad-df37-452f-8287-33901fd67269", "sighting_of_ref": "indicator--802edb7e-9fe6-4837-9c47-281c25de9d27", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b5723b-48c8-4533-af4f-bb3a961560d9", "sighting_of_ref": "indicator--c8c42610-4e4a-438f-8032-28b3656054b4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ed4615-6f1e-4943-9504-bdfa106dfbd9", "sighting_of_ref": "indicator--c8c42610-4e4a-438f-8032-28b3656054b4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4211cf86-a5bc-4658-b632-b4e20ae80138", "sighting_of_ref": "indicator--7b5c39dc-2619-4cd7-819f-a07b18d77c81", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06a4848-97d9-4fcc-b193-5166ded28756", "sighting_of_ref": "indicator--e3035b14-a12d-4b1d-afa6-02ce5d2f739a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee36823d-aa75-44c9-aa6c-4a5b76a8c8da", "sighting_of_ref": "indicator--f97b1def-9a0b-48e5-8014-532fa1119a09", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9ac5f0-871b-4257-a2db-bc26c70cb15a", "sighting_of_ref": "indicator--d50a82ce-69d8-4c1b-9d6c-78a7cd9c86d2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df460cdd-fbc3-4a69-9c15-79235a0deaa8", "sighting_of_ref": "indicator--9db5567e-13cf-4328-b986-626eb8ee718b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf21a840-222d-49ee-918c-4713fbc38c69", "sighting_of_ref": "indicator--d6706975-94d8-478d-ad02-504f6bbc0a47", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afea56a8-f577-4d9a-9a9e-84ec745265e8", "sighting_of_ref": "indicator--ca7573b9-63b2-4321-bdc7-109ef7a3db7c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85cd5bb-6a30-4c6f-b47e-3027bfa4d7e8", "sighting_of_ref": "indicator--4f474117-d604-473b-8b6f-880e03b71bee", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fde651-f657-4c32-9db6-546db702e370", "sighting_of_ref": "indicator--1b9e34d0-808b-4069-8e8b-e11ed676c87c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8543b8-3acb-4154-ba20-a476e543f056", "sighting_of_ref": "indicator--f7a6b906-f32e-41c6-bdcd-9cd81680adc9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d03927-b740-42e5-aa66-3459d143a73c", "sighting_of_ref": "indicator--f7a6b906-f32e-41c6-bdcd-9cd81680adc9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ee30e6-017d-47cd-b522-d3fc7a3522a6", "sighting_of_ref": "indicator--2f4bb052-5343-4f58-ac46-6bc0d377d304", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a292810e-10f4-46a9-bdb5-3dc067c1a78c", "sighting_of_ref": "indicator--5ac8fb30-dd6e-4e38-b88b-290bb87f8a21", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052d4e7a-1987-4b77-8f1c-6e05726aea5a", "sighting_of_ref": "indicator--d0b1dad3-3ef8-437e-a9a5-788df1e90c36", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348cc954-fb02-4a46-96e5-0ba84bf35340", "sighting_of_ref": "indicator--fd308744-6c0e-4dc3-9071-e6d42b7c0a68", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294989f4-3587-4274-9618-ee7167a580d4", "sighting_of_ref": "indicator--fd308744-6c0e-4dc3-9071-e6d42b7c0a68", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2fb281e-8445-4d92-b40d-ee235c6ca414", "sighting_of_ref": "indicator--a1e71e37-b22d-4094-b7e2-e7c0ce657d6b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03280b8-6c3c-430c-9d72-8c2c476f50f8", "sighting_of_ref": "indicator--7b871bc3-daed-4a4b-a133-4976e9b2a78d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d850f6f3-a604-42c2-8c54-2ee0f8eee6ac", "sighting_of_ref": "indicator--9f7d3208-41c4-450f-a35b-91e02c73b75b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8ecdc2-18e6-4e2e-b594-5ed2ea4f20c5", "sighting_of_ref": "indicator--864dc525-8c66-4aef-983d-7fc606ac7a61", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed809214-dac7-4078-9b2e-e3f1988f6f69", "sighting_of_ref": "indicator--d8fb5e16-2db7-4e9b-9825-73c50167bd94", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34c5a52-ed0c-485e-b498-645e9898feec", "sighting_of_ref": "indicator--3f1c1e73-4271-4ef4-81f8-080b11afb106", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f911d0b-dd6c-46be-aa51-2d494e85f855", "sighting_of_ref": "indicator--bc97ff8c-6937-486c-9165-b514d46c095b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464cfea7-2fdf-48b6-9f36-e5123adc7caa", "sighting_of_ref": "indicator--b78c511d-57d4-43f4-a024-a907f7cc0ab9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6427b424-f1ec-4822-b10a-f1e4cc3996c1", "sighting_of_ref": "indicator--5f096cba-0e4c-4eae-9c84-f7eb9c35b0f1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65becea-07db-47cb-a3e0-017a964a7d99", "sighting_of_ref": "indicator--bbcc6782-e8d4-416c-a1f7-d0230fd538b6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64baa3f-6c1a-4070-9a12-7413fe37753a", "sighting_of_ref": "indicator--64243a6c-1d24-4b81-adae-ea059d49e08b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdfce098-6582-4869-98e8-ff6c1edc6c70", "sighting_of_ref": "indicator--17899155-35d9-4d57-851c-bfc608df086d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe80e591-4496-435e-b3c3-23b91f2bc3a0", "sighting_of_ref": "indicator--a423df9e-e258-44cf-9edb-a277d13405eb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c512d75-d35c-4dd0-83d8-d3e60342f60e", "sighting_of_ref": "indicator--17ee86fb-7d1e-4c7e-b31f-2fd8fd01c2bc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7252657-b0ae-43e3-abf2-b8b84763e372", "sighting_of_ref": "indicator--cccac452-db54-4249-96a8-9fe90ea5209c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a47ffe4-ef08-461d-8662-4daa673be979", "sighting_of_ref": "indicator--e72965a9-44be-4aeb-b93f-2e8dd8da00e7", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647ccd8b-82e9-4641-a525-b2bd57b4058c", "sighting_of_ref": "indicator--e72965a9-44be-4aeb-b93f-2e8dd8da00e7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0472f68f-05b8-4262-952a-412f7a1f1578", "sighting_of_ref": "indicator--3c984691-c7bc-4059-aaa8-be5b93d7cfe0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de656184-d416-412e-8783-0fd3513a1d29", "sighting_of_ref": "indicator--49045cf3-61a5-4c27-9a7a-5660a239f4b0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42485a85-2242-4aff-82a4-3f30186f4e0c", "sighting_of_ref": "indicator--9502ebb6-8222-4dbe-997f-e53cfbddbead", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89cd0fa-658f-4673-86a1-c1054aeadf1a", "sighting_of_ref": "indicator--f97c0206-a12f-4869-b24d-e800edbd0b5b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec76921-f399-4f85-8637-33fa552b8204", "sighting_of_ref": "indicator--f97c0206-a12f-4869-b24d-e800edbd0b5b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6603eee-0355-4b9b-a6a8-43ad0e72f81e", "sighting_of_ref": "indicator--077f28f3-3780-42b9-a787-785bd32399c5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67f4442-f579-4d8d-9143-be2b4cd71622", "sighting_of_ref": "indicator--3f115e25-2ac0-4147-bea2-26802517006f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a4c912-1cd7-429e-ab0c-24f747f89c1c", "sighting_of_ref": "indicator--3c7439e8-af1a-43bd-bff5-89d3c81208d4", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2380fa0d-2bc1-477f-b6ac-7eae6f0c1c9d", "sighting_of_ref": "indicator--3c7439e8-af1a-43bd-bff5-89d3c81208d4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9270e95-4757-41a8-9014-8fc183a3b790", "sighting_of_ref": "indicator--99594128-c775-40b1-a240-6ff4584debd1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05dceb8b-db96-4a18-a3db-f287081194b9", "sighting_of_ref": "indicator--5b5fb6f5-224e-49d6-84ca-52ad7f70ab52", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9cc7ba-aeba-45ae-b29f-7a8ec2e1ac81", "sighting_of_ref": "indicator--32ef5a35-47e5-42fd-a010-40e491f6a0be", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57a2dcc-180b-48b8-a378-e2703cd5dc98", "sighting_of_ref": "indicator--8878eb1c-241a-4671-a489-d3519fad97c8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0862210d-ac97-4d64-b883-de027b52566b", "sighting_of_ref": "indicator--4ddd1705-d92b-4e89-a6b6-dff89bd07e65", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ebdd49c-5f79-4f8b-9479-e8a778222a6b", "sighting_of_ref": "indicator--ec1c914d-c28f-4556-a812-8d68b8dcb2b2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd9f93b-df60-471e-9ab5-fb657ad7b7a0", "sighting_of_ref": "indicator--23564c51-09e0-48ce-8bc5-c07a790a0230", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378653e1-7e59-4877-823f-4f559be5ce0d", "sighting_of_ref": "indicator--88bcd5cc-b30d-49df-b8fd-a882f55c65da", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5558c19b-d8d9-49c9-ad59-9088992de3fa", "sighting_of_ref": "indicator--0973cbde-5327-4921-a648-a75a0283f24f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a153fd-e411-4f4e-ac3a-ed5e9a1a98d7", "sighting_of_ref": "indicator--2c5b65b0-c2e1-4956-91d9-19ca6de0fc4f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22327725-cc80-48bf-aded-561e91d6159f", "sighting_of_ref": "indicator--96a32f9c-ed6e-47d5-9548-6c197c06b7f5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0503d6-3e9d-47bc-9108-0e31b5997e29", "sighting_of_ref": "indicator--3bd06738-5173-4311-a80f-66c1fadfe314", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1abfde4f-5352-412a-b4c4-33cb95fe6aaa", "sighting_of_ref": "indicator--76f496ff-02f7-4dc6-a8e2-f11a74db6c8a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2a0d5c-4781-4b8f-bfd1-e712d92a8368", "sighting_of_ref": "indicator--af87f95c-e8c0-4cb1-9129-cbcb902f67a2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd23ac3-b4ff-45d6-bc2a-1c1e012cbd49", "sighting_of_ref": "indicator--9a0e69d3-2fdb-45c6-b9e0-777e4d3fa3bc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff258afc-3587-45f5-8e55-3b85d10af613", "sighting_of_ref": "indicator--33d31581-3136-43d0-9a76-4528b1591b6f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a79419e-9aad-4913-a98e-caa9bf4b8e10", "sighting_of_ref": "indicator--2917f25c-15b4-4f0d-ace9-2d231c5758e8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e930eb-1548-4fc1-bfcb-56d6cf0caa75", "sighting_of_ref": "indicator--c205fa8e-415c-43d2-87b6-e1641477e554", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970bc81f-6723-41d8-b9b2-190e2d277b21", "sighting_of_ref": "indicator--c205fa8e-415c-43d2-87b6-e1641477e554", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6892d505-60d5-4bd2-89e3-bb25b4ce8b4c", "sighting_of_ref": "indicator--141f1e6c-ceee-40aa-839e-8d0efce67e60", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117e76e8-9c8f-4a52-abfa-f77f1a16f7e6", "sighting_of_ref": "indicator--dc0186fa-f9ce-498c-9969-2e6fe67804be", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3898810-d267-419b-a2f7-dd45848b9cee", "sighting_of_ref": "indicator--a1deab4b-59d7-4a86-973c-b326965f15c6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8353a72f-922a-4403-8add-4a261c21dfc2", "sighting_of_ref": "indicator--8ad0cc93-079d-4b63-81f2-2b1c263efe12", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636f8229-b37d-4d43-af44-e495ae3b7528", "sighting_of_ref": "indicator--d7720ebf-7ead-4d3f-a9ce-c52bc78c4272", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a77d115-9816-4b89-8c40-5735527557eb", "sighting_of_ref": "indicator--006f3e52-f419-46af-9174-db1ec8063dc4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7a55c4-4d41-4193-9abf-bf40d0f57e7a", "sighting_of_ref": "indicator--0c2f589a-9fcd-4ada-bfa0-2a569971b3bf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d53dcf-4a72-44b5-8421-a4fa1856a880", "sighting_of_ref": "indicator--37767f2d-48d8-40c4-a6a0-d7f17c659191", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe47a32f-9ab9-4ec9-a056-5eae467413a0", "sighting_of_ref": "indicator--52c7c542-cfa0-479b-ae42-5bb495ae4e57", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b04a45d-608f-4c77-b4b4-e73932b1a989", "sighting_of_ref": "indicator--28e0ee71-47ed-4e0a-af65-2ef782d2d3aa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218e7e3c-5aeb-4b87-91fc-abdba3f467b2", "sighting_of_ref": "indicator--2a665e5b-874e-4213-a2b1-0334931523b1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80d0919-fa6c-4b1e-9508-dc3bc0fa74f9", "sighting_of_ref": "indicator--582d2955-be16-4ee7-b5b9-a44636717055", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91958053-b866-401c-ba06-7c763aa5b7e8", "sighting_of_ref": "indicator--582d2955-be16-4ee7-b5b9-a44636717055", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38fa7fa1-14ac-4610-a444-943934dca714", "sighting_of_ref": "indicator--582d2955-be16-4ee7-b5b9-a44636717055", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8976e00e-5d8a-4236-b6e3-cc21f693f235", "sighting_of_ref": "indicator--6ee8b5f9-f710-4499-b8e7-9cde810a2363", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60023c6-ef33-42a0-8eee-43950ab376ce", "sighting_of_ref": "indicator--d1a77e26-591a-4135-8f8e-95fa30fb2303", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa45edc-fa5c-473e-920b-ce0f9d6840ab", "sighting_of_ref": "indicator--4a60982f-50ed-4f26-a14f-5d8ce93e6e90", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c544f8b-4128-428f-b1e1-177799ac98fb", "sighting_of_ref": "indicator--934d6b57-08af-4d4f-ace0-2a3a9118e04c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6449e2ba-a399-4b4f-a385-55b340d8c86f", "sighting_of_ref": "indicator--da51c68c-0a70-4130-88e4-7049a9a422bb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ffd986f-6ab8-41b3-aaf3-a381fe352fbe", "sighting_of_ref": "indicator--8641a3f5-21ed-4ce0-a4dc-96a6d2646288", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a5eb9f-5a34-40b5-96df-a0a7a03ba428", "sighting_of_ref": "indicator--d1761b99-9799-4684-95fe-aaf1ffe484d3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b0bbd0-bca8-4816-8664-a48b6f19de1e", "sighting_of_ref": "indicator--d1761b99-9799-4684-95fe-aaf1ffe484d3", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6763150b-87ad-4f9e-97c7-98cc38a05dc1", "sighting_of_ref": "indicator--d1761b99-9799-4684-95fe-aaf1ffe484d3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b7a00c-2ec4-4c50-adec-e3c7857edb31", "sighting_of_ref": "indicator--d8c832bc-66c2-4831-afaf-3a1ff1149387", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9b7d08-5fcd-463f-865d-1a49d06ea451", "sighting_of_ref": "indicator--fdafb71e-e145-408b-b629-e10c1f1ff686", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a24fed-833e-4157-97cf-fa9267d19744", "sighting_of_ref": "indicator--fdafb71e-e145-408b-b629-e10c1f1ff686", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a3b353-fb9e-40bd-863f-f16568f357a7", "sighting_of_ref": "indicator--fdafb71e-e145-408b-b629-e10c1f1ff686", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89748594-1c8c-4a65-9079-7519046a985a", "sighting_of_ref": "indicator--2e840eb5-735c-49b0-8287-fe6960d482d1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681fb907-71ab-438b-b92e-1ebb1d6f4013", "sighting_of_ref": "indicator--f17389e4-b7ee-4b7c-8a86-a2a3cfd63e26", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53750293-487c-47be-be3d-e224aab34cb3", "sighting_of_ref": "indicator--bc8ce4fb-d020-4b79-b232-81281ee99a68", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448f464c-930f-44f0-bb14-56f9b2e64f90", "sighting_of_ref": "indicator--bc8ce4fb-d020-4b79-b232-81281ee99a68", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55222cd8-9810-41b4-87a8-a54f51cd50e4", "sighting_of_ref": "indicator--01cfb968-8796-4a62-af8f-1ac2141c8595", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0888fb56-a640-470d-9982-b559f6a35648", "sighting_of_ref": "indicator--ffa4fcb3-7970-4b95-96f4-bc1d7e389504", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c066ec1-8053-4c6c-bc3b-25e38010d1f0", "sighting_of_ref": "indicator--ffa4fcb3-7970-4b95-96f4-bc1d7e389504", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97cfbe73-eb74-4154-8335-4f0fee95038e", "sighting_of_ref": "indicator--ffa4fcb3-7970-4b95-96f4-bc1d7e389504", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3847f2f0-764a-4d4d-878e-0017f178ba54", "sighting_of_ref": "indicator--3af741bc-ee3b-463b-b767-3b772e00b936", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b49c82-2291-4422-9a66-1e373bf6da03", "sighting_of_ref": "indicator--c1377208-b2ef-40d8-8bf1-94f54b05e5af", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c36c84-0e93-4502-8fbb-2a07e4b354b4", "sighting_of_ref": "indicator--c7066f57-fb9d-4c4f-b638-52d56a238087", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c809d8f8-1dac-4990-9994-b189a88761c2", "sighting_of_ref": "indicator--c7066f57-fb9d-4c4f-b638-52d56a238087", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a42c8f3b-615d-4d8d-aa6d-68924ebbbff1", "sighting_of_ref": "indicator--c7066f57-fb9d-4c4f-b638-52d56a238087", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06463af9-a450-4e94-b48d-fbb0764263a9", "sighting_of_ref": "indicator--3e5bfaa1-a027-44b9-813e-b031d0ae5add", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbafc1e-61d4-4230-bb7a-d6b313d12aaa", "sighting_of_ref": "indicator--2d2a1ebb-dcc1-4e94-be57-9819a82ae6d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b64795-1c6f-4910-bae8-157cd203d665", "sighting_of_ref": "indicator--802a12ac-ff57-4bbf-aa50-19adfea0c2e5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06dc05e5-4e62-4cc1-8f5e-061e0ac0e358", "sighting_of_ref": "indicator--c7aad779-1fb7-4ae6-859c-94dc416803bc", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a551887-47ae-4b44-92b0-35c89b5cf81a", "sighting_of_ref": "indicator--590ce9db-1d71-4cac-a8de-5167fceb7181", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b51e11f-7ba7-4f1f-ba7f-8f671fb9ba45", "sighting_of_ref": "indicator--1a828d22-3cf2-4386-9fed-cbbfd0dc6d7f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df7c690-8494-4067-9073-5f34ccce68ce", "sighting_of_ref": "indicator--1a828d22-3cf2-4386-9fed-cbbfd0dc6d7f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7333eeb8-06a3-4c21-9806-4641b2d84b34", "sighting_of_ref": "indicator--e72efce6-fd6f-435f-bcf7-da80ad084c43", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a052da71-d0ab-483b-a766-277c36508adc", "sighting_of_ref": "indicator--4707a7c9-c0af-4b94-a4ad-c0e1a5e46e30", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5506c6-d47e-4f0a-8425-da3a1da6d5cb", "sighting_of_ref": "indicator--4707a7c9-c0af-4b94-a4ad-c0e1a5e46e30", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8083311-c073-4f15-99a6-d775a2541f5e", "sighting_of_ref": "indicator--fcd30a33-582f-4c95-8f16-cf0223450257", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb165936-ede8-472a-870b-82afaa3a5df9", "sighting_of_ref": "indicator--c2099997-1119-4aa4-9da3-8880507c7797", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06882f69-5007-4622-84c9-0ce6c38f13db", "sighting_of_ref": "indicator--8f0f2bd0-c4e6-43d7-87d0-7dff74e7d092", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9832141f-14dd-4dc4-947e-b1761af532ed", "sighting_of_ref": "indicator--42c98355-fd04-41cd-8e97-45e9eb46552a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf432ae3-af1c-4233-bbe4-8bb862d81633", "sighting_of_ref": "indicator--8f6071c9-7e3f-468a-86e3-9174f6a2b6eb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4d0387-11f6-4ad7-9a2e-8dc8ae7bfd0b", "sighting_of_ref": "indicator--8f6071c9-7e3f-468a-86e3-9174f6a2b6eb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed425d7a-151b-4865-8e9d-6f2d1bcff7ae", "sighting_of_ref": "indicator--ab97f2f8-2778-4b26-840f-8d32826a1c59", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36297a00-48c6-4997-b6bd-60570ee5456e", "sighting_of_ref": "indicator--610ee34a-d3b4-42bc-8af4-bf2a43c23df5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852e28b4-9022-464d-bb37-16429617c5b3", "sighting_of_ref": "indicator--01fe730b-6e6b-4621-8d1a-b5d0fd537017", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887da769-8614-43b3-b1f6-06931f362fe1", "sighting_of_ref": "indicator--2660d0c3-f307-4d28-b2b5-e25c2b66d919", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf260a11-c9ef-42a7-9e16-8c4dca2a1021", "sighting_of_ref": "indicator--6be8ef19-3318-47a2-8db0-5f446960d1ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8bcf41a-3523-4891-9de3-d6c58679ea20", "sighting_of_ref": "indicator--cb907abb-6b6f-4f1c-90a2-4c64c1519d65", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa20b6a8-b027-45ed-bc41-c8b647ca6624", "sighting_of_ref": "indicator--cb907abb-6b6f-4f1c-90a2-4c64c1519d65", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b319ca8-4de1-495f-bf94-ac00ab3aac19", "sighting_of_ref": "indicator--10c737b2-dd4e-47c1-9433-cf899a54bed1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073c6bad-380b-4b35-badb-f26006a78b6e", "sighting_of_ref": "indicator--10c737b2-dd4e-47c1-9433-cf899a54bed1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8faad4-227c-44f1-a47e-f25610708f79", "sighting_of_ref": "indicator--03f8c572-2898-4eb7-9a10-d546092f2fdf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719fd095-5584-4d57-ba9f-4d91653ddaeb", "sighting_of_ref": "indicator--f6e4a614-3b29-4bd7-a09e-053b2d927237", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ebe854-a7fa-496c-a3b8-1a27da428958", "sighting_of_ref": "indicator--f6e4a614-3b29-4bd7-a09e-053b2d927237", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65dc4d88-e607-4f5b-bd8a-9238ea51c360", "sighting_of_ref": "indicator--094f228c-88e7-4bd1-a6a1-ba66ea08350e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf690c6-79d7-409b-836c-41d9e42a1da2", "sighting_of_ref": "indicator--ec22bb70-ff89-4b7a-ac2a-204c05440fc9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64bce3ce-7a7e-4692-880d-2a5e5b59ef21", "sighting_of_ref": "indicator--ec22bb70-ff89-4b7a-ac2a-204c05440fc9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd77c8e-1872-43e6-8e8a-26ef7a3c5474", "sighting_of_ref": "indicator--25f0ca76-0d56-486a-ad7d-13cf1359db10", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58050dbc-f1c1-41e1-bf1d-24c885928c8a", "sighting_of_ref": "indicator--3373f4fd-9856-42b9-929b-e78faa74c5e8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a657f80c-be3f-40ec-82e6-0bef2e9cc60b", "sighting_of_ref": "indicator--e39e6c57-9cc4-4a88-a32c-2eaa964b4276", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88b6efb-64e9-4936-a708-102aa84d4eef", "sighting_of_ref": "indicator--84e7794c-d939-49ab-9e3c-63ce50965fb6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf50333e-d547-4fc4-9500-e73565355c8c", "sighting_of_ref": "indicator--a76dfaf7-0b75-4690-8a7b-3b1244900522", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4129373a-2cf9-4e01-b80f-1140034951e6", "sighting_of_ref": "indicator--29fe28b1-ad73-46d5-baad-a6f4416295c2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65b2cd07-4e6b-4622-98cb-21481e6ee0ef", "sighting_of_ref": "indicator--0a1ad645-42ce-4920-9271-182df4ccc360", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df8826e-e00a-48fc-ab21-e6a448f299bf", "sighting_of_ref": "indicator--7be48211-11c0-4aa0-b5d5-151a20785af5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e5672a-88d1-4a9f-884e-645cc2df3140", "sighting_of_ref": "indicator--4fc37187-83f8-4b40-a21e-c820598220be", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7186ad6c-e45f-4dad-b691-da4600746a1e", "sighting_of_ref": "indicator--c858791d-f531-4441-9085-e1d20d8ee91e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09665447-4037-41b8-97e8-931290e94212", "sighting_of_ref": "indicator--9fe8cca4-e93b-418d-9ccb-807aed38c180", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9400b835-1307-45cc-ac0d-068b907ac109", "sighting_of_ref": "indicator--06e8613a-8e09-4556-aa1e-eca189559054", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b14116-c55f-467c-8d39-1b0c271d1a42", "sighting_of_ref": "indicator--76cc421d-6438-4249-b047-c73016f779e2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ed281b-4179-41c4-b623-287f22cb9842", "sighting_of_ref": "indicator--84f9e402-7100-4d77-a174-826acade3dcc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4310526-1412-4c87-be93-d95dbb80be64", "sighting_of_ref": "indicator--84f9e402-7100-4d77-a174-826acade3dcc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85744522-05cc-43e4-a520-c5ec75d469e9", "sighting_of_ref": "indicator--496f1fa2-acee-46b6-96d4-828493a6fd68", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28853ffb-b64e-4939-a0ce-091c00675865", "sighting_of_ref": "indicator--4aa0a2a1-add8-4c95-979a-92455bfe85ed", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--facc2ed3-ed80-44ad-8112-2ce693587b28", "sighting_of_ref": "indicator--50a44459-6b32-4fa3-b2d5-0c75e54c2a1b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c467f8c-d6c5-4c93-b311-82092d1da587", "sighting_of_ref": "indicator--50a44459-6b32-4fa3-b2d5-0c75e54c2a1b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea33efae-8d5f-42d7-94d1-7d29319935d7", "sighting_of_ref": "indicator--f2bbd88e-92e9-423f-9c85-139638130196", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0158d3a-8c58-4051-a8be-3bab9a532150", "sighting_of_ref": "indicator--9d8b5441-1379-43c6-9c98-c053b219ac17", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f3a4d5a-5981-483c-98f7-990fab0ece83", "sighting_of_ref": "indicator--aff660f4-7ec8-44c8-9b17-0aec019a45a7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863f1d14-e12d-4e36-88c1-ac86288c30cd", "sighting_of_ref": "indicator--6fca9909-277b-4343-bcb4-4d37d0492f1f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c0ec98-28a8-4b33-8971-4c4ccb8d016a", "sighting_of_ref": "indicator--6fca9909-277b-4343-bcb4-4d37d0492f1f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8c846d-4488-459f-9541-8268d1a21910", "sighting_of_ref": "indicator--f7d64aa4-b922-42c5-9ef9-d9204f61933a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3297d067-5967-4ec1-93c0-0ae799da07d4", "sighting_of_ref": "indicator--de94478d-50f8-46bf-904f-ec7bfb454cc5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64a1027-e600-4d32-a163-9e0267ee5ef9", "sighting_of_ref": "indicator--c9babead-0a38-4b52-941a-569f9816da75", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4332bd-6339-4c43-bdd6-aeaa46daa290", "sighting_of_ref": "indicator--c9babead-0a38-4b52-941a-569f9816da75", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05807cdd-9a37-48b3-9367-2df1ea6038bc", "sighting_of_ref": "indicator--0db17a04-82a4-4f1c-af0b-77eed120022f", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78a80ed-872b-448d-8565-062158f09d55", "sighting_of_ref": "indicator--0db17a04-82a4-4f1c-af0b-77eed120022f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f51ef96-2360-49a8-99a6-d8af419ad149", "sighting_of_ref": "indicator--9ec2554a-68c5-486f-a33a-ba0a048a29c1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c4c5bd-bcf6-4c1f-97fb-ed93a83f546f", "sighting_of_ref": "indicator--d1bc2ed0-87f3-4cf2-9cf3-22e5595beeaf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7e3489-5ae9-42c0-b7c6-ab3712c5675b", "sighting_of_ref": "indicator--621bae67-f93b-4ab5-8255-7e02a2e55f19", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0726ffc-fa83-4407-95a5-8df3e7e0b256", "sighting_of_ref": "indicator--31bcbdec-438b-4c84-b0ab-3c5a083217dc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ce6a84-e6cd-4148-8b93-3574d8ecdb16", "sighting_of_ref": "indicator--6e22ebd9-8127-44b1-9bea-fe6dd1e84a77", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b152eb-6cf1-4e82-97dc-fb1bc03c4cde", "sighting_of_ref": "indicator--27e0b781-22e1-45a2-850b-5237b97dbf93", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cccad1c4-81cb-43df-b05f-e81242042578", "sighting_of_ref": "indicator--6455958e-ab2d-4216-b4bb-b3de623888b4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e24f9c3-ba3f-43f5-a849-2da40cf99a43", "sighting_of_ref": "indicator--6455958e-ab2d-4216-b4bb-b3de623888b4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38396461-bd1d-408c-84f6-67e94a05672f", "sighting_of_ref": "indicator--aefa50fe-0480-4eec-9a1a-bc9f62dc1812", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cea495e-ccfe-45df-b83e-ce44b5b5499a", "sighting_of_ref": "indicator--6a7ed645-5806-4652-9de5-6a8ebe7a7d14", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e52c81d-0a5b-4824-88c1-7fdd40ed3345", "sighting_of_ref": "indicator--6a7ed645-5806-4652-9de5-6a8ebe7a7d14", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6460216b-63d9-430a-a37c-526296a17a15", "sighting_of_ref": "indicator--830db814-7d6c-4c4b-a64f-fe74d7439524", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6b66ee-4368-4caa-8c7d-716af8fe959b", "sighting_of_ref": "indicator--10685d78-5efe-49e0-9178-6d8c3966e9e8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba07595-94a4-4dc6-a970-bef56356ce8a", "sighting_of_ref": "indicator--29836311-ed3c-4071-93b4-215aeda0d43c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2c63b5-6119-4e2f-a4d9-ca6c032cc9f1", "sighting_of_ref": "indicator--29836311-ed3c-4071-93b4-215aeda0d43c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da38de6-b597-411f-91d1-c1762d7567f1", "sighting_of_ref": "indicator--5604bf83-fea3-4965-b2f8-17cdaf70f94b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02ba4b8-79fd-4a84-9b64-e08d6ef7ca21", "sighting_of_ref": "indicator--41fb8b09-ed02-4606-a405-b4cd111aaf9b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b881bf6d-e556-42ef-b8fe-5e93f12d994f", "sighting_of_ref": "indicator--cc0be1db-496d-45d2-b033-f8f28f24b425", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6626ab-1c2e-455f-9933-31e22ea525ae", "sighting_of_ref": "indicator--50720427-2202-40db-a500-315771941a9a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c248e421-3919-478d-8442-a9dc927eb50a", "sighting_of_ref": "indicator--8ce9575d-7da0-4d64-9f42-1f83e9992633", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19daba72-0edc-48a1-95e1-3ec4f5ad58ee", "sighting_of_ref": "indicator--8ce9575d-7da0-4d64-9f42-1f83e9992633", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6665a0bd-3a23-4276-b766-4f473668e124", "sighting_of_ref": "indicator--67d4d53a-ff0a-49d0-b67b-f18f1faed53c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa00a28-41d2-4782-ada8-e95f8f7e9f5d", "sighting_of_ref": "indicator--67d4d53a-ff0a-49d0-b67b-f18f1faed53c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9566c9-7d32-4d78-beb0-733417ff0948", "sighting_of_ref": "indicator--a46b995e-1cd9-49b0-8e0c-8b6a975d978c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369d94d8-f868-4748-8f91-fcc72639a224", "sighting_of_ref": "indicator--738d63cb-5b66-4b57-aedd-b6e350d5f253", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a64d91-1d21-4fd3-9b8b-62f56c1a0393", "sighting_of_ref": "indicator--de1be7a2-88fd-489f-a456-6105fc47263c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57977fbd-0eb4-4f2d-9fa7-42132c438ad5", "sighting_of_ref": "indicator--670a572e-16a9-4e99-93df-1f2b8215a749", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ddfa1af-d32f-4075-9c24-5c466dc397c7", "sighting_of_ref": "indicator--f872a462-dab0-4476-a475-ffdcb406a166", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ba5e93-54b1-4df0-92f9-29974fce4037", "sighting_of_ref": "indicator--371e6afd-35c0-480d-a51d-e35564fbbcdb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490cb9ec-07d2-4530-8154-2dcc1ddeee97", "sighting_of_ref": "indicator--371e6afd-35c0-480d-a51d-e35564fbbcdb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9c6b7c-51f0-4bd8-a1ab-eb7bb899fa35", "sighting_of_ref": "indicator--a292de98-04c6-4250-9616-948531816d7f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8dfe9b9-ee30-4f3a-b452-5335e8b36722", "sighting_of_ref": "indicator--ab2c2984-ee5d-4540-9c77-8dbe5e64bb8b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5368bdfd-f28a-48f8-9230-d605c921355e", "sighting_of_ref": "indicator--38eb019a-719c-4137-9799-c74e0021eadd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78defc4c-deaf-4ba7-96e6-a88e85e096d5", "sighting_of_ref": "indicator--947a5c47-c226-4989-addf-1597360ebead", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac19719-cd72-486c-96e4-421a7c4ddf28", "sighting_of_ref": "indicator--947a5c47-c226-4989-addf-1597360ebead", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10db07e6-4cdd-47d7-a466-dcded943db9d", "sighting_of_ref": "indicator--1197e879-3033-490a-857c-2184f8b26346", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5e0228-9456-4c20-b04f-96c3237409fb", "sighting_of_ref": "indicator--c4b22ee4-9976-4793-9176-10c4b719798a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61afb10f-1be3-419d-b131-8c9e3d27b086", "sighting_of_ref": "indicator--506e8975-1b89-4f8a-beec-db812f56700c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8bd4e1-21c1-4d30-ae6a-9779f49e83a8", "sighting_of_ref": "indicator--506e8975-1b89-4f8a-beec-db812f56700c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98849af7-4297-47b2-b72f-1b58dc969493", "sighting_of_ref": "indicator--336b422d-0eeb-45f1-95e3-da8c52fac474", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46bc5c57-1cd2-4605-850f-86ec2d5a70ec", "sighting_of_ref": "indicator--336b422d-0eeb-45f1-95e3-da8c52fac474", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e51a23c-c0d7-4521-82e2-5d1c3e3181e5", "sighting_of_ref": "indicator--6f478932-ab50-4a05-8634-ca983720c6c0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec35b06-e619-4ca1-a2db-d239bbf99312", "sighting_of_ref": "indicator--30c730f0-e148-4bbc-a17c-1692f62fb4d2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd3c688f-5544-41a6-b4e7-064e952a06c7", "sighting_of_ref": "indicator--30c730f0-e148-4bbc-a17c-1692f62fb4d2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47803261-5781-4635-8a77-d038a25d3add", "sighting_of_ref": "indicator--5d802f7f-bfde-47a7-aec8-e5e8e26ca7a9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b279746-248c-45a5-844e-1a8c2de1af0b", "sighting_of_ref": "indicator--c4346ab8-3b3b-4c95-b11c-d479128f6735", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c307352-fdc7-49dc-9335-a77bd55028d0", "sighting_of_ref": "indicator--dec79224-f904-47e4-bcd2-01f0ddbe233c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0128cd-aa5a-4e6b-ae06-cb46dc1847e6", "sighting_of_ref": "indicator--42174a00-d6e0-4e93-bab6-b268032255d8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ee456d-438c-476b-8e55-e20e836fb09d", "sighting_of_ref": "indicator--279a8cfa-b853-4c21-bc84-34bd68993e76", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c8d6125-f281-41e3-8768-c16161453fa8", "sighting_of_ref": "indicator--8858a76b-daf3-49a1-941a-87b7b27df205", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf3d6e2-118d-4921-90e1-4c561537a204", "sighting_of_ref": "indicator--abf000eb-5b58-4bb8-af53-ef0f09d38d23", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92fe3f90-9683-4ad0-9f32-ab8cc126650d", "sighting_of_ref": "indicator--abf000eb-5b58-4bb8-af53-ef0f09d38d23", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d63d02-1094-4b44-86eb-4be8ba254a50", "sighting_of_ref": "indicator--60a8be5e-8eca-4b64-b08f-59a38e3a516b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725fa173-56d2-4b97-945b-a6ec0e8fc1fd", "sighting_of_ref": "indicator--e91f8f92-3942-4cce-98db-744ed7b2a4e9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67093625-09a3-4a67-81ec-0d71403f89dc", "sighting_of_ref": "indicator--e91f8f92-3942-4cce-98db-744ed7b2a4e9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ad8718-7f81-448a-908f-9c07284ccba2", "sighting_of_ref": "indicator--8b4941f8-9d11-4cd2-b78b-ab8b2c3ce09f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9938f20a-80c7-4d5f-a341-7755dca468c5", "sighting_of_ref": "indicator--db30ceab-111a-45fb-a037-97e3084dd0c2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949877df-7787-4db3-8f5b-d0e9a6aaa4c2", "sighting_of_ref": "indicator--db30ceab-111a-45fb-a037-97e3084dd0c2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba7dd51-0e0c-48c5-afc2-69fd43e5706d", "sighting_of_ref": "indicator--53768337-14ef-4038-871d-57b6ed8c4c4a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd4037e4-3a74-47bd-9b90-2cf77360d602", "sighting_of_ref": "indicator--11491229-49d1-4e91-9173-54f023f790ea", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff625823-48db-4eb5-b4dc-fb44e478cd61", "sighting_of_ref": "indicator--11491229-49d1-4e91-9173-54f023f790ea", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff150e2d-f13b-4a67-bf17-39b10bae3b3d", "sighting_of_ref": "indicator--945ac44f-c90b-4bea-940e-bf2f8939d0a5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575964fb-3d93-45c5-a802-b7929c20115a", "sighting_of_ref": "indicator--945ac44f-c90b-4bea-940e-bf2f8939d0a5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ffdcce-6fa5-40e8-bf8c-609127115ef9", "sighting_of_ref": "indicator--c82b33b6-2f1d-4616-afdb-e71234da8bbb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f47cd6-506b-4932-89f6-b990d81ef251", "sighting_of_ref": "indicator--c82b33b6-2f1d-4616-afdb-e71234da8bbb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b5ea81-72ef-46be-a2f7-a54d26713674", "sighting_of_ref": "indicator--87142024-886a-4c70-851f-f0f2a2fd26e2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d15661-417f-4a6a-a5d4-8cac99b33aee", "sighting_of_ref": "indicator--87142024-886a-4c70-851f-f0f2a2fd26e2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453a5b75-04dd-4b61-8bb5-2bd997f32f49", "sighting_of_ref": "indicator--1cc590fd-4f50-416f-a107-49d61c3dc82c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e982ab-ca5e-4b92-9c18-907ca0220f9e", "sighting_of_ref": "indicator--8ade599e-cdd0-4c2a-aaa0-0bb0e35cb106", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771b2ecb-9951-45dd-a5a6-bdd18d42868c", "sighting_of_ref": "indicator--8ade599e-cdd0-4c2a-aaa0-0bb0e35cb106", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77968db0-e0a0-49cd-8e9e-839ac3719a9f", "sighting_of_ref": "indicator--b4f69f1c-07fc-4ee9-bb8a-e94c822b41df", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774e495d-9599-4ac3-a71e-9f2de12ec3b8", "sighting_of_ref": "indicator--532e68a7-8d5b-4ca1-9620-c2e8fa30d674", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e648e0c-11d2-4088-b767-bb8073831b29", "sighting_of_ref": "indicator--532e68a7-8d5b-4ca1-9620-c2e8fa30d674", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659bbef1-29ab-4b6f-90d3-6d291093b8ca", "sighting_of_ref": "indicator--04c26278-4cb8-4773-b4db-2dd48a791ee2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5368968e-0e6c-4651-bfcb-e4acfdc9d0ff", "sighting_of_ref": "indicator--c91ac68f-8839-4526-8204-4824f4fbe2b8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f288d823-e9cd-4355-be6e-d20df6c4aeb9", "sighting_of_ref": "indicator--c91ac68f-8839-4526-8204-4824f4fbe2b8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998d6d9c-4d57-45c3-852e-109cdfefb1cb", "sighting_of_ref": "indicator--6b310576-7f0d-4024-8ae5-1ea04582573b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39f253b-4611-4e56-a71e-231db457b447", "sighting_of_ref": "indicator--484f4310-cb87-44ae-93c5-738116078311", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13702821-fc52-4e53-aa7a-0ed8da4c8cb5", "sighting_of_ref": "indicator--484f4310-cb87-44ae-93c5-738116078311", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abba4e42-b75a-40c1-8b00-884c10db9206", "sighting_of_ref": "indicator--97cf8ff6-2292-45af-9076-6455682eece0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf7f294-462e-4655-b52f-c0f0011a84a0", "sighting_of_ref": "indicator--97cf8ff6-2292-45af-9076-6455682eece0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad45e451-18f2-445d-88e4-f5055a36e57e", "sighting_of_ref": "indicator--897288db-afb9-4a10-8aa1-4b63ad5dbfc8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b6504e-9029-4dd4-97df-978985765bd4", "sighting_of_ref": "indicator--87d414f4-a007-42e6-a45e-b5cab8e1f4a3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eee0d3e-0eed-4c98-98a9-bf56a600f375", "sighting_of_ref": "indicator--87d414f4-a007-42e6-a45e-b5cab8e1f4a3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ab11b5-ebcf-45d7-abe9-2bd16e95e61a", "sighting_of_ref": "indicator--c44010a6-f2e8-431c-9e73-9af2ed5353f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7213ca7-9e74-4e64-aeba-26f81b250836", "sighting_of_ref": "indicator--c44010a6-f2e8-431c-9e73-9af2ed5353f4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e842b8-59d3-4e91-8010-3080c39b72f7", "sighting_of_ref": "indicator--bb43b535-b9ef-4494-83bb-e3a548372f2c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa317e72-048f-45eb-8aba-2d6fce476d3b", "sighting_of_ref": "indicator--44522547-a307-4373-aee7-642060546ed7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37bc7ee-bf57-4917-b80f-52c144ecedc1", "sighting_of_ref": "indicator--095d148d-e3a4-48ae-b45a-047d5f4ffa1e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be56947-8691-4cba-ab82-482b6e65aed4", "sighting_of_ref": "indicator--c960743f-89af-427f-a46a-43fb264f7535", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1405364-bc3c-4cc1-8611-d1cce180e39e", "sighting_of_ref": "indicator--7fe00e23-4bb6-495a-b0d3-39a0987453ca", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8fa477a-603f-42bb-8413-d24abeaf67e0", "sighting_of_ref": "indicator--a18782f2-960c-4f18-835e-9d612a700b5d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43a9adf-1850-4baf-a00d-9dd69235c5d8", "sighting_of_ref": "indicator--0e930828-b6ac-42bd-8de1-fef8523f1b5e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b219d6e5-c7fa-4643-848c-3994d4d4dd53", "sighting_of_ref": "indicator--31ed0ec0-ecb2-4563-9e74-247c9de85652", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eab1eca-e730-4c73-9497-fe55435dc87b", "sighting_of_ref": "indicator--f14863f8-2829-410a-ad2f-fe86f333665c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7821e925-be1a-4ff8-9905-edee17fb6117", "sighting_of_ref": "indicator--f14863f8-2829-410a-ad2f-fe86f333665c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f71db3-7cfd-4a8a-a9d9-55d93ea4fcc2", "sighting_of_ref": "indicator--947a2e30-f63f-46a5-ad23-0a7e1f31e295", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f896e9-dc2a-4115-9e53-263d9a46aa18", "sighting_of_ref": "indicator--7e034ea5-9ae5-42a3-a3e5-191c636e14e5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69051fe-324f-4c4a-9cce-6ec98bca889f", "sighting_of_ref": "indicator--2a504169-a78b-4f71-a448-2304b738903d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b17d95-29a5-4157-8a2b-6a0e6a80758f", "sighting_of_ref": "indicator--2a504169-a78b-4f71-a448-2304b738903d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8f2ac6-6885-48d3-89f9-57f42163aaa9", "sighting_of_ref": "indicator--ece51596-0de5-4a72-b1f9-9d51a4486ef6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371e86ee-6df5-467a-b1c0-b5b7f85aea81", "sighting_of_ref": "indicator--ece51596-0de5-4a72-b1f9-9d51a4486ef6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab470ad2-fd30-44a8-b0c2-1c376b286b91", "sighting_of_ref": "indicator--2c0ae5d3-15ce-4e78-ba32-895abdbef90b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870dd662-2bbc-49fb-8339-d20faed1eb9f", "sighting_of_ref": "indicator--f3b47a87-3972-4f24-b248-2a0a56245909", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189f0aad-cb0a-4b92-b6a9-bb3262395618", "sighting_of_ref": "indicator--9116b177-9f47-4aa9-95c6-118e35381222", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71dd8060-1ed9-406d-96f0-a3e90a2268b4", "sighting_of_ref": "indicator--9116b177-9f47-4aa9-95c6-118e35381222", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6f8f21-076e-43f3-9162-c795caa7dc58", "sighting_of_ref": "indicator--593fa358-ad5a-467c-b0d0-fb19e472a19e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39893ab-098f-4ca3-ae3a-58d553667d68", "sighting_of_ref": "indicator--38c8bd7c-a2e1-43db-8ad1-53e6d8b71f0d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a177d5c-6872-411c-9949-e271680e6abf", "sighting_of_ref": "indicator--38c8bd7c-a2e1-43db-8ad1-53e6d8b71f0d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379dc6ba-e03d-43c4-bac4-3aa6e23b3fd8", "sighting_of_ref": "indicator--624ab2be-7b48-480f-9016-527bc9cbff4b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27425328-7dae-439e-bebb-43d3839d8ba3", "sighting_of_ref": "indicator--624ab2be-7b48-480f-9016-527bc9cbff4b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08834e0a-b83e-4281-9a2d-5d0b655d6982", "sighting_of_ref": "indicator--68d772a4-e915-4bb3-845c-c8bb531d21e3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9085cb31-b7b5-4544-b320-37869a45bd66", "sighting_of_ref": "indicator--ca7cbcab-486b-47a9-8a74-33b313379ffa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c3d48c-78dc-4dc9-a0a4-4aa0f57d772c", "sighting_of_ref": "indicator--ca7cbcab-486b-47a9-8a74-33b313379ffa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468533da-84b1-4bad-9b19-d7ea05047bab", "sighting_of_ref": "indicator--8b2eb993-813f-41a0-a55b-590750f90fd7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c09aece-2743-42c0-8da1-5c168554cbf8", "sighting_of_ref": "indicator--8b2eb993-813f-41a0-a55b-590750f90fd7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4043546e-820b-4222-a706-e303d2165759", "sighting_of_ref": "indicator--eb8e82d8-7950-4d8c-a0c3-a07cc09e60d7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab57ea2b-c749-4f92-8f0e-0c8dc6a73e01", "sighting_of_ref": "indicator--e281fb00-8778-4b26-b5ae-4310ba371ea8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6f74eb-a66a-445d-89bf-e038396ecfca", "sighting_of_ref": "indicator--e281fb00-8778-4b26-b5ae-4310ba371ea8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a854192-dd43-4a85-a211-d2da10b7f2fb", "sighting_of_ref": "indicator--e281fb00-8778-4b26-b5ae-4310ba371ea8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d16b300-6988-4c0d-9186-e7f0bee58a0f", "sighting_of_ref": "indicator--a3cfce82-858f-4ab9-9de3-1b8bbdbfeb0d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c827d2a-4f76-405a-811c-d40f8db79bdb", "sighting_of_ref": "indicator--95a86926-fdc1-42db-919a-90299cbd7c8a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bfb79b1-818d-4dc1-a20c-32b52100f5b3", "sighting_of_ref": "indicator--9bf26d77-8518-46a1-969d-3a4c4d377420", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3f6809-e4b7-4e3f-8f98-014073c94d90", "sighting_of_ref": "indicator--9bf26d77-8518-46a1-969d-3a4c4d377420", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7dc448-e87f-425d-95eb-977879a033b6", "sighting_of_ref": "indicator--e8b4fe06-7e45-4d4d-b3f7-4ec85b4f15ac", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82469119-6090-421d-b232-f1dc69d4fb6b", "sighting_of_ref": "indicator--73a8d11c-60f8-4a5e-a598-8a0b44c439cc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea215141-cbb0-4602-8a53-40d9b1e15be6", "sighting_of_ref": "indicator--2590d963-4146-4cd9-8a44-98214a80ce56", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e269827d-3909-4268-a6e6-bb2b7c00b254", "sighting_of_ref": "indicator--c9454277-f85c-46eb-9af2-956e6e945e57", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e499752-0971-4cc9-990a-abc912988cd8", "sighting_of_ref": "indicator--c9454277-f85c-46eb-9af2-956e6e945e57", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45de32fd-178a-40d6-9d58-c8d793d90506", "sighting_of_ref": "indicator--fb5b4df7-52b8-42d3-accb-597a03169c06", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5800d65-5f27-4c65-9f18-c4c898c66f1d", "sighting_of_ref": "indicator--fb5b4df7-52b8-42d3-accb-597a03169c06", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267c871d-73c3-4b1a-873b-ee00c23e4891", "sighting_of_ref": "indicator--3e483244-9fa1-4bd5-9bf1-2f829afed6bd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a216b8-2af9-4468-8f35-b4d37498ea7b", "sighting_of_ref": "indicator--404c3aeb-dd43-4c47-b331-7589bda1ef75", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de8c8c2-34c2-4f6d-829a-a7dda8d291cf", "sighting_of_ref": "indicator--404c3aeb-dd43-4c47-b331-7589bda1ef75", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c848dc-acf9-4f0c-897e-bf107ed639c7", "sighting_of_ref": "indicator--bf0786a2-56fe-42be-ad50-89dfdf6edd49", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38c37e7-0653-4292-9d3e-70b376013e18", "sighting_of_ref": "indicator--4d5f5184-1ae6-4b70-81f7-75a3234dfe08", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f3b944-97c5-42a5-a835-2e46ca452e30", "sighting_of_ref": "indicator--4d5f5184-1ae6-4b70-81f7-75a3234dfe08", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ffda905-5611-4387-b699-2ab4076ffb39", "sighting_of_ref": "indicator--bc771a5c-a8f6-4cef-aa35-3978c4d519c3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4811ca7e-63ac-40f4-9d12-2c39a1696cb5", "sighting_of_ref": "indicator--ac201e6e-618a-424d-be03-d262d5994297", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--845d7759-b3fa-4560-bc7e-88c6dbfd742d", "sighting_of_ref": "indicator--ac201e6e-618a-424d-be03-d262d5994297", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0fbf68-f5f3-44ca-be87-b52dda59728a", "sighting_of_ref": "indicator--2be7376d-6d62-4e60-9fc8-c4109ccf3ab5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ecf37c-aaaa-4bb5-80a5-5cb9f6afba5e", "sighting_of_ref": "indicator--b2b174e2-b3ba-4f0e-bdda-a20f321b54ff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5965a324-573d-480b-83f4-155e55048d8b", "sighting_of_ref": "indicator--8c6fe8a8-82d0-4847-a49e-c1018a4b21cf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb2e5a8-a4bc-489c-b815-43a82afd2aa8", "sighting_of_ref": "indicator--46de3d3d-cba9-4858-87bd-07cc7e76c6eb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5c527f-58ab-4bf8-9f46-30d7e00d599d", "sighting_of_ref": "indicator--46de3d3d-cba9-4858-87bd-07cc7e76c6eb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b535df7-cf77-46cd-84f6-cc46aa12be15", "sighting_of_ref": "indicator--b75acd49-ba77-47d7-a345-40b848b305ed", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe873f4a-94fc-44ec-ab28-5e8fe728a393", "sighting_of_ref": "indicator--b75acd49-ba77-47d7-a345-40b848b305ed", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85972884-ac47-45d3-8a6e-1c293a9cc067", "sighting_of_ref": "indicator--6c1c32ad-4af8-4e9b-b301-c16cb96b39fe", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d5c4478-b028-4b24-905f-9b1b67b7c95f", "sighting_of_ref": "indicator--6c1c32ad-4af8-4e9b-b301-c16cb96b39fe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad02bcc9-241b-4ec1-afe7-23284e9e07b9", "sighting_of_ref": "indicator--637b29bf-2086-45c4-a5ac-4697b6520f54", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b48b1de-8ab5-44b9-ae2b-7bcc9e9e617d", "sighting_of_ref": "indicator--637b29bf-2086-45c4-a5ac-4697b6520f54", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae71fe40-ddec-4dc4-b366-6a71a905658b", "sighting_of_ref": "indicator--1c1b8b80-18d2-4b94-9589-c4bba78ea772", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f2c728-839a-44fe-84b3-114eebd9f001", "sighting_of_ref": "indicator--1c1b8b80-18d2-4b94-9589-c4bba78ea772", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277e29a4-47ed-4670-a9c0-645b5e04d559", "sighting_of_ref": "indicator--7892ef51-5ed7-41ea-81c2-5f8b23f9aaa0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5183346b-cf15-4542-9c86-392e413a30f5", "sighting_of_ref": "indicator--bed1c751-ae95-4fb8-a965-12defbadc60a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6cef4b0-36cc-43f9-833a-eab8f7ce9a49", "sighting_of_ref": "indicator--726f34b2-d983-4766-9bc9-30d02182f205", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d370a131-4e5b-45f8-963a-478fa6cb1d7b", "sighting_of_ref": "indicator--684a9871-64c6-456d-baec-f66664f87083", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98bcf92-3147-4f28-9cbf-aa4b9c728bf6", "sighting_of_ref": "indicator--add1cc7b-f9ff-45a3-9908-f3ffe074b3b3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22de31f4-f74f-471f-97a2-62f17ad35ce3", "sighting_of_ref": "indicator--d409567d-e73a-410d-b3fc-6daedc2b6a79", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5d063a-9087-4835-9620-ba66f2083560", "sighting_of_ref": "indicator--6574b044-65f6-4327-be89-73fc7485d9fd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf12a64-6a87-40db-9c4e-b5b016301bde", "sighting_of_ref": "indicator--80ad2931-1b3d-4dc6-886a-76c21b9ec809", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68119216-36b1-4599-910b-e2913dce8fab", "sighting_of_ref": "indicator--bd59aa0b-faaa-4a19-a533-9cc3ae53a21f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eacb5997-e870-4b3a-b2d5-350fd84ae824", "sighting_of_ref": "indicator--bb2b8dbc-b60e-4e9c-8635-63537188af97", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07816de8-7b4b-415a-96aa-54ce1a0d9707", "sighting_of_ref": "indicator--8a8d2e85-89af-460c-90e6-a5a055b9e460", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f83d870-3324-4149-937a-94d53084cca6", "sighting_of_ref": "indicator--f67f0bec-3cc5-4950-83b5-d46907531c4f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87864cfc-d724-4bae-b992-38780fed1f43", "sighting_of_ref": "indicator--eb15e70a-3831-48ef-85b1-7eaa79811f36", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3502faa-619c-4ff8-b169-29622b9b2735", "sighting_of_ref": "indicator--7a44e886-246c-4d0c-af80-16e5db7c38ea", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef84ad9-d103-49c3-8d96-dec833959ce2", "sighting_of_ref": "indicator--ff8a37c8-ebbd-4f3d-bbe4-d4b7d22a68d4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34947164-51ec-4f00-ba9d-6347d9eff2fd", "sighting_of_ref": "indicator--f255bd4a-d59d-459e-aac0-f99a4f75eef0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c54cd25f-86b8-4572-92fb-152af00be3ca", "sighting_of_ref": "indicator--333fdf10-686b-4d95-be29-1ee2284d4d73", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06bb2e76-83d8-45d8-8b1c-473ffeccb561", "sighting_of_ref": "indicator--907d464b-3908-4f1e-baea-390f930d5c8a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2921605e-1b20-418a-adfc-f14a5b16be96", "sighting_of_ref": "indicator--973f20c5-0fed-4dd0-9a75-0c6caa48a8c4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f411b4ef-c730-4496-9755-675a4cab7da0", "sighting_of_ref": "indicator--34e672f9-ef62-4b59-b490-f4f9ae874e03", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7a0ccb-f1d4-4b3f-a3e3-f28bc41e9c93", "sighting_of_ref": "indicator--37e40c5d-b5b3-4481-a767-13be77524a40", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a34084-037a-40d5-a699-6be48ad6ae54", "sighting_of_ref": "indicator--37e40c5d-b5b3-4481-a767-13be77524a40", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97630c7-61e2-41e1-a46d-0a3e2cd62bc7", "sighting_of_ref": "indicator--5c3861cf-3122-40b7-99fc-20a96d204b1c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d490541-5b79-4aea-8ab6-c78c33ab6cd2", "sighting_of_ref": "indicator--5c3861cf-3122-40b7-99fc-20a96d204b1c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09ab00c-91a9-4efb-ac97-1ba7d195b251", "sighting_of_ref": "indicator--975690d9-d2d1-4198-81fa-e5cf25cfae0a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537f7044-d35a-4bda-a78d-e2bc8aa2d1e5", "sighting_of_ref": "indicator--975690d9-d2d1-4198-81fa-e5cf25cfae0a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2adbb303-0d32-4815-8cb7-638d3786d78d", "sighting_of_ref": "indicator--f9fb1905-f472-4a7b-8316-f3e497b768ec", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ddc1ce-d54c-444c-8897-20afa51b14be", "sighting_of_ref": "indicator--53ff4051-7c12-4350-bdc3-db9cb4cc46c0", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70cf16cf-8d1f-4e54-9ad2-0548444c5fc3", "sighting_of_ref": "indicator--f4cdde1a-9245-42f5-9aed-e3d3f431a299", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf3e443-d057-4b0e-a04d-00425d705a67", "sighting_of_ref": "indicator--78ab8bef-6480-43cd-be3e-a2fe08cb2eb3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6365efc-1fae-4a3a-ab2e-62a588561aa5", "sighting_of_ref": "indicator--87962e62-7b28-41a6-947e-74e84935e251", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a147e9-cc3a-4a8f-a04d-00a2421f4f11", "sighting_of_ref": "indicator--0318d467-37e4-40e8-8752-2b264e4d4c3c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f30993-733c-4e87-b2a8-3c1754aea745", "sighting_of_ref": "indicator--08f493ea-f621-450f-9e95-51b68e154143", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf8868e-b90b-450d-b1ad-3388c3f2efc1", "sighting_of_ref": "indicator--d2782aad-a840-4a2a-809d-fc5534eac4bc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3404c163-e8e4-4062-b9f3-ffecd33b9f5a", "sighting_of_ref": "indicator--deb9da9e-a7ca-432a-949f-3de3d1059817", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8961865c-30c7-4800-ab4b-7878d22bb067", "sighting_of_ref": "indicator--deb9da9e-a7ca-432a-949f-3de3d1059817", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71854c14-bc47-451d-ab3a-d4e816200edd", "sighting_of_ref": "indicator--d21b8e1e-91a6-4c1d-b27f-63683884529d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36714fd-6b55-4b86-9808-e0bb17c091f8", "sighting_of_ref": "indicator--689288ff-ed82-43fa-8fe0-6d726ccdf11c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1797f06-7e99-42c4-9134-ead9d0927559", "sighting_of_ref": "indicator--689288ff-ed82-43fa-8fe0-6d726ccdf11c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f5c2ee-d7a6-4fe8-b14c-4494b480f89e", "sighting_of_ref": "indicator--f1906346-a86b-4c2e-80d6-f663fb799752", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4b0c6d-52dd-4462-9b3d-bb0d5c06eb4f", "sighting_of_ref": "indicator--f1906346-a86b-4c2e-80d6-f663fb799752", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a224d0-e705-42f4-809a-1d4c0dfae694", "sighting_of_ref": "indicator--11a51996-48e8-4dcf-9c13-b2aa33a2488b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1693d26e-2375-47d9-82bb-20d202824c0d", "sighting_of_ref": "indicator--11a51996-48e8-4dcf-9c13-b2aa33a2488b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5915d2c6-518c-4e11-8f3c-5495cf599773", "sighting_of_ref": "indicator--4dad0668-e154-4744-9069-1a9d615090f7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d9b5aa-8d56-477d-a5f9-207fc356bf5d", "sighting_of_ref": "indicator--76266268-dc87-4795-8074-bc5d7026d8c8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c87d9dd-778a-420d-9157-406759527de4", "sighting_of_ref": "indicator--ab12fbdd-1944-4a23-af22-78f527c5ac06", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2913204-0077-4961-aafb-8b3266668ced", "sighting_of_ref": "indicator--a873b75a-8014-404f-ae4f-c278f619cb15", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--917d5868-b6f0-4a95-8d97-f21f88932243", "sighting_of_ref": "indicator--32b614d7-05f2-41dc-ab30-989e0b8caa59", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4943261e-3ec4-4243-9bf7-18d630915512", "sighting_of_ref": "indicator--1433dd3a-e4f7-4d90-9187-95f64db68793", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9baebaf6-7a03-4b54-86dc-59dc5a09b13d", "sighting_of_ref": "indicator--1433dd3a-e4f7-4d90-9187-95f64db68793", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10256c0-3bfc-4f7f-bc0d-332359998a5b", "sighting_of_ref": "indicator--7ad24dff-271b-4af6-ab71-54a79d576076", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261a8bcc-ca66-42b6-8666-5839dd0aa983", "sighting_of_ref": "indicator--88d4b914-e2d8-437a-9854-45b47394a271", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a185854-9cd0-452d-84a1-45a7671e3e19", "sighting_of_ref": "indicator--4f95c5e6-a37b-42f0-a728-5924b35dc378", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2df1172-03d7-4923-a837-c410e042b044", "sighting_of_ref": "indicator--4f95c5e6-a37b-42f0-a728-5924b35dc378", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba150d60-cf3d-4d50-a4eb-2cafa16fc8a1", "sighting_of_ref": "indicator--f738ff2e-817b-4521-a096-9d3c65c300c5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1daca797-8f93-4370-a7cb-6347707e81d4", "sighting_of_ref": "indicator--58dec4ea-076f-432a-aa4d-6fd06f05816a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed24208b-a340-4ac5-8595-6f57ee14912c", "sighting_of_ref": "indicator--c5da631c-bb8e-4854-b51a-a9f763a2d21a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cfd71f3-6e09-4ee9-9dd0-4abe2ed36829", "sighting_of_ref": "indicator--ed833949-6862-4886-8797-2c76a524a11c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d60d708-440c-487b-a1fb-78498d225733", "sighting_of_ref": "indicator--553d3634-4041-49c4-91d3-27b5ce4cffbc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4fc278-b39a-493a-ba97-7b7125572328", "sighting_of_ref": "indicator--2fc64981-e495-4807-8c9c-e1853fb6071a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0558219-6c6d-4a39-b084-877ba19fe3dd", "sighting_of_ref": "indicator--d00e9327-3807-4a89-943e-a432341259c4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4581816-7e8b-4ab4-aeaf-5e09d0ec70c3", "sighting_of_ref": "indicator--d00e9327-3807-4a89-943e-a432341259c4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e404e8-c664-4679-b2c9-a9e8ac4e449d", "sighting_of_ref": "indicator--0427b411-a6e4-4a2a-8e1e-44f82cc86a89", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8969ab0b-5346-4323-8a45-803e40f51a3d", "sighting_of_ref": "indicator--0427b411-a6e4-4a2a-8e1e-44f82cc86a89", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56382fd3-5494-4135-b4fb-732430163293", "sighting_of_ref": "indicator--ffbf836f-7135-480b-bb3f-4e234a3d3187", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a10497d-f6b8-49b7-a1b0-a061fe81f828", "sighting_of_ref": "indicator--ffbf836f-7135-480b-bb3f-4e234a3d3187", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732bf53b-d1dc-41bf-9508-2850b788de15", "sighting_of_ref": "indicator--d59f0527-a5d9-4909-a35b-129189cb1eae", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc79882e-7551-4e74-b052-91fe585b07c9", "sighting_of_ref": "indicator--c7927a18-45da-4343-9544-d537e23c028d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1adf263c-d8df-4841-817d-300e8e65db41", "sighting_of_ref": "indicator--51df657a-e326-4067-ae7a-e4dceff47998", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9e7b06-6041-4ccf-8074-37c012a75c76", "sighting_of_ref": "indicator--fe5df78f-9bc6-4a80-9d0d-8d4dca87f583", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a11fc3-7e50-4aeb-94df-20d5ce8bc50f", "sighting_of_ref": "indicator--a9c39e62-f898-4f8d-a4b2-1125499d1db3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81567f4a-0cb9-4e29-9300-e973b6b12330", "sighting_of_ref": "indicator--8787041b-5bb7-4808-8848-b276d01ed754", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2735b936-b571-4971-8bc9-13a9b1cd5c5d", "sighting_of_ref": "indicator--3c67a82d-dad8-42ae-85df-9191da045bd2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa36770f-39b6-453a-9b90-652174bb6244", "sighting_of_ref": "indicator--4ed99393-9c40-4a90-9128-4e1eb9c44bda", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6f48e7-1d89-4ffb-a13b-447572d034eb", "sighting_of_ref": "indicator--c18b7ca4-9a99-494b-b805-441b5e8bc89f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6717ce-4c95-49ba-ab00-80d1c8409b24", "sighting_of_ref": "indicator--95b9e286-d695-4937-99ab-c670f3134d25", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2d4261-a01c-47bf-ae16-497b91356747", "sighting_of_ref": "indicator--2af0ff54-ded6-478c-a963-e2e0a438a5b4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec0fe0f-e76c-4585-b18a-fa9dadc9a1f1", "sighting_of_ref": "indicator--2af0ff54-ded6-478c-a963-e2e0a438a5b4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1abfbe6b-b917-4979-932b-d4f4f19d1115", "sighting_of_ref": "indicator--36e9f9a0-3c60-4aa8-8c09-3d4a23c5e906", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764f8426-b930-4d47-ac0d-20a680b1f72b", "sighting_of_ref": "indicator--7e3867b5-7423-4ecc-a5bd-2127d2a80a90", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008d9f72-98c8-4db4-b9a3-adc2e17a6357", "sighting_of_ref": "indicator--6d90df7f-6691-48ff-a315-0b1bbae72dc2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921b33a4-6ba8-49ff-b9b5-fc1f50711763", "sighting_of_ref": "indicator--6d90df7f-6691-48ff-a315-0b1bbae72dc2", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d53e39d-de8d-4086-9125-d1e843dce867", "sighting_of_ref": "indicator--6d90df7f-6691-48ff-a315-0b1bbae72dc2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3dd1c0-7be2-464c-88b1-f3cbc27dd9a6", "sighting_of_ref": "indicator--bc50391c-433a-4000-bf27-9d16e1708167", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d1bc7c6-49b2-427b-9cbe-3faf73a94691", "sighting_of_ref": "indicator--9f466864-c0eb-4a73-a0ac-0efc3ef51398", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbca93ba-7566-4c43-95a5-cfc07308527e", "sighting_of_ref": "indicator--fcc20892-80f4-460a-ad66-026291c4e57c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdda283e-cfdf-4949-9eff-897da17cb366", "sighting_of_ref": "indicator--db51a341-3602-4ea7-9c77-57778071515b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb832c8-678b-4afa-9af7-928968cde296", "sighting_of_ref": "indicator--73814ea9-9d70-41b7-9e11-2b7c916458d5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31223ccc-de04-42e8-bada-e75619d547b4", "sighting_of_ref": "indicator--6ec76ede-8146-4984-94e0-9012922e98c9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4a568e-affa-411f-b95d-f345f1650b90", "sighting_of_ref": "indicator--1d0139bd-1f75-4d03-9d3f-fc87139996ff", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19faaaf9-7dc5-4eb2-bbef-f1e86e40aef8", "sighting_of_ref": "indicator--1d0139bd-1f75-4d03-9d3f-fc87139996ff", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5e928d-8f44-4180-945e-02e4152c58fd", "sighting_of_ref": "indicator--1d0139bd-1f75-4d03-9d3f-fc87139996ff", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b1ea76-3d6e-453e-adaa-f3af019ee02c", "sighting_of_ref": "indicator--247b36bc-80e7-4e43-a345-e2f79fa4d350", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e3ebba-083b-4272-a732-9092ef8b6686", "sighting_of_ref": "indicator--965d0665-b353-41c9-bf0c-92aadbcf4551", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c617c0c9-00d8-48eb-a0c0-8d91ae2dad88", "sighting_of_ref": "indicator--965d0665-b353-41c9-bf0c-92aadbcf4551", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d7f2d2-a83f-4061-a72a-ff36d2823570", "sighting_of_ref": "indicator--86e3d852-a4b5-458b-a1f7-ac7e067860ef", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e8a9d4-65fa-459f-be84-cb5b51aa569c", "sighting_of_ref": "indicator--86e3d852-a4b5-458b-a1f7-ac7e067860ef", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac11e9d-a7d3-4bcf-8ed0-797e3192bb83", "sighting_of_ref": "indicator--86e3d852-a4b5-458b-a1f7-ac7e067860ef", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd8801a-476a-42ab-9f4a-56efb5ca8b14", "sighting_of_ref": "indicator--b05b8cb9-3237-42dc-89c6-171ec746e60a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d047f80a-d91b-4df3-b1d7-79ff8cfdf77d", "sighting_of_ref": "indicator--7eda196d-cfaa-4c1e-a471-6ee93f90315e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903f618e-41e7-4660-b344-47d22ca12993", "sighting_of_ref": "indicator--339b8b79-6897-4844-830c-fd504bfff804", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4490f283-2708-40ec-aad7-78c995a942b9", "sighting_of_ref": "indicator--339b8b79-6897-4844-830c-fd504bfff804", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed5112b-4f5a-4240-b08d-61179422d2c9", "sighting_of_ref": "indicator--339b8b79-6897-4844-830c-fd504bfff804", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6a433a-d592-4ec9-9da8-685c1601170c", "sighting_of_ref": "indicator--2e5c0e6a-29d1-4dcd-b75a-0847ea23d056", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0838be89-7b1a-401c-8af6-94af25db3937", "sighting_of_ref": "indicator--36bd9d62-2267-47fd-b04a-bd33dcd3e7e8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ca0103-eadd-4ab1-9130-a683bc0eaa82", "sighting_of_ref": "indicator--36bd9d62-2267-47fd-b04a-bd33dcd3e7e8", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910e97ec-d65d-4117-a95b-dbd8269d5f02", "sighting_of_ref": "indicator--36bd9d62-2267-47fd-b04a-bd33dcd3e7e8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ec340b-bf45-479d-92e4-e6c4bd27c00c", "sighting_of_ref": "indicator--6f46a525-f9cc-4d94-9736-822e70fd27a3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ff22a0-bc72-44de-ae01-793d2acfa1c0", "sighting_of_ref": "indicator--d154090e-1505-4430-8a3f-d1746d0e3723", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e371056-8b22-48d1-b43f-e9ef8d18e0ad", "sighting_of_ref": "indicator--5e5fd937-1210-41fc-8e28-17a1664d1bfa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fec462cc-b9d0-4dbc-a9f5-fb8bbe20acad", "sighting_of_ref": "indicator--d8000fc0-f95b-4a1e-b56e-f2b5539bd6f3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a54aac-3b6b-4e0a-9d50-62f3c17ab659", "sighting_of_ref": "indicator--47ff0b4b-d45a-4dab-95e4-2bd581de2a10", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9174c2-53cc-4498-a92c-77713a44514b", "sighting_of_ref": "indicator--390c3ef5-1149-45d8-9b70-c805a3e59a6a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90a3394-c90f-4e2a-9a92-87ebdc8c5198", "sighting_of_ref": "indicator--55d134ec-29c6-456e-9c6e-1e2e2092c973", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1aa20a-e152-40e7-abad-2e0e14155b87", "sighting_of_ref": "indicator--14280da5-af52-4310-812f-f21bf833a37d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5095e79-c610-4937-b6be-df3a2ed22557", "sighting_of_ref": "indicator--6d6500d8-ac59-4e5b-8347-a89d73aa4207", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d66ad43-1af1-4692-ab59-62e4b62c47cf", "sighting_of_ref": "indicator--0d366b7a-bfb2-400d-bfce-3bd47468fa91", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14eb41b7-230d-435b-9d1c-0acb3ece4f49", "sighting_of_ref": "indicator--3c33a144-0d9c-41c5-bbd3-a6f500e3da38", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5bab285-71cb-4a0f-8b02-3e33f8ff5295", "sighting_of_ref": "indicator--060c60e4-c0b6-4caf-8555-35cb95d15a06", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1e0959-38c5-46c4-bb38-dcd24ed57f61", "sighting_of_ref": "indicator--c561f09d-e0ff-407d-8abb-5a3e5ee32d19", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932f8c5e-a026-464a-9842-860bda77819b", "sighting_of_ref": "indicator--1441a2b1-604c-4110-8e39-518db54fdad6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001fb01c-913a-4792-a472-b5e2fd065d8d", "sighting_of_ref": "indicator--ca09a5b0-bda6-402f-a42d-0c966e191ee7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79109e50-8260-49a2-a044-76b1f3f7f4bf", "sighting_of_ref": "indicator--bc38fb3e-0166-4ff6-9d2f-cbbc3890d9c0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c806e95-d1fa-4bfd-a979-d33c0bbd5df7", "sighting_of_ref": "indicator--e2f9ed94-2849-45e6-b180-f6644ac67b41", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0a2383-8afc-41b5-9c36-ed57e8d2838a", "sighting_of_ref": "indicator--30375228-9550-4094-9940-cb40ff398073", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4ebf64-eae1-4eee-8c70-49748c327457", "sighting_of_ref": "indicator--23f8c27c-b457-4382-96f7-7fe0ca7512b3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae140f7-91f5-46b6-8a0c-ed30d5c39aa4", "sighting_of_ref": "indicator--be8ab2c6-61a6-4080-a738-6e9a0120ee4e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b88859-665f-4a4e-add7-c62f31e36803", "sighting_of_ref": "indicator--5872632e-3a81-4602-ad59-cfb4857ed1dd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8042d345-6f6c-4a4e-887e-2a62066d4e8c", "sighting_of_ref": "indicator--08a419f5-78e7-4438-a3e3-94be2bb5f7a5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89892bc3-1ba6-4dff-b377-12ed6f2d301f", "sighting_of_ref": "indicator--cb2d547c-c273-4b9c-949e-188124b8c458", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9438374d-da5a-43af-82ac-f37324e4c0d1", "sighting_of_ref": "indicator--d710c51e-9b8b-47dc-bb5b-e38198ca253c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c606c4a9-e477-4119-93c9-fa61766e3984", "sighting_of_ref": "indicator--41d7d9d9-345c-4d23-8e5a-9a939b4e2562", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf68819-fc51-4a3d-b642-1483467678e8", "sighting_of_ref": "indicator--3fa9c2ce-03a7-4923-91e1-e98bf3e90f26", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a48ac2-a067-43fd-9828-597183811bef", "sighting_of_ref": "indicator--9faeedc0-8bfa-4c3c-a356-eb50a6e2e64d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f94ef86-e8f3-4b19-a51d-6d13ffe0d42a", "sighting_of_ref": "indicator--1e4d2b4f-3258-450e-becd-b5b20d177627", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d6eca5-ee94-4b02-9dcc-2e6c6264188f", "sighting_of_ref": "indicator--92ef78c3-114a-42ab-9a94-b1674c314d59", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0d6920-503a-4ab5-bf37-4cb384f96433", "sighting_of_ref": "indicator--9091b7e1-56b9-4c8d-848f-f6d54ac2fd38", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3242614-a0b1-4ba5-a082-0de712c93b98", "sighting_of_ref": "indicator--057bb201-6372-4c46-be14-c0954db862ab", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7abf93-df9c-4143-a695-d67df4edb505", "sighting_of_ref": "indicator--c5a3434a-2a03-42a6-b730-9caf95d51e4b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97fedc9f-2fe7-447d-8440-e55bfbde72c9", "sighting_of_ref": "indicator--2f55cec2-8d73-47e9-8b55-ad2be167f8ac", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fec42bd-0d87-4410-8eea-d13926eb85e7", "sighting_of_ref": "indicator--d03b2541-aec0-42ad-a4e2-992d7df0ca12", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ec385f-760f-4f09-a35d-43aee2b144c9", "sighting_of_ref": "indicator--c2e43aec-717b-45bb-b842-3db647168b60", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eee9bfc-0367-4af4-abf8-4611e1333295", "sighting_of_ref": "indicator--f03749b8-44ca-48ee-9da8-11de9dff2c01", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec8574f-1029-40a6-968a-438b7133b070", "sighting_of_ref": "indicator--28190eb1-d976-4573-af24-d23342ff30cd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ca64e8-e7c6-48c3-b699-584270876215", "sighting_of_ref": "indicator--4fefd13e-1dc5-4918-88bc-cc8c70f7f16b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e567d19-a31a-4eda-af27-de0486e8dcbc", "sighting_of_ref": "indicator--b69113f7-019d-4fe4-ae2d-7800a796cb0a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d40c3b6-19e9-40b4-a6c8-739c5e8edf6a", "sighting_of_ref": "indicator--2180edc1-1e8e-4b20-8be3-3e487b427223", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3941a81-65b0-4caa-bc5a-ab62fb46ec8e", "sighting_of_ref": "indicator--211f36a6-32a1-4f1a-9d43-4091426f138e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db131e6-03e9-475c-9bd9-f96e3145a933", "sighting_of_ref": "indicator--15f37f52-7292-4867-8b09-daeae1ae0d68", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258950bc-2505-40ce-9213-7b879510369b", "sighting_of_ref": "indicator--15f37f52-7292-4867-8b09-daeae1ae0d68", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68690f2e-15aa-4af1-b6aa-297579816c9b", "sighting_of_ref": "indicator--15f37f52-7292-4867-8b09-daeae1ae0d68", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db6fbc7-b62f-495c-ba1a-d7d1a2fa0ddc", "sighting_of_ref": "indicator--49245de9-c716-439f-91ac-5ee2108ff127", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb8d022-cf49-45d9-a752-7a8b30c01ee6", "sighting_of_ref": "indicator--49245de9-c716-439f-91ac-5ee2108ff127", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d427797-2cc5-4756-b46f-b09f2b5aa89b", "sighting_of_ref": "indicator--7ff35ac6-0713-4d1c-af13-b35baca37d1f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179deefd-627a-41e4-9aab-2caa174b67b0", "sighting_of_ref": "indicator--7ff35ac6-0713-4d1c-af13-b35baca37d1f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c17ffab-d796-474f-8975-a7039f6aa88b", "sighting_of_ref": "indicator--af3015bc-5ce6-4707-8c63-744d573fe69c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619de044-46b0-4f9d-8d21-93086a884cd9", "sighting_of_ref": "indicator--7dc3e3e3-ddae-45bf-96c2-277884c76679", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249b9f1d-cd8e-4689-afe7-b2054781b70b", "sighting_of_ref": "indicator--7dc3e3e3-ddae-45bf-96c2-277884c76679", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d13ae5d-7465-4d94-b8d0-0a303124cbed", "sighting_of_ref": "indicator--63e2b9d1-d92f-49f4-ae3a-a38bfc9e0466", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25e4517-bdf7-41e8-8164-4f05a2d5faa6", "sighting_of_ref": "indicator--63e2b9d1-d92f-49f4-ae3a-a38bfc9e0466", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c0f041-4ea0-45a0-aad9-0dfae0317b20", "sighting_of_ref": "indicator--1e99b97d-2953-4552-9440-c458ec096c4f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55939fc-c0d7-46ec-b321-cea34eb61631", "sighting_of_ref": "indicator--0f6f5519-af94-47cb-a532-35124d5ab36e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e43c6e4-6e9b-4af9-81f5-19b94071b10d", "sighting_of_ref": "indicator--5abe782a-84c4-4bb1-8754-7d8f4279a825", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb29e04d-8c87-4d77-90e1-a9f433162e07", "sighting_of_ref": "indicator--5abe782a-84c4-4bb1-8754-7d8f4279a825", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2c338e-c75a-4e5c-b5d3-853cbcbfec50", "sighting_of_ref": "indicator--06876833-d9dc-4e3c-8bc2-51c588a13ff0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd50376a-4a63-4138-8745-e3d561e8771c", "sighting_of_ref": "indicator--5613d490-7c45-4ea7-8bcc-78376cb0ea69", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5599b8d4-5e68-41a1-aeec-788ddcaa7f12", "sighting_of_ref": "indicator--5613d490-7c45-4ea7-8bcc-78376cb0ea69", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd7ed16-d877-4d94-81e6-98e071e28979", "sighting_of_ref": "indicator--5613d490-7c45-4ea7-8bcc-78376cb0ea69", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93998219-0bb2-4370-85d9-06aa9a3b56a1", "sighting_of_ref": "indicator--1efdd808-def9-4477-9d66-f5db7b6a420b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa0246b-2f42-498a-a639-08a13c8f0f8f", "sighting_of_ref": "indicator--1efdd808-def9-4477-9d66-f5db7b6a420b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ca1b06-6d3f-4c09-95a0-b89af3550a35", "sighting_of_ref": "indicator--fd2a1019-64d3-4320-94ef-c726299fb714", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d490047d-38c2-4ed9-9fe8-26ca6c65c70d", "sighting_of_ref": "indicator--fd2a1019-64d3-4320-94ef-c726299fb714", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b01a791-db33-4682-8fcb-d293c74607b7", "sighting_of_ref": "indicator--0bdeed4e-5c8a-469d-ad32-dab04d19b20e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb213cb9-38c3-4635-828d-0ebbf3015a2a", "sighting_of_ref": "indicator--0bdeed4e-5c8a-469d-ad32-dab04d19b20e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a81e852-7167-4eb9-bacc-6c451c9f343a", "sighting_of_ref": "indicator--134754cb-250e-47b2-a215-5950a7272562", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d17f130-0308-4229-8928-4f924980548f", "sighting_of_ref": "indicator--b5fc5c15-efba-4371-93ee-03141da5413b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b093c6-0328-4221-8b3a-d488061cd38f", "sighting_of_ref": "indicator--6be33cb0-08de-4283-852f-f2e85e3b30e9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b749532b-be2b-45de-ba6c-38059d25fbc8", "sighting_of_ref": "indicator--276e940d-2aaa-48a7-ba36-3039235ebbf5", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1489ffe-47bb-415f-bfcd-fc908b80ebab", "sighting_of_ref": "indicator--2032d608-b136-4b6e-8500-8cf96bab9353", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c7ec28-5f2b-4401-aea1-0efb6eef3fe2", "sighting_of_ref": "indicator--d81adcba-e871-4e4d-8c00-bb5a378150f6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2714a39d-17bb-4006-b8e8-930ee4da9fd9", "sighting_of_ref": "indicator--bc14b167-2101-4e37-80a8-c6b72752ca37", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6cf593-96dd-44b8-8418-c621231d15eb", "sighting_of_ref": "indicator--376d9459-dc3b-4af7-803b-ecd03701d715", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c7c54a-45c0-4ebd-b604-135528952b01", "sighting_of_ref": "indicator--6896c356-f3ca-4a1f-a793-a4297d54bc77", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6770c019-f6e4-4707-89d4-08435491e500", "sighting_of_ref": "indicator--a9e0807c-01fe-4b13-96ae-e68f80221abe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d716b0f3-a11c-46bd-9e68-76652876d441", "sighting_of_ref": "indicator--ea652bc9-2283-46a0-ad60-3d6fe83c0495", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348453d2-7c89-46a5-97ec-057c5371566e", "sighting_of_ref": "indicator--07d2dcc5-b42c-4abd-9dbd-bd60ffbd8b79", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b2166e-8208-4735-87e8-a6916c45f18b", "sighting_of_ref": "indicator--f5c9f36a-9ed8-497f-9d80-af401e30ef9e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d8058e-6a74-4d21-bcea-67dfbd38035e", "sighting_of_ref": "indicator--65a65a1d-88d1-4151-a571-d0d89ebdc0b9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec19f736-439e-4c4b-b9ea-4861f120654f", "sighting_of_ref": "indicator--983c3cb1-f3f7-46c4-9dcb-bcfdd7e8a931", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da85b24-0205-4eed-8cef-c3d3c30d7dcb", "sighting_of_ref": "indicator--b5fa8af0-8f2c-469e-a94a-d76d619102d4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4831c24-1666-4c85-942a-50d8c547e9d0", "sighting_of_ref": "indicator--9ba0b187-f311-42c7-b66c-a4520bc8f2f6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a469ff-ce57-48bf-8d19-da637252ccad", "sighting_of_ref": "indicator--4864842d-5aae-4279-987a-083accc310d0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e44d3c6-19f2-4d8e-b946-37bac80f5716", "sighting_of_ref": "indicator--9186269f-3c7f-4897-bf30-ce1028d8a727", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0aab490-b2fd-4e6c-8c61-841d6067cc06", "sighting_of_ref": "indicator--9186269f-3c7f-4897-bf30-ce1028d8a727", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6c4060-2947-4c67-b680-24018c1ed703", "sighting_of_ref": "indicator--dddb5aed-de1e-4268-bcb0-89cef0fa0ebd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657b73ad-0daf-42c0-a3bf-82b7565077ca", "sighting_of_ref": "indicator--68bac1a7-5ced-4269-b97b-1ea1579f88a2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc7b82e-d46c-48ac-b706-c0e33411bc08", "sighting_of_ref": "indicator--5c4d24f5-c7c3-4b7d-8191-9da2c4766881", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4828c79-ede1-4275-88d9-eace852c219a", "sighting_of_ref": "indicator--587ad6f1-1b45-4908-b3d5-f6af51874bbf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e4b255-73ce-4a4d-98fc-a643f163920b", "sighting_of_ref": "indicator--27c0199b-0c4f-42c2-9215-53326cf1ae5a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c300bc28-df5b-4a29-b2e7-6e1b93f73fe4", "sighting_of_ref": "indicator--58f640a9-2a29-4182-be82-c43f105aef37", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2091da-88ab-450f-9c5d-b6978bd26920", "sighting_of_ref": "indicator--14a26061-3768-40a6-a140-0f136dc6f9c3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c4faf9-d098-4a53-be05-a3763c611f5b", "sighting_of_ref": "indicator--07600b1d-2b42-457f-bf8f-e3510add00bb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c302fe-6422-4cba-91e0-25ab425404f3", "sighting_of_ref": "indicator--d9f8aad7-b247-4bdc-a58a-279f10868b29", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7eafcde-1dd6-43f8-b4a7-3b5924c1581b", "sighting_of_ref": "indicator--769cc44f-efbb-4f85-9e03-a2dc04295088", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4303c0-384d-4ce2-bb0a-c7026aa30265", "sighting_of_ref": "indicator--206fa3e4-7bb5-4fdd-85de-3f00b0a4c3c6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cccca95-eea6-42b0-bde0-d10ac0837fe8", "sighting_of_ref": "indicator--922afadc-0ac0-4706-a024-c0e2b8538dc5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834875ba-3207-46fe-843b-ffae48732c4a", "sighting_of_ref": "indicator--53e254f5-f0bc-4453-aa19-068cf913077e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f51762b-aecf-4f02-a7b8-09299b9aa63b", "sighting_of_ref": "indicator--a15a691b-5bee-414e-b612-6cf30260cb94", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87acd335-2c89-4b14-8033-4ca3a3a9e48f", "sighting_of_ref": "indicator--5fc70e2d-f6fd-45b1-85de-32dae219baad", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871c4047-881c-453b-bec4-f4ccb2ffc73e", "sighting_of_ref": "indicator--389d8d5b-96fb-4247-94e4-ec208a8ee304", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b3eabc-9ddd-43cf-98c6-c8cfe9b2d77b", "sighting_of_ref": "indicator--eeababc3-52a5-4179-ac49-49b76e267a65", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6a2705-c9e3-4598-9a09-c5c9cb9fc159", "sighting_of_ref": "indicator--eeababc3-52a5-4179-ac49-49b76e267a65", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde0105d-dbf2-424d-a35a-5e9a24a01ad2", "sighting_of_ref": "indicator--b713c957-46ec-430d-a06d-67cf193e4865", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4855d526-c850-4962-a604-add62f7db7e3", "sighting_of_ref": "indicator--2e35111c-b9bc-4013-a5f5-31cd90b78c56", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--130b59ed-8041-449c-bf37-d3e74abcbce9", "sighting_of_ref": "indicator--9ed9c3a1-ee50-4b0b-8b53-5cb217354d74", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a4cc3cd-48b0-4994-945c-3f611ca15a58", "sighting_of_ref": "indicator--b00edaf0-5928-4566-8b3b-b4434ac17dc8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032ea07f-45b6-4691-964c-16830be9d429", "sighting_of_ref": "indicator--b00edaf0-5928-4566-8b3b-b4434ac17dc8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5f2649-2729-4c84-8b24-c6a3a3cca0a9", "sighting_of_ref": "indicator--6122be38-7f15-43dc-914d-50604ed1840c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41cfeaf4-cd43-4507-955d-ce594e3ac52a", "sighting_of_ref": "indicator--56a02700-3649-49a4-ae19-140233996373", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068d4956-94ae-4f3b-8a83-5acecae82800", "sighting_of_ref": "indicator--56a02700-3649-49a4-ae19-140233996373", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed0a2a3-b3c0-4948-a654-05c9d0ca791e", "sighting_of_ref": "indicator--79eb6ebd-2ae0-4ad0-a4c3-f05c63b9fa96", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff67427-7bd4-457c-888b-ec76514d4006", "sighting_of_ref": "indicator--79eb6ebd-2ae0-4ad0-a4c3-f05c63b9fa96", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035f6d6e-214c-4c18-ac05-3a494919c164", "sighting_of_ref": "indicator--3f5636cb-8ffb-456b-aa55-30fbb0f9559f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b740c90-3e76-41e6-8c88-b1c2caebdd3a", "sighting_of_ref": "indicator--52e1561e-ad03-4637-a6ec-106c7a523d98", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c56861-36a0-4da2-8c3f-7c19bfc13709", "sighting_of_ref": "indicator--bf5fa1cd-7045-4e38-aab8-a17a0b688810", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd8e4e77-e4bb-4c83-a772-8679356cd267", "sighting_of_ref": "indicator--6667e267-4ee9-41a5-991d-26f2ed08402e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640ac69d-4a1e-4097-9059-507bea58dfdb", "sighting_of_ref": "indicator--6667e267-4ee9-41a5-991d-26f2ed08402e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97aa6645-028c-475e-9b06-8b063f35f4b3", "sighting_of_ref": "indicator--029b26fa-7bcd-47ac-92da-932780bd5b1e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbda463-cb61-4cbf-90f3-52eee5ea1263", "sighting_of_ref": "indicator--a7c4e244-e189-440f-9f2e-b79d85a77963", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5f05ff-146b-4277-921e-eeeea68a5df0", "sighting_of_ref": "indicator--18d1db88-6e24-4615-a136-8ba091f04428", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d1167f-d101-447a-b36d-1f635e54a38c", "sighting_of_ref": "indicator--7c1d3c8f-8c4c-4148-86bb-f354d7e34f60", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00386d91-7661-4a14-9eb7-6e48cc525ac3", "sighting_of_ref": "indicator--7dcdea51-5814-43cb-a413-b870131fe6cd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec0241e-5b9f-4747-be40-118543e188b3", "sighting_of_ref": "indicator--be57e04b-dea3-4842-a2aa-9899df7a2c77", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d024d860-51cd-4ca0-80fb-5b4e474f6da5", "sighting_of_ref": "indicator--be57e04b-dea3-4842-a2aa-9899df7a2c77", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2e5980-386a-4e0a-b12a-4208b40a0c5d", "sighting_of_ref": "indicator--0044cc87-61f2-447c-8f35-7ba8154b86ed", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27124df2-b02f-42f2-86d4-024ffd980842", "sighting_of_ref": "indicator--e30cf143-26c6-443e-962a-8df223f3664f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e552b4-ee6d-4b70-824e-50ae538e3a52", "sighting_of_ref": "indicator--e4a78c36-3a3c-4699-a18e-61c47f286c2a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8b41253-ddc1-4c52-a531-74fc342bf412", "sighting_of_ref": "indicator--284979fd-2c0e-4c4c-9dd9-9fbb453f88b8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564b25a5-73a7-4b4b-90dd-c7cc0669ce58", "sighting_of_ref": "indicator--284979fd-2c0e-4c4c-9dd9-9fbb453f88b8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65701ee-d7d5-4973-8eb9-1385e26e151a", "sighting_of_ref": "indicator--75ca76b5-8d47-4934-84b8-322dfd8bfdf1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5acf9dc6-5203-4513-b9a0-3f268471d5bb", "sighting_of_ref": "indicator--c73b6314-56d0-435f-a64e-d72d1f4c3ea8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--251d0c8c-3c3e-4ee4-9f8a-9c9bf74b9a2e", "sighting_of_ref": "indicator--c73b6314-56d0-435f-a64e-d72d1f4c3ea8", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d0ed680-e620-4996-bbb0-bafc3ad5bf26", "sighting_of_ref": "indicator--0d46cb2f-227f-4437-a90e-43fbcc316cd7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c892121f-c2d3-47bb-bb30-ccc91dcb5971", "sighting_of_ref": "indicator--02cdc510-6ac8-42d5-afaf-be498313aa5f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa70790-95af-4b1e-a198-6b0b76486638", "sighting_of_ref": "indicator--02cdc510-6ac8-42d5-afaf-be498313aa5f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17dcb3af-e22e-40be-9fe3-cb5be3db3f46", "sighting_of_ref": "indicator--2178c89d-fc08-411b-990b-1f5af8142aa1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499d259f-ca28-4279-826e-8590e13f1baa", "sighting_of_ref": "indicator--b5eb2415-5161-4cfe-8177-439e0042a90d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c02428-cb2d-4e06-b002-585a36ba015c", "sighting_of_ref": "indicator--90d4a18d-94f6-47db-ad9c-9a6868c47b2a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae6398c-b0bb-40c0-86f0-953d1feb36d5", "sighting_of_ref": "indicator--c60eec24-ab64-4146-a068-8e6246d53d79", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ab8e23-adba-494b-a583-34cf6e28c5ee", "sighting_of_ref": "indicator--3329b93e-579c-4f59-bfd5-e3c098dac1a9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e3454b-d9a0-4303-b2c6-ace37829a6c8", "sighting_of_ref": "indicator--84c75e72-4054-4dae-a2ec-3b717f271780", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9a938d-62ea-4431-8b43-fa61347ab98a", "sighting_of_ref": "indicator--8d35cd8f-fd77-4155-97d2-44c76697238f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d320bfbb-3734-48e4-9c98-becadf4281f6", "sighting_of_ref": "indicator--69d31af9-2069-4c63-8a3b-6636c9bb2c45", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee79bac-9d28-4636-8b5d-abd24e9175fd", "sighting_of_ref": "indicator--3528d4a2-4930-4c3d-aba7-07bd12266c84", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e355df-cf97-492d-b5a2-5c764d48190c", "sighting_of_ref": "indicator--3a54fcbc-2ac3-4f6c-bbbe-c08acef653ce", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61876db-4a6f-42f5-952d-1c0969547564", "sighting_of_ref": "indicator--a4e25ed9-b569-492e-aa5e-d589e6c9bf8e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a87391e-8748-4ee6-bf50-9754bd5539bb", "sighting_of_ref": "indicator--36d553c2-433c-4ad8-90c4-66a9182e7459", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f32d554-7413-428a-b5a1-e5de561a80ba", "sighting_of_ref": "indicator--c61ea71e-e6a2-4e29-bb3a-a7a07f5632f5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b601ba0c-adc5-46f5-8ac3-40cf9c70b904", "sighting_of_ref": "indicator--dcb00431-6476-47fd-9c11-d7a232535fd7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc6c62c-5bd5-49d1-be0f-a9bbc9bed10a", "sighting_of_ref": "indicator--b20e615d-c12b-44a4-b257-df13d396bff8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59cb43a6-a60a-43ea-b547-f787c398e080", "sighting_of_ref": "indicator--3f7b477b-31fe-4f76-a331-85bca7a4715f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37b483d-b5f8-4250-bc75-6a20a17c1869", "sighting_of_ref": "indicator--3f7b477b-31fe-4f76-a331-85bca7a4715f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acdd9394-ee9c-4a6d-a124-7907928e251d", "sighting_of_ref": "indicator--59138f4f-7da7-4c5e-980e-8698871189cc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61ee6c5-bcb4-412b-b82c-dfe3f6eb5788", "sighting_of_ref": "indicator--55667e74-ab74-4742-ad8d-a451a210d17e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2cdac3-3ba1-45aa-93b4-7dc7510a1448", "sighting_of_ref": "indicator--55667e74-ab74-4742-ad8d-a451a210d17e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66dbbe2-92b6-4aae-b77c-cfeb5a57bc89", "sighting_of_ref": "indicator--65c0b1f3-a28c-43d8-9ea2-f867192721e6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8efda5e-76ea-48e1-878c-4549a66644b5", "sighting_of_ref": "indicator--89d7d0da-c39c-42cb-98d2-4b95d2a74c61", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb05d065-2bd8-445f-adad-0c11a5a701f4", "sighting_of_ref": "indicator--f33a4af7-8314-46e7-8286-cc34ca56523f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b128a632-1701-4fe8-b435-b928dd88357f", "sighting_of_ref": "indicator--1a6c27bd-c2db-43e0-8fc9-c4e98d56a92b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5626d34d-84cc-4aad-a2ac-8bd9dbb7494f", "sighting_of_ref": "indicator--95d29ae8-25a1-4016-ade9-fa85696c8fb8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d937ed83-c5ef-4c2d-9a30-f8da9f2576e3", "sighting_of_ref": "indicator--86231332-07cd-474d-8fbe-67f6e3dd49e3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1d5142-f72a-49f5-a672-a6f5e0819e72", "sighting_of_ref": "indicator--86231332-07cd-474d-8fbe-67f6e3dd49e3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0091b93-7dd6-4653-b340-27fe467668d0", "sighting_of_ref": "indicator--6d6a7901-8a2f-492c-a464-0f7e935376b9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25714cb9-c5ef-4d1d-90a6-1421a3b584af", "sighting_of_ref": "indicator--6d6a7901-8a2f-492c-a464-0f7e935376b9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02a2926-0887-4032-9e1e-e22a2a8975d7", "sighting_of_ref": "indicator--89786fd0-af99-4820-a402-895bf3797145", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d65bf7-ed84-48e2-ad38-70b25e32eef5", "sighting_of_ref": "indicator--b6ceffc1-2081-4e6f-908c-3b98f4ae778a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06374af1-c73d-4f4f-8165-66649faa49e8", "sighting_of_ref": "indicator--829e71ee-2cf0-472c-8c43-09af307a57de", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d77b6f-0fa4-4021-9323-052fbc9f04c7", "sighting_of_ref": "indicator--f770bfc7-7e9e-4cf1-bddf-512e84f26280", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ea724c-b122-4f80-af34-ceb70f46b233", "sighting_of_ref": "indicator--17a52f04-f9e1-4aa3-a8ce-cf26873f363e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcb8111-9921-42fa-9b01-b533884847b5", "sighting_of_ref": "indicator--17a52f04-f9e1-4aa3-a8ce-cf26873f363e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4c745d-5cd3-4189-a4e7-3264431bf9df", "sighting_of_ref": "indicator--bdb6b039-ead2-4f91-a415-9bc6f1957fce", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64284f26-c1a0-4502-a10f-7240a2549904", "sighting_of_ref": "indicator--dbd81917-03fe-4de1-8144-17e6945f0ddd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b009ccdb-bfa8-488e-a8bc-076e479a0cbb", "sighting_of_ref": "indicator--dbd81917-03fe-4de1-8144-17e6945f0ddd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b851a07f-a8c6-4f3f-860d-bcc4be96265a", "sighting_of_ref": "indicator--1ff43730-f4e2-4160-b374-b6f6319eb805", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8488d9-d3a0-4758-9fac-42407aebb969", "sighting_of_ref": "indicator--1ff43730-f4e2-4160-b374-b6f6319eb805", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--353b2c58-ae15-40c0-a031-6418b715e2e5", "sighting_of_ref": "indicator--a5926491-2588-4b99-9208-8b5264ecd62e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f01f7f-86aa-4215-ba14-96f3615a04d8", "sighting_of_ref": "indicator--4607230f-3d17-4c6b-a57d-a5b924a3f6be", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3becedac-8193-4960-8326-b458eda37353", "sighting_of_ref": "indicator--66609c3a-09b7-423e-877c-773b7434ad60", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7cd6ac-cc8d-4439-b11c-a753cd6af415", "sighting_of_ref": "indicator--3886516e-e8e5-4563-9009-94e4fee4776d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c63c68-d73e-43b7-99ab-3156618a0aa1", "sighting_of_ref": "indicator--8fa0fff6-1b4b-4481-86d7-6ec47bbb21b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865bb563-428c-40e0-9eed-eea6e568c081", "sighting_of_ref": "indicator--c179c0f8-1ed0-4cac-87fc-86e67638cd3e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53698811-a978-4ec6-a833-8edc17c49a29", "sighting_of_ref": "indicator--8252c1a2-ae4a-4f5d-a14a-47d763558eac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c586a6-1879-4e20-bc27-bb093fc80487", "sighting_of_ref": "indicator--1372b371-6bc6-4d38-aeeb-a8c7b573b793", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb14f966-1184-4e59-9197-7858ae3cfcf0", "sighting_of_ref": "indicator--f01f6da7-e666-4a4b-a1b0-579d02f382e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4999d31f-8fe9-4ded-94bf-8afa8e7ecd5d", "sighting_of_ref": "indicator--a8e9fae7-320e-441e-b164-66a3ed4e57e9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7062193f-4678-4221-9f8e-74f9505693fe", "sighting_of_ref": "indicator--85235ef4-3e0f-4765-b597-dbb93f92f86b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f762ad16-0b74-4ed2-8070-26305ee5516d", "sighting_of_ref": "indicator--52a583d5-0293-425b-af5e-9de407856e73", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c29024-12c9-46ea-9778-cb8c5650f31c", "sighting_of_ref": "indicator--b4887ac4-76a0-4dca-8fa4-7234253daece", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b296c5-9917-41f6-8b26-e46aef878451", "sighting_of_ref": "indicator--ebbb26de-ef8a-4af6-9708-b5349d9659c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881db4de-fab8-44b4-bf55-ac59a3f68181", "sighting_of_ref": "indicator--0c9909e3-2140-4a1d-a738-643246f8d965", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--232964ff-6ef9-42eb-9b6e-b970692c1870", "sighting_of_ref": "indicator--e8a061fb-b887-4592-a2b9-96e028d53821", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b743c3f0-22f3-4ea6-9034-9ab95696c8a4", "sighting_of_ref": "indicator--101021f8-4329-4f73-8b64-9be53b13d650", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332cbd96-9f58-4652-b79d-6e56b542fe8b", "sighting_of_ref": "indicator--c18df3c0-ceb9-4a75-b53b-c27b98eae037", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff8d500-a9be-471f-b9bf-ba1e8ed36cb4", "sighting_of_ref": "indicator--c18df3c0-ceb9-4a75-b53b-c27b98eae037", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d93b6db-b36e-4cb0-a575-90a67c07795e", "sighting_of_ref": "indicator--2b5cc500-1f69-4d16-b2c3-98cf73600c1a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a886712-e12c-46fb-929b-6f47ac63b7bc", "sighting_of_ref": "indicator--5cd4526f-40f1-4adf-bbd8-3c2d7f1b195a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09dfacc-41c3-4c65-bdb2-6d629e059054", "sighting_of_ref": "indicator--5cd4526f-40f1-4adf-bbd8-3c2d7f1b195a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02484d7-75bc-4ec4-866c-03f832691d71", "sighting_of_ref": "indicator--f5846dab-8dbb-47c4-b3c2-7838775ebc25", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e352f71-2f4d-438e-964a-f9bd7b0df36e", "sighting_of_ref": "indicator--f5846dab-8dbb-47c4-b3c2-7838775ebc25", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459c85fb-482b-4cdc-9504-19a7b448c77b", "sighting_of_ref": "indicator--8514ed97-4dbd-4ad7-a816-9f6cbbc286ba", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247ed9d2-4424-47c7-9e03-78273f00ca4b", "sighting_of_ref": "indicator--cb26acbf-790d-44b6-b736-e878ff8a1d1b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7c4b88-5196-440d-8789-32ac71fd1b23", "sighting_of_ref": "indicator--c869b1fb-d3eb-4cfa-bb97-3124598fb3c9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e2ae54-bfbf-4654-84b3-19e22c50a261", "sighting_of_ref": "indicator--75fd3881-c5bf-4c1b-b21f-dbcf061bee45", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea1dac71-d9f5-4338-82c6-d953f0f194e5", "sighting_of_ref": "indicator--5d0534d5-c1b6-4476-be31-fe3202a61f57", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0f8df0-2936-4c5e-b114-93c4d9a5987c", "sighting_of_ref": "indicator--5d0534d5-c1b6-4476-be31-fe3202a61f57", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9f9b00-45cc-4c3f-99e6-95c37da85674", "sighting_of_ref": "indicator--9cc3e234-0f66-44b3-a953-b2aff51bf22f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd00472-ea0c-41dc-bb5f-89a0f38352ca", "sighting_of_ref": "indicator--c4f1d84b-e7d0-4d70-bfad-64821e5e98cc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--215712a3-db39-4245-a4ce-707889a2f99c", "sighting_of_ref": "indicator--78c34489-ca04-45b9-9ef7-20976f2ecf41", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9ca95a-c380-4e8f-8deb-80d9a56ce317", "sighting_of_ref": "indicator--0c5e787b-f545-4755-afe6-f23530467f97", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a93de3-e86b-4fe3-9971-5962c374abeb", "sighting_of_ref": "indicator--6b5eca1e-7010-40df-aa94-e9d4ee00ed9e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c5a332-4e66-483f-95a6-e56cd4cfdbab", "sighting_of_ref": "indicator--540f3a95-019c-4fb7-a18f-5e649baa35ee", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d0c159-fe77-4f72-b18f-e2e30863fb6d", "sighting_of_ref": "indicator--11870dd0-eb8b-4000-89fd-53991df222f0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fde7acb-f2ed-4eca-858a-c23c2393674c", "sighting_of_ref": "indicator--d22c3bfe-2979-4dfc-b419-7d2ced5c6ee0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f32186-94ec-4302-abf3-d366e904bddb", "sighting_of_ref": "indicator--3b0cf53a-c640-4dad-8e17-68f793a679cf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b879a9-e06a-4cec-b303-cfa08534dc25", "sighting_of_ref": "indicator--338e757f-a8b8-419b-b6b0-9cd889ab8fc7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4aa1d68-f078-4fe1-9c79-a830eea50ae1", "sighting_of_ref": "indicator--52273804-85f7-48ac-bcfc-39ca1e0e85f4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1860a1cf-cb02-46dd-8320-fd457ed2738a", "sighting_of_ref": "indicator--d79fa17a-23b9-4bde-a090-ba5339a79da8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e09364-ccf7-45fe-9c79-2da9bf080578", "sighting_of_ref": "indicator--14be69e2-c93c-478f-aa49-032784b29d6e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d758473a-8162-4b63-87d7-3015b0578326", "sighting_of_ref": "indicator--5087fe82-0225-452e-a37b-612fe67a4944", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f6a125-c921-4c09-b4ca-1173ff584b2f", "sighting_of_ref": "indicator--b39a6c7c-8724-434a-ab11-4192a77b07ca", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9b3b33-2881-4354-b155-9f6a98dee6da", "sighting_of_ref": "indicator--487f97e6-efa3-470f-9e12-d0ce9dd04334", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f57253-1015-4c0e-8bcd-2764eaf70cbe", "sighting_of_ref": "indicator--24867565-e6cb-4de5-98e5-177c3dc595b4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce7c1fa-eb04-4fa1-ba71-20d902dc8526", "sighting_of_ref": "indicator--43fc870b-843a-4a5d-9f16-cd14f4074d71", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1cbdb6-a10b-40c0-aff9-fb8abfb2982e", "sighting_of_ref": "indicator--85979c61-0410-4019-ab72-385f779843be", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd053dc-9fb5-4aab-a38d-cbd8e4dee46e", "sighting_of_ref": "indicator--274ba297-b978-4116-8425-98ecb67f3b0f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1807b1f7-2e79-4ab9-8670-6d5c6604a8a2", "sighting_of_ref": "indicator--f6ec0093-3e45-4ea7-a219-4b06bd70bf40", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d2eb7c-72d8-4d00-aad5-a5a7628f0475", "sighting_of_ref": "indicator--c207ea2e-dfb0-4ee5-a56f-f17387ba3e9c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfdf1d0b-655d-4cb2-8849-d86ec19519dc", "sighting_of_ref": "indicator--4e651566-ed96-4596-b6e7-6fd0b8051a69", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62128f07-3d23-45d6-a451-dd2fa3ad4588", "sighting_of_ref": "indicator--e0c87a0f-9e16-4fdd-bba3-4f437bb092df", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90d38f0-b828-40da-ba44-0eb3f26d7ef0", "sighting_of_ref": "indicator--e0c87a0f-9e16-4fdd-bba3-4f437bb092df", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51b21f1-e8a9-4e65-a87b-65cf76c5c63a", "sighting_of_ref": "indicator--5a51fe45-cf3f-4c5f-b8e3-388bda0ec379", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14426d87-2c59-4f68-a575-2ee95d4bfeed", "sighting_of_ref": "indicator--7afb2a6c-7964-40a7-ba62-c9319a9c70a3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25d3c4d-e111-4b5a-ae9d-61157b54db74", "sighting_of_ref": "indicator--c22e141c-5166-460e-9252-614847c97799", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023841c3-da12-401a-8216-dd943800af27", "sighting_of_ref": "indicator--1e103302-c862-46b9-b4d9-e0c0ad4ee69f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cdb4643-e0b6-4f71-82be-36b6150de967", "sighting_of_ref": "indicator--2e4e384b-1e7f-499b-a716-837d383b4a23", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662fad4c-63a6-4519-b244-2dece15a368c", "sighting_of_ref": "indicator--ddc5a9db-7496-4fdf-85fd-bb24ba3f7f20", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae3ff3b2-f36f-4d0a-b0cb-a1efb39809d5", "sighting_of_ref": "indicator--a9a9215f-9e15-439f-8dbc-0e71e8cb9f60", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d805b7-c7e3-4aa5-816d-7b2a94894c6b", "sighting_of_ref": "indicator--a9a9215f-9e15-439f-8dbc-0e71e8cb9f60", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049b1650-f42a-4562-a42f-e25e5c5c247a", "sighting_of_ref": "indicator--520bae19-3ab9-4dd8-ba9a-21860b05a19e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63f4aae-a48d-4402-809b-6b5756000359", "sighting_of_ref": "indicator--63ed74b5-0283-4cff-b81e-51e636b01182", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d81973e-a04e-4ad3-91d5-dc7cfc94cb3a", "sighting_of_ref": "indicator--bb03dd53-69d3-4e68-9046-04b744dca1b6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ea25d8-60e1-49e4-a8b7-a152bb5728c7", "sighting_of_ref": "indicator--14b3dd6e-a191-49cf-81eb-0f5b2158f165", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86379d6-8d7e-41c6-90c8-803710309893", "sighting_of_ref": "indicator--85dec35a-9cdf-40a5-b400-bc39e3ae15ce", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46604c1a-82f6-4828-83db-916b855738bd", "sighting_of_ref": "indicator--71f234b4-ea84-4e39-9a17-a3b5b481a5bc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052fac05-a796-4afa-8106-f30ef61c1d82", "sighting_of_ref": "indicator--71f234b4-ea84-4e39-9a17-a3b5b481a5bc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f893c9cd-4e49-4df4-9c3e-6580888d27b7", "sighting_of_ref": "indicator--57efa232-fbab-4752-8ae4-d725d025de98", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46bc7923-2c9b-44db-a3d4-80a4ef1a0352", "sighting_of_ref": "indicator--fd06cfc3-fd07-4df1-91f9-31a2d018d55b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953d44c6-bad4-479b-be40-8ac4312a9b06", "sighting_of_ref": "indicator--7d9b2072-cc8d-4c85-898f-ba04ba9b726a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17460974-0bd0-452d-9494-2eb7e733e4aa", "sighting_of_ref": "indicator--91205825-1999-4d4a-b81e-9e8c5a36107e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939750de-8220-4c52-8c09-67019ee6933a", "sighting_of_ref": "indicator--fb2a6478-8924-4a8f-8a87-8d47f367b3d4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce21ad4-6c06-4722-8a5d-529174778764", "sighting_of_ref": "indicator--21800cb0-11bf-421e-98ca-45cb6c71d222", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1141207-6ef4-4b40-ad25-f949e266ea2f", "sighting_of_ref": "indicator--0915ffa0-ed4e-4c38-8b26-d258045f5481", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c64aab-8755-4664-9cf8-71c1f6026b2c", "sighting_of_ref": "indicator--e60b4fb3-0f88-4281-9c7e-34bd2df9dccd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae50bb0-2e78-4bac-8dff-44c315dc9b5f", "sighting_of_ref": "indicator--bc6c3c12-572e-4689-b3f8-5ea26f3ef63f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bc6466-f30b-419f-a6d1-84b56d4b3cf1", "sighting_of_ref": "indicator--6d472787-be3c-444b-987f-0d2428d23911", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c95c281-7255-4f35-a8ae-cd95109b8c36", "sighting_of_ref": "indicator--14a882ad-b5b4-44a8-95f0-82be27a776ac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e35c8e-695f-4241-9a9a-fc885f8a51dd", "sighting_of_ref": "indicator--8441edda-d616-46d2-be61-c8d61093ab7c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d229055-f00c-4650-b167-b2cc3339f34b", "sighting_of_ref": "indicator--91bb3101-16da-41d5-a3fd-f2e399666952", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07f24a6-0057-4a41-992e-9de883130125", "sighting_of_ref": "indicator--b1d5d30c-93d0-497c-b7cc-4edbe7374577", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af6e2a7-2971-404b-88d9-5eb1dfbabb19", "sighting_of_ref": "indicator--9a3f4b72-328d-4475-b60f-5db0034aa130", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608ad88e-71f8-42e8-8f7d-a15d32e1b8ed", "sighting_of_ref": "indicator--46a96eb1-8124-4dfe-b86f-8acd3fd3399f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f516d4c-f172-4e9b-8759-596d3b996d37", "sighting_of_ref": "indicator--9e8e3d74-9623-4b45-889f-3e1fdf685d38", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd428cfc-8cd3-4c41-921c-36ef3147d6b6", "sighting_of_ref": "indicator--9e8e3d74-9623-4b45-889f-3e1fdf685d38", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5240748e-c00e-4190-ba8f-e96ff105ebdf", "sighting_of_ref": "indicator--3f46c299-e065-4e57-a4db-ca5ebc56abb5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960124e6-fbda-4031-9442-99107dde1298", "sighting_of_ref": "indicator--f02db289-9ae5-4287-9e22-57e25872082c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2299c79d-10b1-4ab2-b9e1-4e7561db5bef", "sighting_of_ref": "indicator--208658a0-6a92-4783-9d01-666e62ec3c95", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e59a58-8af6-4400-9980-04784820668e", "sighting_of_ref": "indicator--955dbb99-d5ae-4c9a-befa-7715de691f9a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a28e2004-af57-422a-8211-e45a5f0c1b02", "sighting_of_ref": "indicator--955dbb99-d5ae-4c9a-befa-7715de691f9a", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fd3f27-2c0a-425c-ab50-db729c766687", "sighting_of_ref": "indicator--955dbb99-d5ae-4c9a-befa-7715de691f9a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b554c29e-f061-4b07-835e-e9372a591a1a", "sighting_of_ref": "indicator--2694791c-229b-492c-8785-96c288958761", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92db39ba-1123-4a71-a7f2-750a728b4df1", "sighting_of_ref": "indicator--2694791c-229b-492c-8785-96c288958761", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5256949-eb82-4f6a-be9a-2231a67d6d42", "sighting_of_ref": "indicator--60d40b79-7d8b-4e2f-9ccd-b1f0ed1704a6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c57ae3-d9f1-4ecb-860c-50f3865c09df", "sighting_of_ref": "indicator--f8036c2f-1796-4428-b6fa-9672108934c9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30a13d3-6488-41a8-918c-542c0dadef8a", "sighting_of_ref": "indicator--fcac7c72-9dc4-4620-8864-0944ba1006ee", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2952e2-4103-4890-8ac3-fc7e058f1ca0", "sighting_of_ref": "indicator--1eee96fd-8d30-44c0-885b-f2fa6336bd96", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dcdc14e-d393-429a-a468-3286ab419e45", "sighting_of_ref": "indicator--446f17a2-add3-49bc-9ef9-348e0af65c97", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327842a5-c715-432f-a027-628ac460d586", "sighting_of_ref": "indicator--6e59c997-2b38-4ab9-a95c-209495285091", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e90d308-4c28-411d-8905-00f551fdc702", "sighting_of_ref": "indicator--c87fe660-aa95-447a-ae09-7aa17f8ee77c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6bbfcd4-4d79-4231-934c-f2d4a6333506", "sighting_of_ref": "indicator--7d67c9a2-e76e-4755-a5a4-824d789ecdbb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007fdf01-1d22-4bc5-9376-5d1097493a4e", "sighting_of_ref": "indicator--2828bac5-36ed-4471-843b-5a417b685d8a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529ba27e-dcce-4fe3-addf-4eb9f7fb5c25", "sighting_of_ref": "indicator--afe2025d-71ce-4afc-8181-917c394418fa", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2320803e-a1a2-4ade-b96b-3a6165708e38", "sighting_of_ref": "indicator--fd358708-500e-4c20-8ce9-43baa30cfcd3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9296f1a5-d2da-4b56-a006-18dafca54039", "sighting_of_ref": "indicator--54492637-4aeb-4438-a900-6793e2633ead", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2058ea37-1003-437a-959c-7a3ad085eb5d", "sighting_of_ref": "indicator--c9113a9b-a8f2-4de9-8edb-8662c4da21d3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b31c82b-fd3e-4144-a10e-4395916ae210", "sighting_of_ref": "indicator--7fdd1f37-0c3b-430e-8866-f442c7303929", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6b324f-78fa-484e-9f81-50b5d8fdb020", "sighting_of_ref": "indicator--62ef8e7e-2664-4fee-9573-4ce2a2dd6131", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32390807-1168-4559-884a-1ba583a89a6e", "sighting_of_ref": "indicator--edc8e059-b648-4f32-803b-466ad7f1330b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0126248c-025e-4770-b333-6756c6c9537b", "sighting_of_ref": "indicator--42b8c107-3a03-4c1a-a25c-4367a199593d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f551bbc-0400-436f-ba49-00f915f0496e", "sighting_of_ref": "indicator--235be31a-40c5-4242-ad27-2bb69e1ec394", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a626100b-d564-4101-ba34-083453336312", "sighting_of_ref": "indicator--235be31a-40c5-4242-ad27-2bb69e1ec394", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1709de5e-b886-4670-a0e6-03943bc24c2e", "sighting_of_ref": "indicator--355a586f-01f9-46c1-884d-705be1a1bf8a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19df10dc-375d-4919-a91c-baf3587d15d8", "sighting_of_ref": "indicator--a1e188bc-f074-4b7b-834d-568c91090ad9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6d07f4-ea59-4bd9-9eab-08c9fd56602b", "sighting_of_ref": "indicator--c0da78c7-37be-4995-b9d4-a04ccdb1abe6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2253584-969d-4dec-967f-a2ec95904556", "sighting_of_ref": "indicator--c813ea07-468f-4933-a86b-0979553de52b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86c3a65-5c6e-48bf-83da-a1cf1181a542", "sighting_of_ref": "indicator--8c5d1ccd-9dfa-4611-84a5-2aa1d922cce0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59fa9273-1568-4477-9e8e-a4c7eab8aad4", "sighting_of_ref": "indicator--bcc10c90-2866-46b6-96ee-d2b9b9bfdb16", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf45059d-929a-4b9e-9e2d-18ba9aaccd9d", "sighting_of_ref": "indicator--ba50e539-8a02-48ff-97d6-6e32acfc07d1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b2d3b8-28c3-4c63-b602-7a16c59c7495", "sighting_of_ref": "indicator--555803c1-2c24-4feb-936a-4e99057161ae", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3648387a-2bf5-407e-ae57-8295e34fe2e9", "sighting_of_ref": "indicator--a08465c9-fcce-4708-a5f3-031edc7ab691", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a61b39f-4bf6-4ad3-829c-0d157a8412e9", "sighting_of_ref": "indicator--9dd6cebf-0d47-48ff-af08-d3d75d865fa0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972badc3-b38a-45a6-8402-d96301d39197", "sighting_of_ref": "indicator--b4c9565a-6e02-41f9-9f75-36e9e1b5bbc0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a2a03a-f242-483e-8437-f331dda56100", "sighting_of_ref": "indicator--f5a30aad-96d6-4450-9842-7ec1bcfd2e86", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d25215a-56d7-4423-8a00-6b56d5716d10", "sighting_of_ref": "indicator--55c86ba9-88a5-492f-94de-1e545d40eebc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f106bbcb-7dc4-4be5-be47-bf1e385bae72", "sighting_of_ref": "indicator--809f880e-b01d-4be6-9ac2-5012e08cb83e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8516382a-7742-438f-855c-115a157c667b", "sighting_of_ref": "indicator--5a07c9c5-427d-4eea-abfa-83e23603efef", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3089040d-badb-42b9-90a2-ac32de21da6b", "sighting_of_ref": "indicator--375290e6-8cd2-4f72-af22-6c7238def9f6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67c1e2f-1f20-4311-9a40-f45e0f5d69c1", "sighting_of_ref": "indicator--375290e6-8cd2-4f72-af22-6c7238def9f6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64dfd06f-8766-47e4-af83-1c591a626532", "sighting_of_ref": "indicator--4cc9b8a6-9f9d-4db2-bbc7-6a4e4b703c27", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0856aada-b527-4eee-92f5-f1947eb04086", "sighting_of_ref": "indicator--3b34c20b-ae5d-4a7e-8ba1-8278774fc7a0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc86e03b-ae36-47dd-b1a1-dbb7cafc79f3", "sighting_of_ref": "indicator--e86608dc-c5e2-44cd-b19c-6431abf3f67b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d2940f-ef38-42b4-8960-d531583031b3", "sighting_of_ref": "indicator--3e842377-abf2-4bfe-b422-35cde0901444", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792ca93d-28fe-4277-93d0-d71488841446", "sighting_of_ref": "indicator--7459feec-9153-4971-bd2e-dd9d21bb4073", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feaa6a9e-9447-456c-9b75-53f1151377a9", "sighting_of_ref": "indicator--c7e9b8f3-358f-4004-bf4a-8b4fb87cf6ae", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae25d75b-92b7-48a9-ab8a-257019442816", "sighting_of_ref": "indicator--c7e9b8f3-358f-4004-bf4a-8b4fb87cf6ae", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4f8712-e0f6-434f-a3b2-e4be28665030", "sighting_of_ref": "indicator--2d3b4f09-bdd1-4081-9309-0e598942b68b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22420d32-2548-4a5c-b646-b985c14200a4", "sighting_of_ref": "indicator--333c8193-9812-41f3-af91-fe1e9a510bc3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90d2f73-4dd7-4a33-a52b-2631d3e45515", "sighting_of_ref": "indicator--721324f2-acb5-4c2c-a107-789387bb54ae", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98a1932-ae69-4508-8c56-0d37960a2b88", "sighting_of_ref": "indicator--1b3ea059-348c-4382-aec9-966c3836f3c5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ba7e3b-9a7d-4738-9d7a-83411e74a933", "sighting_of_ref": "indicator--8a877007-40c8-4c38-b199-151bb6d74a00", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4430ee-f74d-43d9-b32d-a9fe0f257075", "sighting_of_ref": "indicator--e8be45b4-3603-484f-b6b2-227cee9d8798", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbe509c-da33-40f1-904b-5e22ed66e109", "sighting_of_ref": "indicator--f3aaf0c3-3c81-49d3-be53-59be811001d9", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59da95a5-bfcb-4c69-b57e-cd1c143b3124", "sighting_of_ref": "indicator--2fcc5768-8a5e-4fae-9bac-d1d3bd20540e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee70703-cf51-4233-8f32-6a532133d89d", "sighting_of_ref": "indicator--43a1a219-7a7b-44b8-80a4-50b28067e2af", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ff7558-df9b-4534-a909-83e6df5ecaa1", "sighting_of_ref": "indicator--1913447e-ce73-40ed-8ede-dceadf204d0d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe696cf-fc3d-4c3a-82df-415d1ca52745", "sighting_of_ref": "indicator--f542c083-1927-4e2c-a726-afb693fde994", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4df6ff-01c5-4e32-bcea-aa8fc75d6958", "sighting_of_ref": "indicator--5c756c83-36cc-4630-92ee-cd58d9be2667", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783df347-cc75-4d0e-9e90-14ebde01d4b2", "sighting_of_ref": "indicator--5c756c83-36cc-4630-92ee-cd58d9be2667", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb68d4a-efc8-464d-8e5c-42687aeb0188", "sighting_of_ref": "indicator--270c0d2d-ae28-4ad9-a0c2-1114d15e9669", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e7ee37-9d30-4a62-afe6-0bd62e8d6503", "sighting_of_ref": "indicator--716a4c07-cf56-437c-a891-cc59a85e24d3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6284907c-0889-4247-ba30-57288e26b0ab", "sighting_of_ref": "indicator--711dbb6a-8703-4eed-a7c0-59c6cffdebe2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc38b89-7c00-4e8d-ac11-66134673c130", "sighting_of_ref": "indicator--fdcf748f-ceef-4b57-91f4-eae0a65935ed", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6dcdd01-07b8-4f18-8116-d64db8ac2359", "sighting_of_ref": "indicator--371a8cee-03fe-41d8-9b66-09976a12ac3b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae81d7c-d788-4496-8d49-4531b2ce1126", "sighting_of_ref": "indicator--6108f3f9-063c-4739-8026-d22a6630c55f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32409a7e-8a87-4c9f-b9ca-7f93dd8450c7", "sighting_of_ref": "indicator--f7b6b249-9dc7-4f04-ae80-3cbe64ee010a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c816239d-5af2-4634-8bcf-8f4ac1e8f7a3", "sighting_of_ref": "indicator--fc27259a-a105-4dc2-84dc-602d44f8741b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668c9a95-a72f-471f-a73b-60120450df80", "sighting_of_ref": "indicator--977d3bcb-9dce-48d0-84ae-bea19f2a9064", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd71e80e-b2b3-411c-9893-5a3afa8e5bae", "sighting_of_ref": "indicator--d615ce86-ec3a-4764-b3b4-c25a7e73c97b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144895d6-a499-402d-a9f7-e45b605e9083", "sighting_of_ref": "indicator--fb8b1d2b-8688-4ba9-9dda-47ede4e8736d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a1cbe7-94fb-42f5-99d3-4ee4f6ff33c1", "sighting_of_ref": "indicator--db673317-9e89-48f4-a560-73d543600875", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3438fb22-09ee-4b17-9327-bd8b9ecffdd8", "sighting_of_ref": "indicator--f57a055b-d51e-40a6-9e05-e4225a738a55", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d17018-6e6f-4e13-9efa-40d5dce33ff1", "sighting_of_ref": "indicator--829559b7-1cb0-433b-ac1c-b976e5a7970b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71954bc3-3f8e-4e5f-abc7-cfa804e8794b", "sighting_of_ref": "indicator--49c518ae-d920-47db-ae7f-43ddb3972b4a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3db7600c-acdb-4dde-980b-1b3f94319d63", "sighting_of_ref": "indicator--e3dd202a-0f22-4187-a573-30bc54a345a1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a87de4a-392a-4c36-9bf3-d73bf3e0d9d7", "sighting_of_ref": "indicator--b1d395cc-05cf-4d46-ad46-37b06aedf598", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97932e98-ec88-4a89-a2b9-e9b51f8b8011", "sighting_of_ref": "indicator--cbcea3aa-63dd-4b20-902a-018ee86485e9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff4fa37-57e7-4665-b3b8-42e09ae339b5", "sighting_of_ref": "indicator--e2a6166a-9878-464d-a765-85360f6ade32", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ecac20-808a-4a3c-8ce5-8278910d912b", "sighting_of_ref": "indicator--4edc7f5e-188d-42eb-8d85-4cbed68f56cd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d55389e-33d2-4a0e-83ee-5d585f73c075", "sighting_of_ref": "indicator--db1c75e7-1a7f-43d7-a05c-c1366aff5330", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15654ce4-25bd-4277-af70-161bf40dccdf", "sighting_of_ref": "indicator--c24497bc-ecad-4bb5-8913-65d03d319f1d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff03af93-1be6-4601-8e5e-9745f6d5cdda", "sighting_of_ref": "indicator--c6f384c1-6c9c-4443-9fd1-e1994732205d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ea901b-0dcd-4b00-8eac-45bb9af0979c", "sighting_of_ref": "indicator--43a35d8e-a09d-4964-9176-d3333a9e5320", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb7ba1b-d2f2-473b-8b0d-0c0e0f10e957", "sighting_of_ref": "indicator--023ef964-054a-414d-907c-87fc16344dc9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac226c45-2c46-465b-9eaf-3f0c6688f4f3", "sighting_of_ref": "indicator--3f280228-79b6-4185-895a-962fceab9105", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec26dac-f80c-46fb-bf8e-190cd420e8b8", "sighting_of_ref": "indicator--25e4af17-1351-4d88-b7fc-6f9ccd67efb0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae53282-c500-4641-a3ed-1b95a3db38bc", "sighting_of_ref": "indicator--cf1ef83c-7414-4d1f-96f3-a306797a1cb7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc3c30d-51d6-49f5-8487-e6cbf2689847", "sighting_of_ref": "indicator--99a16dff-9782-425f-833c-0a81ec0a688b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3f32a6-829e-4b1d-b170-98077f7eeb93", "sighting_of_ref": "indicator--058198a5-daba-4daa-9d8a-87c39e1703cf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f5529d-8a90-4078-9d2c-b54fe83aac9b", "sighting_of_ref": "indicator--a8743062-463b-4c46-a938-5af136261ca4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3c213f-f91e-4490-ad7c-c6b380477223", "sighting_of_ref": "indicator--e28dd2f3-de03-4b6d-b3ef-351fb53d4e3e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0bd14a2-c677-4f66-b93d-513ba84dab1e", "sighting_of_ref": "indicator--ba08839f-51b4-4d70-858e-9a2393e7e76b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78a35e3-d7b8-4eb1-bc6a-7c5db9635207", "sighting_of_ref": "indicator--2a7373d6-bf89-4be8-ac62-2666710eb873", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eead8539-1591-4d51-9c18-31c20bc72b7c", "sighting_of_ref": "indicator--ebcb3c5d-5c8c-4522-9c1c-110a2b0b712c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a98885a-b345-45af-85a1-847bca610234", "sighting_of_ref": "indicator--55238318-6053-481b-ad51-8f9208b3a50f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d37ce9e-4717-47e5-8198-01f0b42cf3d7", "sighting_of_ref": "indicator--344422c5-d310-404f-bfd8-602f82c39640", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb7819c-4281-4d33-b428-fa96c608ed7d", "sighting_of_ref": "indicator--f2c9e1e2-fc0f-4e43-bf47-630ccc594dc6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46a44b0-7484-4ff2-9137-a449d697f49d", "sighting_of_ref": "indicator--f2c9e1e2-fc0f-4e43-bf47-630ccc594dc6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b993e0-2e35-4506-8e48-3140279fe5ea", "sighting_of_ref": "indicator--c9b12aad-cabc-478d-9b64-d17d50a5291c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f95cc9-78ea-4aa5-a06a-dd078c91c031", "sighting_of_ref": "indicator--c9b12aad-cabc-478d-9b64-d17d50a5291c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7dfc72e-eb87-4b87-85b6-94a1372f838c", "sighting_of_ref": "indicator--7edaa090-bc21-4b08-a4f4-c1926fd3e043", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5c58ed-cfcb-415f-a3ac-0e1710670735", "sighting_of_ref": "indicator--1cb5a6ca-c8f1-436c-8986-87474041bb65", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a0c3a2-833b-4377-85d3-de5cd15da438", "sighting_of_ref": "indicator--c33cbd45-f59e-4a6b-9f3f-ef3cf3e80eaa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afedd6e6-54f9-44c3-b109-5d2a256b79f6", "sighting_of_ref": "indicator--f68dcaaf-65d3-4aa5-b03f-bafaa2f96a38", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3bfb166-84e6-4bcb-bc88-fe327e7c4695", "sighting_of_ref": "indicator--f68dcaaf-65d3-4aa5-b03f-bafaa2f96a38", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f11b7d-6a6f-4391-839c-4834f9616c26", "sighting_of_ref": "indicator--d15ed3e1-8b14-46df-8640-009ead40e27c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f078fe4-3fee-400c-8ba3-534d93528665", "sighting_of_ref": "indicator--d15ed3e1-8b14-46df-8640-009ead40e27c", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ccc7d8-0174-4e2d-aab9-d8eba8bf690d", "sighting_of_ref": "indicator--d15ed3e1-8b14-46df-8640-009ead40e27c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76dc9dca-603d-45a3-8f3e-60b14945f1cd", "sighting_of_ref": "indicator--acf7ae0d-cb0a-4a0d-9d21-180d9615a239", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7703293-5abf-4ad4-8528-aa9e89b4e0c7", "sighting_of_ref": "indicator--1740035e-362a-4bf5-8460-93927de4447c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b6ed7b-994e-4364-8e98-b43cca2074a2", "sighting_of_ref": "indicator--098db617-a9d6-4bf7-b077-fba41b57dc37", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--701c94f0-f9d1-4825-b6bd-26d9f7fc2244", "sighting_of_ref": "indicator--66064ed7-2c66-4007-ba87-e96c7d58b945", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a96869-bd2b-45f5-8826-27b65e4a2818", "sighting_of_ref": "indicator--15f2fdd0-c90a-4fcd-98f0-c27d976fc573", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7417dfa7-1d64-4208-a5e1-316c642244b7", "sighting_of_ref": "indicator--a006a94a-3f37-42dc-80ed-4741b013f9aa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16b3a6e-fd89-4c82-be8c-64ad5384de16", "sighting_of_ref": "indicator--0d4b2bc1-e733-4988-bedb-6fd4b0ab826d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229111d0-0679-4a5c-99fc-1bcdd1fc1c03", "sighting_of_ref": "indicator--bd1adcd0-903b-4c2c-a1cf-0799b89fe9f6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab261b59-65b9-4ea8-a628-245cd8c8b151", "sighting_of_ref": "indicator--ea15bd4f-0a29-4f64-a38d-c759c641cb57", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5f6450-720e-4ba0-be2b-73b3faaaecfd", "sighting_of_ref": "indicator--138507fc-db1a-4b14-84ad-8afa566c011f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b58869-6a6b-43f6-8d75-bc4cf3ac4592", "sighting_of_ref": "indicator--5aee6cb3-b2c9-4a20-9e02-a3e6d25aa4c5", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ffa745a-8937-481e-8b96-5a052d6ded4a", "sighting_of_ref": "indicator--31ac000d-a385-40d3-9850-a63c018f48e7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750f86d2-ff3d-4ef3-ab96-055ce694867f", "sighting_of_ref": "indicator--31ac000d-a385-40d3-9850-a63c018f48e7", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf98736d-9a5e-45d1-9731-26e562331394", "sighting_of_ref": "indicator--7455dfb6-2759-4ac8-93e4-5bb5df840443", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d832555-5a84-4b06-9000-ea0269c8b29e", "sighting_of_ref": "indicator--7455dfb6-2759-4ac8-93e4-5bb5df840443", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ae4a7b-a2ca-4142-b27e-99f0f62a7bbb", "sighting_of_ref": "indicator--5bb9633b-1a04-4483-8436-8bcfc04230d8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5d4887-e393-4282-a2b2-90b889f5cb4d", "sighting_of_ref": "indicator--5bb9633b-1a04-4483-8436-8bcfc04230d8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e8f503-04ab-473b-9857-e808d128faf2", "sighting_of_ref": "indicator--d1d1f48b-9c50-46b9-852c-c22552b4d484", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3115c205-5452-44be-aa9b-b55628d77df4", "sighting_of_ref": "indicator--d1d1f48b-9c50-46b9-852c-c22552b4d484", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceff4cd2-5e40-47dc-8aee-ac7ac8b30bba", "sighting_of_ref": "indicator--fd26aed5-a375-43a1-8605-2e2f2f93777d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48584782-53f1-4312-ad54-08f95504b262", "sighting_of_ref": "indicator--fd26aed5-a375-43a1-8605-2e2f2f93777d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9683bfab-1294-45f6-82aa-18544aad958a", "sighting_of_ref": "indicator--9992aaef-b748-4f5c-a8da-0ba5f801b2c1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e81950b-d560-4b69-8022-ed77cdcdaf5f", "sighting_of_ref": "indicator--fe9ef40b-a26b-4e5e-87b5-f82336310da3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31535cb6-feb7-45e1-bcef-a2d9fefed69f", "sighting_of_ref": "indicator--699d370d-5b4c-4155-b9f0-2e854f431db1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ff48c9-c27b-4f4d-9b7b-efc33aa55497", "sighting_of_ref": "indicator--c198f900-db21-4bd0-af8d-064c137f59fd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d40f55-510d-49df-9f27-a1202eb104a4", "sighting_of_ref": "indicator--8ff439ec-db50-4389-9824-9ae001db45a0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd035fb-089e-462c-881c-f4e6c94374ca", "sighting_of_ref": "indicator--38e15e2e-7b96-4400-a5eb-8cfaca49126b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dec5f1b-0a4e-431d-9e0b-5bfcdf4eb401", "sighting_of_ref": "indicator--930e1301-7171-4412-bb41-5b0868058d19", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed713a7-cd8e-4a26-a009-69be1115cf0a", "sighting_of_ref": "indicator--7e0a2eee-13e2-4363-9f74-5a189e1c63ca", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d59947-9ac4-4c38-8290-429197d5040c", "sighting_of_ref": "indicator--7e0a2eee-13e2-4363-9f74-5a189e1c63ca", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93183210-8cbc-43a4-99d1-1c117c2acf0b", "sighting_of_ref": "indicator--caa4f4b5-1438-4b03-ac55-be0b8a7d2cea", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273bb003-8380-4291-b6d0-4ff9b23e34ff", "sighting_of_ref": "indicator--1a0a7070-d5ae-49c7-9f37-cfa366ac3d55", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d24809c6-24f7-4563-bdc5-70599cbd8d43", "sighting_of_ref": "indicator--f57103c8-eb97-41e2-8434-764b89d53aa8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa90589-fe50-41a1-94d0-6d78bf0ffc07", "sighting_of_ref": "indicator--f57103c8-eb97-41e2-8434-764b89d53aa8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a20209b-78a1-4768-a607-403afba642c1", "sighting_of_ref": "indicator--93d93225-93ea-48bf-8786-0cfe230f2636", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864e03a9-6c58-4262-b0ac-9eb2df4d9229", "sighting_of_ref": "indicator--93d93225-93ea-48bf-8786-0cfe230f2636", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49921013-11ca-45ff-9c94-01efd0aec369", "sighting_of_ref": "indicator--93d93225-93ea-48bf-8786-0cfe230f2636", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83c943c-679a-4eba-ae64-deaad0da88ca", "sighting_of_ref": "indicator--0dbbc518-2971-4224-913e-c4b7216a41e1", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97194a7-24bb-4b62-92f1-b6b8245c619e", "sighting_of_ref": "indicator--fc43e1b3-709b-49de-bd12-8eacb53795fd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30470413-61ca-4cee-9126-bae0734c2e5c", "sighting_of_ref": "indicator--fc43e1b3-709b-49de-bd12-8eacb53795fd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d988ffe4-1edd-49a1-89d4-9814d4b2578c", "sighting_of_ref": "indicator--086e9473-2fc6-44e4-8ff1-29575e6880f6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb790ede-2516-493b-ba0a-e4e70e816ee4", "sighting_of_ref": "indicator--086e9473-2fc6-44e4-8ff1-29575e6880f6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd48f129-c944-45a6-81e5-c50f14602370", "sighting_of_ref": "indicator--94ba145c-9db9-4424-b61f-85294c17c720", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5dd253-62fc-4acb-997c-ce7c669a4b65", "sighting_of_ref": "indicator--94ba145c-9db9-4424-b61f-85294c17c720", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f30087-e948-40fe-bea0-b0ec5bd015eb", "sighting_of_ref": "indicator--fa6cc0de-c044-4b1c-831a-51df4eefc3e4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5842a4a7-fe49-474e-8c30-125c423decb8", "sighting_of_ref": "indicator--5c5d04a6-e9c0-43ce-9c93-51bdd7520ea3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3103036-63c3-40e6-bec5-bdfa1d58589c", "sighting_of_ref": "indicator--5c5d04a6-e9c0-43ce-9c93-51bdd7520ea3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed51132e-1a1e-43ce-89d3-13bc34bf4af8", "sighting_of_ref": "indicator--84168138-b789-44b6-8a2a-0d4dd6461917", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e85a27-8c63-48bd-b287-91fe70288ead", "sighting_of_ref": "indicator--84168138-b789-44b6-8a2a-0d4dd6461917", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee9e703-9e78-4ce5-aee7-39f30312eb4d", "sighting_of_ref": "indicator--f0c42eab-3e99-4b88-9f17-5ea4f7cea143", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f52c3a-bfd1-4a9d-99ab-69aa249a4488", "sighting_of_ref": "indicator--f0c42eab-3e99-4b88-9f17-5ea4f7cea143", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c800aedb-e9e5-461d-a2fb-1607df4069d2", "sighting_of_ref": "indicator--d601a174-ca33-4cce-8214-744c1c873bf5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1ef1c7-6382-4991-aafb-54196a97104f", "sighting_of_ref": "indicator--17b41abe-3db3-449a-8de8-dad83f7b4f59", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c5720a-bb18-4a04-a27a-a363b25040f4", "sighting_of_ref": "indicator--0abc3c14-87c2-435f-9e89-0a2fe36d3438", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e2de1d-8912-4385-a64b-c38924e76d42", "sighting_of_ref": "indicator--0abc3c14-87c2-435f-9e89-0a2fe36d3438", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2f64fe-e8f4-49f3-8cb1-2e2a0b91ee65", "sighting_of_ref": "indicator--627dd189-93ee-4a9e-be5f-13063bd21bc2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b671c14a-792f-4183-839e-e70adb5a6dd0", "sighting_of_ref": "indicator--d08b3e8f-c972-4c1d-a96c-2d78f641faa0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b73702-0c70-4cdb-aa9b-36a97dd934f6", "sighting_of_ref": "indicator--40c00a7f-106c-4ae2-af00-64557bced99f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b5fd77-a3d1-481a-88ef-ccd1cd70c93e", "sighting_of_ref": "indicator--bace31f2-c0bb-46ee-9732-da01d8b3a1f4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c15b7f-ec9d-4ca8-8e5a-f55a4ca3e500", "sighting_of_ref": "indicator--7e2da1e5-71ac-4796-a745-cd29a466d1d3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68eccc49-9b06-49c9-a6d5-7a8ffd4005e8", "sighting_of_ref": "indicator--98ddd180-0054-4fd8-aa31-9383de1fbbfa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3cf06d-c178-4054-b285-61ad886f14d2", "sighting_of_ref": "indicator--d8b0b222-726c-40c8-9d19-589f973d29e4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762732b1-54f7-43d5-b81e-de28e06ba410", "sighting_of_ref": "indicator--9f579b44-e9ce-4434-898e-052f61e8e4f2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf7e54f-e397-44e6-bb5b-d7afeaa301cd", "sighting_of_ref": "indicator--9f579b44-e9ce-4434-898e-052f61e8e4f2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53fcd520-6dda-475b-8ce2-f8e3051988d7", "sighting_of_ref": "indicator--7d646ef2-704e-4461-88d5-49719bca735a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74f194b-9fa9-4baa-842f-30f709873d00", "sighting_of_ref": "indicator--7d646ef2-704e-4461-88d5-49719bca735a", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e34511f-48bf-4839-be50-4bb1efc1e45b", "sighting_of_ref": "indicator--7d646ef2-704e-4461-88d5-49719bca735a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233e0f43-20d8-4689-a120-5be2e5357f99", "sighting_of_ref": "indicator--d8531907-0466-4623-8eca-2ba6170c1dd2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae06fc5-0c68-4940-b6c4-0ba9048bccbd", "sighting_of_ref": "indicator--c229dae6-2b3c-4c2d-8869-3990d61d20e8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbc727d-4b60-41db-9795-b27ed172a364", "sighting_of_ref": "indicator--c229dae6-2b3c-4c2d-8869-3990d61d20e8", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b109aaaa-06b1-4242-af11-0881c4c69b21", "sighting_of_ref": "indicator--c229dae6-2b3c-4c2d-8869-3990d61d20e8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db8b6db-6d11-42d0-8434-a7925ea84cb7", "sighting_of_ref": "indicator--71123405-1ea4-4c31-b74f-4db7a345b6e7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02e6c60-0823-45f0-9406-cde0db79a58c", "sighting_of_ref": "indicator--209a68c8-d721-475a-9b88-3ac380cf9fc5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dcb5164-7eaf-4967-8a69-f47e91157dae", "sighting_of_ref": "indicator--209a68c8-d721-475a-9b88-3ac380cf9fc5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2779381c-534b-405e-8478-869b0c1ae7ae", "sighting_of_ref": "indicator--b391e41c-076c-474f-ac5b-9f7ac0a8592c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d34e4f7-01c2-452b-ad89-ee160a53270b", "sighting_of_ref": "indicator--b391e41c-076c-474f-ac5b-9f7ac0a8592c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b34cbda-e74e-45a2-8ee4-3ea0c17cbc1d", "sighting_of_ref": "indicator--3f4fa9e4-50cb-4de4-8f41-b0a85340ce1f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbac5f4a-2f07-487c-b278-ae8ea2a840e3", "sighting_of_ref": "indicator--3f4fa9e4-50cb-4de4-8f41-b0a85340ce1f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5547d408-c762-4776-a087-8aebe6da0538", "sighting_of_ref": "indicator--828f4b18-edc3-4058-beed-d3f9d5000fd1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b717e9-2059-4d3a-8582-da918dbb34d5", "sighting_of_ref": "indicator--828f4b18-edc3-4058-beed-d3f9d5000fd1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c40bbab-a40a-4435-b50c-cec665d274d9", "sighting_of_ref": "indicator--6841b8e2-de51-47ff-a765-ed1bb7a19dcb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bffe94a-fe37-4d86-b55a-d4b1d299a457", "sighting_of_ref": "indicator--6841b8e2-de51-47ff-a765-ed1bb7a19dcb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c765fc-92e2-439b-93a9-3d549e88af83", "sighting_of_ref": "indicator--56f714c8-868c-4310-911a-598876d4ccee", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74dd6c61-16c7-442a-b969-c932bf7c1873", "sighting_of_ref": "indicator--56f714c8-868c-4310-911a-598876d4ccee", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331e61b3-817c-4ae6-84a7-e53937e5d0d8", "sighting_of_ref": "indicator--79bbf09e-57d9-4b9b-aede-05647c64d103", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9997fab5-93f1-43c5-a91a-2724d8577ccb", "sighting_of_ref": "indicator--f1cf838a-0eed-42ea-be8e-71a2ef09222e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c0d8b5-4e07-49d8-9641-6a56b8796c34", "sighting_of_ref": "indicator--84e1fecb-54e7-4ff0-b422-e808c67eec15", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb85ed3-b6db-4410-a56f-17c484f2eddf", "sighting_of_ref": "indicator--84e1fecb-54e7-4ff0-b422-e808c67eec15", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06963240-0ff4-4937-b834-6c90372a7b3a", "sighting_of_ref": "indicator--97fa46b1-3275-47c5-9aa3-051fe51bdea8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f41a82-ada4-4869-bd31-f43b021344dd", "sighting_of_ref": "indicator--d0f57f1f-303b-4900-96d0-be510d620326", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db093f41-8958-4650-b087-3dec44d0189e", "sighting_of_ref": "indicator--881b360d-402d-4c90-8ad2-59bc0e89a147", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea24e7c5-1652-418c-ba5c-32a998066ccc", "sighting_of_ref": "indicator--059f6fe3-510c-4829-9a37-833c58bd047d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e214ddb0-a56e-4c44-978a-05cf92091c0c", "sighting_of_ref": "indicator--059f6fe3-510c-4829-9a37-833c58bd047d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62a35ac-ffca-48e5-9509-5f7caf7e8258", "sighting_of_ref": "indicator--33224da8-4731-4518-bbd3-64c2653af630", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0600f2-65ac-4be9-8f9c-6e2cf82b052b", "sighting_of_ref": "indicator--e20cf8c3-a99c-458d-8755-297ae16cfd26", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6571ac-d2e9-4d10-94ae-ac29f3cbde84", "sighting_of_ref": "indicator--fc6f7093-7482-4656-8013-934538fa679d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f84b525-4565-43c5-aca3-0f6404e39766", "sighting_of_ref": "indicator--e1ddf3ec-962b-4b4a-90e3-6554afe0d343", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4503b30-349e-4780-9536-c1bd72f08378", "sighting_of_ref": "indicator--66162d64-d0f0-4ce8-9cd0-49b02d840812", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e283b6c4-5cc1-4891-8559-c8e5aa2cd433", "sighting_of_ref": "indicator--8ed1250b-7034-466d-a682-c0dc331b7eea", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a9e546-62ed-4962-b2f7-1b770e5b327e", "sighting_of_ref": "indicator--8ed1250b-7034-466d-a682-c0dc331b7eea", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734d6675-6775-4bd5-ac9c-728001dcbcd5", "sighting_of_ref": "indicator--90aa4042-9231-447f-bd69-f014741774eb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d16a3364-5ae4-42b6-a5f3-bbb6842cf55f", "sighting_of_ref": "indicator--90aa4042-9231-447f-bd69-f014741774eb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fad5cc0-2bd2-4771-9c53-28eb3c5fc5b7", "sighting_of_ref": "indicator--e8dfe4c1-640f-4350-9ff2-cdf75f505513", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b278469-561e-4b3f-b93a-61aade0657c0", "sighting_of_ref": "indicator--91377b1b-d3cf-4e3f-8cba-861c2a304626", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e9b901-acc9-4421-8439-62c78b0948a1", "sighting_of_ref": "indicator--1ba7b104-05b5-4b39-bcf5-4f549519c14f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99dc1843-92bf-46f4-8117-b19064c163c2", "sighting_of_ref": "indicator--621e5a91-bb95-4929-846c-74aa4728b9bf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7d64b0-4155-4884-ab68-6d3c3ba570f4", "sighting_of_ref": "indicator--621e5a91-bb95-4929-846c-74aa4728b9bf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf94f90-3589-47a7-9c27-64fe1c8b7aca", "sighting_of_ref": "indicator--8475ef5b-11a9-4279-81c4-ba4b54e5ea2d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2fa3968-336a-4372-a356-79e485972f78", "sighting_of_ref": "indicator--c5a0b12d-d28e-4aca-80dd-58f986462006", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca919ef3-6e17-4982-a3b4-cd7c6c67b964", "sighting_of_ref": "indicator--647ed3fd-a26a-425b-8d8d-739042449bf5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c821fc-756a-4846-a7d5-f2711e444709", "sighting_of_ref": "indicator--93f5a023-1d7f-4e2a-9701-fb6e8eae1412", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8115be5c-4b98-48e3-b4ad-9441bd6a35b5", "sighting_of_ref": "indicator--93f5a023-1d7f-4e2a-9701-fb6e8eae1412", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a1fcb5-1b9f-483c-bb37-361c0afd5706", "sighting_of_ref": "indicator--7835123f-e7e2-4534-8754-6f6fa24b8587", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8090ea0c-f4d4-49f7-a1f9-5149cb1d5a54", "sighting_of_ref": "indicator--51548f5c-a7ef-4ed5-897a-2fe7a407df0d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed2d69f8-e311-433c-972d-19d75b4e3940", "sighting_of_ref": "indicator--94294cc9-8038-4968-8ecc-a86eaa175e97", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd366e93-2ad7-47ef-b883-dae2132c8873", "sighting_of_ref": "indicator--94294cc9-8038-4968-8ecc-a86eaa175e97", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f0b8bf-3b43-430f-ac55-518bdc5f1c2a", "sighting_of_ref": "indicator--cc87b5c7-b4d0-403c-a73f-f201b8cc5545", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74399cdc-2bf8-4d6a-bf58-d09ece14b30d", "sighting_of_ref": "indicator--9d420758-1e13-4fac-8cc8-923ad07e1082", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afeacfdd-1a27-42d0-85be-8e6e50a2aa61", "sighting_of_ref": "indicator--c664dae0-3d85-4eb9-b1ef-b08906bbd41b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb56cbf4-5a60-4cf1-8625-e305ddfed9cd", "sighting_of_ref": "indicator--c664dae0-3d85-4eb9-b1ef-b08906bbd41b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9b1bf2-3dc6-4d10-a737-f6a4313795bd", "sighting_of_ref": "indicator--9d0445d4-b504-4a29-a12a-30f192b8d3ae", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0449c9b4-bce2-494c-a73d-614abe2636c5", "sighting_of_ref": "indicator--49d34b30-adf0-41d5-941b-ddd49b47a513", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e504d16-e682-4c10-a586-87395e7aa7e6", "sighting_of_ref": "indicator--49d34b30-adf0-41d5-941b-ddd49b47a513", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a28fdf-61d4-40d0-a68c-8ac1eb5b1130", "sighting_of_ref": "indicator--1e8e0768-51fc-4608-8839-475893ee4a3b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396dabe1-dac8-4164-80b7-4cce7712bdc2", "sighting_of_ref": "indicator--7a960aa5-3509-4512-a6ca-446c29962701", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801597fe-1fbb-46d1-9916-0cdc398a3227", "sighting_of_ref": "indicator--7a960aa5-3509-4512-a6ca-446c29962701", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d65222-d736-4c13-880f-9fa68ac353cc", "sighting_of_ref": "indicator--59dbd5e0-212d-41a6-afae-2fc6d14835fa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727cb9d6-5a43-4078-b16b-a7265a3b1ab6", "sighting_of_ref": "indicator--9b9ee9c0-9a94-4607-8d1a-927c27f8f28c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e33169b-9187-4504-84f7-de94e6ff3387", "sighting_of_ref": "indicator--ce57ca13-71bc-44f1-9607-4b22f8758b4d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f5e488-6e3e-4988-9be1-6df95402b2eb", "sighting_of_ref": "indicator--ed202c2d-51c3-40a7-8b61-9c68cf999804", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd14be6-6170-4fd3-a2f3-c16acb6a445b", "sighting_of_ref": "indicator--ed202c2d-51c3-40a7-8b61-9c68cf999804", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b180fff6-bf05-4d64-be3b-7ed5c41eeee1", "sighting_of_ref": "indicator--9ecdf6c2-d372-471d-9717-83706d836210", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82560083-6579-4a36-b534-a886a898482e", "sighting_of_ref": "indicator--18b0d235-d82f-4a9b-9d31-f57bcce37f34", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--231e77cf-227d-4dfe-8d2a-e49402f7331a", "sighting_of_ref": "indicator--590ab5e7-c0fb-411a-8f4b-e092e9937c99", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252de56f-f616-42a8-b69d-c841360b0068", "sighting_of_ref": "indicator--e12a75fd-758d-46bd-8b0c-799400b7af1a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c99294-ee26-493a-82c9-44a09c53e32b", "sighting_of_ref": "indicator--b713f92e-95c6-47f5-909b-d99f31a82bde", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86db8719-af59-48e8-82ae-43976508d517", "sighting_of_ref": "indicator--fa739c61-806d-4745-b393-233b4c4fedd9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3245180-4d05-4ff3-a1f9-89dc994393cb", "sighting_of_ref": "indicator--a6340cc1-81cd-4c4b-ae96-f645ce127308", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c8e015-5b90-48da-842b-9690e1c06286", "sighting_of_ref": "indicator--a6340cc1-81cd-4c4b-ae96-f645ce127308", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a669d683-39db-44b0-9883-c567087a9f2a", "sighting_of_ref": "indicator--c5616ea6-afe6-4b0b-a3e0-44d363f21270", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b88cf1-b5be-4bce-9483-5b712506801a", "sighting_of_ref": "indicator--953cbb82-585d-4841-b873-0c39872f820a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da191579-5d5c-4c4c-ae01-c71cf357b73e", "sighting_of_ref": "indicator--f1fb9555-aacd-4b2b-bc4d-0d4a3a43dbf9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d777cc-ae7b-4ca4-b9b6-b28627947174", "sighting_of_ref": "indicator--f1fb9555-aacd-4b2b-bc4d-0d4a3a43dbf9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c41799a-ad05-4c1a-bbdb-a24e14a042f0", "sighting_of_ref": "indicator--43e3ac33-1ca5-40ed-99ac-d753e3f3909d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2f6581-34bf-4cd9-b30e-23416f5e4db0", "sighting_of_ref": "indicator--43e3ac33-1ca5-40ed-99ac-d753e3f3909d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a1bdee1-8136-4e5a-bb98-f9d83c9c1969", "sighting_of_ref": "indicator--a032ac42-bff6-427c-bc23-05f6cb73b4c0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7dfaa9-8ea8-4e2e-8325-094f4bc3e63b", "sighting_of_ref": "indicator--e889c13d-0b08-4631-a3e5-7be29fc65a2f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7fe9ff4-277d-4467-8b1a-e36c7080b089", "sighting_of_ref": "indicator--967bcefd-d175-451d-8da9-fbd6346bfb50", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81423ec-1a76-4d2f-ad75-5ae516c987d0", "sighting_of_ref": "indicator--11ac69d6-82a8-480d-a0b1-c02985e4a7a3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeda1aa6-76bf-4a2a-848f-42ac5ce11e48", "sighting_of_ref": "indicator--11ac69d6-82a8-480d-a0b1-c02985e4a7a3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cf2faf-7ec4-4239-8211-ea1ed08d1e4e", "sighting_of_ref": "indicator--a86029fc-859d-4482-a41e-86c84ebe9cf9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1629a1f-d9bf-45f3-a466-23f6ca41b1ef", "sighting_of_ref": "indicator--a86029fc-859d-4482-a41e-86c84ebe9cf9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13356d97-3a45-4f76-9822-1493fe43e48d", "sighting_of_ref": "indicator--cca84014-dc49-4b6a-bfa9-829ae0010ebb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad8b20e7-1306-4722-a1a4-dc5f7ef3c589", "sighting_of_ref": "indicator--cca84014-dc49-4b6a-bfa9-829ae0010ebb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86bba440-76ef-432f-9643-e841eccb7bed", "sighting_of_ref": "indicator--21d9dd6f-d8ab-4080-8bb2-77e6f3599ca9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69875bfb-641a-4097-9e6a-11aeb129d7ff", "sighting_of_ref": "indicator--21d9dd6f-d8ab-4080-8bb2-77e6f3599ca9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6516310-8835-4cb3-b94e-bfc0229013cd", "sighting_of_ref": "indicator--811aeaef-385b-46ee-b920-ed4f12ef0e7e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6aebab8-a7e6-4f99-9e08-afb5d00cd227", "sighting_of_ref": "indicator--811aeaef-385b-46ee-b920-ed4f12ef0e7e", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae74704-609d-4b4e-9f7f-72747c39a9fb", "sighting_of_ref": "indicator--d2c1545a-9210-4e4c-a6ff-cb080db4c31b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e36574d-e436-4ab3-9b0c-b6362c3eb80a", "sighting_of_ref": "indicator--0e2e4ce3-1b3d-42bf-84e5-606f1612220c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f6df92-24eb-4a5e-af88-b6112fb992b2", "sighting_of_ref": "indicator--0e2e4ce3-1b3d-42bf-84e5-606f1612220c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e1c1df-fb94-462d-8323-5d4ebcbdd5de", "sighting_of_ref": "indicator--e7c65f2b-dc3a-4602-b895-bff473d72cb5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabed8e2-0daa-4441-a575-1f897c3d7600", "sighting_of_ref": "indicator--3bd21495-d86c-4539-a7af-b49dee7063b0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfec5212-a1e7-45d3-8903-192fef8ca78f", "sighting_of_ref": "indicator--3bd21495-d86c-4539-a7af-b49dee7063b0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b5cb6d-5f55-4a12-ba49-f48c0116f4f2", "sighting_of_ref": "indicator--e824c67f-1195-4289-a413-3e1e4fb0247f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c530b588-281a-436d-aa82-f854acf4199a", "sighting_of_ref": "indicator--8681a939-a034-4ea4-b011-f8d73044b2e4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57aa8376-f5bb-4f6c-8ed8-52147058da6d", "sighting_of_ref": "indicator--8681a939-a034-4ea4-b011-f8d73044b2e4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09df0405-e62b-494f-a340-dc6671c9a511", "sighting_of_ref": "indicator--7b33106a-bc0b-4eb3-8c04-dd6aa7b361a6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5488230f-64ad-488d-ad80-033b82f3355b", "sighting_of_ref": "indicator--a4e8c766-777f-4e6e-80de-fcc436d10d7d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8062cde3-6f77-4eeb-b934-1821eb9180ce", "sighting_of_ref": "indicator--13078075-b878-40cf-8859-9e7b7392aea9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8612f56-bf48-468b-95f9-6ac634c767bc", "sighting_of_ref": "indicator--09565e97-7d34-4f46-9a9b-b76a1633cb03", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53caa5e6-e840-4efa-a686-26fa130b336b", "sighting_of_ref": "indicator--6b55a199-7aab-4e49-aafe-56abc2659317", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d6bda6-3c32-4fa2-b46c-484d5a7dfada", "sighting_of_ref": "indicator--b8308091-fca4-45f1-8a65-4ac13df86403", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b0289da-289f-4393-8456-c8813b443348", "sighting_of_ref": "indicator--608aff62-1901-4afd-b920-779cff3a875f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d6fc568-4b3b-4d78-8668-dd3a664f1e5e", "sighting_of_ref": "indicator--608aff62-1901-4afd-b920-779cff3a875f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25888301-89d1-4a7d-a158-613fb4ecd5f8", "sighting_of_ref": "indicator--598d309c-f9e2-4e8b-a2de-be2ccb0d54ae", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db268f2-a208-46bd-b016-d83c52b130e8", "sighting_of_ref": "indicator--e66d9f03-3478-4278-8a0d-b67b2a0f3ff6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855a4987-9c90-4522-abec-d2636216a024", "sighting_of_ref": "indicator--118222ae-3eed-4fab-bd35-2a53930bbca4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7aef11-cd99-43b2-b6ad-ec8afc4e5441", "sighting_of_ref": "indicator--a64712ba-0117-4622-9f8b-b391f68fbfb8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26535ea-6c02-4228-8cfc-f72369965b30", "sighting_of_ref": "indicator--c0b03108-2d86-4ac9-b6a8-2b6b4c5c6100", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a43ccd-b276-4e40-81a0-beb7421e326c", "sighting_of_ref": "indicator--c0b03108-2d86-4ac9-b6a8-2b6b4c5c6100", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f26f67e-2d96-434e-b862-731894b98d7c", "sighting_of_ref": "indicator--7cdcdb25-87d1-41c3-9c3c-d9ca0082f80d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596d2bc2-c2f5-453e-a0a5-ab2e79f5a225", "sighting_of_ref": "indicator--7cdcdb25-87d1-41c3-9c3c-d9ca0082f80d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d52041-b592-494e-b33f-f14ddbf231e0", "sighting_of_ref": "indicator--7dccbb11-97e3-4612-81fc-8dc04941a7bd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e8faf9e-594e-4881-a76f-86467b1673dd", "sighting_of_ref": "indicator--39874f53-3b80-4bd3-9aa0-bfbdb0f6f8db", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce90d15-2fd2-465e-9897-d7c1b57a7785", "sighting_of_ref": "indicator--39874f53-3b80-4bd3-9aa0-bfbdb0f6f8db", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204e4a89-0aa0-41fb-b47c-91741d443cd3", "sighting_of_ref": "indicator--3e26de6f-88a1-4323-b632-e3615d78782e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85bbc00b-15c9-4348-b35d-080dcac77651", "sighting_of_ref": "indicator--903e21b7-06f8-4a09-baac-be54537b9f08", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--362b5914-d174-4c62-bb82-70ba0d45760a", "sighting_of_ref": "indicator--30b3ac6c-4cb4-4b18-a0d7-1b76961bcc8f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aba2dfc-e87c-4113-8c5f-fae5ee151ae9", "sighting_of_ref": "indicator--67c9ee7b-8d24-43fa-9d91-0fe72b7c1187", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524ea976-81d7-464f-86bd-34ed848b0c79", "sighting_of_ref": "indicator--8f35eb1a-d03e-4038-a66b-f37953b22940", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28bff70c-a970-4560-b610-32a58f02ad62", "sighting_of_ref": "indicator--d9d130d7-5ca9-4c21-8339-f0fea4eb9083", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0bb8023-e9e2-43a7-b031-0ec671cb4d03", "sighting_of_ref": "indicator--a0873008-cbb1-49fd-9f7e-0dca538b16f3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698aeb46-dfc0-49ab-be26-5f8c9da30298", "sighting_of_ref": "indicator--60f04284-771c-4119-8dbe-47783311c64f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e6acd8-e149-4c99-b5de-a619f88df632", "sighting_of_ref": "indicator--60f04284-771c-4119-8dbe-47783311c64f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efea9b04-14e7-4833-b78f-477dc951793f", "sighting_of_ref": "indicator--d5db103b-4429-492e-a334-4bfab8606ed2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c6000c1-c127-422d-838f-6804b8a26aee", "sighting_of_ref": "indicator--d5db103b-4429-492e-a334-4bfab8606ed2", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ac29ba-cd45-4f6d-a29c-345768a01525", "sighting_of_ref": "indicator--d5db103b-4429-492e-a334-4bfab8606ed2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde22742-a3de-4bca-b48d-6acb4ef49e95", "sighting_of_ref": "indicator--4d6e850d-f1d7-453f-a0b4-30a8400f199f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ffa5831-8b10-45f9-941f-6f7939a89db0", "sighting_of_ref": "indicator--4d6e850d-f1d7-453f-a0b4-30a8400f199f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ede6f5d-244a-43b5-9910-30e935a32ba6", "sighting_of_ref": "indicator--275f0878-ceff-4328-9050-3d9f1904cafd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63bc157-fe65-4ebf-a857-5df7cf9315f6", "sighting_of_ref": "indicator--275f0878-ceff-4328-9050-3d9f1904cafd", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9592e28d-242f-489b-a0b5-d5b5e9959082", "sighting_of_ref": "indicator--275f0878-ceff-4328-9050-3d9f1904cafd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1a0078-084c-448d-b897-c5c108be7622", "sighting_of_ref": "indicator--edb05d48-589a-4b12-9001-ba4132dee21e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97856d37-cb2f-414d-adc7-1e3d6e3f9592", "sighting_of_ref": "indicator--edb05d48-589a-4b12-9001-ba4132dee21e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43d6e49-9af7-4733-a349-da964d6850e5", "sighting_of_ref": "indicator--ec5f40d1-cf4f-4de7-8231-d4ce45a1e8a2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d1df30-faa8-407b-8b17-381629c17bdb", "sighting_of_ref": "indicator--588a6688-f4b9-4a0f-8387-244d7643c960", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513c26df-4219-4cdc-9f41-e7db5ffad325", "sighting_of_ref": "indicator--5499b105-c10b-42a8-9e1d-e330dc7b9869", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16aeff3d-881f-45e9-ba40-aea4e78ada90", "sighting_of_ref": "indicator--6e0fe734-d60d-4c7e-bcb0-dfbee7443a33", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c085f6-be66-49b9-907e-dd152a3c2d00", "sighting_of_ref": "indicator--9df07447-5f0f-4b7f-a07b-d2e58c73d711", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe363429-a152-4132-a744-ec5d64835cc4", "sighting_of_ref": "indicator--9df07447-5f0f-4b7f-a07b-d2e58c73d711", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1beab65c-ae17-43b2-8419-b9fcde209c3e", "sighting_of_ref": "indicator--2ea1ef45-3af9-44a8-a7f8-6dfb15a1ef67", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71528c2f-0fbf-493c-a285-4d4b2550e4bb", "sighting_of_ref": "indicator--c3c4358f-65e7-4c73-bd7d-f90a8b5be1f0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c11fc3b0-7df8-41c4-b522-6ff32b72871b", "sighting_of_ref": "indicator--61f02432-2a0c-4661-a0fb-4c79588c535d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd53b01-fc6c-4862-85c4-34615e1a7645", "sighting_of_ref": "indicator--9db13018-66fd-41d2-867d-cc7ec13066c2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067b9f68-1616-40f7-9ab2-649fc4f9ee5c", "sighting_of_ref": "indicator--bbfbb570-5bd8-4835-828e-e4c169642f06", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6fdb15-5c31-435f-89c1-e79ac21d15d2", "sighting_of_ref": "indicator--2cad2fe4-c486-4efc-979f-ac59095562e8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3decd7-e166-48bb-94fe-749b2fca6048", "sighting_of_ref": "indicator--03eaf81f-cf96-4a86-8ac5-02f2fedb5b9b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04170175-aeb6-417f-a376-78a1f785588d", "sighting_of_ref": "indicator--61b5d44e-90dc-4880-abf7-dc05962f1198", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f13a34a9-8744-410d-abee-e0d6768c12fe", "sighting_of_ref": "indicator--4adf3a13-67f7-4e49-a8db-b8b8568e7cb4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--580013e9-0dee-4b99-bb46-79ac71874e44", "sighting_of_ref": "indicator--c842a828-43bc-4bb3-b2b7-59a7dd0ebda1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811d354b-6739-4aa0-b5dc-8c61b9f89076", "sighting_of_ref": "indicator--82c9fc0a-8f8a-4866-b922-e0b399fda00e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd372af-997e-4ffb-be6e-61ce8dd60455", "sighting_of_ref": "indicator--fe5ec787-0946-4b52-b744-a48e2f20aad7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90511404-d8e6-4910-bd3a-deeb2b6013a0", "sighting_of_ref": "indicator--84e21f12-bcdb-4135-9511-ff3065dd01e4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00237fd8-b67f-4572-a064-c16bcc5594de", "sighting_of_ref": "indicator--72a313f1-7830-425f-b8e2-7218accbd808", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c72bff53-fe6e-49b2-b404-4c65da97ae64", "sighting_of_ref": "indicator--099bcf14-ce0b-46bf-b13a-bfa6660d5d36", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7246569-6f53-4e7f-8d92-ae41db24c518", "sighting_of_ref": "indicator--6375efbd-c6a4-48ef-a5ab-44afd96e233a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b1ee7b-dcfb-4e03-80ec-927823ddcd6b", "sighting_of_ref": "indicator--3347bb5c-c4c5-46a7-a90d-1fb8564aa13f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d716ce2-292e-478c-a4c6-34e08e3dc798", "sighting_of_ref": "indicator--897b4ec7-b596-4f8d-b3a7-3e6fdc0439bc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76730d58-c648-446b-9793-1cc61ca4cf3c", "sighting_of_ref": "indicator--d457f7b2-62db-4abe-aa95-1e9cb561830a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56fe80e0-c106-4ad2-82c8-96a0edf49a6c", "sighting_of_ref": "indicator--64f07350-19af-48ea-8506-9a0984e524cb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d2eb31-4c30-4a01-a260-fad03339353d", "sighting_of_ref": "indicator--3e327d0d-99cf-46ff-a52c-a5128013da08", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80d2abc-89f9-4d0f-be44-eb9d0b46e5ce", "sighting_of_ref": "indicator--ff057df9-b43d-4f81-9d00-6bdbc0966bd8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b116835c-ee46-43b9-b146-434788f64254", "sighting_of_ref": "indicator--ff057df9-b43d-4f81-9d00-6bdbc0966bd8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8649337-6da6-487f-a5c0-789d63dfe8dd", "sighting_of_ref": "indicator--9963ec1a-033c-44df-a8c4-6d235470aeb3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01044e5-f245-4c79-b449-b1bd64daf41a", "sighting_of_ref": "indicator--95d885d4-bcfd-47d6-94d8-d36e9c190275", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f061564c-cc4c-462c-8ccb-fca054c1e0cf", "sighting_of_ref": "indicator--e050b3d6-f940-4adc-9324-67146d634c74", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9798e1f2-bc02-435c-91bf-5b99cc47aa80", "sighting_of_ref": "indicator--f1bb0abc-8814-4075-833b-5f00aee01345", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4279e3a7-a1bc-4c68-b094-351e062caa3a", "sighting_of_ref": "indicator--58b5d96a-67a9-4916-bc38-343f26f7d6e6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c2dfb8-1a3e-48bf-8bbc-e37ed15122d4", "sighting_of_ref": "indicator--b3540416-33a6-43d5-bf90-51f7c85b7b32", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1aa3a2-9356-414c-839e-aa1d758aed1d", "sighting_of_ref": "indicator--7549f55c-0c48-4a63-a2d8-3cae1caf8287", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--410598a7-676c-4f77-8509-a6e9c7f7ff1e", "sighting_of_ref": "indicator--00d4e945-6430-4a2e-9411-d2a3341a5479", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff395a0-c0f9-4cec-84c5-1b34cea8187c", "sighting_of_ref": "indicator--1246750b-d3d4-451d-ae07-3103ecdef011", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77b1003-b7c7-402f-a4db-df3cac5704ba", "sighting_of_ref": "indicator--6b26c3ec-275a-4823-839a-4b36da7360ae", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b70785c-afef-4547-b2a0-3233c6b9f8b0", "sighting_of_ref": "indicator--e7b08810-3718-4af1-aa03-2df39dd77cc3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654f6f65-19db-4d5c-8d32-2fb3b09861a5", "sighting_of_ref": "indicator--af0e7065-f904-488a-b89e-978fa36dc60b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0c4506-9ece-4c5f-98be-28df77e1daea", "sighting_of_ref": "indicator--f679dd54-7b22-4a0d-ba39-cc18ab1d512f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0857b625-db92-439e-943e-965252e5e26f", "sighting_of_ref": "indicator--08bf2d28-5d47-40ee-be03-6498e9a7d9d8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4a2d48-391b-485c-a13a-f8f3aa7cae03", "sighting_of_ref": "indicator--019c7977-32e5-43b7-8158-f65afb5cd845", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b15b4e5-8a16-494c-99d4-ebaee35ffdc6", "sighting_of_ref": "indicator--3e5570e7-0c34-4c45-a9ef-3942f9d2a2d6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d1a3c69-40ba-41ae-9039-46da94c9869f", "sighting_of_ref": "indicator--dba6f197-7ae0-4fde-b12a-1b6b31907a1c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b87b47a-2622-4bd3-b404-342fc362a219", "sighting_of_ref": "indicator--03e1f756-bc45-48aa-95ca-b3f3c53a1d43", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa236c7-5db9-417a-904f-708346a5acd9", "sighting_of_ref": "indicator--03e1f756-bc45-48aa-95ca-b3f3c53a1d43", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c0e5db-2bc7-4af9-9f12-61d496cb17fb", "sighting_of_ref": "indicator--17812192-be2e-43cc-aeab-e513e74c8014", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e379d6-290d-4bbc-86c9-c5c3fe57c272", "sighting_of_ref": "indicator--a47850c7-0563-4590-978e-32e9b5825ce6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0afa8b62-b4f8-42cd-8302-2e00ae4f213d", "sighting_of_ref": "indicator--6b2702c3-ee2e-4fca-9002-d3c7f204de61", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0a189b-6917-4dc1-a6df-762c6df3a1a7", "sighting_of_ref": "indicator--6b2702c3-ee2e-4fca-9002-d3c7f204de61", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f3db4d-f549-4503-b1a2-48e9d8222a33", "sighting_of_ref": "indicator--5f6d9847-b938-43cc-a373-c46a1a2c12c0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33818fda-0837-4549-b80c-8fcc48e2d1f9", "sighting_of_ref": "indicator--8405c4ec-59c2-4609-9bf1-5bc2f0f7fe60", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329d74ca-1417-4433-bd4a-0808439df6eb", "sighting_of_ref": "indicator--be0616c8-1dd6-458d-944a-822fa0767a67", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef1940e-95e1-43d6-986c-7dc0a0bd2c1e", "sighting_of_ref": "indicator--79eaaad8-c8f6-4c3a-82b1-638d5b0c7a37", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113cfeb0-2595-474e-a2ec-3a164fdbd7f4", "sighting_of_ref": "indicator--79eaaad8-c8f6-4c3a-82b1-638d5b0c7a37", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3fb6fec-3014-488e-bc62-bccb52a6f29f", "sighting_of_ref": "indicator--2fe5d2e5-8bac-4617-b446-0ca4d614eedd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa287f11-d7b6-476c-b940-3d1a99bac4b2", "sighting_of_ref": "indicator--fb064817-737a-4062-8dd7-e4f2ba402b20", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1de150-89c8-4503-818b-675ec367b7ef", "sighting_of_ref": "indicator--971ffe78-d4c2-46da-a1ed-2fb03dae952b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a1ce7f-5a6c-4fba-b79b-7cd512c7e13b", "sighting_of_ref": "indicator--9d2ebdae-7497-4918-9c9c-c53e8bbe6579", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ea7b5f-604d-4f81-8395-8589b09f7c81", "sighting_of_ref": "indicator--b4782973-d221-448b-8499-1c7ba81c705a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f0d16e-d2c5-4545-b508-a62cef44ab7c", "sighting_of_ref": "indicator--af4dafa8-360e-4006-926f-10b95af6e9a3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8662233-1a94-4d6a-8d9f-bac6df35a6d3", "sighting_of_ref": "indicator--7c9e9b2c-44b6-4574-b227-5ceac09c860c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b4badb-d181-4ae5-be01-40a60fbebe39", "sighting_of_ref": "indicator--b7dc8ddb-066f-4937-9ef0-0110e6c66a2c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7e6ddf-9dd1-4ca4-9ad3-743b277a04e6", "sighting_of_ref": "indicator--7c17ea6b-46b7-4b0b-aa39-9923d32c878e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b1696e-cb57-49ea-be3b-53e117913e3d", "sighting_of_ref": "indicator--4238d61d-5f6c-4992-bb9e-e1e2b2722719", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445db0ce-7636-4705-8d35-bd45f8e29933", "sighting_of_ref": "indicator--4238d61d-5f6c-4992-bb9e-e1e2b2722719", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--961a827e-4b3d-4218-bdff-ec80e69d947f", "sighting_of_ref": "indicator--343e9c2a-6ba4-43fc-a201-135f4e7309a1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d594de-cbe5-4508-adc1-6a0d1964f82e", "sighting_of_ref": "indicator--645061de-9441-42e4-93b7-e0a3f12683d6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e44494-d42f-43a2-9134-81ce3b6e6abe", "sighting_of_ref": "indicator--ecaa547b-692d-4bff-ad4f-1c431db5794f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ef5795-7501-4c87-bc89-2a2cfdd00b54", "sighting_of_ref": "indicator--ecaa547b-692d-4bff-ad4f-1c431db5794f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62704f4b-e503-4d57-b037-5d8d7bfa9ac0", "sighting_of_ref": "indicator--ee36e6f4-c572-4711-9ca5-5d5b8f1ceffc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77613973-4a87-4b04-85ab-761726c15443", "sighting_of_ref": "indicator--028e1cc9-7424-49ee-a3db-c8920a5eac98", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bceb4672-533c-487b-9dc6-37cb10ed62b2", "sighting_of_ref": "indicator--2613da51-c5c4-4376-bbb9-966d0636a1a8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c53e6d-17d4-4e73-89c4-057b8589cad3", "sighting_of_ref": "indicator--2613da51-c5c4-4376-bbb9-966d0636a1a8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a591253c-5f3b-4ed3-950b-2fc414957deb", "sighting_of_ref": "indicator--b3304d83-aa4e-40ab-b76b-71ba9260df84", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45492d3b-778b-437d-90e1-28fc7ccfc2e1", "sighting_of_ref": "indicator--2cd78654-8de5-4c7b-b453-8a8a21c45271", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25dbea65-79b1-4d77-a22f-3dece12808c8", "sighting_of_ref": "indicator--d436712c-90ac-4370-a1da-e910827c9c82", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e32027-ebab-4a62-81dc-ca0fe2f21031", "sighting_of_ref": "indicator--4bb18cf8-49de-489e-930f-59f307a7ced8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a2c812-f270-4a33-bf10-e1c58fc1dcf3", "sighting_of_ref": "indicator--4bb18cf8-49de-489e-930f-59f307a7ced8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f57db6-0a33-42e6-870c-16f16111ef4c", "sighting_of_ref": "indicator--d0e64bbe-1733-4813-a4c5-97a93d194291", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8130103-ecbf-4b1b-a30e-a251c108a361", "sighting_of_ref": "indicator--4a79f2dc-466a-4252-aad5-6cae29f8b9be", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a70da85b-7a32-4471-9a17-e4efcfd6345d", "sighting_of_ref": "indicator--78da18a3-1a10-4df8-9b37-c0a6892b4e52", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ec3e12-acd6-4317-8e65-c7d4ff498787", "sighting_of_ref": "indicator--242cac35-0705-4b96-80af-585cb2b6202a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d80a4c13-c5e6-499e-94aa-3668d8dc24b9", "sighting_of_ref": "indicator--3cdaa6f2-e3d1-4df3-8048-ce00670310e9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc867a9-9e40-4b23-b482-951c741bbbdf", "sighting_of_ref": "indicator--6fd202e4-8b4b-4729-a1d7-5d2bb4b14b19", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed83d327-ae68-4be0-9f03-a327cf3d9436", "sighting_of_ref": "indicator--ee4e834e-a70d-4bf8-ad44-e9d9664fa643", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d744f01-eb2c-48c7-a1cc-6e3650d98e20", "sighting_of_ref": "indicator--ee4e834e-a70d-4bf8-ad44-e9d9664fa643", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9439c5-cf01-4f47-8f7a-0874676213e2", "sighting_of_ref": "indicator--92ad9058-bfc3-4e79-bc7f-38eeb6ddce79", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb2c227-2f5e-4b7b-b962-c0b78afd6d7d", "sighting_of_ref": "indicator--e2d57e82-da89-4004-9de2-539983fe2818", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae07ab2-7150-4cc9-b3c6-b94283f8c94f", "sighting_of_ref": "indicator--652fbb7f-0db5-4870-b084-3f74c5cba1a1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc997072-a459-40da-9cd1-f71a3cc7634b", "sighting_of_ref": "indicator--3cae1814-dc0c-4976-aa76-9597c79a2e32", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9624eb-d7c4-48db-989a-ef4d5102ec4a", "sighting_of_ref": "indicator--990d41e1-a708-4129-8c90-d32f2c0faf55", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4bfe1a5-5eb5-4bc9-b240-f24cd11aaa40", "sighting_of_ref": "indicator--b6e51b3c-fbde-42d5-bd4d-01e0836d04c0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09da2f3-fe20-42b8-8248-ac0bd4c2d51f", "sighting_of_ref": "indicator--a79c36a8-2841-4e20-9574-e70f21f1bfdd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d200a47-4c18-4f02-be5c-2e980c28b234", "sighting_of_ref": "indicator--2ede7040-2dd7-490c-b6c9-ebf7be9d4d75", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b8e5c4-0d94-474e-b036-fe8777320e7c", "sighting_of_ref": "indicator--c60ffe65-9f03-4d12-91dd-64691aac4bc1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8afba20b-9b8b-46fb-be56-483e88bb0559", "sighting_of_ref": "indicator--b0178979-95e6-47cc-9d4c-ea5151637cec", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1147cc-c316-4ffa-9a3f-07109990eb0a", "sighting_of_ref": "indicator--30546c0c-79d2-4b11-8d60-129e1b147c11", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561b1dc4-aaca-4ee9-9573-97a5f05a0178", "sighting_of_ref": "indicator--3e59f393-099a-435a-9db8-50ae85dcdd5a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71705e5-0f2b-4306-a653-d614e3159571", "sighting_of_ref": "indicator--e83fa3e4-cfbd-4a69-af31-830a5e8c2e82", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3fd58cb-f1b6-4ff8-9173-56df6bb06dc4", "sighting_of_ref": "indicator--432fed07-6199-4936-9c0b-d12e514f095e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300260c0-f102-4b8a-a148-f89fda992df0", "sighting_of_ref": "indicator--858d6634-5524-42be-9c75-f223d07b6b52", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee0f2bd-a5ed-4d7b-8f20-dd59cf8ade16", "sighting_of_ref": "indicator--858d6634-5524-42be-9c75-f223d07b6b52", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e34e7a-fd69-4684-b9cb-ed716bf706f7", "sighting_of_ref": "indicator--7155c439-955d-45d1-9c05-786443229ec7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f954cde-8516-4cd4-ba6d-0b36dadcf8b8", "sighting_of_ref": "indicator--fe9c6c68-bb92-4197-9bdc-83d3fd0ecf67", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995ca169-a585-48f6-8930-c6ee5744c432", "sighting_of_ref": "indicator--8748a93e-5fa1-4e0a-a0a9-323571df25ed", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8bfcb08-3a19-4985-ac0f-c020429fa8f2", "sighting_of_ref": "indicator--8748a93e-5fa1-4e0a-a0a9-323571df25ed", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44462489-9254-4325-93e6-49436542c0e8", "sighting_of_ref": "indicator--a841580c-d4dd-4b25-8eed-c0f0795bad49", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79747519-bf5d-465a-8225-5324993dd017", "sighting_of_ref": "indicator--f4373d54-8672-4bd5-ae09-5128884a61f4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3a2ce6-a9b3-497e-b697-ae497c9f3ad7", "sighting_of_ref": "indicator--4f30f0f7-375e-43fe-b259-6924dfaef664", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec6c0d9c-4232-456d-9a53-936d82d8a875", "sighting_of_ref": "indicator--ef3b3d29-e227-4063-883b-bb6155cbf72d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2194cfa5-c870-45cb-b77a-10e99891e7e4", "sighting_of_ref": "indicator--9a378a0f-5614-4872-88c7-e5708b9328f8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78fe46f6-405f-4f8e-97c0-02686eed3f69", "sighting_of_ref": "indicator--2bfbc91e-f944-4e3e-a6a5-53f9cf7a2d7d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eabc7794-811b-4e4a-9344-6280d698e5ff", "sighting_of_ref": "indicator--70807ed2-bcd3-48d8-a050-0ac43bd1abb3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea24196-64d5-4774-b5d1-74158b4c411c", "sighting_of_ref": "indicator--6e0bdf76-37a2-4831-b4b6-b6b699d3130c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd70410-1d8d-420c-b0b9-64cd0bc33531", "sighting_of_ref": "indicator--0bc810d8-fdb9-46de-a051-c5723f6f3963", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5b0d01-6fff-43f7-8e87-84c8401edc14", "sighting_of_ref": "indicator--970388e4-45ed-443a-9e27-b47fa4a6b30f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeaebfa4-c2dc-4984-b624-dfccd73738a8", "sighting_of_ref": "indicator--c27bb9d3-2fda-4863-89a0-9ba2013d606c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e321d348-a98e-4db7-b49c-9bb1fa935e55", "sighting_of_ref": "indicator--c3380539-8cd7-4d52-bc3c-2fb577bb0bb9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ffc9a9-b54f-4418-9b44-8581129af91a", "sighting_of_ref": "indicator--06113abb-ec23-4ddd-97f3-262e57463554", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc880bba-d514-44ca-bc91-bb9394e07ccd", "sighting_of_ref": "indicator--6e210078-238d-44db-9b12-d3608a82758b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20412c0f-d3fa-410f-b852-2273c48d0bd0", "sighting_of_ref": "indicator--ec4c837a-2549-4c99-9bec-fb9e5fc6661f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9368516d-e19e-475d-a792-f4a2d1b7a792", "sighting_of_ref": "indicator--1ed7a1a2-35a5-40f0-ab79-3feb0d9668c6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2fdef9b-2906-43a1-82b0-63d0f485814c", "sighting_of_ref": "indicator--a0601236-5fd9-45b8-98b4-a1886d40304e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558b34ff-85eb-45da-9077-b5c454a6502e", "sighting_of_ref": "indicator--2f3bf617-a81a-4287-ad1c-7d0badd5b1b9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa55001-a688-4c63-8055-1bd93fc17f0f", "sighting_of_ref": "indicator--41918698-9806-41b8-9b43-9768eec4ccc9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1006394-a177-4416-8f0d-e426e4eaa5ff", "sighting_of_ref": "indicator--41918698-9806-41b8-9b43-9768eec4ccc9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db170965-f0f7-41a1-9d20-bf0e05dc90eb", "sighting_of_ref": "indicator--92cdee46-59a7-434e-bfa2-ac8c1977446e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5739f923-cdc2-48d3-85bc-82845b5f7cf6", "sighting_of_ref": "indicator--1b924f05-79ca-4f41-9fd7-76a01b6a88e9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02338be6-d249-4471-8c2e-9c20e1b37aa5", "sighting_of_ref": "indicator--c3360567-6de1-40f1-bd22-51bbd93418ec", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c8f09c4-2ab7-4c5e-b95d-893be5d45a32", "sighting_of_ref": "indicator--f1e1b006-fdfa-4d83-9b86-8d52286f4dd4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41dfcfa0-2383-4093-a79e-699c75d3c4be", "sighting_of_ref": "indicator--7b71cefc-4622-4c0a-8fbe-208543137edf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61928a62-3d7c-470e-8dac-9c386090d630", "sighting_of_ref": "indicator--57971f07-f3ac-48c8-b320-d5e7170f1138", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1a6e8e-a115-4a82-94d5-2b31cbd999d3", "sighting_of_ref": "indicator--41b24300-335b-4a4a-942b-9f9add89c786", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920343e7-cd82-41dc-aeb8-bfb8a185f933", "sighting_of_ref": "indicator--3db4bcb9-a42f-4205-94ab-4279280cb945", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792a2965-c851-438c-b0fd-90e760015e02", "sighting_of_ref": "indicator--e143f19a-d670-458a-a5fe-86b487a9c87c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5046fc5-dcb8-446c-8b78-d95305406365", "sighting_of_ref": "indicator--e143f19a-d670-458a-a5fe-86b487a9c87c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da419efd-ea98-4dec-a6ed-16089cbb5657", "sighting_of_ref": "indicator--7b8e7386-3788-4350-a00c-bc646f4225ac", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5c21a8-d4d4-4636-956f-5b0c3fe8a592", "sighting_of_ref": "indicator--6324851d-912e-42c8-90d0-9db7f4fe5b47", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380820b4-7c35-41e4-912e-86f4e6ca3a98", "sighting_of_ref": "indicator--6324851d-912e-42c8-90d0-9db7f4fe5b47", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2a88f9-c21a-4f07-a47c-754ef8281d77", "sighting_of_ref": "indicator--7ff39157-6147-41c7-a9df-2fa9ebfb1fdb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6e8878-b62c-4166-a3ec-a5e0f42de36f", "sighting_of_ref": "indicator--7ff39157-6147-41c7-a9df-2fa9ebfb1fdb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68db4f28-39c1-48f5-9eb5-c9c2b0942c43", "sighting_of_ref": "indicator--b4673c55-664f-4a77-bef7-adc7617572f2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35664957-ec33-4dbc-818d-1e1e74467160", "sighting_of_ref": "indicator--061a7b6a-3940-4a96-bc26-afb753451fca", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20d74d9-81c8-4338-a507-8c5c59a43988", "sighting_of_ref": "indicator--b2c48471-4d7f-4b04-8dfa-18c34ff29599", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0509d6f-d8a5-4564-9d4d-e424aa8e6ea5", "sighting_of_ref": "indicator--a6af3adb-09e9-422d-abd7-98f621b4e579", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d302dc4f-1b71-414d-9484-ba813baecbf1", "sighting_of_ref": "indicator--cfca8438-8cf2-4b08-b259-2d693720e68f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c02de4-02ae-4e73-8f1a-4caf562c5571", "sighting_of_ref": "indicator--b82f345a-b99f-4e04-87ac-ad5ebcfa30db", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f868d68-c25a-441f-b3a9-7e90a6844d10", "sighting_of_ref": "indicator--b82f345a-b99f-4e04-87ac-ad5ebcfa30db", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99fb4c49-7c1b-4c4e-a18a-71a0f41ef52c", "sighting_of_ref": "indicator--024cc858-d89d-4648-9079-bbb82db0d40d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a992a15-6fbe-4fd9-a8f6-1e343c4a0c24", "sighting_of_ref": "indicator--6642e027-4ea3-47b9-82eb-6f06224d26c8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119882d2-b003-4c73-ad41-a80940c1db08", "sighting_of_ref": "indicator--9d1fae0a-d260-45d7-8a46-7beb541bfef6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f105e7c-8e55-4ff9-ae98-d0089a6d79d0", "sighting_of_ref": "indicator--1496a0c7-3691-4568-bd44-4192d8f89c9a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a93d66d-5f12-4c7b-a495-7d634ed2f523", "sighting_of_ref": "indicator--ec3d4ddc-11c5-4f60-a449-7374047700a5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169dfa98-88a9-4036-8521-eb957b8ecee3", "sighting_of_ref": "indicator--a86d576f-2454-4cd2-9a88-15c4e683ea59", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2cb3530-d9a8-49ae-83f8-3f3712e3be4e", "sighting_of_ref": "indicator--70f74ad4-52d2-4950-9da9-d4f5d772f3e2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0939088a-fad1-4a64-b683-be9de67bf9d1", "sighting_of_ref": "indicator--f1a1fcb4-ec71-453f-82fe-ba6eeef045c6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef9a699-f0f8-4bd2-ad53-4dda3842e292", "sighting_of_ref": "indicator--e6952bdf-ce02-4e13-92d2-17d9d24b0aba", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a357d2f1-6fb4-440c-996b-59953c510400", "sighting_of_ref": "indicator--e6952bdf-ce02-4e13-92d2-17d9d24b0aba", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3f6dcf-6068-4fdf-b256-49753f1011cb", "sighting_of_ref": "indicator--5df2cfbb-6f65-4a19-95c0-d9febcb66568", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ba85b4-d553-4326-a96a-5b7501be5077", "sighting_of_ref": "indicator--4d97edf8-2b47-4cc9-8e13-1861f3987474", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87f978f-a3db-43d3-8ee3-0fd013b9b8e7", "sighting_of_ref": "indicator--3904d718-ad0c-4cd5-8032-f87783f180ef", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e4aabe-2dfd-466d-8e32-0aa7cf8df8bf", "sighting_of_ref": "indicator--30dec51e-0c82-4130-bb43-8bd4a9754e3d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90f749f-f872-44e0-b39b-a2eccdc6117b", "sighting_of_ref": "indicator--b6b3627e-79b1-4c4d-8c9b-aa18f8d304f6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd790dc5-ce7a-4413-8b9b-20743a53f4d3", "sighting_of_ref": "indicator--2da04e75-dbe5-49ec-bf8a-3d8006255a21", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6daaf7-9faf-4725-9eca-3b70c71b5095", "sighting_of_ref": "indicator--446aef0c-301e-4f5d-b7b2-c800ac83bed7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c79d9c-eaea-4156-88af-0dba32eb0c8d", "sighting_of_ref": "indicator--752588d4-794d-48d9-ab75-d007b9d7595f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d546605e-5771-4fa5-96d7-3994267ecdeb", "sighting_of_ref": "indicator--2530a19a-af5a-4a47-8ff4-277b21485f44", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5872fbec-e93e-4a74-8edf-2506522fb6e5", "sighting_of_ref": "indicator--47d1ea2f-25b7-4784-8083-a731f747c816", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22547a4f-727d-4cf8-9122-ad2511e68e80", "sighting_of_ref": "indicator--7d16c7a2-f253-479f-9127-c671348e5983", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf3b47c-9e6f-45da-8457-ee78fe67f7e2", "sighting_of_ref": "indicator--d4ee2155-15e6-4b27-bda9-9c7c6f067f40", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530de2e8-24dd-4679-99b1-37798dc9e407", "sighting_of_ref": "indicator--d4ee2155-15e6-4b27-bda9-9c7c6f067f40", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56adc535-9ed8-49dc-809d-eacea5d210b2", "sighting_of_ref": "indicator--130d6acf-20d9-449b-9361-76e2faf4a9ab", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575b21b9-574e-4d9d-a235-7f6df5cabf26", "sighting_of_ref": "indicator--411be9ec-9ac2-401e-9632-e1b6c76f6cc7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d191623e-9550-40ea-950f-4f8f59b8dddf", "sighting_of_ref": "indicator--b9065f53-129e-45b6-8325-714361de7b0a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1674a092-0259-4217-912b-804502ab3528", "sighting_of_ref": "indicator--7fc3e8a1-6ecc-4ee6-a180-764bb74fdbec", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0480c961-1ae1-4bc4-992e-5db1d332d802", "sighting_of_ref": "indicator--394be3f1-501a-4a08-a0a6-07e373401072", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78bf87a8-68cd-4d65-854f-3d64031d0a75", "sighting_of_ref": "indicator--7c4482e9-bbeb-48e0-86bb-3e2d8722b8ee", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e307a89-e298-4cd0-8120-6986428cbd93", "sighting_of_ref": "indicator--344945fb-e90a-4cc5-ab26-fb7d0bdecc10", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b0df049-219d-47b1-9cd2-d38cad107ef5", "sighting_of_ref": "indicator--344945fb-e90a-4cc5-ab26-fb7d0bdecc10", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76dfd6b2-54d2-43f7-b27e-f2d70bfd4dd7", "sighting_of_ref": "indicator--87a4c051-353a-4989-aed8-a2f1ce36df07", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b944b92-8bfb-43ff-b683-f7bc09a1176e", "sighting_of_ref": "indicator--d39c2053-15a8-4d44-96f6-e6c3ea40af99", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0261c3df-0918-4eb5-adb2-53e11eb04055", "sighting_of_ref": "indicator--eb3560b0-e99a-4e24-8f70-3c21064904d5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567fc2b7-f671-4126-a860-7dc3718bb293", "sighting_of_ref": "indicator--2deac80b-7346-430a-b8e3-0b3b50883faa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f023e8a7-eb39-4dc9-84c2-56d9d94b81ff", "sighting_of_ref": "indicator--95442655-f91d-47a4-90ec-140c527a27e8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde753f9-3ed5-43c0-9a2a-c0f52e065a3e", "sighting_of_ref": "indicator--6f1f4905-fb0b-4e72-9208-eba043d51796", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad8ff12-d1d2-4905-956e-7a8d03dfdb80", "sighting_of_ref": "indicator--cc9a7b75-5a68-4f0c-bd75-eac3d9aa7281", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a305caa-219f-4680-89cd-85e4f567a8f1", "sighting_of_ref": "indicator--1bcacdac-5b90-4978-aaa7-9261e0010cca", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3810b3d-b8a7-4821-b253-3b94aef6d151", "sighting_of_ref": "indicator--e66ef084-4369-42c8-b943-830f54ba3767", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31357cb-462a-4a49-8488-be0068e1e9aa", "sighting_of_ref": "indicator--1d53f918-39cb-4462-aef5-0b2f3dece395", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e750a28-73db-4f8c-a629-3cbb2cdaa9cf", "sighting_of_ref": "indicator--45e18f0b-b9ee-47fe-ab18-c34d46b1bfbd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c75545e-2e00-422c-b8b8-ffd0e918d79d", "sighting_of_ref": "indicator--5e4c83a6-2d5d-4d9a-8558-5080fb84dcaa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ba179d-c368-4712-a508-63b7a77efd5b", "sighting_of_ref": "indicator--5e4c83a6-2d5d-4d9a-8558-5080fb84dcaa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81bcd812-4bf3-4cac-acaf-c75f0d78e8bd", "sighting_of_ref": "indicator--dbadedab-6f68-416a-8539-51e036ef11dc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5bd585-f02a-4aa5-b0f2-32eeb9f16f16", "sighting_of_ref": "indicator--f2ad07bb-08c0-4a6a-8212-ff9a15addb56", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7036716f-1d9a-45b7-a82a-613126f36105", "sighting_of_ref": "indicator--f2ad07bb-08c0-4a6a-8212-ff9a15addb56", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9081101f-2db0-4e94-8cae-649810f9714d", "sighting_of_ref": "indicator--3d0f0ddc-83be-4836-bd28-f6426995c102", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffee5cb5-e03b-413b-b905-8e205f76ed69", "sighting_of_ref": "indicator--f556d9db-62b2-474b-b797-891a9dd2f44a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ad3d04-1999-4fcb-a2ae-229bdef791cb", "sighting_of_ref": "indicator--a36855de-1f2b-47c8-850a-d6ea98b9bd37", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04fa207c-2d90-4c95-95ae-6ef186d22b18", "sighting_of_ref": "indicator--e9a4842d-ffeb-46c8-b9c9-19ce11637788", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f5f432-cf91-4b9c-810c-7155eeab16a5", "sighting_of_ref": "indicator--68c7db4f-1e86-4ef3-a321-a71d037736c2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c36262-c725-4471-b4bb-b353b3b89c0f", "sighting_of_ref": "indicator--c90ef6c2-4748-4fe0-ba2c-6b80643c400d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad585f26-aea0-4861-900b-c8f952b47963", "sighting_of_ref": "indicator--c90ef6c2-4748-4fe0-ba2c-6b80643c400d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b820eb9a-c30c-4e93-bfea-bbb518bf15d6", "sighting_of_ref": "indicator--64128d15-566c-421d-9fdd-e88d380f121e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac4c938-1600-462b-a64a-f3f1dde0f19e", "sighting_of_ref": "indicator--64128d15-566c-421d-9fdd-e88d380f121e", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b1de2b-c20c-413b-a50d-f0f55a8583af", "sighting_of_ref": "indicator--64128d15-566c-421d-9fdd-e88d380f121e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600ae83e-bf60-406f-a04a-0a67907ff517", "sighting_of_ref": "indicator--61896c13-d12b-4d03-9c44-308efe37a5af", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cad5d2b-f109-4257-b9ec-66fb873e5e8a", "sighting_of_ref": "indicator--1edb4fe5-7776-4e5b-b324-b111cb2bc284", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--443f9b5f-b05a-4e50-80cd-06d922123a71", "sighting_of_ref": "indicator--ad0f8dc6-9115-43dd-afd4-3c77289b5458", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b851a3c4-fbc0-4e47-b834-f57298bff3a6", "sighting_of_ref": "indicator--8ed8b982-2734-4810-a64c-e425d9c9e919", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9c3da3-d6ca-493c-ab1b-1776fc9b9274", "sighting_of_ref": "indicator--1414b8b6-bb50-4306-a34f-dd04e0da5a81", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e498640-592d-4ac6-887f-47c2ebd9bcf7", "sighting_of_ref": "indicator--09813d92-8795-45bc-9841-3620816dd890", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b240ea8-4af2-4254-8890-63fa2431770f", "sighting_of_ref": "indicator--d3cee2e1-1911-41d8-bc6d-faac11466ddc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83375da9-de10-41f6-a068-c0baad269a00", "sighting_of_ref": "indicator--f2eca9f8-83c6-42e0-beb5-c7a79fe87a70", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192dca69-fe77-4f57-81ab-f575f26d78bd", "sighting_of_ref": "indicator--5abdcf62-3714-4c80-ab8d-cc47f90284d2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2be54e-3bef-4e20-be60-2c80e2b935af", "sighting_of_ref": "indicator--9650c986-0787-4028-929d-3fbf39288ed2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1d0279-2e86-41bd-8e4c-4d29b1a24018", "sighting_of_ref": "indicator--71225c59-55ce-41b3-9b63-deef03a5727c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83c22685-883d-431a-9170-b6c1cedbc990", "sighting_of_ref": "indicator--e19c4bc8-5e39-4663-8253-e2117106f1ee", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0035f8dc-d7a8-420f-a993-3419c2fb759c", "sighting_of_ref": "indicator--c156a50f-1af1-4c81-9586-5baa40704a00", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a163c8ff-46b8-43fa-a13f-476142553975", "sighting_of_ref": "indicator--04b6a256-6c4c-45c4-bdc1-8f63d19ae723", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363c3963-6d84-4762-a2c6-3d4d71f90fc2", "sighting_of_ref": "indicator--066a89f6-f38e-4c8b-b413-3d1fcde8f3b5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba4a7d1-c85a-4177-9234-283ca07cc509", "sighting_of_ref": "indicator--a3a572fa-8927-4c25-98a9-f94f9effdd7e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9938dbaf-bd26-4056-8917-069fdd6bcd83", "sighting_of_ref": "indicator--6633ba85-1e90-4a8e-b845-8cc2d8051c4e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96646db-9154-47b1-a13d-523644ed6d61", "sighting_of_ref": "indicator--8fdc14c4-534c-4bed-ac56-e80621b88bed", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830ad793-4bd6-4d26-8857-f18c712eaa38", "sighting_of_ref": "indicator--8fdc14c4-534c-4bed-ac56-e80621b88bed", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fae8ac-8a9b-4080-9095-c9681567534a", "sighting_of_ref": "indicator--8fdc14c4-534c-4bed-ac56-e80621b88bed", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60e921b-5bf8-4323-9b46-1726701ff08d", "sighting_of_ref": "indicator--facb3b35-59f2-49da-abe4-dfba85ffa7c2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633f2d64-9ab6-444c-9b29-bd8b7829774d", "sighting_of_ref": "indicator--442cbcc5-c146-4a5e-92eb-ba3e170552ac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3f0af5-790b-4250-aa4b-2acf65409228", "sighting_of_ref": "indicator--442cbcc5-c146-4a5e-92eb-ba3e170552ac", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a6399e-367a-4766-9b49-3f9f582d5072", "sighting_of_ref": "indicator--19a70e15-57fc-427f-b5f6-a0edfd10f278", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507ea6b7-406f-4b95-82af-d5f4307ac9b0", "sighting_of_ref": "indicator--8b9c174a-3def-472f-8899-0047a9558129", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d4bc6f-0212-4d84-a53c-47c870e29b14", "sighting_of_ref": "indicator--537ab66d-e416-4b32-bb10-f177bb6f6d22", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6253caf7-6bbb-4c69-b190-0d1266f06b2c", "sighting_of_ref": "indicator--58d9c6a5-1ec0-427a-abc6-b777b81eb489", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1a670e-4742-4624-a1bf-b5a8f3130b4f", "sighting_of_ref": "indicator--58d9c6a5-1ec0-427a-abc6-b777b81eb489", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22a4830-8b90-462f-8b9a-dbe28e4ebcc9", "sighting_of_ref": "indicator--9c8abbde-2f6d-4b23-b89d-ef8644921c1c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7b0a5a-e080-4b09-bcd9-a52e1b2e0f36", "sighting_of_ref": "indicator--38b2fd8a-c720-453c-b3a5-edac52114eb5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18419f8a-db3c-480d-a764-c67beeead027", "sighting_of_ref": "indicator--38b2fd8a-c720-453c-b3a5-edac52114eb5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513ab990-0ed0-4b74-97eb-a465063ebb15", "sighting_of_ref": "indicator--666bad34-eeaf-41b7-a50a-e0c58e4147ac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec5d1f3-791b-4ab0-b239-4b19a528ba50", "sighting_of_ref": "indicator--666bad34-eeaf-41b7-a50a-e0c58e4147ac", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1627214f-a073-4b45-a412-a429c8eae7fe", "sighting_of_ref": "indicator--c3757ab1-cac5-435d-bd63-0802b4a75173", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c47e68-f23d-4295-82d2-9a7f7db80f5e", "sighting_of_ref": "indicator--c3d0bff6-7c0d-46e7-8898-9b89b67dd11e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c66d068-07df-483f-beb4-49a58a571e6a", "sighting_of_ref": "indicator--c3d0bff6-7c0d-46e7-8898-9b89b67dd11e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26a3904-9596-44cd-8c35-a90e1f37c6df", "sighting_of_ref": "indicator--9c5b4234-c6e6-47fb-a799-5b908babc8b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23f0c3c-a231-4e77-b9b6-dd0df15f9b45", "sighting_of_ref": "indicator--82c482ca-57a9-4680-bafa-fa431f548370", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b83e4b-dd3e-43c9-8b97-4aeda38a9ccb", "sighting_of_ref": "indicator--c3566447-bedd-44e1-b432-2fbb2d68a10a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc94a871-cb9c-46dc-8793-3e55fad8c3a9", "sighting_of_ref": "indicator--c3566447-bedd-44e1-b432-2fbb2d68a10a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f9cfe6-40ec-4268-b71f-b5929711606c", "sighting_of_ref": "indicator--e7b7b6bd-0778-4199-95b6-318ef6435b4b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9bffb4-a2c0-4e5d-a69a-274544d35049", "sighting_of_ref": "indicator--45ce5ef7-85e1-4e00-b251-2858b262a5ca", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295e03be-794d-4c5a-abbe-7385f475abc3", "sighting_of_ref": "indicator--45ce5ef7-85e1-4e00-b251-2858b262a5ca", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40371161-4c75-4022-a9b9-1239de0ef687", "sighting_of_ref": "indicator--3d24c6cf-821e-4f5b-8a06-be7071ceb87a", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2e2285-03a4-4bfb-9fff-094245998a8d", "sighting_of_ref": "indicator--160dc313-ea54-4e5a-93bb-6893deb79e53", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae30f6fe-5ab9-4334-89ff-3958441fb5a6", "sighting_of_ref": "indicator--0ed7cfc2-40d0-4853-8735-53b0a1a7dfb8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e6aed3-a6c5-467b-a126-5e9822a66f38", "sighting_of_ref": "indicator--b116082c-fabd-420d-85e0-e566bfcb1284", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9daf18a8-fe85-4cd1-bcc0-672cb0b3ee09", "sighting_of_ref": "indicator--8670d491-e16d-4ff5-a2b2-6fb264c11061", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1346bbf-ac6d-43c2-bc00-71a5715f0fbf", "sighting_of_ref": "indicator--2d7099e3-34bc-4c5b-bd72-f683eed25003", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6eb7d99-e676-4718-be2c-f2d595796470", "sighting_of_ref": "indicator--2d7099e3-34bc-4c5b-bd72-f683eed25003", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a5ef12-0db5-451d-a557-a2b866dd3283", "sighting_of_ref": "indicator--1175d5f4-642a-4047-ad76-e356bd59dd56", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57cfd3fc-1487-44c4-9dcd-421810b3b172", "sighting_of_ref": "indicator--a0405c47-6440-4706-8c57-ae3e58ff3c43", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dae4169-1726-45d1-8899-828953f4c90e", "sighting_of_ref": "indicator--a0405c47-6440-4706-8c57-ae3e58ff3c43", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c397a8-a4f7-4b62-a856-3724e561af3d", "sighting_of_ref": "indicator--6218bde6-feb7-4d3e-b062-65c238b56b97", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c66b06d-bb98-4e17-b8a8-f3ebab624ff3", "sighting_of_ref": "indicator--6218bde6-feb7-4d3e-b062-65c238b56b97", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16653f80-6881-412c-8d2e-03c1550f8e1b", "sighting_of_ref": "indicator--421f059a-e04d-45d4-872d-bbd7a07399f8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd80f28c-c503-406b-8663-03d92883ba34", "sighting_of_ref": "indicator--421f059a-e04d-45d4-872d-bbd7a07399f8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7575c74b-1705-40bf-a88d-c7b65aaf71e8", "sighting_of_ref": "indicator--17bad6e6-3013-4b14-a705-f4e0d5c0dc3c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e425dde-9572-43f2-a77c-1a303e053d55", "sighting_of_ref": "indicator--17bad6e6-3013-4b14-a705-f4e0d5c0dc3c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b007b2d-eed5-497c-b47f-2bdc18c7b6d6", "sighting_of_ref": "indicator--ea94a05f-dd57-46a6-a901-f24b2ac599c9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c3e5c3-de78-4388-b788-8c0bf241a4aa", "sighting_of_ref": "indicator--ea94a05f-dd57-46a6-a901-f24b2ac599c9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e6efebf-f330-4e02-b5e0-6b9ccaba5584", "sighting_of_ref": "indicator--e24484eb-49af-484c-90dc-9b4e62300a1b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33fba50e-e049-40f4-9d7c-73b299f9207a", "sighting_of_ref": "indicator--e24484eb-49af-484c-90dc-9b4e62300a1b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac634da8-e38f-4797-a201-e359ba3a54ff", "sighting_of_ref": "indicator--c0fa9339-e69b-42fd-b7da-c6ee251b775b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3451ab1a-7e1d-45e5-8968-dec6a90ed65b", "sighting_of_ref": "indicator--c0fa9339-e69b-42fd-b7da-c6ee251b775b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4653be5e-207b-482c-8b62-84435717e6c5", "sighting_of_ref": "indicator--3ab589ab-f291-40fa-b137-1f8dda988468", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e31392-6178-4601-afd7-9fe4e9dc5e19", "sighting_of_ref": "indicator--3ab589ab-f291-40fa-b137-1f8dda988468", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8e6bbf8-da2a-400d-8c29-c61cc9f790a4", "sighting_of_ref": "indicator--2892f22f-aa08-440d-b8b2-937910eb0546", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55340ca1-efd7-4b7e-98fc-6a884a838560", "sighting_of_ref": "indicator--2892f22f-aa08-440d-b8b2-937910eb0546", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04defa64-871a-4003-999f-c3efe32cbf9e", "sighting_of_ref": "indicator--bf05dc4a-7ed1-4415-a5ca-a3c68ba724e3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2022372-d475-4cac-aa73-c5244cd1810a", "sighting_of_ref": "indicator--bf05dc4a-7ed1-4415-a5ca-a3c68ba724e3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d90047-0c78-4f35-97bf-5da1d85c4371", "sighting_of_ref": "indicator--6813d773-e7f8-4cdc-b3b5-3920f751be2e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5cce8d8-2ced-4228-8784-89f52b41c27d", "sighting_of_ref": "indicator--6813d773-e7f8-4cdc-b3b5-3920f751be2e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b02c528-a433-45e8-a755-2b0d5ec57ae7", "sighting_of_ref": "indicator--744390e7-599a-4702-b394-09272da0ae00", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a1cc54-446e-4944-ae09-564c2033ee17", "sighting_of_ref": "indicator--4001f913-afb8-432a-83e8-aa211b7a4c0f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f229200f-ee5a-48e2-9e4a-1f979f56046a", "sighting_of_ref": "indicator--4f8ff3c8-318a-40f6-8645-be3a925f0e03", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a2797f-77ac-4f4a-bc90-0c0056dadd98", "sighting_of_ref": "indicator--227b7a8f-9ee0-41e9-a3e9-30bfb9349bde", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be15509b-2f51-4b1a-b927-a968f2427bc9", "sighting_of_ref": "indicator--3ea35fab-1b58-401c-8177-5c9ba1e90fee", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f917059d-97a2-4f3e-b3f9-68cc8e3031ec", "sighting_of_ref": "indicator--3ea35fab-1b58-401c-8177-5c9ba1e90fee", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb98cde-590a-4cc7-b400-936241ca90c6", "sighting_of_ref": "indicator--3ea35fab-1b58-401c-8177-5c9ba1e90fee", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c177b5-e53c-4370-a38d-be1bd22813ae", "sighting_of_ref": "indicator--691f02fc-7683-4673-b005-6de4c933e9d1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c88698-d96c-4b86-8942-2ff824affac9", "sighting_of_ref": "indicator--691f02fc-7683-4673-b005-6de4c933e9d1", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab83b75-b216-412b-abe5-390e5ed3fe48", "sighting_of_ref": "indicator--691f02fc-7683-4673-b005-6de4c933e9d1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c23eb06-4880-4c76-b412-a54206a4eb82", "sighting_of_ref": "indicator--88081670-3cab-4c88-a59c-189de7eac4e3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158303f4-d3a5-4dd0-ba11-cfc9a2fde046", "sighting_of_ref": "indicator--88081670-3cab-4c88-a59c-189de7eac4e3", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad17eb0-93bc-45c3-8313-d53a02ec3584", "sighting_of_ref": "indicator--88081670-3cab-4c88-a59c-189de7eac4e3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8463db12-a8ac-4c59-a75f-abfdaf7ecdc1", "sighting_of_ref": "indicator--c33cfa01-eb96-4b5d-8366-9224ad93cddf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc017cc5-2c73-4c66-8d32-f60329238036", "sighting_of_ref": "indicator--c33cfa01-eb96-4b5d-8366-9224ad93cddf", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea8d595-284a-4ca4-8472-14f990fa092f", "sighting_of_ref": "indicator--c33cfa01-eb96-4b5d-8366-9224ad93cddf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b6a2549-3fbb-43f3-8b9f-607a17cb870f", "sighting_of_ref": "indicator--9c4fce0f-f93e-4bd2-aab1-15a6644640af", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb856ee8-8f80-4f9d-9e3b-6d95f914f098", "sighting_of_ref": "indicator--9c4fce0f-f93e-4bd2-aab1-15a6644640af", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71d14b0-0be4-441c-8c41-14b0e8ea31f2", "sighting_of_ref": "indicator--9c4fce0f-f93e-4bd2-aab1-15a6644640af", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43400f82-871e-45f7-a653-5280f71b6859", "sighting_of_ref": "indicator--6fc440ed-f26f-4676-a8da-1124fd24fbc2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ac56be-e2e0-4bf7-b59a-57fb19f82425", "sighting_of_ref": "indicator--a816e76f-0132-49b9-85dd-60288e85315e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3161c28c-5d31-496a-8f08-cd4916b9b359", "sighting_of_ref": "indicator--a816e76f-0132-49b9-85dd-60288e85315e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7746c1-0a32-44b0-87d3-3f593182b5e2", "sighting_of_ref": "indicator--b8e30c40-2137-401b-824f-2e3b0f1e351d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82689b60-01c1-4375-9ad1-b2ab38d823d2", "sighting_of_ref": "indicator--b8e30c40-2137-401b-824f-2e3b0f1e351d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d47e84-b0e0-4041-a170-e1abcc134811", "sighting_of_ref": "indicator--4a859147-75aa-4f56-bff7-f3ecbf8d4b28", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e42e9fe-a909-400a-824c-172d831e59c5", "sighting_of_ref": "indicator--d8613ae8-f1b4-4179-8cc1-23d04c2ac53a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f018f3d5-fbff-4c1a-a20f-51f4ec45b338", "sighting_of_ref": "indicator--f1afbf01-2db9-49eb-8f06-747829bd952f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f238fee-3c04-466b-ae9d-584b6263e18e", "sighting_of_ref": "indicator--61284942-e0e4-4e7f-a4cd-58d27cbe0451", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837c7e8a-83c0-4562-b9d8-3eb1de5fd1fb", "sighting_of_ref": "indicator--cd50a012-a0c5-49a7-8c21-0685591354c5", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9da5d20-406c-4b19-86d2-f3b84f09aa16", "sighting_of_ref": "indicator--1f954058-75ce-4849-aad0-eca80d7407c1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6602aed5-ad3b-4a66-8aa9-9689b3f4ff5a", "sighting_of_ref": "indicator--25fdd3f3-c36c-472a-93db-504599e4131b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca7ec4b-8542-4b6f-8dbb-f142e4f41c85", "sighting_of_ref": "indicator--c6f47edc-a27d-4a30-9cf8-796e6bffa1cd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01c6de7-bca8-4fdc-a204-e5eb84ffc455", "sighting_of_ref": "indicator--c488bba1-4cf2-4b7a-a024-eb34937d404b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d880c0-50c9-4863-87c5-3ce797786604", "sighting_of_ref": "indicator--2b1ee8c1-f37d-445e-b7e8-f8c0415d2585", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e459e5-7678-412b-827a-b69110cf7541", "sighting_of_ref": "indicator--824f78a0-ef37-4c23-9107-7dde8be8e6e3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e87117a0-dec4-4416-ac21-069afda84b9b", "sighting_of_ref": "indicator--db9b9012-cfbd-4760-a1b0-0085b9cfb55d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c63917-d9ba-4eff-a69d-30d84804bc59", "sighting_of_ref": "indicator--db9b9012-cfbd-4760-a1b0-0085b9cfb55d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f0adab-dc54-4d33-8869-0e01009014ce", "sighting_of_ref": "indicator--6c0c3392-0a21-4e25-9f4e-3c9f29ab004a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d0378f-7819-42dc-a730-040911ff4043", "sighting_of_ref": "indicator--f0579008-05ce-4b0a-901d-c1a79e0ecd9d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0742687-c781-4996-8ab7-011dea15a985", "sighting_of_ref": "indicator--c53864a2-3e14-4ba2-ad78-4e65af4e503e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4bda85-6b24-404f-9140-a033a0db34d8", "sighting_of_ref": "indicator--32c89c28-c3b8-4473-b6f4-b1dffe76af0a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8dab6a6-95df-4007-851c-7e91ece89b6e", "sighting_of_ref": "indicator--52ae7222-c52e-4ff4-8265-daae84dcaa2c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ef352c-b994-4ffb-8c0d-2a5698afb8f8", "sighting_of_ref": "indicator--5403c809-8bce-4e57-afb6-4d38f97b1744", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520b4a92-fe6f-4239-901f-3d37dbd8a2fb", "sighting_of_ref": "indicator--9747512c-2e90-4d1b-a3d9-e2c16385c9cf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06083f1-ecfe-46c2-9a33-7283ebb8d183", "sighting_of_ref": "indicator--b81fc282-64c0-4830-89c1-dd3516f86c9d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0085b7be-5e3d-4b55-8369-841d2158bbe8", "sighting_of_ref": "indicator--0f5b485e-efa7-48cd-9bc5-e665b6bfb1f9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f5e843-12da-48ba-8422-4239d6d1345d", "sighting_of_ref": "indicator--31c54753-374f-41df-99fd-2ab49a7d7c09", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bdd19f8-5e7c-4ef2-b612-8501d695d2cb", "sighting_of_ref": "indicator--6f05adb0-d6eb-44e7-b0c8-e04463e463f6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de12b38-cdb6-412e-b653-a2830fc35bca", "sighting_of_ref": "indicator--6187c941-34ea-46e1-9856-30735d6fb7ff", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5cf188c-91ba-4f8e-8383-2f9ab6926b7c", "sighting_of_ref": "indicator--175135e1-2d48-4063-b65a-0fdf3528e1be", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8aa28e-f0be-432d-bd7d-4f9d13d6a40f", "sighting_of_ref": "indicator--28b3fadb-3f58-4b88-928d-36fc2aa8256e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d157fc-fe5e-4da6-a44e-bd14621cd645", "sighting_of_ref": "indicator--8d30280c-8547-4e96-acae-4f04ce0dc7fc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0882c3-8ced-4fcd-87a6-7dab7117bca4", "sighting_of_ref": "indicator--7369158c-acca-4dba-b377-bcdd173ce629", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6190e9-1a2a-400d-b343-579acc4c3d97", "sighting_of_ref": "indicator--323b1f7b-330c-4fd3-8d41-0f11a4e3fed8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26848455-0ddc-49f9-899b-960319b84586", "sighting_of_ref": "indicator--4d169188-52cd-4922-a8a3-99cceae750c9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--758417d6-3d27-4aa6-b5e2-1eb0e0b1f915", "sighting_of_ref": "indicator--f3220c03-96e3-44ae-beb6-b45ff7a61ea1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0015716-ea41-4f5f-89a1-ba2900bff5d9", "sighting_of_ref": "indicator--d283f88e-168b-4a0f-9473-aa7ea7828081", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915037cb-0b93-4de5-855c-5787403d6695", "sighting_of_ref": "indicator--304365c2-4988-46be-8edd-8fe931da084e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b94d9d-8140-450c-bf47-58ae0abd60a0", "sighting_of_ref": "indicator--7cb23775-df07-4862-b124-5be2c289dd7c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d7b3ed-16a4-4553-9bd4-dd9119ad5caf", "sighting_of_ref": "indicator--8a776d32-9b51-4649-a344-9f29a6dc1cfd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb2ee2e-a1f4-4519-8881-ae40fd08ecef", "sighting_of_ref": "indicator--1f6c7f1d-2f2b-4b11-861e-7cc9f1bfb506", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b2a6db-f92a-4f2d-9a4d-6c31bb67db36", "sighting_of_ref": "indicator--851e6e01-a517-4f17-91c1-5041848799a4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c9cdd5-e22e-4fba-b225-c0a36046a4d8", "sighting_of_ref": "indicator--8c0bbf37-64e9-4b14-a78b-f5f48065fd87", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bda87fe-f477-4a92-8b7b-dfbb4a2cfb01", "sighting_of_ref": "indicator--f538be7c-f9af-4d3d-b12b-6ee550a58b20", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ae90b7-b451-4cd3-99d0-afe9c887ffd0", "sighting_of_ref": "indicator--724dffa4-5dfd-4447-ad8b-78fc3e8c1304", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928b15e4-ea4e-41eb-a84d-554fe11e4e39", "sighting_of_ref": "indicator--320c5dec-d5fb-4c2a-8b65-fc4c34828f60", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f33373b-e7e0-4ae1-ba8c-bf722a7f55f9", "sighting_of_ref": "indicator--2780d7e3-d2b8-4000-b8f1-1836964fa87c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbbe4b1f-a03e-443c-a0e6-cb913c3a26a1", "sighting_of_ref": "indicator--c8ef992c-7dc4-426c-95f0-93a1b0dc2665", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69988e4b-e624-446d-99bb-ad3e583234a1", "sighting_of_ref": "indicator--4cfaf99a-f0f3-45de-b6e9-ff538b069450", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c23a59-9282-47ce-8a7f-1df5a3ff6025", "sighting_of_ref": "indicator--d580bc0e-4ef6-48eb-a56b-3116824d9577", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2872344-0374-48d5-b03d-709a1cf693b6", "sighting_of_ref": "indicator--78da1387-1c61-4e63-880e-93b131c54378", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd39b1c6-bcaf-4161-a58d-30132691f94f", "sighting_of_ref": "indicator--f3b5e7e8-1cb9-445d-878d-ee1a21f9c20a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c88322c-7606-4b7c-9dc8-d9045f687e44", "sighting_of_ref": "indicator--a151f2ea-55db-41dd-8de5-0ec0ef1a914d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11218816-ef15-405f-9dcd-be5e4ce8ee31", "sighting_of_ref": "indicator--4cbe253b-9f45-402b-8cb8-17923ff99859", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e81ce04-e8b2-4d5b-bfee-b9242351d19b", "sighting_of_ref": "indicator--b0dc036d-d00f-44a5-a6da-6445237ad296", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b1b7bf-c10e-4e8d-b89c-bd87dfa631da", "sighting_of_ref": "indicator--a5e63485-2901-4d31-bd6f-8ce3d18c84ef", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec70e16f-fc84-4332-a83d-2dfd7f244b2f", "sighting_of_ref": "indicator--f37a0f94-5c89-4ab6-b085-2993c6c96ab5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f34d13c-bbcd-40c1-9fef-12579b728238", "sighting_of_ref": "indicator--810de0ba-1d1a-4492-aca4-db6ef6b39de0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912ca0b8-2868-46ca-a0cb-5e6293219ed5", "sighting_of_ref": "indicator--ac4133dc-1b3e-4739-8563-d299b8a0c11c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460eb744-3a61-4fc9-970f-ecdb52b621b0", "sighting_of_ref": "indicator--a64d55bc-5dd8-4bc2-8f2a-6696bd3d34e1", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492da314-8605-494e-ab9f-d4f917c26b7e", "sighting_of_ref": "indicator--04268afc-d8f1-4326-8163-5cb5a7478c47", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15df8253-51e5-4b6f-bf57-db649a696c17", "sighting_of_ref": "indicator--00d25999-b8a4-44e9-b0bc-9a79b305a0bb", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b944c2-2b30-429c-aadb-e0aed86a18be", "sighting_of_ref": "indicator--827e308f-6f05-42c8-94f7-e39a3989a965", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157b8467-bde3-419f-aa20-cb1d7336408e", "sighting_of_ref": "indicator--62a05622-a7a1-4659-9a71-9371b92d96bb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb40a4f-7f94-4678-8a4c-7fdc75a3c2bc", "sighting_of_ref": "indicator--62a05622-a7a1-4659-9a71-9371b92d96bb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b069faf0-a8b1-4aa7-b1ba-61fd711f8a2c", "sighting_of_ref": "indicator--1549f9ec-26b9-4a0d-8e0c-cea071ffd6d7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2ab92b-fdf9-4a7d-8bec-3fc41a324d2a", "sighting_of_ref": "indicator--91d7b488-19e9-4835-ae2b-cf1786f52d0a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925f7bf8-4f04-4656-a450-27de61d7e637", "sighting_of_ref": "indicator--412f9e04-f737-453e-9982-6106a7c29f70", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40fd0220-b6fd-4ef0-b7c8-d05fd51cb90a", "sighting_of_ref": "indicator--0b28d2ad-2ef2-4e99-8d4c-452875a6a480", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ac8bf2-95e1-4f07-8310-e206bfea3c59", "sighting_of_ref": "indicator--a216c9ed-0dcc-4706-8489-fd384e6d9468", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6085b7f0-2a0d-4533-a351-dcf473370ad1", "sighting_of_ref": "indicator--a6fd6bb0-5016-404e-a959-3040f2ba6db1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23199348-d98f-4508-86c4-02e371f879d7", "sighting_of_ref": "indicator--31adb491-e5c1-494e-b2cf-33f81d423b79", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdb12d36-a663-476e-8690-a8d5726d49a3", "sighting_of_ref": "indicator--f479beac-f7a2-4685-9f1e-7656c7016a30", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6071ab5a-f406-4bd7-ade2-830b8f23b314", "sighting_of_ref": "indicator--c4676de6-400d-44d0-a352-69c19cc297ee", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731e4328-9fe8-40af-b8ed-932b4267bfbd", "sighting_of_ref": "indicator--b3a7595a-f09c-4695-af8b-b4a94aa75cc5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43438a3-484f-4641-a72e-049cd08fe4d2", "sighting_of_ref": "indicator--8bb9e86d-c707-41a1-be43-932159a19e00", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8070075-dd53-44e7-90c5-1b68f32cc5fd", "sighting_of_ref": "indicator--1a6e6af4-95e8-47bc-9142-52bbb701450a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbcd36d4-59f7-4bd5-84bc-e79fab829665", "sighting_of_ref": "indicator--4302dee0-00d5-4b5c-a23a-06f117ad9f2d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde67543-d4ab-4a8f-8ecf-23b8645ec3d2", "sighting_of_ref": "indicator--4302dee0-00d5-4b5c-a23a-06f117ad9f2d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25fa7cb6-8443-4bca-b799-e92ba0b737cb", "sighting_of_ref": "indicator--64a2696c-51eb-46a2-bd75-2a67c6773f3d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df19433a-a773-4eb7-bec0-44eb5f2ecc11", "sighting_of_ref": "indicator--4846a5ab-9058-4aaa-b562-9984e1f4f841", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc79c70-76c2-463e-9c6b-8c03ff12e475", "sighting_of_ref": "indicator--63c06f51-f550-4dce-befe-3a887bdb594b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45ce9c7-e0fe-4381-b501-013530a300b1", "sighting_of_ref": "indicator--8b1f077c-5fda-474f-9d55-93938e994ef3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1dfe2f-c024-43b6-a614-91e499b3e61e", "sighting_of_ref": "indicator--8988b603-59f0-4c15-aa6d-a234856cddfd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7450ba-6562-4066-ac8d-312b305db603", "sighting_of_ref": "indicator--ab5d419d-8687-4db6-a797-86e2a062401d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de597b32-facc-448d-838e-40f77dd3bb5e", "sighting_of_ref": "indicator--1aa85ecc-e48f-4993-b26d-1a75cef560ad", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f6b343-91e5-40fb-92b4-ea91783bdd7a", "sighting_of_ref": "indicator--81057f9c-8bc3-4f49-863a-3063ca6d5f47", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--680be5eb-5c23-4f1a-b237-8314203a7f23", "sighting_of_ref": "indicator--2bdad5df-120f-4a30-b2bc-6e0cf2a92fe5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9548786-cb85-47db-9bcd-14cd9824a98e", "sighting_of_ref": "indicator--5ebf2dd1-3e1b-45aa-aec4-2c5d8f939d7d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dc9c1fd-4f99-454c-b23d-4a24ea6926ba", "sighting_of_ref": "indicator--f7a2b788-7993-42f2-9940-eee7cb773ea9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37185790-584c-4a6c-8ce2-0634c335b932", "sighting_of_ref": "indicator--10b0390f-cd24-4e80-bec0-b6b96763f521", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c0137c-03b5-4847-9f3e-c558f8c43071", "sighting_of_ref": "indicator--cf4675d9-7fe3-4e6f-b8a6-993dfa031e09", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996a00a4-74e7-4ff7-bf8e-c981c17f2a72", "sighting_of_ref": "indicator--84b646e6-953c-4872-90eb-b5c467fc96fa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e101ce-cca2-4da2-bcb0-bf30cd4b5518", "sighting_of_ref": "indicator--b118a437-6967-4f78-b822-dd13a89a9d33", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e33d5b-c7b1-4437-9846-0f9b04433eed", "sighting_of_ref": "indicator--447b17bf-b87c-4b60-a710-4ef98ab84644", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13cd7f0c-8df7-4140-9114-2637d456381f", "sighting_of_ref": "indicator--5a2f7e34-e43e-495b-a5c8-e3d9cde4af41", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11336503-d968-45a5-9f70-6133ea7bc600", "sighting_of_ref": "indicator--112481ff-75f7-42da-9a08-ff531ab57d5b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2538018-54e2-4f76-a068-42a347f4dc4b", "sighting_of_ref": "indicator--3d31203c-d6b4-4647-8814-262c0c19cdfa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aeff7bb-4b0e-462e-8977-d71280aad6f7", "sighting_of_ref": "indicator--6d664ec2-5bda-4bc2-9021-da6deece8d81", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dee8b28-b78d-42dc-b237-0f6789244999", "sighting_of_ref": "indicator--9a8c75ac-84c5-4f86-8cc2-49f40f1d83d2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88cf27b-771e-4e27-adb1-c08811750017", "sighting_of_ref": "indicator--505c75e9-af05-4245-893c-012eb973561b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21eca96b-0434-40d4-a317-cd9598f36d11", "sighting_of_ref": "indicator--208ba507-e70c-43f2-b0c1-793ded0f8a7e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d78fa1-61df-428f-a4bc-28400da62dfc", "sighting_of_ref": "indicator--2a5808db-731b-471c-a828-d59ede42c5e0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1ef180-f16a-47d6-92dd-3b57f98dbd19", "sighting_of_ref": "indicator--cc879373-52da-4ce6-80b4-560e61581e2b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0025ec2e-33b2-4395-b1f3-d7c3e9c290df", "sighting_of_ref": "indicator--0a76e8e9-a64d-4907-9500-1251b0631ef4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1327b2c-8356-48ea-ab46-0d0b31678b86", "sighting_of_ref": "indicator--5ba80249-2ac5-4619-bf4c-7fefe77f70f1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a7e30ec-a140-4793-a8e9-a7b524e97bad", "sighting_of_ref": "indicator--5ba80249-2ac5-4619-bf4c-7fefe77f70f1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a452b28c-e695-4d72-befe-09b3fa0f9192", "sighting_of_ref": "indicator--152a1c0a-8e91-4a42-89e2-1561d6bd1cee", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3139bea8-4fe6-403c-ba77-636d4ad6589b", "sighting_of_ref": "indicator--152a1c0a-8e91-4a42-89e2-1561d6bd1cee", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c8c7ba-f298-46e2-9d24-2070e727bc65", "sighting_of_ref": "indicator--7dfc4eae-e284-473f-aa03-95c5284d11a5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a99f17-15f3-4db7-817e-d85fbd57140e", "sighting_of_ref": "indicator--41ee0605-1d69-4157-b87b-e9d656f0663a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea4e954-ea8d-499f-9ca1-fc4b5171fcea", "sighting_of_ref": "indicator--6789d7e3-215d-4d3a-a6d3-1aec8f23ada4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c777c30-bcab-4d27-ae3e-374fb623f21b", "sighting_of_ref": "indicator--539e41d7-50c8-4495-a272-f938d391247b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd163765-ccb9-495b-82ce-f4656901f722", "sighting_of_ref": "indicator--dba04af2-51de-45ab-8768-5f15d3cb9d84", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70866c7-94ad-487a-bd07-04d845759b9a", "sighting_of_ref": "indicator--02beea16-acd3-44be-9f73-2cfe3f9e036b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7bfa7f-2017-4fd0-a8b3-879843168080", "sighting_of_ref": "indicator--83bb83e0-b631-450e-9494-b81464c7ab0a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e39f754-810c-4e14-8104-9ae687153839", "sighting_of_ref": "indicator--1a3ccbdb-c684-42bb-8d20-88297c87ff4e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d72e1c-16ea-46f4-9063-41e12d02f763", "sighting_of_ref": "indicator--bcc170da-51e7-49ca-b259-409a603d9651", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca4a7bd-a64d-448b-9c0a-fcdac3792333", "sighting_of_ref": "indicator--414a88a3-7d90-413d-95d3-f49e614dffce", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2a3abb-f37c-4afc-ae47-5613600c0397", "sighting_of_ref": "indicator--0731cdc3-1d7c-49e7-88fc-743fd68dd377", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24806716-7cca-4b56-a47b-f71c552b4cc5", "sighting_of_ref": "indicator--727cfdf4-b66b-4c2a-87d6-5e5800131749", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76f0144-06ca-43ce-b51e-b9fd32d6105f", "sighting_of_ref": "indicator--727cfdf4-b66b-4c2a-87d6-5e5800131749", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f01ab1-9ad4-43b9-8881-4c32b8733661", "sighting_of_ref": "indicator--c54bbde3-e4ef-4852-9be8-926d50dd2244", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd89df9-9cef-486e-aaf9-1345186a5684", "sighting_of_ref": "indicator--c6d06f61-0f7c-465d-a231-601e2d75b089", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a866f683-3d0f-49a2-931c-44a15e41e6fc", "sighting_of_ref": "indicator--362bbd08-bfaf-4463-b6b5-54db31a26d2d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2fb6136-8997-4007-b560-6940d49e04af", "sighting_of_ref": "indicator--1df4dcfc-ff25-45f9-8368-01acf94f7321", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31ba49d-7e54-4447-984e-146c0bc038ce", "sighting_of_ref": "indicator--84c30633-19b8-4152-bfac-858fcd4c9c9a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a43b2d-dc70-4022-a7de-05c2d94552a3", "sighting_of_ref": "indicator--84c30633-19b8-4152-bfac-858fcd4c9c9a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9a70ff-ff04-48ed-a6db-bdc4a461b76c", "sighting_of_ref": "indicator--82a4f965-afa9-49f8-ac16-d9b4faabea27", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ef27ab-b0bb-4e51-9f9b-55c8d399b8fc", "sighting_of_ref": "indicator--2cff01ee-3d43-46da-8914-978fe6d76507", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8682a8d-4a18-40a2-a419-ec8745061117", "sighting_of_ref": "indicator--8fbcc291-34cb-423c-99e3-bbbdc4eacd7c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07c3c15-b904-4050-b76a-b071a112f919", "sighting_of_ref": "indicator--5e8e1439-85e9-4c69-9b00-5b4055be7639", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efcdb41-339e-4354-a077-ba715ea8b204", "sighting_of_ref": "indicator--72d0cc23-9985-480b-85a9-98bb5f005b0b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac6975f-cbdb-4d9b-84bd-e7c52fe1581f", "sighting_of_ref": "indicator--e229a7de-ae71-4f12-9505-5bdb1bccc2c8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0df9f5-ddaf-49af-959a-8a16dbf47b0f", "sighting_of_ref": "indicator--5fa51424-b546-4dd5-a293-6f8d7b6c9708", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23556d16-a728-4889-98ba-0f983b53835b", "sighting_of_ref": "indicator--5fa51424-b546-4dd5-a293-6f8d7b6c9708", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975849b0-e1ee-4f3f-8c55-c357950d2d53", "sighting_of_ref": "indicator--2d3e0855-d3d4-405e-8c84-e7535f12f82d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c78be61-27b9-43fb-b6fb-a8de42b25047", "sighting_of_ref": "indicator--c4cde250-ad31-4d65-ae64-c559d8ee1829", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf7abb6-103f-40ea-85a4-20c7c1dee28a", "sighting_of_ref": "indicator--c4cde250-ad31-4d65-ae64-c559d8ee1829", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b65fb4-e057-41f4-b574-5e1025f7d48d", "sighting_of_ref": "indicator--65f3d743-ed95-450a-872d-6f5be088d114", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03682d8e-aa30-4dba-9516-0ae663aedee9", "sighting_of_ref": "indicator--31ff3f31-9537-4ee9-9cc9-3b35e551f81c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1809bb9b-e764-4f28-8edc-ac61910246bc", "sighting_of_ref": "indicator--4c22d3c3-2e07-4312-96a1-e600d0664aa2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e57192-0d4e-4ef2-a6d7-4dab455f1522", "sighting_of_ref": "indicator--f5c445bd-5deb-4474-acbd-3c650a28abaf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b412b1-4297-4224-92e4-c15dc01a4b54", "sighting_of_ref": "indicator--302c63a5-0e24-436a-ad2a-340193c973b1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baff6ffc-24d6-4c76-bfd7-961550c2d3b6", "sighting_of_ref": "indicator--425a9299-2dda-44a1-8cb5-dc22a24c886e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdcfe765-0953-4cb2-bb4d-a4020ee65c7b", "sighting_of_ref": "indicator--6b45646f-a679-488a-b0c7-0eea8284d4ae", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667772c9-f843-4f61-858b-8f0443524b7c", "sighting_of_ref": "indicator--67393c16-8e8b-4c6b-93e5-62a00263ee50", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7e35b7-89bd-4e61-9f1b-5010572ce7e3", "sighting_of_ref": "indicator--038b7b13-b874-42a2-a580-d8bc14ff3752", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e073b2bd-6d1b-4247-84c4-cca6e995d59e", "sighting_of_ref": "indicator--2b4e59d8-b6f9-4fe3-9af1-9ffd67724fc1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3944a9-6c53-4711-b740-86b5143d637b", "sighting_of_ref": "indicator--e91e0e50-1838-40f3-800c-8923741c6659", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953c0e90-d2ac-467f-9583-cd23ee8cad7d", "sighting_of_ref": "indicator--5e0bcd29-5c30-4a70-9cdd-95849fca3213", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42dc5da7-73af-4932-b4b1-3f70cd6d5ea6", "sighting_of_ref": "indicator--c59e72f0-9575-4157-9c06-ea4e16f4ad6f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef5e41a-6b29-488d-bb90-cb2e572b474e", "sighting_of_ref": "indicator--f1c1bceb-4f27-4189-8259-a807971e5155", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb47b916-132c-4a8d-9c1f-793456b398d5", "sighting_of_ref": "indicator--95ddf93d-af3c-43a1-b588-09410b7f5735", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab26ebc-e97a-4b57-bfe3-ac0b7f78567e", "sighting_of_ref": "indicator--8c53efd2-dc7b-415a-8fe2-32a61ec6303b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc517555-4dad-4e0a-a1ee-d5caba6146f6", "sighting_of_ref": "indicator--d8969716-2bbc-4a9a-9804-513d90202d6f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5514d1a4-8680-41fc-b29f-f9e4e39a6138", "sighting_of_ref": "indicator--b6194413-fbe7-47fe-bde0-8e6767fffcd5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ff96bc-d416-4b20-8b2d-bcb517cb01a6", "sighting_of_ref": "indicator--cf6fb39e-8003-4b3a-9cd0-ae51a2704850", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbc75a5-41ef-4705-9392-27ed28f8603a", "sighting_of_ref": "indicator--ab85f31a-2377-4de1-9ba8-3c83fc0dbdf5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b0e4f7-53c8-4fef-a5e5-b5838b570953", "sighting_of_ref": "indicator--8f7b8c68-b6ae-4f86-9d1c-02f344cc9d38", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5b3eb7-ffe3-4c28-92de-2e4a5c5e731b", "sighting_of_ref": "indicator--47c837a1-3399-4cfa-855c-d2829b8e49f3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6026e057-bd32-44db-904b-d69920466524", "sighting_of_ref": "indicator--3bc56ad1-6bc5-4e55-988e-64b29dbfc9bc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3138b9-2fec-4320-b0c8-974ea67179de", "sighting_of_ref": "indicator--fbf1e8b1-f0b4-47b3-ad79-a07283f0f4d0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e87cdbe-2cf6-4bb7-a391-c8bdf395f606", "sighting_of_ref": "indicator--705f241b-1c7e-4552-9dbe-b5299ab98473", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23a3092-07ef-4335-84a0-371329950c72", "sighting_of_ref": "indicator--3717afa5-3ebc-4cbb-a074-0f3d31c3ab2b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cfa9cf7-b1ff-43d9-9eda-18456f2e7375", "sighting_of_ref": "indicator--4c0e42c5-b32d-4608-93af-9526dc07c19c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d31305f-8805-48d7-9263-a707c1bfebcf", "sighting_of_ref": "indicator--00eea18a-387e-443c-9960-ce5497b3f261", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1df4b91-9377-4b95-9c2d-b336a9828816", "sighting_of_ref": "indicator--3ca646b8-4129-4bec-8901-5acfe8c636a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b65bd3-5cd6-497c-9194-3b39747997ff", "sighting_of_ref": "indicator--7fe25423-5ea3-474c-b7cf-ef2a81ed2978", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48caa249-4164-479a-84e7-97aadf1f1fc1", "sighting_of_ref": "indicator--63a283d4-3f42-4e5e-aea1-b0a5d43a37e3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1052f7-4d9d-46ba-b054-b6541fd70eb8", "sighting_of_ref": "indicator--3a2e53cc-f1cd-4609-985e-09fd66cfeb0e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041f4114-2ee1-4acf-a94f-755a32495366", "sighting_of_ref": "indicator--06d2d647-2863-4aba-8635-c044594bb905", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd648ab4-5d5e-4d75-98b7-702cf8f7741b", "sighting_of_ref": "indicator--8d8a3da5-5664-42d1-a06a-7a71c34037b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58574149-771e-4846-aa60-72acbf4e2dd6", "sighting_of_ref": "indicator--becc06ea-95a7-4834-8713-b5d57399e718", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b52a980-cece-4e5d-88cd-9d46dc34cb5a", "sighting_of_ref": "indicator--c077a6ee-0d51-466b-a08e-6579ab6e3bee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e32436-7e1e-4fb2-827d-fd70c04a82fb", "sighting_of_ref": "indicator--42eb225b-59a3-4442-aec8-3b69aae1ae46", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762f927a-9102-4e06-b0d9-c233b2d3fbbe", "sighting_of_ref": "indicator--580d1231-9231-4bec-9ed2-4cc699bad908", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a34c58-05ac-46e3-97e6-ac7ad28f6ee1", "sighting_of_ref": "indicator--205bc2ae-bcf1-4556-b985-1fce093ae04f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc853a8-d229-49d2-9b75-1a5a691c2738", "sighting_of_ref": "indicator--db65f9b9-49ef-40c3-a03c-f0ed576da39b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4c017f-fb66-444e-99f8-39d112009f85", "sighting_of_ref": "indicator--68a88024-c9d2-4c61-a51b-0111247fcf04", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207101d6-dd09-48ae-8dc0-c47b60d8b58d", "sighting_of_ref": "indicator--0256a35e-f7ed-4bde-ac37-c5abbd27f427", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e30886a-25be-4d6f-a7cb-afebee66e6f2", "sighting_of_ref": "indicator--0256a35e-f7ed-4bde-ac37-c5abbd27f427", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8104f0e8-6b67-4f57-afe5-518deb914ac0", "sighting_of_ref": "indicator--911be4be-0771-4cd7-ac1f-c85eff44aaad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9586ea4c-fd51-4733-88dd-280884e31286", "sighting_of_ref": "indicator--5d7754a5-5b5b-48f4-aa75-d191c333c62c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84fc300e-e42b-4462-990f-1cde25b458d8", "sighting_of_ref": "indicator--5d7754a5-5b5b-48f4-aa75-d191c333c62c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d2c4b0-4c7d-4e9e-adfe-abff7eae1066", "sighting_of_ref": "indicator--f73724e1-6294-4919-9a13-bcdef5f675b4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--687f64f3-1269-45e0-afd9-458427356cfe", "sighting_of_ref": "indicator--f73724e1-6294-4919-9a13-bcdef5f675b4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144a29d8-9802-4001-b1f2-f06bd519f8ae", "sighting_of_ref": "indicator--a29023f0-00d5-49b1-9f03-03cf4514ef51", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98540d0d-6759-42ea-84af-eb15f5e78265", "sighting_of_ref": "indicator--d20027c6-d521-475d-9026-9fedd3b0b100", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7e4f4f-414f-4498-8f2a-ee8632d045d9", "sighting_of_ref": "indicator--6e140453-2757-4e4a-a5fc-59b1cfaaf3e0", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f428fe-c95d-42c6-99a8-69553f1cd483", "sighting_of_ref": "indicator--4b6727d4-a830-4a7e-94f4-8e313cb0d6be", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b143ce-3e55-464f-8b4e-b3834c67ef24", "sighting_of_ref": "indicator--2e0decf7-21c5-4141-a667-6a5845b4ee08", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7424df7-59f0-4888-91a6-2d7434633809", "sighting_of_ref": "indicator--19bbf9a3-8abb-4840-8344-ef45cd46be76", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c291ff0b-f3e0-410c-8722-ed64cd6db47b", "sighting_of_ref": "indicator--c6bc8cbf-1c7b-432d-a044-71ccd433ed23", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97555cf-53fe-4185-845c-b8cf2208e458", "sighting_of_ref": "indicator--9690ea40-8111-4c52-a624-3f3dd67b659a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fdfe1b6-b7cb-451f-95c2-4b276df0368a", "sighting_of_ref": "indicator--13412840-c511-4aab-b433-088396cf0b8c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99cfdfaa-8acf-422e-b446-eabc8252b687", "sighting_of_ref": "indicator--1394ea09-1d6f-4c28-bdb4-6e4a37eab7c3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa8cbf6-802a-4d22-93c9-62ade3cc7cfd", "sighting_of_ref": "indicator--0657a02f-9cff-4307-ae5f-488150d2fdd4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73ddd5a-9a19-4d1e-bd08-a3f2084516bf", "sighting_of_ref": "indicator--cfd70e67-0af9-4e40-955c-270b91f43f87", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17eea8ca-9309-43bc-ad08-58fd5bdfe415", "sighting_of_ref": "indicator--cfd70e67-0af9-4e40-955c-270b91f43f87", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b806f70-1c8c-40d1-9a34-d4c158efa839", "sighting_of_ref": "indicator--cfd70e67-0af9-4e40-955c-270b91f43f87", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262fe98b-49d9-47c3-b975-861d26a06e0d", "sighting_of_ref": "indicator--bb318074-538c-4b81-960f-d326f6de221d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6224f89b-45ed-4ddb-ba12-2ea5a2e750cb", "sighting_of_ref": "indicator--bb318074-538c-4b81-960f-d326f6de221d", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8905a1a5-eb72-487c-a2cf-9fdf5659172b", "sighting_of_ref": "indicator--bb318074-538c-4b81-960f-d326f6de221d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fdba7cc-6e1c-4ec7-8219-db5d6865d3bf", "sighting_of_ref": "indicator--41ce10aa-3293-4595-9866-9ecd0dbf8319", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69193d07-0dd0-473a-acc2-32581eb5acf2", "sighting_of_ref": "indicator--41ce10aa-3293-4595-9866-9ecd0dbf8319", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0ada5e-3b27-4e7d-8e94-b7f27c23dfd1", "sighting_of_ref": "indicator--41ce10aa-3293-4595-9866-9ecd0dbf8319", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ba1e1e-253d-4e79-9da0-16a0159fbcc2", "sighting_of_ref": "indicator--274b6f46-4ee4-45da-a5fa-4a6908ad2b60", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73400d95-07e8-44f2-9b7e-7c4bc65487aa", "sighting_of_ref": "indicator--1d042511-afd2-48e3-b517-17a5e0682e2e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5d552b-22f9-46d3-a823-81594c270149", "sighting_of_ref": "indicator--7f19d63e-9fae-48d4-a402-c65c88315d57", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4d2618-21f2-47a5-8d5a-3879f99ba1d2", "sighting_of_ref": "indicator--5132ff06-cf0f-49e9-8d1f-4dca8f92da04", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4ceec9-482c-4950-a64e-9cb1831a299f", "sighting_of_ref": "indicator--317f5040-44d6-49a3-bb9f-e72f5c4a88c1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41fa198-a6db-434d-ab51-fa1d2d236451", "sighting_of_ref": "indicator--317f5040-44d6-49a3-bb9f-e72f5c4a88c1", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed03765a-714c-46d2-91d9-6850de1235d9", "sighting_of_ref": "indicator--317f5040-44d6-49a3-bb9f-e72f5c4a88c1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b8da9ed-f02a-4f45-a319-fde099a297b2", "sighting_of_ref": "indicator--3e6342dc-3ee2-4415-b3de-4e9dd36b66b1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755924ad-01db-4449-afba-902ed04f7440", "sighting_of_ref": "indicator--3e6342dc-3ee2-4415-b3de-4e9dd36b66b1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e02e54-acf4-4229-9558-eb7e6fb5a7f4", "sighting_of_ref": "indicator--cfe22788-acb3-4917-9e70-38850469beac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f7b432-e6e9-4858-8cf4-b074aa19b02c", "sighting_of_ref": "indicator--9785ec7f-3290-4ec3-9a31-d45d942d301c", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14ff90a-3624-4e8c-8463-2141018388b7", "sighting_of_ref": "indicator--4015fafb-9660-4495-8837-3ceecfa75471", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1779839-5ea3-4ccf-9751-1ccff4710957", "sighting_of_ref": "indicator--c31cb51b-df53-4950-b1ce-106d589abd4a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bf57dd-a326-427a-8f01-e5b0dd3e49e7", "sighting_of_ref": "indicator--02cb4812-d72b-4223-aede-f1ee1f50f81c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96679838-4055-4464-a768-9adcdcf1a2e9", "sighting_of_ref": "indicator--b5f934f5-0b2a-4ef3-875b-9a788a255b1f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d115490-f03d-4ea6-b0fc-0ea7e58917f7", "sighting_of_ref": "indicator--9d2065fd-2b32-41ce-bd14-8fc8b001be82", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb05eda-af5d-4c4c-9316-c9f336e959ee", "sighting_of_ref": "indicator--6978dec1-1a79-4556-8d24-0d5d9b56b4e0", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651bc785-b082-44e4-a702-36e654c76134", "sighting_of_ref": "indicator--619a9a6d-459f-4791-bd54-22a301684b39", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1649d99-265a-4ba0-9ece-23f25c27b904", "sighting_of_ref": "indicator--5aa45385-679a-4683-8f4f-5bd985b075ce", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470d8112-19a6-4572-9535-cc26a9d73c24", "sighting_of_ref": "indicator--a3e85f3a-9b94-42e7-94d1-1f1e5f588ee7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc1228d-34ca-4c62-b9e8-8c722dc2ada6", "sighting_of_ref": "indicator--da7bfa44-e3e5-44aa-bbe1-f4f06d1ae21b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a264982-3792-47dd-ab0e-909437ee5e5a", "sighting_of_ref": "indicator--c1125b94-352b-4ec6-85df-55c14452e62d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8a257d-c7ba-4726-a70d-4fe4564380d9", "sighting_of_ref": "indicator--a6ddc50b-9e60-48e3-a208-bb5a22eff87f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ddf72d-62d4-4ca5-abd4-4da1e68e2275", "sighting_of_ref": "indicator--a6ddc50b-9e60-48e3-a208-bb5a22eff87f", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119c790f-a11a-45f1-9d6d-95cca2443d23", "sighting_of_ref": "indicator--7dd7483e-f4eb-4535-91fe-a5143ea34eb7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08df879e-e6b5-47cb-8382-9832f02f7f08", "sighting_of_ref": "indicator--5a6d32ae-74ee-4a0d-a6bf-cbf0d1c0ebd6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a389cd9-b5d5-46bd-8cbd-8c558e210eca", "sighting_of_ref": "indicator--0806ba31-65be-4755-9472-d994ba20d2d2", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90928346-5530-4f38-af6d-d12e097ac3f5", "sighting_of_ref": "indicator--90e910d4-154c-490a-8022-0a69f260a7c0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4e4716-bbe9-4b17-aa26-8f2f231e330a", "sighting_of_ref": "indicator--1e117c22-700f-4b63-94d3-d2b7e95594cd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d6e1601-398e-447c-874f-b6e65265d38c", "sighting_of_ref": "indicator--3eed9db3-4d69-4e09-bb69-875218c10edc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75ef370-6648-46c0-a713-6cdc4807263c", "sighting_of_ref": "indicator--f3f4347f-fe5f-42e5-ac61-c1729e4e94c2", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18adaba4-3f42-463d-9f25-fb71052c8373", "sighting_of_ref": "indicator--df27a28d-f739-4141-8e4d-b8a3b9184933", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f548b3b1-12fc-483d-b50a-f6aea5550a81", "sighting_of_ref": "indicator--d8999ffb-46dd-47db-9202-9fb8fa886e29", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91f743e-303a-4548-a7c8-0aa0c29d405c", "sighting_of_ref": "indicator--7a75d2f8-bb08-4f1f-bef9-cf4f0686fc48", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76ad3ea-052a-4b05-8f29-708dc43bae19", "sighting_of_ref": "indicator--2dcf9843-1a8a-48f9-8252-b4ee22cee943", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1929c804-1086-4f4d-9f11-1b68d5e55b63", "sighting_of_ref": "indicator--7899907f-0a1f-477e-86c8-4e8fa5f86535", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9c4902-3694-4607-9cf9-7c51b4ae8c7b", "sighting_of_ref": "indicator--00cf09c6-cb9f-4f92-9e49-fc7d64c2e29a", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b179b11-f9d2-4600-89cd-528fdbfe12f0", "sighting_of_ref": "indicator--26755175-f162-42ed-a7ce-6c90753834b4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae49d2b-e711-4457-b6a4-8c302e082d13", "sighting_of_ref": "indicator--c94e0aab-21e6-44a8-b558-c6ef75201430", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffcb20d3-8197-49ed-9313-32de618df972", "sighting_of_ref": "indicator--c94e0aab-21e6-44a8-b558-c6ef75201430", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7781e2b6-70b4-4cd8-a0c2-4735ea4a9e22", "sighting_of_ref": "indicator--c94e0aab-21e6-44a8-b558-c6ef75201430", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f446ea-df71-4eeb-bb03-1351618ee5d6", "sighting_of_ref": "indicator--3db4f626-3ae5-4fe4-a502-19d0f0011db1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10453ea2-eb13-48e8-b7f9-e0b7429c23f1", "sighting_of_ref": "indicator--aad728b2-f476-42a1-9625-41b2dcd13c3b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ba187b-f7cc-4a54-a92b-84735380a704", "sighting_of_ref": "indicator--814bbcf9-4be4-4627-9820-35ebd10edacd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a03a5b-cf19-4090-9636-4e4e3e6b13ae", "sighting_of_ref": "indicator--814bbcf9-4be4-4627-9820-35ebd10edacd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dee8a61-c620-4c33-a8a5-fb6549528f32", "sighting_of_ref": "indicator--6f1d022d-c7a4-4d8f-abaa-6d3b9489b798", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--202259a6-176a-4acb-9f49-6878589e55ee", "sighting_of_ref": "indicator--6f1d022d-c7a4-4d8f-abaa-6d3b9489b798", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c1873f-15d5-47d2-85f0-9c3534309e6d", "sighting_of_ref": "indicator--752e2176-c3ed-4dd1-b93b-501d056e15de", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5b144c-913f-44da-b885-e8d11f341178", "sighting_of_ref": "indicator--f511dd69-80eb-4613-bd7d-e8b0f9367b13", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a82a76f-f235-4107-954d-48fd6c302831", "sighting_of_ref": "indicator--f511dd69-80eb-4613-bd7d-e8b0f9367b13", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b59c4b6-d862-424e-a87b-e059f54262d2", "sighting_of_ref": "indicator--7164b661-8cc4-4470-84d7-f3bca7cbb9e5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a16ce5-6532-4b54-85a4-3116eb6b3b3e", "sighting_of_ref": "indicator--39f0e3a1-4290-4df3-9817-1d7eb7e72d14", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83e57c3-e337-4b19-b831-651e8eb1543a", "sighting_of_ref": "indicator--39f0e3a1-4290-4df3-9817-1d7eb7e72d14", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db39b2e-1ade-4143-a223-8d4f21eee3f7", "sighting_of_ref": "indicator--39f0e3a1-4290-4df3-9817-1d7eb7e72d14", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70834339-530c-4287-b818-74cc4d29bec3", "sighting_of_ref": "indicator--8b972a3f-5449-4225-8a75-6fdfa901da62", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc299ce-b8cb-4d84-836e-8e677c5a66d9", "sighting_of_ref": "indicator--55301591-da5a-4cb7-a0f9-5631fd209ab6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5e88ce-4245-4642-8b39-643a977e9162", "sighting_of_ref": "indicator--55301591-da5a-4cb7-a0f9-5631fd209ab6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c483400c-2392-43ac-a4e2-812109eff178", "sighting_of_ref": "indicator--d07e7531-bb39-4a94-b6f0-a9127d29e62b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b152cea9-90fa-4154-9e20-1064fdd37076", "sighting_of_ref": "indicator--77492c17-d5c3-49df-94ab-26209dd3eea1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4dde2e-304a-4ba7-8851-80f4bc23129e", "sighting_of_ref": "indicator--d70c9140-46ef-466c-8c76-a57dd0dc1091", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--711a3e65-d806-47a3-8b47-b5a31e1c6d0f", "sighting_of_ref": "indicator--d70c9140-46ef-466c-8c76-a57dd0dc1091", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028f58a4-0298-4945-9f88-710a27d6e680", "sighting_of_ref": "indicator--cc360bb5-ec86-4499-9fb9-9ee91041ef8a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf4146d-6f6e-4ad3-93b5-5a582231f486", "sighting_of_ref": "indicator--cc360bb5-ec86-4499-9fb9-9ee91041ef8a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58320a63-88b9-4666-9d92-540a6cca9f9c", "sighting_of_ref": "indicator--b2604bba-f159-447c-a162-7fb8d7c9a8ff", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5246f0-e1fe-424e-b69d-a776489a62ad", "sighting_of_ref": "indicator--32fd4070-e657-43b9-9a2e-dd065df2334f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6530b791-c82b-4bc3-9014-275f7f12596e", "sighting_of_ref": "indicator--32fd4070-e657-43b9-9a2e-dd065df2334f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94245ecf-f977-4498-b2d7-b6c3bc84b89a", "sighting_of_ref": "indicator--c0438068-5bb6-4a5b-82c3-18734a864a98", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3c2800-7ba9-45b4-89de-25ccd245428c", "sighting_of_ref": "indicator--c0438068-5bb6-4a5b-82c3-18734a864a98", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1eef55-8916-4b6a-b19c-4b4ee81c5a07", "sighting_of_ref": "indicator--14d4b994-c141-444d-9fbe-ee655586c899", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3e76c7-07f4-4f5f-8f85-45c913c65928", "sighting_of_ref": "indicator--14d4b994-c141-444d-9fbe-ee655586c899", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10849e4f-6ff0-401d-ad74-9e402de0371c", "sighting_of_ref": "indicator--32ea28a7-df82-4cf7-9036-533c12ef63e6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07db9d33-17ec-4455-ae2c-4ad4951dc4a5", "sighting_of_ref": "indicator--32ea28a7-df82-4cf7-9036-533c12ef63e6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca8e021-fc54-413d-a621-5573cc6cc639", "sighting_of_ref": "indicator--9fdff733-d025-4aae-aa17-d79c4bfc3460", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd38082-7d38-4d0a-9ae1-1e9a718ae2e0", "sighting_of_ref": "indicator--9fdff733-d025-4aae-aa17-d79c4bfc3460", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf396b5-5fbc-4394-a53b-74f7eacf070d", "sighting_of_ref": "indicator--5e03498e-58df-43cd-94ee-36776573b349", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90a1247-6509-4051-bfad-ddd5c37a0d56", "sighting_of_ref": "indicator--0c1feeae-0de9-444e-935f-0af8beb9b99d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e09ab1-5d3f-4bfa-820a-692508b1eaad", "sighting_of_ref": "indicator--0c1feeae-0de9-444e-935f-0af8beb9b99d", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e54344d4-9867-45bd-9625-90edf2f48914", "sighting_of_ref": "indicator--0c1feeae-0de9-444e-935f-0af8beb9b99d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce62306-61e1-435c-931a-5707838c4b8c", "sighting_of_ref": "indicator--16b16fdd-7814-4579-9134-116f19f69b1f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ac07c9-9f90-4642-a116-7d7c520c8ad4", "sighting_of_ref": "indicator--94dcfdb8-1085-415b-a63c-f1dc4c643876", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c55afa2-3c66-49c2-a3b1-4af14a195784", "sighting_of_ref": "indicator--94dcfdb8-1085-415b-a63c-f1dc4c643876", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22254442-e7d9-4318-9c73-b63d77940e07", "sighting_of_ref": "indicator--5ee26564-3e27-42a9-b67b-d8a7847441b1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b855b5-36a0-4f37-b67a-6a083521d7c6", "sighting_of_ref": "indicator--5ee26564-3e27-42a9-b67b-d8a7847441b1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3082fae0-c48f-40ad-a15d-1ecdecc976a1", "sighting_of_ref": "indicator--21862e84-db3d-4425-805f-2673113b2ac4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7600e995-428e-44ca-a49e-f85fcbd30c4a", "sighting_of_ref": "indicator--21862e84-db3d-4425-805f-2673113b2ac4", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff43fab-133e-4425-8d06-1cf631f61dd3", "sighting_of_ref": "indicator--21862e84-db3d-4425-805f-2673113b2ac4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e8f226-7023-4ea0-b9b9-8d5d944298bc", "sighting_of_ref": "indicator--9c381c34-64b8-49fc-a9e8-a2b0e7e60020", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8579041a-113d-47cf-82ce-3f8c5d686a1b", "sighting_of_ref": "indicator--9c381c34-64b8-49fc-a9e8-a2b0e7e60020", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c3d42e-5970-449c-8f9e-dd19a7f396f4", "sighting_of_ref": "indicator--9c381c34-64b8-49fc-a9e8-a2b0e7e60020", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c05696c-c98e-4a3a-ad7c-1ae95ef8e6f5", "sighting_of_ref": "indicator--44f3c15d-696e-4621-a65e-b0153e605845", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef966d25-e7b2-4e07-9c75-f0839a3b1f49", "sighting_of_ref": "indicator--44f3c15d-696e-4621-a65e-b0153e605845", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282cdad0-b48b-4ca4-9929-2c9737df085c", "sighting_of_ref": "indicator--44f3c15d-696e-4621-a65e-b0153e605845", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae3ec494-6405-4935-bf0b-fae2ba84736a", "sighting_of_ref": "indicator--b530b518-1cc9-426b-a77e-7ee3763abce6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7977575-1d84-4a41-851f-4ca1679e3609", "sighting_of_ref": "indicator--b530b518-1cc9-426b-a77e-7ee3763abce6", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e2ad8b-30e1-4d6e-a803-bc3bc638c1b7", "sighting_of_ref": "indicator--b530b518-1cc9-426b-a77e-7ee3763abce6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb82403-626e-406e-8a7f-b9b842bd9bab", "sighting_of_ref": "indicator--bc086f55-c502-41c8-9791-cdece9c39b97", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da849c98-1f34-40f0-93fc-c091cc21fd85", "sighting_of_ref": "indicator--bc086f55-c502-41c8-9791-cdece9c39b97", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12fdc660-f2d2-45ae-a3a9-f7e4e45cde49", "sighting_of_ref": "indicator--bc086f55-c502-41c8-9791-cdece9c39b97", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3373ccfd-f2f5-4f9b-965b-4f5cb07680de", "sighting_of_ref": "indicator--63720cf9-34ad-4a6d-ac2b-5ead4baca6df", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6cb1ba2-ed30-4f97-a30d-70264247cd0e", "sighting_of_ref": "indicator--63720cf9-34ad-4a6d-ac2b-5ead4baca6df", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7e6ec4-2ea0-4cea-9926-caff5b08a942", "sighting_of_ref": "indicator--a009ee40-86be-4950-8222-3120993b8a8a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6b868b-394f-4eb0-a72a-ef44c433498e", "sighting_of_ref": "indicator--a009ee40-86be-4950-8222-3120993b8a8a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6662a56f-d117-4060-98a5-d21be63faae9", "sighting_of_ref": "indicator--953c5d12-9b5e-40fe-af0f-bf1a5e88b03d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5b9d83-b6cf-4f12-94a9-b1b8786bd478", "sighting_of_ref": "indicator--953c5d12-9b5e-40fe-af0f-bf1a5e88b03d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22e7a9a-3585-43ec-9eda-383b759ce6b5", "sighting_of_ref": "indicator--050a14ba-085f-4c17-aef9-a9c6a7bd3188", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f79ab1-3621-4cc9-8afd-18da2b05758e", "sighting_of_ref": "indicator--050a14ba-085f-4c17-aef9-a9c6a7bd3188", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a163c27-63ca-4ea5-b828-af1b2fb147dc", "sighting_of_ref": "indicator--af08ebce-07c4-4b60-9408-d9c5bcd53562", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f293b607-f0f0-492c-acf9-fc3ce11b340b", "sighting_of_ref": "indicator--2ad79975-bcbf-49e1-aff9-a592cecbd889", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee006899-a48c-48cc-84e7-351c73ba5495", "sighting_of_ref": "indicator--03f23ef9-4d72-4c45-ae23-ed010c9010b5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a66b615-e0ab-4faf-bb96-dad4ed0febd0", "sighting_of_ref": "indicator--0ad15433-5e4a-49db-b025-e771186e0719", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11fca845-1824-4d46-8f56-f753c3284555", "sighting_of_ref": "indicator--c1eab75f-2a65-4425-9fdf-f158d76e3273", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2738f6c-6ad2-424a-b6c7-7e5dd2d278b0", "sighting_of_ref": "indicator--c1eab75f-2a65-4425-9fdf-f158d76e3273", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65d400f-444f-4318-85b2-e156649165ef", "sighting_of_ref": "indicator--6c362b3b-516d-47a0-a504-0ddc0def5d4d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f65a4d-584e-41e6-b6dd-18b1d38edb8b", "sighting_of_ref": "indicator--ad8f7cee-5e92-4bd4-83b3-779e9f97257d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607b6fd9-f562-40a5-b709-8904bbbdda4e", "sighting_of_ref": "indicator--6e88557c-de40-4a7a-999c-2413eb1d75ee", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7a9cf8-5e88-494e-85de-42fdd2038f61", "sighting_of_ref": "indicator--26bff496-0519-4103-bf48-56ca07ceb1e0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e255b937-4236-43ff-8954-1dabb1d8920d", "sighting_of_ref": "indicator--26bff496-0519-4103-bf48-56ca07ceb1e0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b25d3f1-564f-46af-92df-5c8aabe3cef6", "sighting_of_ref": "indicator--0915dd6c-53a5-476f-910c-9048d1f9c541", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9769763e-290b-45eb-9411-5d3858e2d718", "sighting_of_ref": "indicator--4123cb2f-bdf2-445b-8952-dbd528d0aac4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044ab24a-53b9-4a54-b1a1-c0b535b1ff4e", "sighting_of_ref": "indicator--a8d22a2e-f1b4-47db-b401-0b8082db1c96", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561bc83d-2865-4d82-8f98-ada2d7268752", "sighting_of_ref": "indicator--a8d22a2e-f1b4-47db-b401-0b8082db1c96", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3082d28-59be-42ea-b570-80a6a8dbb6f5", "sighting_of_ref": "indicator--26a9238f-1a8e-4a55-9c97-379cc5096618", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c123c20-5d07-4208-9e2b-a6dafee23bd7", "sighting_of_ref": "indicator--26a9238f-1a8e-4a55-9c97-379cc5096618", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297f6fa7-510e-4882-a203-dc8cc4a1923d", "sighting_of_ref": "indicator--168a72e6-af29-4874-8a9b-127628b4d001", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30f06a7-bcbf-419b-ac6d-bb9a285e13d4", "sighting_of_ref": "indicator--eb138693-0ef7-424e-bbbc-dd484bed3822", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b822821-9617-42b8-990b-1db188bb7769", "sighting_of_ref": "indicator--50e80d7b-5267-4c22-95ae-ab2e4664f505", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--562b08c9-8cce-4f31-919c-919bae3d5cf6", "sighting_of_ref": "indicator--35ab2226-fe2d-4486-858b-2ab7fa80095b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a703288-00a8-4d17-8d4e-d08fbd1925bc", "sighting_of_ref": "indicator--174106a3-dae7-4773-bc69-af48c3adb804", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd0183f-f600-431f-b91d-d7cbd30a7fdc", "sighting_of_ref": "indicator--24aeca32-92ea-4387-8178-0f4cf3bfbaf3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1b53a1-32da-4d01-afef-2c82371414e7", "sighting_of_ref": "indicator--a7cd5c67-7bf0-4fde-8f73-74311e953514", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b35848b4-951a-4656-bfd3-c2b855140f2f", "sighting_of_ref": "indicator--fadcf2f5-fbda-47ab-9259-f5579aac9a32", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271a9e2c-63aa-4d3e-b238-fa560059848a", "sighting_of_ref": "indicator--af29d974-29f5-4a37-a3b9-c513aa767b98", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4c405e-9360-4104-8658-5bab26783992", "sighting_of_ref": "indicator--070ff830-25d1-4337-8566-a9a57db3130d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070ac84e-a698-4a2e-97f6-52afc97dc495", "sighting_of_ref": "indicator--a2fcaa57-3e33-49a8-a690-fddca9003eb2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0378fa7-eec3-49d1-ac21-3dd055fafd7e", "sighting_of_ref": "indicator--0b048d6f-7677-43d2-9f4b-03b529abba3a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a2831f6-3f1a-44ee-9f82-f8081fd92689", "sighting_of_ref": "indicator--721944bc-0c9f-4054-8f5a-6b4afc3f1cfc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6c2dcc-96f6-44fe-8aa3-68f93fb376b1", "sighting_of_ref": "indicator--3a7dad56-f0fc-43b7-8390-4f90993658f9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4602e78-c4fa-450c-93bf-7c0e31c04ab0", "sighting_of_ref": "indicator--3a7dad56-f0fc-43b7-8390-4f90993658f9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77fc504-e075-4759-b09e-b611202730b3", "sighting_of_ref": "indicator--b6c609be-56e8-4c02-8c7d-ce4ea7251f1b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58f3197-f4ad-4b55-8911-c9f0d49a0933", "sighting_of_ref": "indicator--ecf4e19d-b208-4483-aa6c-11141cbf536f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553e0ffc-addf-458e-9c93-bd4e0816b807", "sighting_of_ref": "indicator--6d7a3e28-1203-4cf6-819f-a535197f2906", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b6eac0-1684-4f64-92aa-c2012baf52a1", "sighting_of_ref": "indicator--08ed735f-e2d6-42b1-98a1-c3305a1a2e4e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65024546-d1e2-4930-9e74-ad226804e6dd", "sighting_of_ref": "indicator--3a00ef3f-2b7f-4807-8d2d-7bac999279bb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7b2f1b-f361-4b58-a625-3811592bf415", "sighting_of_ref": "indicator--f3912f15-11e8-4126-9da9-9ea23ff46654", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1614d3b3-723b-4bdb-8b0d-b0929237710a", "sighting_of_ref": "indicator--2f06120b-8e22-4ab0-b983-b01796b29ed9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e307303a-9369-4efc-b320-f4868910952a", "sighting_of_ref": "indicator--af7c70c2-ceb3-4b68-a343-79a06d57bee1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad251a6-a765-400f-a999-a92e52e7ff18", "sighting_of_ref": "indicator--58968172-c97d-4fc2-8213-8f00f3d4cf53", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7f5c49-4805-43f6-bb97-2350f2d6c563", "sighting_of_ref": "indicator--029e117e-32a8-4a74-9954-6f4252b5f84e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3054aba-550f-44d1-8659-038f7e18e851", "sighting_of_ref": "indicator--2750f599-5414-4eb2-9b7c-bae9ba102c97", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3f2232-008d-4f78-addb-39cc8016f0a1", "sighting_of_ref": "indicator--af49d5f5-4f07-4001-8164-3557e962545e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f6e192-b475-41d8-bb51-4a1addc1a67f", "sighting_of_ref": "indicator--af49d5f5-4f07-4001-8164-3557e962545e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e7ce29f-a9e1-45e7-bca6-e2d3016b3f73", "sighting_of_ref": "indicator--a6a14b53-5ad0-4053-a0c5-0c32a1c11c5a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec8337b-7d0f-4752-a943-72b513b5406a", "sighting_of_ref": "indicator--4e3ecfc9-574a-4228-9a16-3449618c1f85", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd185e03-ca1a-40a3-b745-be076ed0e83a", "sighting_of_ref": "indicator--2c897b5d-62e6-404a-af48-6620e1b76868", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a5bd4e-c92d-47e0-9e98-eae9bc98b180", "sighting_of_ref": "indicator--97d99973-0e78-4b74-830c-a00a89d606a2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e76e43d-4406-4037-988d-39f3f36b5841", "sighting_of_ref": "indicator--cfaa2150-6dc2-44b6-a5b9-d3ffc9554cba", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14965ea8-3b15-42a3-86bc-bee911dde8e3", "sighting_of_ref": "indicator--cfaa2150-6dc2-44b6-a5b9-d3ffc9554cba", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1aafb5e-5d5d-4cef-b3df-819d18c9bddf", "sighting_of_ref": "indicator--e0615c66-11fb-469a-b67b-f72a6e554c1b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e9769d-475a-4ae0-a7d5-62ec12d28aed", "sighting_of_ref": "indicator--a2f9eca9-82e1-4527-ade5-2879bf6705b6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b1ecee-e40d-4067-8a1b-3cc26e0c1522", "sighting_of_ref": "indicator--168174a5-7cbd-4242-b9ba-0cb86d905c0c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121633dc-4abe-4359-9df9-34f154360993", "sighting_of_ref": "indicator--42e4ad83-e0b0-4c5b-b7e5-d6e57cb1fd9b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2054eb69-bab9-4b2a-a440-bfc251ebcbb1", "sighting_of_ref": "indicator--8696ffdb-1c88-44af-8ce6-1fcbc316d2f9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1be4dd-5dea-4cf9-b8bb-4e4c5f15d763", "sighting_of_ref": "indicator--8696ffdb-1c88-44af-8ce6-1fcbc316d2f9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5485d434-8b03-44a8-ae6b-eda354adf17a", "sighting_of_ref": "indicator--a44f97d4-34d2-400a-bc98-7863af6c7341", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572f3165-51a5-4432-8a66-3bae39466a76", "sighting_of_ref": "indicator--fafd1c52-76f3-4ab3-a717-8f9132ba0dbe", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61b48d8-d8c6-41da-acd6-baa43343a7f2", "sighting_of_ref": "indicator--2d3af914-1ce2-4985-be6f-bb58ba5377be", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae26249-e797-4d9f-8453-32aa73a00b49", "sighting_of_ref": "indicator--2d3af914-1ce2-4985-be6f-bb58ba5377be", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7593412f-5e81-4d76-b069-489e83af2987", "sighting_of_ref": "indicator--460d1e96-9a1f-4eb8-9837-9dae6f3024e3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2233c7b5-24a2-4eb4-a892-d9e54bd8fd51", "sighting_of_ref": "indicator--460d1e96-9a1f-4eb8-9837-9dae6f3024e3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878e7526-e29c-49b0-94f0-ad009898807e", "sighting_of_ref": "indicator--7b09cd8d-8a5e-4a3c-a3e4-3bf0fab65eb8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4d21e3-2012-4b40-b6e7-a6a637f1d22e", "sighting_of_ref": "indicator--7b09cd8d-8a5e-4a3c-a3e4-3bf0fab65eb8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e784662-060a-41c4-a8fd-a5ac64a2b83a", "sighting_of_ref": "indicator--4bad738f-1ac3-41a5-b815-eb9a40d9f16c", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7632b4e3-9da8-4fe0-835e-7b9f2c5296cd", "sighting_of_ref": "indicator--a4769ad4-7214-4ec8-81dd-913974435812", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27cd739b-4373-4b7c-9996-55249f0c44cb", "sighting_of_ref": "indicator--6bf696be-181b-4e51-a0ba-177a652d9e6a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c621068-32c2-4d9c-a5f9-ed26da146897", "sighting_of_ref": "indicator--45714af0-415e-4c93-810a-b5bdf0ae5b25", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d62591d-aa2b-4646-8764-2b61509355bd", "sighting_of_ref": "indicator--45714af0-415e-4c93-810a-b5bdf0ae5b25", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff6c3d6-9d3e-45b3-827d-38e38d885611", "sighting_of_ref": "indicator--45714af0-415e-4c93-810a-b5bdf0ae5b25", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ee5fb0-9c19-4aa9-859c-63d55f67d823", "sighting_of_ref": "indicator--a84f6779-f365-4825-bec4-a534579e26ac", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8057f833-1c66-4bfd-a8fc-dff1cb47c16d", "sighting_of_ref": "indicator--0bfdac21-3f17-49a1-976b-aa7e9ec76324", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613b25f7-4cd2-4529-8980-27297f991291", "sighting_of_ref": "indicator--7ed01205-4600-4900-a34d-f7c1212e9180", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6d81e7-c0ef-4373-8313-1d6cf58c8931", "sighting_of_ref": "indicator--7ed01205-4600-4900-a34d-f7c1212e9180", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3dd6dd-675b-447d-bc3a-5aeccb976306", "sighting_of_ref": "indicator--373d08a7-355d-4178-99f1-40c16cb22ece", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5605b9d8-5681-4c5a-9641-a77d931d572d", "sighting_of_ref": "indicator--373d08a7-355d-4178-99f1-40c16cb22ece", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc59a61-fd8b-4797-ae1d-7452abf5b51e", "sighting_of_ref": "indicator--656f4cab-60b3-41ea-a050-b42020574abf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39204bd3-7767-4a3f-bb7a-a97ffa910152", "sighting_of_ref": "indicator--656f4cab-60b3-41ea-a050-b42020574abf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724832df-701a-491a-a0f9-7955c9d86626", "sighting_of_ref": "indicator--e50fa7a6-4d2a-4741-be27-7bec703b3545", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b45f763-3f24-45fa-abe3-b25c6d6c0435", "sighting_of_ref": "indicator--e50fa7a6-4d2a-4741-be27-7bec703b3545", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09cd1f17-45bb-4ce7-8670-8e7c2ece2bfc", "sighting_of_ref": "indicator--60204225-e4b0-46f8-a659-a34e71e2683a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41587be-561a-470d-8eb7-74a43db2610e", "sighting_of_ref": "indicator--60204225-e4b0-46f8-a659-a34e71e2683a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e4954f-bed3-4c1c-b40a-ef3dee886fd6", "sighting_of_ref": "indicator--84433d13-8052-48d7-972c-649a0ffe9d81", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab613df-74bf-48c6-a2a5-b18629084dd8", "sighting_of_ref": "indicator--466233a4-f6cd-4815-bb0e-a72a1176c1f7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4403691-2041-409e-a64b-bd64d95a801c", "sighting_of_ref": "indicator--4242e297-1876-4be1-af34-33a95c698eb9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad05ca4-bee9-4475-bb26-5ba3de634500", "sighting_of_ref": "indicator--9a7ca869-06ae-4d21-91e7-28c95ba98294", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c87d9d-7a1f-4e24-9ea2-42b5db5c7c44", "sighting_of_ref": "indicator--325468b6-d9bf-40e2-8834-2e05b982bc53", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcbba805-e54a-4f98-abda-9ba659c77d22", "sighting_of_ref": "indicator--325468b6-d9bf-40e2-8834-2e05b982bc53", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505dd62f-a45b-45fb-89fc-46b10efe3776", "sighting_of_ref": "indicator--4f516069-a71b-40a2-83ac-d40415ca7797", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ad7049-e563-4579-9fef-2e658f097d2c", "sighting_of_ref": "indicator--4f516069-a71b-40a2-83ac-d40415ca7797", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0326ff9-d8dd-4813-b4ff-8703dda853eb", "sighting_of_ref": "indicator--4bed3d28-e80c-4567-ab99-08063881c494", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9b6f11-e925-4e8c-b47f-85d89ebef537", "sighting_of_ref": "indicator--4bed3d28-e80c-4567-ab99-08063881c494", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f7db00-4af2-463e-9e4f-fff1af6cc9ed", "sighting_of_ref": "indicator--98d2eeed-2baa-483c-9d34-7fc08b914ea9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb6427f-92a6-4852-abf7-bb1246c4818a", "sighting_of_ref": "indicator--98d2eeed-2baa-483c-9d34-7fc08b914ea9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0cb64b7-0da6-41f5-8636-e885106f6f81", "sighting_of_ref": "indicator--cac3ae40-72ac-4c22-a254-de0b8bf94ccc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a19b40d-885f-4107-97d0-785261800e9b", "sighting_of_ref": "indicator--cac3ae40-72ac-4c22-a254-de0b8bf94ccc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda52f13-2b96-4779-b7e8-d19ac901eb0a", "sighting_of_ref": "indicator--8ea212dd-cb91-4d14-b856-fa16eada79f6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7bc31c-1e00-47e2-8703-39a21f068ba0", "sighting_of_ref": "indicator--8ea212dd-cb91-4d14-b856-fa16eada79f6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c48d332-eead-434f-add5-a41b59629f6b", "sighting_of_ref": "indicator--e447d814-c14c-44bf-827d-6baeafc1d4dd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9725615b-5aea-45a7-b89b-8022c58cbc7e", "sighting_of_ref": "indicator--e447d814-c14c-44bf-827d-6baeafc1d4dd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49e0a86-2e79-4649-b880-be6bedd8bb76", "sighting_of_ref": "indicator--c4d7b5ea-9b86-44ac-a99c-6bfb0483962d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd7a911-c138-4f47-ae2c-f1ef77abd192", "sighting_of_ref": "indicator--c4d7b5ea-9b86-44ac-a99c-6bfb0483962d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89efccc5-8e3d-4184-bb7e-6a10ab27b648", "sighting_of_ref": "indicator--425b7180-1351-4ce1-9424-994626f9acd2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b14ebde-aeea-495b-8b1d-ba9cabbe70f5", "sighting_of_ref": "indicator--425b7180-1351-4ce1-9424-994626f9acd2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655e893c-7e30-4c6e-a4d2-4759318c045c", "sighting_of_ref": "indicator--1f5c3e78-c328-4afe-95cc-527088cd9326", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a99605a-bd49-424c-a162-ccc7c0063226", "sighting_of_ref": "indicator--1f5c3e78-c328-4afe-95cc-527088cd9326", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a673f72-1047-452e-9c19-88174adfeb71", "sighting_of_ref": "indicator--32360386-0de3-4b41-900b-af81d5c7924e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a652e707-c005-47f7-b0c3-13579607e483", "sighting_of_ref": "indicator--32360386-0de3-4b41-900b-af81d5c7924e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f17abdf-1555-4d5b-9191-5f14d6c29e3f", "sighting_of_ref": "indicator--2c378c16-7a6a-4070-9ead-0ed7dec5a9bf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747af261-068d-43f8-9d67-3964850befcb", "sighting_of_ref": "indicator--2c378c16-7a6a-4070-9ead-0ed7dec5a9bf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a6b7e6-3f48-404b-8000-e8011cb95ce6", "sighting_of_ref": "indicator--6c62083d-6270-424a-98b4-2f467097eb7f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e83fcf-567f-4646-a1c7-ed8da90fca2a", "sighting_of_ref": "indicator--6c62083d-6270-424a-98b4-2f467097eb7f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175c415b-2d88-42c7-9807-a0502785cd47", "sighting_of_ref": "indicator--88174363-dd4c-4344-949e-3e5eb3f07c82", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31a0497-38ff-4c8e-8e11-c72db2bd055f", "sighting_of_ref": "indicator--88174363-dd4c-4344-949e-3e5eb3f07c82", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ee41bd-376e-4fb9-8d23-d636b343a870", "sighting_of_ref": "indicator--08d7ed54-6e23-41ea-85e6-e76ceda066e2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41bd778b-1515-41d7-903c-ac2e9c29bd2b", "sighting_of_ref": "indicator--08d7ed54-6e23-41ea-85e6-e76ceda066e2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24125fcf-8c74-4d4f-b2d3-cd1861694876", "sighting_of_ref": "indicator--64c50457-6e7d-4da1-bdf7-008d7a3b4312", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48aaf66-49e5-4154-a092-fbdf5a47fed5", "sighting_of_ref": "indicator--64c50457-6e7d-4da1-bdf7-008d7a3b4312", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5c44a9-7a15-44df-aaaf-5a77f29a85e6", "sighting_of_ref": "indicator--2c276347-194d-4767-bc81-403188608e0d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc9b71a8-232c-47f4-bf28-0d22bd515855", "sighting_of_ref": "indicator--2c276347-194d-4767-bc81-403188608e0d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe03801c-9534-4d36-b4f9-ba6cbdc27be4", "sighting_of_ref": "indicator--75dc0353-a87a-457c-b18e-43fcb70afdf5", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d6c4bf-3334-4297-953c-dabaa8f6cc8c", "sighting_of_ref": "indicator--e59b26e3-0ab4-4ef9-ae87-2fb40ab93149", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8547958-128c-4c1e-a3df-af79e1734e56", "sighting_of_ref": "indicator--e59b26e3-0ab4-4ef9-ae87-2fb40ab93149", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2dd710a-dbec-4dc5-9c25-64c890a56c28", "sighting_of_ref": "indicator--fe628ca4-f59b-40e5-a1c9-e1c814be2d7e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8caba9-1887-4918-b548-32905de0c7d8", "sighting_of_ref": "indicator--0fcb2e94-88c1-4085-bef5-b575f990cba7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6dca51-9bfd-457b-8683-932ba5e6d8c9", "sighting_of_ref": "indicator--0fcb2e94-88c1-4085-bef5-b575f990cba7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83dc9fb3-8c54-4a91-a73a-b2fff11b44d2", "sighting_of_ref": "indicator--93bbc418-e6a3-4bab-acdc-bc2be5b94401", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--833f7529-7c9b-4134-8cdc-61f8fbd5bb3c", "sighting_of_ref": "indicator--93bbc418-e6a3-4bab-acdc-bc2be5b94401", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377d1f3b-d652-4228-8890-2b9082e550e8", "sighting_of_ref": "indicator--93bbc418-e6a3-4bab-acdc-bc2be5b94401", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb763974-c96d-4e0a-8d74-110f74731d4d", "sighting_of_ref": "indicator--29e50464-0f39-45e5-a730-744631930fbf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382e9813-ad7e-4552-a1e5-f5d51e6de2da", "sighting_of_ref": "indicator--29e50464-0f39-45e5-a730-744631930fbf", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a65ecfd-d5a0-4c18-985f-914a5481c272", "sighting_of_ref": "indicator--29e50464-0f39-45e5-a730-744631930fbf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd6dae4-4830-4e46-9fee-3445c80f597a", "sighting_of_ref": "indicator--33f49d2e-d63a-4c45-b08e-ac3054a2106b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2ecea5-27c8-4944-a7b1-69dac9e6509b", "sighting_of_ref": "indicator--33f49d2e-d63a-4c45-b08e-ac3054a2106b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27ffd8c-3965-4b7d-9f7b-54f6b3e7145f", "sighting_of_ref": "indicator--d03a0414-ef83-4a29-92eb-5d91fbfa08b2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f208fc15-9fb8-481f-bf3d-45bb0a451690", "sighting_of_ref": "indicator--5c27e885-5367-4a98-b0b0-f17806146fe6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b442737a-645f-417e-824f-47f806cc69c2", "sighting_of_ref": "indicator--5c27e885-5367-4a98-b0b0-f17806146fe6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036ac54f-f63f-4ef4-8c47-345eb5d6e362", "sighting_of_ref": "indicator--562c9f72-93dd-4b4d-a406-db17567cf9aa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec765163-b849-48cc-bf9b-2a3fce071936", "sighting_of_ref": "indicator--562c9f72-93dd-4b4d-a406-db17567cf9aa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c464a05-1cea-468a-94f2-c45da4ee6b86", "sighting_of_ref": "indicator--fab6b3c0-9ac6-4304-9286-4562e0b304d4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9fc464-b5da-4709-a58f-8675b24ee04c", "sighting_of_ref": "indicator--fab6b3c0-9ac6-4304-9286-4562e0b304d4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eaf40c3-13a4-44a7-a328-e8418a6c7b9b", "sighting_of_ref": "indicator--c78d5430-178a-432d-ae47-9436e81024e8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff673ff3-5947-4845-9db5-bbdd0a0d1688", "sighting_of_ref": "indicator--c78d5430-178a-432d-ae47-9436e81024e8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5319d9f5-eeda-47fa-ae83-b9d0b2ba5a2a", "sighting_of_ref": "indicator--895db0ae-fbdb-4d47-b72c-353539e5799c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e7a8fc-20b9-40fa-be8d-0f3d089ac740", "sighting_of_ref": "indicator--895db0ae-fbdb-4d47-b72c-353539e5799c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea83807-a75e-4118-856f-51ed1c1f4b0b", "sighting_of_ref": "indicator--82602737-6272-48a8-8077-de8dc3ae80e0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d056f3c-0dbf-4c42-b99b-18bb742ef969", "sighting_of_ref": "indicator--82602737-6272-48a8-8077-de8dc3ae80e0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f139ece-9665-438d-8800-00e433c45890", "sighting_of_ref": "indicator--34f57ead-9622-4d42-b7de-f05e3718c05c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb46083b-ed9c-49e4-8a2a-ea9d7287f8eb", "sighting_of_ref": "indicator--a4c4a8e1-a958-4cac-87ef-8ead36880876", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f512befb-43f0-4c10-8ab8-e28243129288", "sighting_of_ref": "indicator--a4c4a8e1-a958-4cac-87ef-8ead36880876", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c556e90-6896-43c5-bc19-970428a44a7d", "sighting_of_ref": "indicator--845795b9-a3b4-495f-84d5-5b5e9fc22eca", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f620d3-8a3c-4ef1-bf2f-2b2984858f29", "sighting_of_ref": "indicator--3b7227a1-c932-49e1-8ea0-b15925f3a1af", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54bfd28c-99ae-4363-bb16-18315c18af85", "sighting_of_ref": "indicator--7194bbc6-4fd6-4b78-80fe-450d0853bed2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--746d2934-57f7-4d6b-b04e-875c278da7c1", "sighting_of_ref": "indicator--a3fd437c-569e-4899-b916-adbaa10400e3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e28825a-c7e7-4912-bc46-9e5ac8daa5be", "sighting_of_ref": "indicator--7dede728-7998-4032-8390-b6ef7881a692", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--979d819d-51cb-40ac-904f-dde40fe97488", "sighting_of_ref": "indicator--cdf9eaa3-e5f8-4a8d-8600-7b7a7a826a57", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d232570a-a46e-4630-9f34-9867dc31bdcb", "sighting_of_ref": "indicator--9e0c6c45-2329-4f66-8bcb-8ddb7f3a982c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19526640-2b18-446d-a694-22f3c46fd553", "sighting_of_ref": "indicator--377b94b3-bfec-46f7-92ef-ad88e6ec3626", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ac3b9b-47ff-4581-8d9d-b1041628d448", "sighting_of_ref": "indicator--8e61c4fd-9555-486b-93ca-e6075081fb14", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c6d9a3-c624-4150-9f67-0b08413a9066", "sighting_of_ref": "indicator--62210cf7-35ef-4e82-9afe-eee48faac617", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c632e8a8-e42c-4cfd-bf59-30e7b7190162", "sighting_of_ref": "indicator--62210cf7-35ef-4e82-9afe-eee48faac617", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1f1ce5-3026-46f1-8ece-2589d1beeb6d", "sighting_of_ref": "indicator--b30fe22b-6d11-494f-a896-c579f6d2970f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333608a4-013f-401c-ac64-00bd594fef6f", "sighting_of_ref": "indicator--d70d4714-8214-445e-bb2b-4329a9cc3a67", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97a45f6-5a7f-4104-a2b8-f9f88e38267f", "sighting_of_ref": "indicator--d70d4714-8214-445e-bb2b-4329a9cc3a67", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50fa7d9d-e83a-4536-905d-9b3e98131f5b", "sighting_of_ref": "indicator--7279e5f5-408b-4df9-83f6-6d1c47f61c67", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e905eaf8-6dda-403f-83b1-f5093cd56ba8", "sighting_of_ref": "indicator--b7e08402-ee89-4a37-b27c-b71f37d3c5ac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d4a7a4-abed-4fdd-a8df-5720d4dbebf6", "sighting_of_ref": "indicator--b7e08402-ee89-4a37-b27c-b71f37d3c5ac", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c04ffc6d-56f8-4cd5-b549-f9ec0f8cdb93", "sighting_of_ref": "indicator--43b52d02-f4a5-4dcc-93c3-5a3f47b133a7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04daeb1-9a57-4037-9df7-21da3bd3a3ef", "sighting_of_ref": "indicator--1a1f1ba8-b994-43df-81f0-a140273379f2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d36a2bc-50a8-495c-b267-cf6903d78690", "sighting_of_ref": "indicator--708be3ca-2fde-4927-b369-68e9f5afdc78", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46fabbe-e4e0-4e2d-bbb9-a76800ad6f22", "sighting_of_ref": "indicator--359a9f45-e4e1-4a2c-a269-3962b46297d7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07b8326-f543-408d-a367-6061ff6fc2db", "sighting_of_ref": "indicator--39a63f67-af1b-47f6-bdfe-84ca220ba365", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce786de-4d77-4374-92ed-32714ed67df5", "sighting_of_ref": "indicator--39a63f67-af1b-47f6-bdfe-84ca220ba365", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--147f2435-e6d3-48b4-b529-18849fb59f3a", "sighting_of_ref": "indicator--c12a0a92-5055-4de7-8f0f-98dbb429abda", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b830ed-5e1e-4e5c-bc9e-b3b87ccfd40b", "sighting_of_ref": "indicator--4f8e5ca5-4325-4747-be4d-f6eeee3c6876", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e50f6f-8956-4738-808d-4f3735c036c1", "sighting_of_ref": "indicator--4f8e5ca5-4325-4747-be4d-f6eeee3c6876", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49f7b04-bdac-4eda-b34f-8673c96eef55", "sighting_of_ref": "indicator--bc846c24-e81f-4360-bd14-f5b45d520728", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1feaf8f9-d779-4931-ab1f-1c6e905cd71e", "sighting_of_ref": "indicator--5efeea49-fdea-49e2-9e09-58f96d9c64a6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227cb88d-0847-4830-a950-4df84647009c", "sighting_of_ref": "indicator--6df163e7-ac50-4daf-9b31-d2975600c41f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cddbd0b-4246-4eb0-b8c4-e1966cb4d880", "sighting_of_ref": "indicator--6df163e7-ac50-4daf-9b31-d2975600c41f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440b0da5-335e-4571-9f89-c1d6acfa1f7b", "sighting_of_ref": "indicator--99501fc2-9234-4f09-851f-60239f10e5fe", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204dc040-49c3-4a44-a88a-bab1b751c046", "sighting_of_ref": "indicator--99501fc2-9234-4f09-851f-60239f10e5fe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a91b4e9-a640-4dbe-8ffc-77f9372d1993", "sighting_of_ref": "indicator--a0269272-9b1b-4a9b-93f3-ab20dcd7689b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2407b6ed-662f-4a1f-9219-3a161c3eb259", "sighting_of_ref": "indicator--a0269272-9b1b-4a9b-93f3-ab20dcd7689b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2ee46e-0bef-4ba5-8ce9-67a3fec87ebd", "sighting_of_ref": "indicator--6af5ebb1-0da9-4eda-899f-a7631dcf9ed3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822125d3-34bd-42bd-b19f-789040b38bd6", "sighting_of_ref": "indicator--66b1ffb9-1d25-40a3-a6fa-79a56ebab89d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcf28b6-7af0-4554-b277-d52f83a2cca0", "sighting_of_ref": "indicator--284913bf-3538-430e-965d-5621a5f4165a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a1f7b7-a949-4c89-a665-6cc918a60f77", "sighting_of_ref": "indicator--5e8f9513-c7a9-4a71-a359-e81c66543856", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58df3f1-921b-42b9-a5dc-12c14aee76eb", "sighting_of_ref": "indicator--5e8f9513-c7a9-4a71-a359-e81c66543856", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc2c0b9-04ec-47f9-b1c3-e1f93b8ef57d", "sighting_of_ref": "indicator--4f2696f4-e1d8-4309-9160-1987da00c892", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d392b2e-c4d3-4a63-b151-3352cd0e59cc", "sighting_of_ref": "indicator--577c39b7-84fe-49dc-8c8a-80536de49433", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69872456-9e70-40b5-aa39-19f46f966ba5", "sighting_of_ref": "indicator--13889fb3-06a3-420a-89b2-8c6ff04fe151", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b6095e-efd2-444a-b800-287af5409e26", "sighting_of_ref": "indicator--776d7b85-00a5-4beb-847e-bfdc7a82d7d5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c2d077-a1bb-4d37-b794-17afc3ea5851", "sighting_of_ref": "indicator--776d7b85-00a5-4beb-847e-bfdc7a82d7d5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee83da62-eb5e-4336-8933-2b9c7da580fc", "sighting_of_ref": "indicator--a3772c20-c737-4fe3-8429-6b4812e62f99", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c033b8d-d111-42fb-9047-9e378aef14e5", "sighting_of_ref": "indicator--49a5f65b-8b97-4ebc-adf3-5bcb09a9c131", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba96c0f-f737-44ec-8bd5-010ff3474f46", "sighting_of_ref": "indicator--49a5f65b-8b97-4ebc-adf3-5bcb09a9c131", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d18698-719c-45ac-ba14-a9b9e64a4ceb", "sighting_of_ref": "indicator--4e372924-1557-4555-95d6-bf57662e2f64", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e49202d-9643-4a2a-b78a-3e9653b7535f", "sighting_of_ref": "indicator--2d609db7-1b41-4e53-b683-8bca4c2eba4e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98359423-8756-4887-849e-a51658a73b1a", "sighting_of_ref": "indicator--75ed7813-2eb8-40d7-92a2-519e38f131d5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a122c5bb-b27d-4359-8792-3e1673a5df65", "sighting_of_ref": "indicator--50ba0c51-aaa5-46e6-93d3-630c0b3bd19f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77405b1-9045-41eb-af8a-8c9d8cfd6c1f", "sighting_of_ref": "indicator--4077605d-9135-4ca4-902f-016f743879b1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3c1caa-2318-49f7-a7b2-4fe19cf982af", "sighting_of_ref": "indicator--a133864c-b930-4175-abb7-e58ff2a26d36", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8a1fe0-e1c8-48bb-8a85-d8998c3923f5", "sighting_of_ref": "indicator--956b67b8-42ca-49f7-b78c-4f0283212318", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d4f155-3a23-4781-a457-de257863be82", "sighting_of_ref": "indicator--a1f84184-0145-4471-ad1d-93268fde9568", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090abc34-85b2-4b21-84db-047915469fb4", "sighting_of_ref": "indicator--17cbf6b3-1fb4-49df-b98a-0c105c01eba8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1241dc9-8433-43b5-beb8-523f7815676d", "sighting_of_ref": "indicator--17cbf6b3-1fb4-49df-b98a-0c105c01eba8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ebf5ff-2437-4e5f-b4d3-b09c769003c2", "sighting_of_ref": "indicator--a6d9f7cc-d12e-4760-a63e-646a28a66e87", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e80cd5-5b7e-4b6d-85cd-08f224ece869", "sighting_of_ref": "indicator--a6d9f7cc-d12e-4760-a63e-646a28a66e87", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13eec0b2-fb0e-4bb2-adaf-0bae57e64ee5", "sighting_of_ref": "indicator--163707f0-c3dc-46bd-9582-4b81f880d2ab", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f728008-fa71-4c6b-bc64-419d71423360", "sighting_of_ref": "indicator--163707f0-c3dc-46bd-9582-4b81f880d2ab", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--889515f0-dcb3-4658-9d5a-02f7ba7fe06a", "sighting_of_ref": "indicator--5afc7a33-05a8-48d0-a610-7fc67e6a5452", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86684875-bee4-4c16-819f-63a4c1455813", "sighting_of_ref": "indicator--5afc7a33-05a8-48d0-a610-7fc67e6a5452", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e7e0b1-9c51-41aa-af4a-95f3732fd4c4", "sighting_of_ref": "indicator--2c4b7ef4-51f3-4c19-abf0-63df82f9c37b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc072c9-9954-432c-a3ec-0bb8a65e5be6", "sighting_of_ref": "indicator--8e3ad221-378b-48dc-9d01-7c6bdb93eed0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79fc517f-3c27-4ddb-9911-b08789cc791e", "sighting_of_ref": "indicator--94a3723c-ef1d-4994-97cf-2dcbb8f9d280", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb0004c-a6af-4af4-ae45-239d0f413a4b", "sighting_of_ref": "indicator--c9869647-41d7-41e0-90fc-c3e22a2a0b12", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ea3a05-0163-48c5-bad9-b706e3f4add1", "sighting_of_ref": "indicator--20e6a339-4f94-4c0d-ad35-6230e102a87e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de99e94-d598-45ff-a364-fd0e4e141617", "sighting_of_ref": "indicator--f68f0aa4-1efb-4ce3-96c7-384c6749177f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1f2567-ac70-4c5a-b6d5-710095cc7beb", "sighting_of_ref": "indicator--0f226e90-9e34-4fa1-abfb-1fee4cd7e8b4", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78192c61-450f-4a1b-adf1-9cb19be66c3a", "sighting_of_ref": "indicator--3f265af3-2b1a-4b89-aff0-98d5ba873fea", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b1401bb-8063-479a-bf1e-2636ad665355", "sighting_of_ref": "indicator--62edcc27-43a8-4dc0-b7b6-db370868cf32", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97866322-4ad4-4ff8-ae7e-bb8aec5cadbf", "sighting_of_ref": "indicator--62edcc27-43a8-4dc0-b7b6-db370868cf32", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52977e1-478f-4292-9188-5061e6106557", "sighting_of_ref": "indicator--7e0fd5ad-76c5-458f-8d5b-4033caa33c83", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d864e491-31e5-4007-9d54-a15518b126f9", "sighting_of_ref": "indicator--7e0fd5ad-76c5-458f-8d5b-4033caa33c83", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698cf903-dac5-4e80-a741-81545f6b5df6", "sighting_of_ref": "indicator--78f3e4c6-2cfe-4462-a78b-1d2b538626c4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44aaa728-08cd-49b6-adb2-745075b2b85a", "sighting_of_ref": "indicator--78f3e4c6-2cfe-4462-a78b-1d2b538626c4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ae8755-d3ee-43fe-b89a-bb72866bb606", "sighting_of_ref": "indicator--f0094284-41a1-44d1-8746-5c7e640755b3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019fbe1c-27de-48b5-9705-0cc763be962c", "sighting_of_ref": "indicator--f0094284-41a1-44d1-8746-5c7e640755b3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7bc6151-edd7-4d32-a375-e96ff9fb817d", "sighting_of_ref": "indicator--2fbe437c-ae06-4878-9961-cf119df67fd2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817a6d90-6f18-4db9-b2c8-7648e3ed18dd", "sighting_of_ref": "indicator--2fbe437c-ae06-4878-9961-cf119df67fd2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22810d3-e4d9-4602-bfbb-3c10489804a2", "sighting_of_ref": "indicator--7208a622-7955-466f-9900-65a872b3a803", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d26372b-6341-4e6a-a3da-0b19bb790d7f", "sighting_of_ref": "indicator--7208a622-7955-466f-9900-65a872b3a803", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d28f6da-51e6-4ed4-90c3-bb4d6ac33d55", "sighting_of_ref": "indicator--3819b9ae-dedf-4ff1-bdc5-d14a6aa939a6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43ecfd6-d6d7-40c8-8a64-f9288401c108", "sighting_of_ref": "indicator--3819b9ae-dedf-4ff1-bdc5-d14a6aa939a6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12bafe94-7ab8-4a0f-96f8-b0d4c0360ff8", "sighting_of_ref": "indicator--af0ffee0-1e86-4cc8-a35f-2f26c5ebb31c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a27be0-10c3-4c2d-b495-6343bf4e4868", "sighting_of_ref": "indicator--7c79f5ba-c386-45cd-bf93-706344d652cc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb33b18-0677-425d-b2b1-412bbe0a663a", "sighting_of_ref": "indicator--7c79f5ba-c386-45cd-bf93-706344d652cc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573040d5-44ac-47bc-b59a-6706f76b9430", "sighting_of_ref": "indicator--51528d19-078f-45ff-b0ff-7d2f3b4961f2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856dccec-9ae9-4d02-93c9-c46933d754db", "sighting_of_ref": "indicator--8bc36bca-d186-4a77-a272-604ab073ab09", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71352229-6674-4834-91e7-23cba9e5d2f6", "sighting_of_ref": "indicator--6eaf9b24-12d3-41e1-aa25-0fb58f97a914", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c26c38a-67e5-43b3-a75c-686dc2f43475", "sighting_of_ref": "indicator--3e1607b1-12f0-4afc-a3f4-dbe2eaa34440", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edfe33cd-be5d-4fbd-a3a4-c6e5406aa8c5", "sighting_of_ref": "indicator--123a5dbc-f056-4947-84b2-5261d981ce07", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ba30ef-6c1c-4db7-9d34-d507145d2fbe", "sighting_of_ref": "indicator--054c2673-81af-4f86-aea4-57b2b555868e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ba2ddd-77c7-43f1-9ce5-68caa6509f8e", "sighting_of_ref": "indicator--1a8fcb6e-bc71-4a5d-a356-175fbec95968", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa8ea38-8844-4f1f-890c-38578849bd38", "sighting_of_ref": "indicator--1a8fcb6e-bc71-4a5d-a356-175fbec95968", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac3562c-8358-4ebb-a102-60bb71b0c1fc", "sighting_of_ref": "indicator--4c9b25b0-417f-4018-93f5-eaa39a3fc67d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547122f5-67a8-4fa8-bdb3-ccf68c369d2d", "sighting_of_ref": "indicator--4c9b25b0-417f-4018-93f5-eaa39a3fc67d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a4b691-d01f-4d9e-86b8-b2c76c487a25", "sighting_of_ref": "indicator--a74d8c61-5ae1-4af2-bad1-6b5ed22133a9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c38b9b-80da-4035-9c01-eb06af38cf32", "sighting_of_ref": "indicator--39e8a4fd-da6b-4bdd-8553-580da729099b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17859028-32fe-4de1-aacc-30507570cf5e", "sighting_of_ref": "indicator--1b7ebf2d-f464-4c50-acc2-2f160a14396e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983f4e04-c646-4e1f-a2ec-e427950c8977", "sighting_of_ref": "indicator--0c6acff2-ef9f-4c61-a62d-41b72f5616d0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29896c90-dc2d-4699-b8aa-e77bfcb5b056", "sighting_of_ref": "indicator--227c36de-75b1-4594-98a7-5270b1ebd561", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59f041f-47f7-43bf-a44e-dc3239d57958", "sighting_of_ref": "indicator--9b022111-87c5-4e9e-9f1a-8a97c4874d80", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5ed4bd-c0a9-4b83-adcc-a2db41918f80", "sighting_of_ref": "indicator--73fc1482-2966-4d8d-ba1c-1d21afa670e9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c204672b-94d2-49be-888f-1a572db288ab", "sighting_of_ref": "indicator--ad5fa2c1-12f9-49e0-920d-eeaef6e3165e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ca48f3-f5ca-4260-8828-214aa4d327cc", "sighting_of_ref": "indicator--af97765a-5780-40fa-8a62-460510842b6e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f865b68-34c2-4774-9120-99631c0fc620", "sighting_of_ref": "indicator--d03843d2-a5b2-4498-ae9f-7782588486c5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e452d3fd-3d99-4e9b-b713-80d1227080ab", "sighting_of_ref": "indicator--d18cf688-4d94-4120-b709-9dffe32c7650", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978efa31-fe98-4af6-8f9c-3c00f44eb209", "sighting_of_ref": "indicator--24d52b9b-7428-4744-827a-056bc08fdd2b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20e61a2-2046-49db-8e70-63aefe2bfca4", "sighting_of_ref": "indicator--97a67fde-bab7-411e-a10f-e53ecc19264d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feaa2c1f-188a-482c-8bda-01cad3bc8c95", "sighting_of_ref": "indicator--c959cc16-9d7e-4099-b121-d4e687b7dc0a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55f072b-feee-4c05-992c-7bed59e46c7b", "sighting_of_ref": "indicator--16b8b48b-d4c9-4def-8d73-e4270e96329a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93b4d9b-7545-45d6-8e94-11f2f023e999", "sighting_of_ref": "indicator--16b8b48b-d4c9-4def-8d73-e4270e96329a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188f0970-cf08-41cd-8c9e-e4925f6eff4a", "sighting_of_ref": "indicator--6cbb1b45-a26a-476f-b617-7175cddf523f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00980a72-8924-413c-820a-8d187d2ae9cb", "sighting_of_ref": "indicator--3c45cc6a-9b7f-4163-8cff-50def9a02e88", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ec5413-42fa-46b9-bf6e-5c9f35b9ce6e", "sighting_of_ref": "indicator--bc079c7c-05bd-4c51-bad0-29e0608f4eea", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2b5a2e-f994-45fc-877f-605ac13eab50", "sighting_of_ref": "indicator--46dcf234-7168-410b-899e-ff7c57508c21", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5234e217-212d-49e1-9fd2-da1b5b658e62", "sighting_of_ref": "indicator--eff04396-6a0b-40d8-92a0-81d8e824f901", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9a7d1e-c9cc-479e-81d7-8d7664072d86", "sighting_of_ref": "indicator--eff04396-6a0b-40d8-92a0-81d8e824f901", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd46cb9a-e410-459d-9b74-d68ea5cc0e0b", "sighting_of_ref": "indicator--30631136-0591-4d7a-b5b7-c5cb3453d035", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c201d17-4778-4383-a86a-fdcab9308604", "sighting_of_ref": "indicator--3ecb7f8d-7668-448b-97db-3787cae170fb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf852d7b-4be2-4774-975e-65e02455874c", "sighting_of_ref": "indicator--3ecb7f8d-7668-448b-97db-3787cae170fb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1febb672-e37f-4281-8ec3-453b5ec43863", "sighting_of_ref": "indicator--dc33b45a-b7f0-4cb7-a64c-7012478afd88", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984e242b-c383-4096-a04a-6b7d46c50b50", "sighting_of_ref": "indicator--e100a0d9-2edc-45d6-ada6-294b22175450", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a09f437a-44fa-4b55-8a01-d8097a709a7b", "sighting_of_ref": "indicator--e100a0d9-2edc-45d6-ada6-294b22175450", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9946cf72-340e-4e36-87d2-e1df8096ff44", "sighting_of_ref": "indicator--b2e5a75f-8e46-4d15-b27f-0a450d3e447a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93aa835d-67f5-4b36-b73b-3ec21c0ff9b1", "sighting_of_ref": "indicator--b2e5a75f-8e46-4d15-b27f-0a450d3e447a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1a902d-715d-4cdc-98b5-eb0f01e11669", "sighting_of_ref": "indicator--2afb57f0-ee88-4575-b18f-9f14204f0cbc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e9730c-5c71-42c0-94e7-72f4b2e28b4c", "sighting_of_ref": "indicator--7a06aad8-7913-457c-a9a9-aa00f3e4690b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360fbf9e-922b-4ffb-86af-4975dda04770", "sighting_of_ref": "indicator--9315d5e1-2f04-4e21-bcde-55f492abf29b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c5dffe-6267-46bd-b25f-99932fdbac5b", "sighting_of_ref": "indicator--9315d5e1-2f04-4e21-bcde-55f492abf29b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90dd67cc-9b11-479b-8e68-478dc456cc2e", "sighting_of_ref": "indicator--cb1034fe-43d9-4a52-84ba-e6db329aa2ba", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6484b510-97a6-47af-92f8-5dae2c00c954", "sighting_of_ref": "indicator--286942a2-5f51-4826-9f13-abdda270297a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c96998-4edf-4589-9230-a807b6d1b75c", "sighting_of_ref": "indicator--286942a2-5f51-4826-9f13-abdda270297a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f256a66a-9825-4c4d-be1f-977392383818", "sighting_of_ref": "indicator--b4dd0684-b432-4ffe-a2fb-59359bc8587f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfb13a9-ce10-4283-b94c-483ae4b2258a", "sighting_of_ref": "indicator--9322e790-4533-4e78-8aec-b26b6a0949ad", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9693439-4736-4629-90dd-9d6d8ed2d3fb", "sighting_of_ref": "indicator--d8769d72-e925-4a20-96b8-351cdd2dd536", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5a41e4-c09a-49f3-89e8-dc6b9782f095", "sighting_of_ref": "indicator--412a43fe-de66-48ac-a253-45861a8419fa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b74261-64e7-4dc6-9369-ce1c20db9c66", "sighting_of_ref": "indicator--412a43fe-de66-48ac-a253-45861a8419fa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fba68a3-8b9d-4fa5-96e6-3b22fff55e92", "sighting_of_ref": "indicator--95f2b17c-3925-4423-82fe-ee18b92ffbfb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec7c80a-b26d-4150-8c86-85c97c4a1a25", "sighting_of_ref": "indicator--283cbe46-28dc-4839-82c8-2d426046df1e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a08855-1e7b-431c-bbd0-3f318d43a126", "sighting_of_ref": "indicator--283cbe46-28dc-4839-82c8-2d426046df1e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5508cd86-90ce-4919-97bb-c02e2618acf6", "sighting_of_ref": "indicator--dcb32941-515b-4f8a-931a-f62e3abe9e6f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91ee42b-7e23-4f8a-8d89-64488d93878d", "sighting_of_ref": "indicator--dcb32941-515b-4f8a-931a-f62e3abe9e6f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d235cb2e-b4e1-456e-9a90-69fddbc09bcc", "sighting_of_ref": "indicator--06f00fce-b9ac-4840-a18f-15af201388ac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9cf7ed8-9075-4f74-b69f-6cffa4b18249", "sighting_of_ref": "indicator--06f00fce-b9ac-4840-a18f-15af201388ac", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253b27f5-e254-40e4-8acd-a1b462879c8a", "sighting_of_ref": "indicator--0749729a-05d9-47c9-91c3-f21362e4d664", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8feb8d65-fbb9-4fd5-9da1-933bc9bb405e", "sighting_of_ref": "indicator--0749729a-05d9-47c9-91c3-f21362e4d664", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87903e96-9038-4eb8-8f7a-87a5e2a5093d", "sighting_of_ref": "indicator--e249f062-2c45-4666-8fa1-b437ebd86f40", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd59b924-6e64-45cc-94d9-2f0dc01595ae", "sighting_of_ref": "indicator--b74d3417-0edf-4f1a-afdb-3e129449d710", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119b33e6-263d-4693-871a-35bcb3b48da7", "sighting_of_ref": "indicator--ccdd0885-9002-409d-953f-9af4b0fc7b74", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8610d6-8ab8-4935-8cc4-ff23fa4a41cc", "sighting_of_ref": "indicator--ccdd0885-9002-409d-953f-9af4b0fc7b74", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc557286-94cb-4a3c-aaef-d04989dfb0a9", "sighting_of_ref": "indicator--47d30cc6-84cd-408d-a973-a7fc73480657", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da17b4d-bda2-4f79-860a-7225f9c1421e", "sighting_of_ref": "indicator--47d30cc6-84cd-408d-a973-a7fc73480657", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--236974d3-278c-4eba-b5b1-27d4a72671b6", "sighting_of_ref": "indicator--99508eb6-1573-4d69-a48f-eac7a23668df", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c15a10e-01b4-45c3-b200-40c3db2c319a", "sighting_of_ref": "indicator--99508eb6-1573-4d69-a48f-eac7a23668df", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056d8717-350c-41b5-a171-22419edf93d9", "sighting_of_ref": "indicator--b087ba20-fa1f-4d08-b40d-98fdbe0cb83b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0168331-930a-450f-8739-cba48341d693", "sighting_of_ref": "indicator--b087ba20-fa1f-4d08-b40d-98fdbe0cb83b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018ca21a-f5e7-4e0a-a3dc-8f5c66f8364b", "sighting_of_ref": "indicator--242d8569-8a32-4381-8356-938f38015351", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba90f11c-2aa0-47d1-8eed-8b013b8a8207", "sighting_of_ref": "indicator--46a5dcdf-dc90-4e0c-80ee-99043f078d2b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e8d472-4da3-4f86-aa26-26f991e0530f", "sighting_of_ref": "indicator--2f7bc759-3ac8-47e9-9a38-60cf14e3ce5f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eab1c5b-d42b-4542-ba77-279b25061b52", "sighting_of_ref": "indicator--2f7bc759-3ac8-47e9-9a38-60cf14e3ce5f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545cf540-d425-47f2-90d2-03ce10216277", "sighting_of_ref": "indicator--6d58fc21-ca0f-4e2a-a5ef-5168cf43ab7c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96fd4195-c3ae-4960-bba9-bc101e115edf", "sighting_of_ref": "indicator--9d6e9c9a-1311-4162-86c6-879e3e9a8300", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a2ae95-9312-4d55-889c-dbe0c1366874", "sighting_of_ref": "indicator--9d6e9c9a-1311-4162-86c6-879e3e9a8300", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34042b56-8625-4348-989c-d36dd1c89a84", "sighting_of_ref": "indicator--592014c1-07cb-4410-a510-e946a566f105", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed69b0c4-edb7-4ac7-8c0e-0ef50a6a5693", "sighting_of_ref": "indicator--592014c1-07cb-4410-a510-e946a566f105", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4dba93-91d9-4546-97fe-e8d7bc46197c", "sighting_of_ref": "indicator--b21f623f-0e4c-4fb0-a341-f5ae130625b8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3863cfd-e54e-4d96-834e-7a458e4ede8f", "sighting_of_ref": "indicator--19ec5a87-8ed1-4f06-929c-00584977cb47", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f81039-777b-4e97-81d6-5656a15694d1", "sighting_of_ref": "indicator--3cf23ba9-e0ca-4a6b-a2a2-c578aff89de1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceedb95c-7098-4aa5-8da7-847df117734b", "sighting_of_ref": "indicator--3cf23ba9-e0ca-4a6b-a2a2-c578aff89de1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08271543-533c-4fd7-a792-e7cb7b72915c", "sighting_of_ref": "indicator--56a7f995-dfe8-4aa9-b321-958dfa6bb217", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4efb05d8-ac9e-4f13-83e5-7233dedc17a8", "sighting_of_ref": "indicator--56a7f995-dfe8-4aa9-b321-958dfa6bb217", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1437c4c4-0a8d-4e7e-a714-29271586353a", "sighting_of_ref": "indicator--bbe1bd5f-8355-41b8-b6ca-cb67c88e3cea", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63330ad-5240-40c8-85bf-0784689105eb", "sighting_of_ref": "indicator--bbe1bd5f-8355-41b8-b6ca-cb67c88e3cea", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ded6ac-c872-42a1-829e-343eca2435b5", "sighting_of_ref": "indicator--5ff0cf48-1761-4419-93c6-f39ac2d19d78", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3eacc1-83d3-461b-8a0f-b89486879d36", "sighting_of_ref": "indicator--5ff0cf48-1761-4419-93c6-f39ac2d19d78", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb9ff1d-e9e4-442d-8725-bceacc239682", "sighting_of_ref": "indicator--73476c15-c852-4f79-96af-2600a1742e11", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28300b5-5c51-469c-b8f8-a82edd31221e", "sighting_of_ref": "indicator--e9438fa1-2ea5-44f8-ad99-7394e715c7fd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc68a41-013f-4262-82e6-7f2c715fd356", "sighting_of_ref": "indicator--4fa1750c-6026-4549-a21a-c501deed8425", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3497105a-477d-49ef-bd20-a7203b855ee1", "sighting_of_ref": "indicator--a2ee5055-0ac6-4f6c-acc0-3a0b911b07e0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13cb5f4f-640f-4705-b177-f26fae232c12", "sighting_of_ref": "indicator--ea197c6b-0caf-4684-ae8c-0dad9d374ad3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffadbd09-0b43-408d-adf7-51ecc33f2500", "sighting_of_ref": "indicator--ea197c6b-0caf-4684-ae8c-0dad9d374ad3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c0618e-e8ca-4308-8397-87b58b37980f", "sighting_of_ref": "indicator--681039f1-51fd-46fb-9016-167b79daa301", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3e3bef-a868-40b6-bc6a-2d4c123e9693", "sighting_of_ref": "indicator--681039f1-51fd-46fb-9016-167b79daa301", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f085f65-72d0-4a07-84bd-6dd2bfc1e371", "sighting_of_ref": "indicator--81906c27-25a3-4589-8816-647fe321e6d4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeeda2e2-983e-44ff-8e2b-ea6c4f48e7f4", "sighting_of_ref": "indicator--b21ae3f5-c77b-4a17-942c-e8aff0a87ef6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5367552c-3623-42f8-a185-49db6d3f4265", "sighting_of_ref": "indicator--05753aaa-4c44-4a2c-a672-07656b98fe0b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a65476-c6d3-4743-8b19-4bea8126ae6a", "sighting_of_ref": "indicator--40889855-ea8a-47f8-9789-320ba26ca35b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6778875f-74ff-4c9c-87c2-a90ed210dd14", "sighting_of_ref": "indicator--bf3659f4-a031-4def-9903-518c36c3b565", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191d1f0a-8949-4447-8ba9-574ad49dc743", "sighting_of_ref": "indicator--06f634b1-0664-4296-ae47-d4f662613b90", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9510283-f6f5-4f5b-bfa0-283a1f0b9414", "sighting_of_ref": "indicator--f9767495-b02c-4cf1-85c2-d02864054270", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1e9237-3d82-466c-bb2b-6288ee9cf512", "sighting_of_ref": "indicator--f9767495-b02c-4cf1-85c2-d02864054270", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1379b719-adaf-4601-8bd2-617ce21e524c", "sighting_of_ref": "indicator--2629d268-ae10-466e-8b0c-8a748c0c6d07", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33a9da7-2961-46ee-baa5-d2242085e698", "sighting_of_ref": "indicator--2629d268-ae10-466e-8b0c-8a748c0c6d07", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c14f70c-3afb-4d97-b5d6-5acd98c4fa58", "sighting_of_ref": "indicator--6c6c0078-09b9-4b11-87ca-0270ed369ce2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcab3577-0cf9-44b7-b6eb-494c9ad92459", "sighting_of_ref": "indicator--6b523985-b239-4256-91b4-3d6fffda7855", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462d4ac9-e073-49b3-a9b7-6952a23c4cdd", "sighting_of_ref": "indicator--64a497f4-084f-48b1-95e9-fd50077f6eff", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8552c0ab-6059-4932-8c8f-fea1d530ad00", "sighting_of_ref": "indicator--6e105dba-e6fd-48eb-9e09-fb93d05ca32d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e28e31c-8300-4ca9-b89f-4473587bd3af", "sighting_of_ref": "indicator--7115c9e7-dce2-4a79-b6d9-f4b1615f7cd3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0adb603-fe8e-4f75-b288-b603ec982b86", "sighting_of_ref": "indicator--8f3c9a5d-53d4-453a-95ae-5d8105c92ecc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61df158b-52cb-47eb-b2f1-59535b203c5c", "sighting_of_ref": "indicator--8f3c9a5d-53d4-453a-95ae-5d8105c92ecc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7f1711-f39f-4cf0-8e9d-e6d7b891af4e", "sighting_of_ref": "indicator--bf435c41-a68b-4d38-9b21-94b46f9fedcf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bcef577-d641-4b62-bb62-47cb1dcce1cc", "sighting_of_ref": "indicator--bf435c41-a68b-4d38-9b21-94b46f9fedcf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcda1d99-09b3-4259-960f-e5fd15f34057", "sighting_of_ref": "indicator--226b8666-583f-4878-87f3-b7d21677b99e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed320493-ca02-4164-8229-8581b935a093", "sighting_of_ref": "indicator--226b8666-583f-4878-87f3-b7d21677b99e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662bda31-181a-43bd-916b-1c550b046985", "sighting_of_ref": "indicator--2c9ef592-6121-4f07-a1ce-7ed708805015", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2c4d3f-0ad3-49b5-a790-d29b82d1890e", "sighting_of_ref": "indicator--2c9ef592-6121-4f07-a1ce-7ed708805015", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48948e72-8c6d-46cd-99e6-4c6f802500f1", "sighting_of_ref": "indicator--117355d1-13a6-4bb3-8173-7cc330c127a9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dad505f-d985-4a8e-851a-e8ab3d5df431", "sighting_of_ref": "indicator--cf183113-03ff-4891-a318-eb1941901f16", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51411ffa-5b3a-49b5-aae3-840ef2396b37", "sighting_of_ref": "indicator--afec033f-d7e5-46a3-a64e-ae5ad9721ef4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ceabb1-e6f9-4b67-b7d8-93e3daf2f005", "sighting_of_ref": "indicator--afec033f-d7e5-46a3-a64e-ae5ad9721ef4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7249bc09-1fd0-4b69-a4f5-a54403852f39", "sighting_of_ref": "indicator--39bbde73-a38c-4a68-ba73-e709c8654295", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad94fbc-c332-4261-80b2-24c8d5258f98", "sighting_of_ref": "indicator--b984db82-1572-4aee-8747-defc9511b8c7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782adb19-99df-4392-99c8-6c717fcc83f5", "sighting_of_ref": "indicator--0e8edba5-f5f5-4f48-8137-45600cf402b5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831cb15e-81dd-4e78-bddb-7aa35b9e138a", "sighting_of_ref": "indicator--64b7825e-66bf-48e5-a13e-6248e3773dca", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23440924-e9e9-4b7e-9ee7-80f55f62a091", "sighting_of_ref": "indicator--7e58d4ea-6006-48ab-b8d9-8eb354c9cba3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24ba57b-e729-4553-bd58-6923682462ed", "sighting_of_ref": "indicator--5fe21113-e74a-48d4-b1fa-6811f2838431", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb68c01c-5466-42b2-be95-9919b97a9e9f", "sighting_of_ref": "indicator--5fe21113-e74a-48d4-b1fa-6811f2838431", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bcac9ac-5b89-46f0-ada5-2d2361f3b3f2", "sighting_of_ref": "indicator--42a2e3c3-5dc7-4f65-81fc-d9b512267de6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a65c470-0418-4139-954d-35123aba62d9", "sighting_of_ref": "indicator--42a2e3c3-5dc7-4f65-81fc-d9b512267de6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759e792d-508b-4d15-b6c7-e28b9543c841", "sighting_of_ref": "indicator--ced60488-3e20-40fc-95ad-c597bdba9b6e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ecc6408-4b40-43fa-88a4-a7320ca63b38", "sighting_of_ref": "indicator--b7ff6fc2-2b98-4fc2-b522-c9a38d86221b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1857cf2e-7322-4ec2-a4eb-c296c4bf0533", "sighting_of_ref": "indicator--846484e5-4181-49e5-a5e5-1fc7fe5d2a20", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ddf8cb-ffad-4a7e-b477-99bc27168e68", "sighting_of_ref": "indicator--c4f2eaa8-d9d5-4781-bbe6-d009ffccd6c9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a3b30d-97a7-4cef-b538-60dd605c4799", "sighting_of_ref": "indicator--25fab7dc-424b-4df5-8e63-b05f4adfc91b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d54b94-1ff6-4227-9951-b13d41f38202", "sighting_of_ref": "indicator--cf98b9de-9918-4e0a-b847-7d308adf7e19", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e4a237-2ab8-4d58-aa5a-8d82fce215af", "sighting_of_ref": "indicator--ace5d376-ec78-496e-996e-5dc4a7d5a769", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83543c56-0d86-449f-91b2-4f4bab1fee92", "sighting_of_ref": "indicator--f6391797-fa67-4ba5-808f-242c7c0e9553", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa99f02-7a13-4668-a574-8f95c7d65a13", "sighting_of_ref": "indicator--6732120a-59d3-4105-92ab-b909593eec3d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55871dc-e630-491a-94b6-14aa017097fb", "sighting_of_ref": "indicator--ad3a4650-0e8e-41d4-92cc-1f7c37989169", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99024635-3aeb-40ef-b231-c0d4335a7618", "sighting_of_ref": "indicator--526b07fd-bb5f-4225-a505-2a47a1a478bb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c2ab96-b9ec-4f10-b7e4-9b7e154b141f", "sighting_of_ref": "indicator--4659e2ec-93cf-4d31-8300-6c84b8fc0b26", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2823ba2-883e-4a82-af0b-fc2a504372fe", "sighting_of_ref": "indicator--cd45c656-ad41-4d9c-aaa6-ee63ea365161", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea888ee-2c8b-4208-9ff1-c2c9e096d974", "sighting_of_ref": "indicator--1da8a99b-02df-4002-9d96-e88d7bf2eb8f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019705a6-3175-4806-84b1-c85984eec0a8", "sighting_of_ref": "indicator--9302dd39-cfaa-4ad6-8704-4524ee37e7c6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a92316b-aa10-4542-b70d-4e2fe3005d75", "sighting_of_ref": "indicator--47b30c78-478c-451b-83b7-ca84801d9c1c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5967b8c5-3988-4fce-994c-c7a5a04086fd", "sighting_of_ref": "indicator--8a450b31-ad75-49dc-ac1e-6986b3334663", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d19cc29-d502-495a-bea9-dcd0d6da64cc", "sighting_of_ref": "indicator--a64fe454-0390-49db-a0e7-cbd72f4d223f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2063a96-9713-4ae5-9bf7-958d73083778", "sighting_of_ref": "indicator--a6e6acb5-6321-48c8-b8f7-16d44750a566", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437a25fb-e8e2-4579-bcb1-3d3e95ee94bd", "sighting_of_ref": "indicator--29795767-5a5e-4c91-9e61-8938ee2c8845", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f118a140-1431-4855-80e3-74171138c57c", "sighting_of_ref": "indicator--c160bc83-c902-4d75-b679-4dcdbf0f5205", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00992a3c-0eb2-4f69-967b-0fd327a364f3", "sighting_of_ref": "indicator--469c4f8a-0d99-4afe-adac-899834edd031", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e7ae30-34cb-437b-a92d-d790cef37a2c", "sighting_of_ref": "indicator--f93d3704-26be-42c9-8553-04c33a508009", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f1ecba-ccbd-48fe-9afb-14da627c3eca", "sighting_of_ref": "indicator--9e41f1b6-4398-4166-b8bc-3d3467161fd1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76c258a-a3ff-4619-9f4b-3281523cbef6", "sighting_of_ref": "indicator--a45d71d7-6ec6-4c9e-ba1b-9dc9753673cc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd6efe6-b367-420b-a9eb-1aec27997851", "sighting_of_ref": "indicator--5ea19cdd-ba07-477a-ad4b-2a0d8e189ec0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f57420-66eb-4f6d-80d0-331f11d67d8c", "sighting_of_ref": "indicator--ead6d41a-f0b4-480f-aa24-883871484b94", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e69e963-6d11-45d6-afdb-cd5cc9b6c99a", "sighting_of_ref": "indicator--ead6d41a-f0b4-480f-aa24-883871484b94", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c070dae1-50fc-498f-b2ec-13c80186e7cc", "sighting_of_ref": "indicator--ead6d41a-f0b4-480f-aa24-883871484b94", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b933da-2f28-46b4-b85a-65147df3061f", "sighting_of_ref": "indicator--db335072-e9ed-4d07-ac03-af9df043948e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58c80c3-5f97-4753-9f1b-b047946aa1bf", "sighting_of_ref": "indicator--b77029b0-cfdd-4bea-a15e-5275554809bf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa704ec-372b-4a74-b5bd-7f28e4471759", "sighting_of_ref": "indicator--b77029b0-cfdd-4bea-a15e-5275554809bf", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cd14ac-8479-40d3-a828-7a856f096299", "sighting_of_ref": "indicator--b77029b0-cfdd-4bea-a15e-5275554809bf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64dba214-8eb0-4783-8857-1163982ab4fc", "sighting_of_ref": "indicator--cd3c363d-2a95-46fb-a74b-98d2c8e96e5a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f8fc5f-6264-4c96-8651-ca130845a500", "sighting_of_ref": "indicator--cd3c363d-2a95-46fb-a74b-98d2c8e96e5a", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b6e9cf-ff8f-4196-aaf6-40dffc75c00e", "sighting_of_ref": "indicator--cd3c363d-2a95-46fb-a74b-98d2c8e96e5a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57fb743a-5ac0-4875-88bd-96d7feb349c8", "sighting_of_ref": "indicator--f4a25d76-4d8f-4d54-87ff-bf3c914e2f5b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6e2377-0404-4de4-aa41-2b0a999d93fa", "sighting_of_ref": "indicator--f4a25d76-4d8f-4d54-87ff-bf3c914e2f5b", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4def7f5d-4aea-4af6-9d50-4eed8ff1ea02", "sighting_of_ref": "indicator--f4a25d76-4d8f-4d54-87ff-bf3c914e2f5b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--501e9b03-e403-42c7-a707-dcb176aaee03", "sighting_of_ref": "indicator--392dfb07-af96-4757-919f-deaa0822ef79", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3f6e5c-a626-4b93-8ebd-07f2a94c150b", "sighting_of_ref": "indicator--4673861a-be61-4ac2-b657-c70a9f55d9ec", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12edd38c-f879-4a67-880b-bdb9ef055f2e", "sighting_of_ref": "indicator--322a518a-664c-474e-be15-3a17ecbaa1d2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbee2cc-984c-45de-8025-800a883b610c", "sighting_of_ref": "indicator--322a518a-664c-474e-be15-3a17ecbaa1d2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5449fe59-ed37-4569-a8f0-510c7ee1c4c5", "sighting_of_ref": "indicator--f431a536-b244-43ef-84c2-913dae83f411", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64349790-b823-4759-b4dc-2cbbcaa04b3c", "sighting_of_ref": "indicator--0ec4bb75-6e62-4f6d-b1fd-40ecf5d0ef69", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5789704d-c601-499a-8128-bfeec66b3a10", "sighting_of_ref": "indicator--c9be29a1-0a00-408d-91a6-8c618a5e8889", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e65f51e-72b0-481a-889f-0862b83ad731", "sighting_of_ref": "indicator--e88e2ac3-4719-4f6e-a6df-cec79c2f54f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9949e88-33e6-46bf-9189-455ec966d512", "sighting_of_ref": "indicator--41a0ae17-ab00-4537-a47a-3389ebfd36d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2948c7-ba39-4b2a-a942-1cc6b92fd02c", "sighting_of_ref": "indicator--6bcf9058-27ef-4d18-a153-a3f2783cf691", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a950a2c-795e-487c-bb22-4e7521fd1b5f", "sighting_of_ref": "indicator--67feb84e-298d-4287-b69d-fb0e41915852", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff08b060-c167-45ad-bb99-10466dce6c93", "sighting_of_ref": "indicator--6c3f4130-f1b8-4301-a0e4-3ce65bf8ebb7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd0a576-515f-4cf8-ae37-1a824b791eef", "sighting_of_ref": "indicator--fe3ec1ef-858a-4af4-9ada-312941448673", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1cf30db-88db-45d8-8d3d-65a6ec33b2b4", "sighting_of_ref": "indicator--fe3ec1ef-858a-4af4-9ada-312941448673", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--179f8e50-535b-4f94-9ad2-694c84d3c22e", "sighting_of_ref": "indicator--14218d27-a5d9-49de-9cef-92028e6cc477", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055620eb-b855-43fa-94e7-5257bba38b57", "sighting_of_ref": "indicator--450ed700-af1b-4af2-a3d7-fad8bed85a04", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8cd2325-4da9-498a-bd10-7bb298cb3e5c", "sighting_of_ref": "indicator--1e1011e0-5754-4e8e-9524-6caea78b0da4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76d3b91-f407-4790-9208-6e58b9801f1f", "sighting_of_ref": "indicator--a0f345f7-5d0a-4fda-92b1-28542a68815b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c8629f-ace9-42f7-a605-30c565a67c96", "sighting_of_ref": "indicator--bc856fb8-5b6e-475a-92a1-2a6c904b9202", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5f622a-d11f-41a4-abc2-7d8d00285210", "sighting_of_ref": "indicator--8b42741d-ad2b-4255-b8f8-5889702a471e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2af073f-a693-41c6-a83f-a49be06ff301", "sighting_of_ref": "indicator--98be2310-a507-46ce-a0a7-d6c00a17f5dd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0518e9a9-75b2-43fe-a7b1-5144b80bceb2", "sighting_of_ref": "indicator--d83ea0ab-6a72-4342-9f6d-af9aca901761", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e228646-4aeb-4dbf-a9fa-2168a88ef011", "sighting_of_ref": "indicator--e4e2951b-01ba-4dd3-98f6-3c37f9e3597d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7f286f-3bf9-4644-b8ed-2c47b23752bb", "sighting_of_ref": "indicator--228682e8-579c-4ed4-8f19-e6a68a140ab6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a16afd-ecf4-4fa0-a58b-b1f767050c1d", "sighting_of_ref": "indicator--1899f168-13ea-474b-b8db-e56c493cd344", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a60405-a25a-4f90-a7e8-8c8cbf73bddb", "sighting_of_ref": "indicator--c7c53714-27ea-4090-a1d9-c2a8833a17c5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3acc38c7-5c45-4e0b-b83d-69af339a6da5", "sighting_of_ref": "indicator--5cec072d-1e4a-4273-97ca-2ed5d4a3cdf0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea65584-593b-4cab-8852-73ce6797d96c", "sighting_of_ref": "indicator--c0c4ab17-b550-4a7b-84c4-7ec0c6518c77", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2772644c-1ee5-4600-a290-d19bdc2a091c", "sighting_of_ref": "indicator--4ca90862-4e67-405d-9acc-9652ca0f313f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edec5997-721e-410d-9f6c-41a55e615624", "sighting_of_ref": "indicator--82c558a9-0e09-4edb-81e6-714196bae464", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b911ead-d0da-44d9-b75f-2fe0e57bf184", "sighting_of_ref": "indicator--254ece2d-10c7-4d18-9348-95fc2e7f91a9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b19428-f02d-4747-86ae-3c749b40151b", "sighting_of_ref": "indicator--3de2a80e-9055-45f3-8713-6f5fe3cfcb90", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0458770-2ae6-4c29-8c8f-eef2e1e2d85f", "sighting_of_ref": "indicator--2fd823ef-7812-4cad-a7ee-8a4e83d5e0f3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b9f375-7f32-41ec-b761-2e9d4c9e9d2c", "sighting_of_ref": "indicator--5f4aea0f-6f03-492c-9452-92949b0b37c2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d5cb1b-bfa3-4d77-9e01-89a3133952a7", "sighting_of_ref": "indicator--90fdaa3a-bf69-4c23-8434-c4cef0424652", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14dff66-1689-453d-a152-59b07162a2f4", "sighting_of_ref": "indicator--09a06f95-1af0-404c-a60d-21f110a17021", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16fd5bae-f8bc-48d1-bd75-94d81018f37f", "sighting_of_ref": "indicator--8e4c9451-b1c9-4965-b52f-eecd0f2f10a6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd9a36d-2fd1-4449-8d6e-1a3248fe716e", "sighting_of_ref": "indicator--8e9d0fcb-14fe-46e5-b220-304af471219d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c162bda1-62eb-4d6a-a0a9-73649e920b9d", "sighting_of_ref": "indicator--d4c829bc-d7ec-4ca0-bf81-912926db3f0b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6e9240-5f0a-43ad-ac9a-26c159895925", "sighting_of_ref": "indicator--cb51fadb-424e-46a4-a270-3c09ae1aa160", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122c3e4d-e8bb-4c29-b3d1-a11230c9c4a9", "sighting_of_ref": "indicator--552b7725-a02a-45f9-b5a9-50336abefdbc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11c3b8a-8ce2-4c8c-a1fa-559512ea7ba5", "sighting_of_ref": "indicator--425fad4c-5aab-43ff-af6f-63a1c0779a73", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878a0f49-4c64-466c-98f2-a09921639402", "sighting_of_ref": "indicator--38659a30-a133-4e94-ac30-6af060c30bb4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317aa4df-60b8-408d-bf3b-d30773433af5", "sighting_of_ref": "indicator--b725e047-95da-4d7e-91b0-0b4a7684977e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9848c5a4-e232-48b3-b462-73d12274619e", "sighting_of_ref": "indicator--7d50c72b-93cf-4014-818b-669510d637df", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b661cae8-3087-44c9-b124-9ce3392e500c", "sighting_of_ref": "indicator--a0b5abfa-ffe9-47c4-a529-ad950298106a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8b23d9-9d0c-4e38-8f60-969d8b72e153", "sighting_of_ref": "indicator--04c89b9e-6095-41f2-94cd-8173324fb849", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0623855-e347-44e4-ace8-e7a627d4f4d3", "sighting_of_ref": "indicator--c2e9e728-2d72-4f58-8951-b871dd93e2eb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f332cb-c019-4530-9447-9da3256653e6", "sighting_of_ref": "indicator--c2e9e728-2d72-4f58-8951-b871dd93e2eb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9779fec6-8d1d-4808-874e-fd6fa1942ef3", "sighting_of_ref": "indicator--57eb49a2-4370-4f3c-8252-c05a2343e045", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a59f9f-c74c-4b0d-882d-40904b85cfa7", "sighting_of_ref": "indicator--79c11032-3e44-49c8-a8fc-4ad84508040e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58217bf-c3ea-43fa-a8c3-2030c977f998", "sighting_of_ref": "indicator--54b8d315-e34f-4e08-abfe-3f90e7d5f305", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9231befd-a29a-4c9f-8a2e-1bb5d8811703", "sighting_of_ref": "indicator--d52b3de9-c8f5-433f-af71-d25ac05bb704", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57754340-345a-47e6-b8f7-83446edc0277", "sighting_of_ref": "indicator--40c95217-0756-4022-8622-f2e5de98c438", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac41f5e-386f-4f73-ae6d-068d6e9a6cc1", "sighting_of_ref": "indicator--1161f5cf-e2f8-448c-a693-58af65f1a844", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da4baad-89d4-443a-81f3-b4ee7342b4ea", "sighting_of_ref": "indicator--75803686-763e-4aac-baaf-44844a4d9b53", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48bc631b-84aa-43cb-a90a-a07595c2abb9", "sighting_of_ref": "indicator--25c9be91-de89-4c34-90fb-8f8b753b202b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a5a676a-540c-4520-adc6-cade65e0ac31", "sighting_of_ref": "indicator--82a761fe-367a-43c7-b4be-4beeff5fbb3a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9622968-4d0f-4a20-85c4-f7f54d9d6c86", "sighting_of_ref": "indicator--82a761fe-367a-43c7-b4be-4beeff5fbb3a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5bf205-fa6d-4531-827e-1a66d02c1653", "sighting_of_ref": "indicator--d20ea646-4a18-49f1-a1d7-382ea682914d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be91e02e-daaf-4f03-b749-5f18e96c2d6a", "sighting_of_ref": "indicator--6553dbbd-df18-48f8-b341-9353d4dd9ef0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2374e4a1-6162-4b01-8413-d4316aead7dc", "sighting_of_ref": "indicator--3890b627-1f9a-4613-a278-09e56e4ede10", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132ba9e5-a5cc-436b-bcb8-0963cad72ad3", "sighting_of_ref": "indicator--9a65d1fd-b8fe-4977-9cc3-126d86789317", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2e526d-52d8-4d47-9b98-29e4d29094a7", "sighting_of_ref": "indicator--f62b89fd-9994-405c-8f8d-300aeee3af03", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b46583b-c723-4a56-8fe2-81bf491f3827", "sighting_of_ref": "indicator--e97cb180-38a6-4f6c-ba72-087fdbd657be", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ac79df-1450-4ac3-b487-cc7755bd00d7", "sighting_of_ref": "indicator--6bdc183a-b356-48e0-8a3b-4ea0a9ab4f4d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561206ac-c110-4d01-be5b-16b89eeffa36", "sighting_of_ref": "indicator--70f6db9f-d3c3-4575-a3e6-f1dd01675927", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344dcf30-e126-40f1-b8c7-f38f2368a913", "sighting_of_ref": "indicator--08cb2ee7-f816-4657-ae5a-5925111ea569", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d62974-e151-495e-af3b-93abf7522c1f", "sighting_of_ref": "indicator--e1f210b6-fcfa-4564-8ca4-99d27b8fe772", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd02692-f89c-406f-9c2f-2f8c41a18c0c", "sighting_of_ref": "indicator--58099bd2-4f88-4a15-88a0-37a3cc0e1eeb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e537a10f-d5c7-4a41-b836-ac9e642ca0b1", "sighting_of_ref": "indicator--2e4e0820-da75-446a-a3c1-c9b99eca14ae", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8191ff93-39f6-4154-8a46-6ba9c0b2241d", "sighting_of_ref": "indicator--7ed25a95-89fc-4976-96a5-0d2f213f3ceb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93aaba80-126e-4a3f-aecb-832faddf3384", "sighting_of_ref": "indicator--7ed25a95-89fc-4976-96a5-0d2f213f3ceb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95ffe92-b974-40e7-912e-681698b387af", "sighting_of_ref": "indicator--acb5c9f2-5663-4bd9-a359-a2f272a7f707", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0859f7c2-3aeb-42bb-9197-b3803f8ff17d", "sighting_of_ref": "indicator--80c46706-5173-42df-8a9f-cbba2c0820bc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a5e9e6-995b-475b-9be9-9aadee9bf87e", "sighting_of_ref": "indicator--55b10682-81db-451c-a137-1ee8b7a29fbf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b22f7a-ea8c-4684-bf47-20d9aac902c2", "sighting_of_ref": "indicator--d848aaa4-30ca-4bb0-8d4f-3cad2c2a1f51", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6936165-3fb8-41d0-9b61-c60954e887e6", "sighting_of_ref": "indicator--72ad2de4-2419-467a-92e4-a18bff335d9a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3564bfa-b027-4483-ba31-da844adebb80", "sighting_of_ref": "indicator--f9979a14-b929-493f-8369-d1802e27581b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef823be-d7b2-4ccb-821f-b9124af0e400", "sighting_of_ref": "indicator--92ddb611-e333-41d2-8395-c9b9371a7d48", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b31a31e-a09a-428a-af2a-95278dbc02f1", "sighting_of_ref": "indicator--d6f59492-1796-4747-a20f-6b1587d3dbee", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0cd6a5-a181-4c12-a156-88837e355e99", "sighting_of_ref": "indicator--954c158d-f614-4b89-9c68-609f258d48d5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f92eaa-d478-4841-a28f-7ed70ecf9360", "sighting_of_ref": "indicator--ee358e47-5aba-460f-8c44-e7905f84ff47", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ea6bed-1c15-41a8-949b-4b0c7d68bf71", "sighting_of_ref": "indicator--37e1a6c6-1919-4ed9-bade-ff248e0bcf5e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ac18ce-6dd7-45ad-a8e9-f85e6d71221d", "sighting_of_ref": "indicator--8e3a77cd-461e-4ecc-ae2a-e6b74fad8845", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99cb736c-aba0-4d6e-abec-c21edc475a4a", "sighting_of_ref": "indicator--93760dbb-1a4d-4290-bd15-e40a3e1204f9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f1cb29-1a04-40d1-a1db-fa358f477807", "sighting_of_ref": "indicator--d880e37f-cf8d-43a6-9b17-7e4fffcebe63", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56c4451-602b-45e5-b427-04e2135e67cd", "sighting_of_ref": "indicator--1192a6bb-72fd-4b04-858f-25b8b19138e6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b353192a-183c-4c4d-ad07-d9b00b769331", "sighting_of_ref": "indicator--ea8a56c9-73b5-465b-bb25-44e7449513f3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add4c7af-2455-4cd1-b821-6a7b124e5494", "sighting_of_ref": "indicator--2d471c58-2ece-4125-8e44-93b6c8f09461", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d7a0af-7d80-437e-bffe-fbbc306554cc", "sighting_of_ref": "indicator--1e4ae5ec-a089-4a42-a06e-391e32f1a4ea", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27189722-9f7b-4b40-a399-d5f9cd49e81d", "sighting_of_ref": "indicator--37c06924-6ad1-458b-9e0c-8af040993472", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2acd95-1a35-441d-8f45-5d817419dcaa", "sighting_of_ref": "indicator--a1c0ac5b-d2e7-4548-8b2a-ddf3a0613ecc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785f2d3c-0d91-4f90-a056-da929172440e", "sighting_of_ref": "indicator--0e315f75-9c40-4a3b-b6f4-97494faa5aec", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a0f70e-43d4-4171-a622-142da8ff65c2", "sighting_of_ref": "indicator--99a0dac4-4aab-4f1c-b962-e4bdf3213e72", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3048a78c-1af7-40b3-8222-5d87208f83d4", "sighting_of_ref": "indicator--881f004c-67fd-4092-934b-d75d407a32ad", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0e3b17-76b2-4ecb-8046-3c30d72dd60c", "sighting_of_ref": "indicator--92176aae-777b-43b5-a339-531507b7189b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57842ae-d43d-48a5-a27f-ffcc2a6db75c", "sighting_of_ref": "indicator--24bb0dc3-aa0c-4bc9-8a16-31efed9f5581", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbec95dd-898c-4789-a793-c663196c1cce", "sighting_of_ref": "indicator--9d2dd14d-4e85-4301-90ce-ec10bc91a121", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58691687-4996-4316-889d-4c36ab2dd8c8", "sighting_of_ref": "indicator--4bafe20b-39bb-4878-884d-bab6c3c8f317", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0bbd21-a2d4-4685-9b9e-f412d3392778", "sighting_of_ref": "indicator--6bafc423-0e7f-4c46-9893-c5c52ab04906", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91a8a0b-f37b-40de-afe8-18148f642f62", "sighting_of_ref": "indicator--2bbaba79-738a-4b9a-b0f8-d633da75200b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdeafb62-62e7-41c9-83ec-5ec9d7ea0a40", "sighting_of_ref": "indicator--3b7f1602-3e7c-46aa-867e-f58a07f3898b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb1498a-6524-4f30-b3fa-7e447a05c72d", "sighting_of_ref": "indicator--956a0d3f-1e07-4e78-8c5e-ea809ab9a454", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5933e50-e364-4ac9-a74a-456e08ecd28b", "sighting_of_ref": "indicator--359b708b-5c2f-4917-bdfc-71a23dffed99", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0bc3ae-1bb3-46c8-abf6-8ceabb4d821b", "sighting_of_ref": "indicator--e16f426e-d8fb-49cc-9533-0adfb148bb46", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c574056e-9349-4ab0-97f0-05a92e37c357", "sighting_of_ref": "indicator--e027e7c6-c2fa-4f4b-9e73-240d939a73de", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c189f601-84c6-4809-ad24-c7e1b77db58c", "sighting_of_ref": "indicator--1b1bdedf-dd27-49b8-b5c2-de3e7ba3e7bd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4300520e-72f2-49a9-9ffb-152036949c5b", "sighting_of_ref": "indicator--59d4eb28-7544-4c94-94b2-b648e56536b4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908cae15-8a7b-45f7-96c2-578cef3f074d", "sighting_of_ref": "indicator--e7b8138f-07bd-4c6a-aa18-1bb637b07eef", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d76cd01-6681-4fd5-8e41-89b9e4dc5d80", "sighting_of_ref": "indicator--0d4f25b3-a4f0-4461-9221-8a81a4a4e572", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc69d21f-4d73-43e6-81c6-6f8449fc1462", "sighting_of_ref": "indicator--b27a9a76-5184-4439-a3d6-a56382117fe7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bb6489-1bd3-4769-964e-d1470729c971", "sighting_of_ref": "indicator--b27a9a76-5184-4439-a3d6-a56382117fe7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a4d95b-e02a-4c1f-a6b1-e08b3a3ecff4", "sighting_of_ref": "indicator--ed442e0d-8283-4c9b-9baf-5e27ae261ee8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf0dfe6-135a-45cd-8ce2-827aa5272a65", "sighting_of_ref": "indicator--47572699-8a87-4e46-86b1-5ee6380595a0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a30977-846a-4b48-ac0d-d985cadadd59", "sighting_of_ref": "indicator--ee20f408-c356-4956-ba33-ea4dd068ded6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39002c57-21fe-470c-ba7f-6d4b093f3df9", "sighting_of_ref": "indicator--a98212fb-daa5-47f1-93a7-ae8b680663ee", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f964d9c5-1beb-430b-8955-9eaf735a5993", "sighting_of_ref": "indicator--426160cb-5576-4a8c-bd7d-d5ec180056bd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bcd691b-dcf0-423c-86d2-1b3f2b99bcdd", "sighting_of_ref": "indicator--98c9ae14-e932-454a-8267-a757c156ba3d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc220755-ab51-450f-bc7f-0aff06e68c75", "sighting_of_ref": "indicator--a9c7b575-60be-4a93-a681-48ac3e6f3745", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a06f82-4665-48a9-b41a-d1a1acf954af", "sighting_of_ref": "indicator--98ed9b28-b238-4a37-b1cf-dbeade814b30", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46a3252-aaef-4740-b739-176d51192a83", "sighting_of_ref": "indicator--f4c66f2a-61e0-49c4-8fa0-7fcc759a6762", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e17d96-66ff-46cf-8e37-87ee41e1ad6d", "sighting_of_ref": "indicator--e2ad8ba8-71b4-4d7a-b587-aaacf4132a29", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1efb4b-6d3b-47be-8d02-25fbfb04da9a", "sighting_of_ref": "indicator--705c651e-b3bd-4347-badb-68f1427bd625", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1b9767-e696-430a-9f93-5f58ba059ea7", "sighting_of_ref": "indicator--4cc5d45a-3e0a-48b2-8119-0f40f41db76b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deca6f2a-7b3c-4734-843c-c7569f37aad3", "sighting_of_ref": "indicator--fbe889de-b2d2-4a9f-9a77-2921a969efb5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c06a9df-0bfe-4c6b-9a0c-adaf312bb613", "sighting_of_ref": "indicator--9f747870-5733-4a96-9b37-d759eb96e74f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8bd2ce4-36fb-4d3f-a890-156eaf079e0b", "sighting_of_ref": "indicator--b2a582c1-3e33-4195-9932-2dd0adf18541", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03f9635-cdd1-4260-bdc4-369bac51eb34", "sighting_of_ref": "indicator--47a8f5df-ca3b-4750-b2ad-38c64b885bf9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d5a54c-6f4d-49b3-8245-cf18aff82ef9", "sighting_of_ref": "indicator--bb188197-5f90-41df-ae15-b30c17f1a567", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36d34d8-b1ba-444f-924b-9719b778154f", "sighting_of_ref": "indicator--3f716ae6-d4cd-419f-a17a-9ef39f2b8f6a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff10293-26ca-4042-8b5a-2060d38e22e0", "sighting_of_ref": "indicator--7c5d8a30-d3cc-4f74-815a-22bb84779de3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d7bfa2-5a49-4823-8a88-f6e9b266c300", "sighting_of_ref": "indicator--a3ce666f-47e1-47b5-9812-9985309467b9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429d43d4-33a1-4ee8-b19a-5dbbad9f800f", "sighting_of_ref": "indicator--ed8d001a-2eac-4679-b48f-10cf7fb32ae4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b22ddee-aefc-498e-b11b-2ef0ecf61543", "sighting_of_ref": "indicator--d1ca68a5-baa5-4b32-bca6-3c20b07f759a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab2e5fb-f457-43a2-9f2a-c93b93d46683", "sighting_of_ref": "indicator--43056a9f-e59f-48f0-a335-dbd95fc85f20", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7404b4-c73d-4f66-9a8a-fc585cb0abcc", "sighting_of_ref": "indicator--453fbe5d-3526-4d79-8a7d-afd298821625", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4307da63-3908-44a9-b1d4-d17da3485489", "sighting_of_ref": "indicator--0b0e7b09-2281-4fc5-8639-bdf058929104", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd6fe98-93a8-412e-baa2-88725ed9d93f", "sighting_of_ref": "indicator--38fa213a-7872-458a-890f-72feefe459d2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adaffeda-2099-4b19-95a4-6fd044f67cd8", "sighting_of_ref": "indicator--dbd4569a-bc52-4ebc-acbd-51776cd0406d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac53025-8d73-4329-8342-ea678c6ae1c1", "sighting_of_ref": "indicator--834e0207-ceaf-45b4-83a3-9109b5cd33a2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032112d2-85ab-43ea-8271-4178f5921cb3", "sighting_of_ref": "indicator--c7dc7288-619d-4e2d-b8d6-e600f189dcf1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e932434-268e-4811-95f4-07e2b4b99647", "sighting_of_ref": "indicator--3deb0118-ed42-43a4-9b4a-dc1c0aaeefd5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc6200f-f236-419e-81aa-8d11655ddc18", "sighting_of_ref": "indicator--7e11858d-c1c4-426d-af58-872d36265df4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84bdd13e-f4bd-4fc6-bb0a-c1d4826b1d64", "sighting_of_ref": "indicator--1cdfdbe7-fb43-4b6b-8e3b-0e7e3b503bd2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a107cb-2611-4e93-afb9-e29a4ffa507e", "sighting_of_ref": "indicator--1cdfdbe7-fb43-4b6b-8e3b-0e7e3b503bd2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e70f6fb-c48f-4b14-9de9-cf33866a9b52", "sighting_of_ref": "indicator--5477af2f-d39a-4731-86a0-e3cc3ab9e4da", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3666d43-8077-4481-ae95-fafa2607b9f3", "sighting_of_ref": "indicator--5477af2f-d39a-4731-86a0-e3cc3ab9e4da", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409b8785-eed6-4602-bad5-046a3e6ddc0b", "sighting_of_ref": "indicator--5477af2f-d39a-4731-86a0-e3cc3ab9e4da", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9528c3-88fb-4fbb-a184-2f5914c4751d", "sighting_of_ref": "indicator--62c49c41-7de3-4eb2-b65b-59e0fd59e1b7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8823e74b-a2a9-4318-aea8-d0c94aa2d272", "sighting_of_ref": "indicator--3876ed5a-7263-4dae-9c66-bcd0cada47f0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b69562-5243-4edd-aad8-b20818a23c3d", "sighting_of_ref": "indicator--803799f8-44a4-49e3-a63c-769d39a6eca6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea731e24-3ed4-4030-8f0b-c88ee8c3d83f", "sighting_of_ref": "indicator--f04b08de-e8ab-41f2-a202-5e45cb20e748", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19cd50b7-5952-4149-b74b-0609adf1ec3c", "sighting_of_ref": "indicator--980fe162-9708-430a-bfd4-2a8f8fe458c4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2712a0-3f22-4fec-9baa-cacba6c7830e", "sighting_of_ref": "indicator--d2ddec21-dd5d-4fb4-9d4a-e787d157babe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b88eb0b-60b4-467f-a18c-1bdc7ef87f93", "sighting_of_ref": "indicator--d939b457-439b-4fcc-9e66-3985c9c5c4d5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fab860d-3bac-4894-bebf-f97706f494dd", "sighting_of_ref": "indicator--a7a5d8b8-6b3e-43ac-9daf-2cb2f2a2fdde", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0581a39-4b82-4ee0-8265-71c4a2ebe04d", "sighting_of_ref": "indicator--28483655-0245-4b16-80d7-5f777cb32c23", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a73cf07-2552-4cab-888b-ef5c7f0ae208", "sighting_of_ref": "indicator--531ab931-9c03-4488-b247-7e933cb3b9a7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf5b9bc-46ba-48f4-b3e2-22984925bb95", "sighting_of_ref": "indicator--380afe8f-0e4a-4673-bdfe-5aeb6fd254fc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11bfd7ea-afb7-4db8-b4ba-cde6c731808f", "sighting_of_ref": "indicator--da7473fd-0864-46ba-8486-5e50a2c403ae", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469f956f-4688-4ef2-9332-e4afa8ffedf2", "sighting_of_ref": "indicator--da7473fd-0864-46ba-8486-5e50a2c403ae", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2393c501-5646-41bd-9239-c4f9d95425c8", "sighting_of_ref": "indicator--bfede355-0750-4457-927e-d093831a2215", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3932957-0534-486b-83e4-0edf3edf0528", "sighting_of_ref": "indicator--6d0a6005-9e02-41e7-869a-0e1a4c3b510e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7361bd47-4395-429a-b58d-37a75d9b66f1", "sighting_of_ref": "indicator--39f07a8f-5ed8-426d-86ee-a8455746eb59", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35788097-5a79-4187-ae69-16e274db604c", "sighting_of_ref": "indicator--f5a8ccb1-f2b6-4e27-a6b5-5f32c34b08b5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817a0f68-909d-44c7-9539-220f17873128", "sighting_of_ref": "indicator--b7c8d3fa-8b1c-457a-a703-c0a9fc256f09", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18832b25-a113-4a0c-a0e2-1c6dd3ed75ae", "sighting_of_ref": "indicator--6062b1ca-9b69-4a47-8f5d-dd4dc4e29b69", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736436ec-268c-4daa-903c-7b4eb5cc7301", "sighting_of_ref": "indicator--af5941de-f28c-41c7-83ca-76f4228255a3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5bba9c-6caf-46c9-bd78-862b5d887e26", "sighting_of_ref": "indicator--93934a75-36d7-4e8f-aec1-2192e6fa873a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e9628f-4ea0-4100-8588-6d3fcc3e2b00", "sighting_of_ref": "indicator--61042ae7-2377-4d2a-80b0-aa300f8d4b13", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a2297a-240f-48a5-b1e4-4f78675b940f", "sighting_of_ref": "indicator--55d3c19e-c0b4-48f5-bedb-8ca317f54d19", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c306d7ef-4aa6-4a50-bd97-0765c8fdd579", "sighting_of_ref": "indicator--cf8771c9-1164-4c76-80c8-420cee52f2cd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f13d3bbc-bfe0-437f-9060-2a8442166b1e", "sighting_of_ref": "indicator--2297ba2e-907d-4283-8f3c-da2dc92a4bf3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7e3caa-d8fd-4f10-bf44-940d501cbd0e", "sighting_of_ref": "indicator--c66a46cf-bf87-422d-ba4c-c5654b425d07", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2baa7dba-b42f-416a-9178-80f2e15ebd89", "sighting_of_ref": "indicator--a4e4b98f-b323-4816-8979-fded8d87f0bc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15543c57-91fa-4dfa-b3df-1e21c3d8d5fd", "sighting_of_ref": "indicator--0a698044-3b68-49c6-aec1-036bf4c67bf8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07a163f-64cd-46d1-9b41-015fedadcd18", "sighting_of_ref": "indicator--c9c90ea9-6bdc-41ae-adfa-16c106763bcc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b7ed96a-d8cd-438a-a4e7-03f7fab82351", "sighting_of_ref": "indicator--696f15ff-3db5-46fa-b1be-170e5253cc0e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f774021f-47ce-422c-9dbf-5809288a0d3b", "sighting_of_ref": "indicator--564cd989-5b2a-4790-9fa3-745d3f2f9ded", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ef117e-9179-4b3c-b12b-2d6f60d49633", "sighting_of_ref": "indicator--b7676f8e-c8d3-414e-b499-50c5aa13c214", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d474e05-e827-47d1-a2e9-ab9510582b34", "sighting_of_ref": "indicator--8b7e40a9-39d9-4207-9e49-78a37c5ad607", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba2995a-133c-4dbb-9332-6521041ece6f", "sighting_of_ref": "indicator--19d32482-0299-40dc-9d58-8ddd994dabf5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23e24e6-9beb-4ce4-96ff-fc40e1d17031", "sighting_of_ref": "indicator--c0dc6a8d-5376-404e-9659-8437ac605651", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3baaea4d-bf70-4ec8-b244-c3c4571650d0", "sighting_of_ref": "indicator--ce447801-cc61-401f-87f1-b04a59ae3211", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6162c8-1795-45d9-8479-0a6a53edec59", "sighting_of_ref": "indicator--2122eaf3-0e0c-4c91-9ced-62a94295282b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75cd3f7-7315-4b95-9a40-b42fe589871b", "sighting_of_ref": "indicator--d6024af0-9305-4560-84be-962942821e4a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67cb35c4-5047-481e-a124-c2fdeba95ae2", "sighting_of_ref": "indicator--8e31c067-c440-4347-b816-9c8937c0eae1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d119bdd3-909b-45f1-a972-61d55fc484dd", "sighting_of_ref": "indicator--a20f490a-f842-46c3-8db5-b6948b0fc35c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6817f91b-5dd6-4860-ad27-c59c12c00c6c", "sighting_of_ref": "indicator--a20f490a-f842-46c3-8db5-b6948b0fc35c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e84c83e-63fa-489a-8574-3f5f8a8e0235", "sighting_of_ref": "indicator--60d4c833-95fb-4f57-8060-f2ca538d3841", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13adb0c-ddd5-4730-b7e5-97e30fd96977", "sighting_of_ref": "indicator--22e6c63d-016a-4bdf-9572-f40989ac4271", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d5c71d-8c96-4f60-9677-7f979f37f98a", "sighting_of_ref": "indicator--9c2464d3-b8f8-460d-b9a5-e1bced1e788c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407bafea-769e-4502-8e31-2a33ef5e46e3", "sighting_of_ref": "indicator--73bcb262-fe57-47fa-8caf-5b7830c015f6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b328f81-21f5-4653-ad35-0dfcc9754986", "sighting_of_ref": "indicator--66e701ee-512f-4e2d-a18d-f3fed021a32b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2fa5a7-c830-4340-af10-5323603b3de3", "sighting_of_ref": "indicator--0aa8e64a-bf92-49dc-ad3f-40c7ae51f032", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7d6b3e-bca0-4b21-9551-13f19c1dfde3", "sighting_of_ref": "indicator--de84b988-574c-4eea-92eb-3187fa5c527b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54999aa6-7a56-4c69-be42-91ae2af6da6a", "sighting_of_ref": "indicator--6b343314-a6ae-4fab-868a-8f6c3338d806", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1dcfe4-5b62-4eec-824c-319c4b94f4ae", "sighting_of_ref": "indicator--cc388f76-88ba-4a23-a3da-4a4d80cfe49a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12d2157-157f-4529-840b-0151cae77c0b", "sighting_of_ref": "indicator--b773489b-e4d2-415e-aa7e-2f23db3c4521", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a36299-73bf-4376-9c3a-687a77020c87", "sighting_of_ref": "indicator--519c40a3-efe3-4f4e-bfaa-3c45d4fcc76f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205a8da6-ce8b-4dd9-8e4c-70dea5a577e8", "sighting_of_ref": "indicator--519c40a3-efe3-4f4e-bfaa-3c45d4fcc76f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a79fa9-47fa-4fc0-b881-f78ad0080ed2", "sighting_of_ref": "indicator--f687a273-f12f-4385-a612-57c4b088c53f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a39cbf8-f6e1-49c3-b390-7570827a7359", "sighting_of_ref": "indicator--d6599d2d-9c01-4894-be07-c3913fdcb44f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f37989-7f06-434d-ad30-66680d636dff", "sighting_of_ref": "indicator--d6599d2d-9c01-4894-be07-c3913fdcb44f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a637f8d-af1a-48f0-9a89-951b402e644b", "sighting_of_ref": "indicator--423cc330-54a8-4bb5-9793-fd34f2e212e0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5699a77-be20-4ad7-a7ee-b7cc3be65eff", "sighting_of_ref": "indicator--59c06b79-d814-4ac6-9b6c-7066f174484f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f90f27-7bc6-48c7-afaf-e9be3a66dd2b", "sighting_of_ref": "indicator--6c8bf4be-86cd-48d7-9c81-dcabfd422e95", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4626e3b-cae7-46f5-bb9f-e1cbb98c8666", "sighting_of_ref": "indicator--e7135c1f-0eb5-4a58-b307-0e8be21b6b7f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92211357-5920-40bd-a5af-85662d277baf", "sighting_of_ref": "indicator--ca0722a3-c30e-4e1e-8c54-0a66317dedfa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2312f4a-8eb8-4247-99f5-3d34781cf85e", "sighting_of_ref": "indicator--60f06267-efbb-4874-a766-0bf1bb851a76", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484631a5-06b5-4cbf-83e0-37e275006395", "sighting_of_ref": "indicator--67dbcf1e-6da5-4098-8cea-8b97ba535e75", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44be50ad-8c94-454f-8d8b-c44314216ca8", "sighting_of_ref": "indicator--8c076f6e-0dd5-4a92-9dfa-f7f4d6b323d3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10afc3f9-ab75-4142-8d13-87b68f1e48a2", "sighting_of_ref": "indicator--93ff0c62-5dbc-4845-a17a-ef49b077a50c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2eeed07-c737-42aa-b7e9-c196520f23b8", "sighting_of_ref": "indicator--0784994d-425a-45b0-b20b-45c9e2ce80a4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec9dec2-2d3a-4da9-850f-cb9bab973768", "sighting_of_ref": "indicator--f098fd26-472f-4668-a47f-63467930cff2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f3688c-81ab-4d06-a698-4e715e52ae1f", "sighting_of_ref": "indicator--f098fd26-472f-4668-a47f-63467930cff2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4bf12d-cdcf-41f9-b2e8-074a2121cc1a", "sighting_of_ref": "indicator--1878563e-d6f8-4d58-a92d-130533ed2ad4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4891884b-df06-4208-91ed-ac600858c8b2", "sighting_of_ref": "indicator--6ebf8904-50a4-41be-983b-91a9f98af461", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60cdefc5-cfaf-43a5-b669-f43f85b65ab0", "sighting_of_ref": "indicator--3cb0f484-d438-4ef4-b9a0-266d06593566", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4cdc89e-3fea-4243-8351-5db7cde1f346", "sighting_of_ref": "indicator--0674a3a9-47ef-4583-a306-7353171c186a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b37d0b9-c0e8-4371-9edd-ecceec654af0", "sighting_of_ref": "indicator--7102b779-e9d4-46fb-93f7-1a86304b2e60", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f67b73-ccec-435d-8acb-6afaa81665fe", "sighting_of_ref": "indicator--34cc17d2-267f-4d8a-a6f7-d30f5d7d1cc2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b3412b-c248-4dbb-8d37-029cce378442", "sighting_of_ref": "indicator--fd2734da-ca9a-45eb-beee-6db81c2c2f00", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef186578-90e7-4ce9-b03f-a6e2a6e30598", "sighting_of_ref": "indicator--c5758e09-0c73-4b2c-bec1-5eb63d729bef", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84d67db-cf2a-4a79-9af6-bd3bb938623b", "sighting_of_ref": "indicator--efb386e5-d54b-4809-946f-abc3ca5c805f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1645c856-afd4-42b7-8799-384121935e28", "sighting_of_ref": "indicator--efb386e5-d54b-4809-946f-abc3ca5c805f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a007be7-0416-4f37-9240-29ebbb94030c", "sighting_of_ref": "indicator--721c5d73-4831-4946-b07b-ab0140bd50c7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2032d073-3754-4549-9662-a531e8176be0", "sighting_of_ref": "indicator--6b3863e0-6d6d-4790-ad63-1f65f2a2d8e4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8366dc-022b-4cc9-aba9-78f2ce10abac", "sighting_of_ref": "indicator--08c534b0-e420-4cb9-9411-2c7a505f02ff", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3a724d-d6ae-4bc4-a96c-e06867c63280", "sighting_of_ref": "indicator--725b19b6-7189-478c-8c97-da72634c3fda", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77dbe37-f011-4e04-9adb-9c7571a931b5", "sighting_of_ref": "indicator--f64211bd-d871-4a38-a4a8-75e997817bcf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff22f647-056a-43f7-9902-fcfce75793ac", "sighting_of_ref": "indicator--35471dce-44d4-45c7-9225-be70c39efbbf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48892fd0-1a54-43d1-8134-7b12ae2dbe2a", "sighting_of_ref": "indicator--22ff17ec-99cc-4d2e-9527-2bf40b132e95", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bdb11d8-e959-4fab-973c-5256193c6f4d", "sighting_of_ref": "indicator--cbf18575-021a-4824-b41b-2309d02f15fe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6409c5-a19a-4f3d-abe7-4a9d50cdcc5e", "sighting_of_ref": "indicator--7dff26a0-644a-4a12-956c-ee8c68c2e66b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a0d4f0a-46c8-4567-b134-68d1b4e500ea", "sighting_of_ref": "indicator--93798573-0b5d-4aaf-95b4-b0cb38afbe9b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9033ac-e217-437b-a194-ac7f7b070c61", "sighting_of_ref": "indicator--19639d6f-ab43-4659-81b6-57c88b024f02", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e389bbe-72ee-410b-a9b8-68f2b0294c28", "sighting_of_ref": "indicator--a67c4224-b83e-4dce-a97f-bf959dd48cb9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90032db-3f23-4ff5-b123-ffe62f5c3d43", "sighting_of_ref": "indicator--ef52bd46-6582-4794-b51e-6713cc577017", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b49c646-86de-40bb-b1db-3c49c3fc1a4b", "sighting_of_ref": "indicator--0b224950-10b8-4712-ba7b-16d9abdc222d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898f36d2-a1c9-4e00-9293-9adc04c71b91", "sighting_of_ref": "indicator--bb98e7c7-7616-4cb4-a4b9-29f2f0a18b74", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171e4e5b-71d0-40b5-8d4d-428e19cb90d5", "sighting_of_ref": "indicator--856335a1-afaa-4f74-a32e-d11021e4ecef", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bda102d-53e9-4c75-a299-f4dde5168046", "sighting_of_ref": "indicator--ba9b6d9a-38d3-4e8f-85bd-e739bea56612", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a273868-31bb-429d-9b35-4803ecb370ef", "sighting_of_ref": "indicator--16bb20d1-7774-4bf2-b4dd-cc8e1cdbd28f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2afcbf7f-aaa5-41ee-825e-c0be30ca70fd", "sighting_of_ref": "indicator--3d37cb4c-7693-485f-8a26-39012fa3af2f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db16ebe-ce5b-4271-a792-08a2e2207596", "sighting_of_ref": "indicator--53828ba9-8a1d-4ab4-9abb-16ebd8bf6c08", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10aa512-67cd-488f-9ba8-0ba34cda17ea", "sighting_of_ref": "indicator--76cf30c9-5057-4032-bbaa-f68e8d24c48f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd339433-a5f3-456f-8171-1e2ba8810de0", "sighting_of_ref": "indicator--414d9888-ae4a-4378-8433-6cccd28bb9a2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3c4912-680a-42c6-91cc-65670ecf4406", "sighting_of_ref": "indicator--5e16b96b-7fe5-4d77-b2a2-c3cb616ac7f3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6edf59cf-c6e1-4941-91c8-bda3eaa45bd8", "sighting_of_ref": "indicator--906c56ab-73f9-4300-b902-22022863c001", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f2ee26-05a6-41e0-aa87-68c97faa2389", "sighting_of_ref": "indicator--1868afd8-6f22-4fd1-be9e-4b3de1535ce7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec525322-cd16-4d01-b1c8-adf8dc0ac71b", "sighting_of_ref": "indicator--2245023b-5296-4a55-b97a-08bd03541ad4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acdb0df7-2f21-4d74-b3d3-b91a0f8122b8", "sighting_of_ref": "indicator--2245023b-5296-4a55-b97a-08bd03541ad4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--200c3f99-98b2-47b9-88b6-0288c955be8f", "sighting_of_ref": "indicator--2d98b09a-04b1-4413-b2a3-fe331bca3b5f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924d1ce9-c2bb-4494-a4f8-c0f9a2897aee", "sighting_of_ref": "indicator--d754c79b-f4a5-4f9e-85b3-5efeff6ad077", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62599d55-1cea-44f2-acd9-200b7865f8c8", "sighting_of_ref": "indicator--a00d528b-2a0b-45a2-88c6-67912a11772b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c52abd-f037-4a8c-90dc-d19a35f044d4", "sighting_of_ref": "indicator--2102e47a-673f-41e6-b120-e34fed36ff82", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8a134b-dfcc-4680-817a-a36b8b270105", "sighting_of_ref": "indicator--5ef0e38a-bc56-4775-a6a1-da7ce5a700c0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d6e255-cd82-4bfe-acb8-fefc2d8dda78", "sighting_of_ref": "indicator--22c07bac-f9df-4c1c-b01e-a87c2b432380", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f44d2f4-a56b-4fd7-ad0e-4a102d7d4cdc", "sighting_of_ref": "indicator--b5d3b506-9214-424f-89b7-c0029289eab3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37577b4f-0407-4dae-86d3-4ddc6de7a24b", "sighting_of_ref": "indicator--23b09640-2d77-44f2-9fdf-bfe0363bb4c4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f35a2a-7a38-4626-ab8c-3dfd14018ac5", "sighting_of_ref": "indicator--4ae76d5b-61f5-4c28-aac2-37b3af9a62d5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d82e9a2-5df5-4408-b492-782d052de0be", "sighting_of_ref": "indicator--7a263d44-6945-4145-b6cc-4bff7308eea1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2adae35-1cd0-4b04-b308-842290f84896", "sighting_of_ref": "indicator--e582cbc8-708b-4d15-b1db-b35542b6e2d2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d941f8b-fc7d-422c-883e-3c860c5ff8b8", "sighting_of_ref": "indicator--9399b18b-3542-4030-bb6e-cf3dd01c49c0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b176fe-3504-4d30-abfc-3e7dff640654", "sighting_of_ref": "indicator--4f8a6a90-232b-4254-b585-e7a6388e1e49", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b34e7a6-3373-4d9b-b8df-e50f44b0eb9b", "sighting_of_ref": "indicator--99dac092-697b-43fd-b05b-12c96b3272c8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302d4888-587b-446c-b186-9a5584bfb6ea", "sighting_of_ref": "indicator--6af0685d-b277-401b-9c9f-9911f1a1316f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--595e27dc-7e03-420b-9a8d-81ffb52712a4", "sighting_of_ref": "indicator--6af0685d-b277-401b-9c9f-9911f1a1316f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f4ab2f-1423-480d-99b1-d29fcd9d8ac0", "sighting_of_ref": "indicator--5266aea2-b225-4a16-ae40-636f374a14fb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4431c664-d44d-46aa-9d94-63291ea7ded7", "sighting_of_ref": "indicator--18482855-9d15-4aba-8c86-6a5e7473261c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1eef8d-62d9-4ef7-b8bb-9353684e71da", "sighting_of_ref": "indicator--c5d2bda8-52e1-45a6-ac6b-87eb90b4f51a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927d44fa-778a-47b7-b097-387af341b5ce", "sighting_of_ref": "indicator--ad6703f7-34cb-495d-bfe8-4d6f7974c9c8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a162a7-aa8e-435d-9da3-a1ac548ea452", "sighting_of_ref": "indicator--e8b27ac8-c741-45f0-8d0d-d33103902635", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d0b7ca-caeb-433a-a81d-6d1d371e75bf", "sighting_of_ref": "indicator--cdbd8756-80d7-4e40-a6de-e6456f3d4cc0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c50c400a-bab8-41f5-af7c-0187b2657750", "sighting_of_ref": "indicator--9610a27d-5d74-4b8a-b214-4742e0181b4a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4127390-1d3e-4be3-90d4-30a1a3829dac", "sighting_of_ref": "indicator--ef3246ab-a859-4f6a-9f69-8459e0189945", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c84d6c3-3d22-40b0-a0a6-15f84061d43f", "sighting_of_ref": "indicator--32dc8216-bd8b-4ae5-b77a-9ff3f052dcf8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a05ef76-bab7-46b9-aef0-d9df2dd3a81d", "sighting_of_ref": "indicator--5a19bbbf-8cc2-4b97-a658-4336ef6a9012", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92de12fa-9db1-4f3e-81ba-05caf6b660e0", "sighting_of_ref": "indicator--78280391-3bca-452a-932e-a9cb78c60e9b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230c94db-e311-4bd7-8ace-ec4f6ab9ff56", "sighting_of_ref": "indicator--0299e6f1-61b0-44ad-b8c4-6741f408ee61", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e05846-10ad-4df0-be55-ae692134f7bc", "sighting_of_ref": "indicator--884747f1-f936-40fb-b382-c8044905a00c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43d81e5-9965-4bd0-97ed-25f7a8f724c3", "sighting_of_ref": "indicator--ff464229-73dc-4f36-bfbf-88416f54c9cf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11895e10-d791-42a3-8791-f041c851df28", "sighting_of_ref": "indicator--b82477cd-80a1-45b2-a1bb-d5a38c912fb7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667d12c4-1fa7-44e8-9477-6f3b8e872a42", "sighting_of_ref": "indicator--8ca9cfca-b08e-4637-803f-9c84a2f23c96", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13dbdf4-8207-4c66-a483-f479be5eb9c5", "sighting_of_ref": "indicator--43aac588-ab1a-4522-9ed9-0d86341ccd07", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191f1ff7-36c9-4bc2-ba55-89260f5a77aa", "sighting_of_ref": "indicator--74374785-2b25-47e0-8bf3-81c27c25115a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02ff164-2562-458e-8393-9b1d09eca996", "sighting_of_ref": "indicator--c6c5d636-10d8-4ea6-89c6-c47c4ddcfcf2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4f5526-3de6-4e49-970b-b3119f311a0d", "sighting_of_ref": "indicator--c6c5d636-10d8-4ea6-89c6-c47c4ddcfcf2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5faf68bb-4143-4e00-bec3-3fc93bf026f5", "sighting_of_ref": "indicator--0a4e77aa-5a89-4812-b1eb-9d2814e5facf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b77fc48-fddc-40bf-bc7b-7e8c3ba5690d", "sighting_of_ref": "indicator--8d9ca937-bfd5-4692-9391-28e45de9c701", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17cb1f46-d7cc-43bb-a26d-700160284da5", "sighting_of_ref": "indicator--1556382e-67a5-4c2a-94f5-80d58cf10d86", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e2e697-2ae4-4183-91aa-893e691e275c", "sighting_of_ref": "indicator--605a4f50-6658-4e95-967b-b9049377db05", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c925bf3b-4319-4e0a-b593-d41cc0588b5e", "sighting_of_ref": "indicator--605a4f50-6658-4e95-967b-b9049377db05", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068f12c0-3ca6-43ff-b22e-2e10c38cfbfc", "sighting_of_ref": "indicator--605a4f50-6658-4e95-967b-b9049377db05", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f7a10d-1eba-49c5-8caf-4fd316f44887", "sighting_of_ref": "indicator--0ea2c374-af83-4f14-9857-74d913f533b2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec7984d-5dc1-44ed-ac74-126a8382b6fc", "sighting_of_ref": "indicator--d635ebe6-66b7-4121-a771-8e096ee9bcdd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8de5a79-bc08-4e51-ba31-71c7591456ee", "sighting_of_ref": "indicator--8e99b1e6-1bfa-4fe8-9598-834f0a6a74a7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea1383ba-1abe-4624-a88a-16ef7dd1e972", "sighting_of_ref": "indicator--8e99b1e6-1bfa-4fe8-9598-834f0a6a74a7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9097c45b-2bd3-485f-be2f-8fbe08d161d6", "sighting_of_ref": "indicator--1eab9f62-9730-4aa3-b785-85f0a0ba6233", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a76135a-917f-4c19-a7e3-9e1271c4f44d", "sighting_of_ref": "indicator--2c423007-695f-4555-954a-3c89d0557a55", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19fdbd8-9862-45e6-9501-0f656fb6ab3f", "sighting_of_ref": "indicator--6005949d-0113-4c61-aa1e-47a7b0c3166b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2745e31-2297-47a3-bd93-6c0f7341e610", "sighting_of_ref": "indicator--c2f3b8c9-6bd7-42b4-9eef-dd3a8baabe3d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53f9d4fc-f907-4c4d-a9c3-c6e8e6d08982", "sighting_of_ref": "indicator--97a2dcef-48f5-4f40-a3fd-930651e58957", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c4ec96-da65-4c83-83fa-4ad75f8d937c", "sighting_of_ref": "indicator--b78d5ac2-0191-44e7-9a07-9bcb983dc613", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb6d1d3-8033-4900-9824-cb5fd806fc4c", "sighting_of_ref": "indicator--0991c228-aa04-4dcc-b8e6-980813fc3365", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc495670-f964-452a-bb4f-cde370ccf7e0", "sighting_of_ref": "indicator--0991c228-aa04-4dcc-b8e6-980813fc3365", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefdfa4d-366b-4051-8de0-daa258ee4df2", "sighting_of_ref": "indicator--1896e3c3-c697-4852-9946-edcf5874ea1f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27cdeddf-20eb-4b27-8758-011263d3c088", "sighting_of_ref": "indicator--5a5fd995-3095-4390-a0b8-f0a7dc60e356", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ecfd3e8-29fa-498e-bfb7-7f745fad92b4", "sighting_of_ref": "indicator--dc6990ca-6adc-4ca4-a8c2-c755e12c05ba", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a91b11b-9e2a-40c6-be34-db1b10a8ae32", "sighting_of_ref": "indicator--dc6990ca-6adc-4ca4-a8c2-c755e12c05ba", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558982de-2fb7-4f81-8472-5cd0dbbf74ab", "sighting_of_ref": "indicator--bb07760a-8fec-44f3-b5d6-a7d26ace5a5d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e46eb9-3182-4cc8-8e5c-7271109890e4", "sighting_of_ref": "indicator--bb07760a-8fec-44f3-b5d6-a7d26ace5a5d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73fb121-0028-4592-ab49-e781244621e5", "sighting_of_ref": "indicator--75149c41-2564-40f2-ab4f-8e1bc0c5f84d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df368184-1851-42da-9bd9-ab12d0515563", "sighting_of_ref": "indicator--75149c41-2564-40f2-ab4f-8e1bc0c5f84d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63c3f7c-77fb-46dd-84fe-dc28d2b70294", "sighting_of_ref": "indicator--1a77c0bc-0e93-4631-abaa-589f8ab969be", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13733ea0-23d8-4b3d-a42e-5643b1780a76", "sighting_of_ref": "indicator--1a77c0bc-0e93-4631-abaa-589f8ab969be", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cdba9e8-d24a-4ee2-854a-5ca58e4df20c", "sighting_of_ref": "indicator--421d9d5c-d8f6-47d8-8b52-5ab2991e35d9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6239dc2-d5a4-44d1-adf9-66f053b12fdc", "sighting_of_ref": "indicator--421d9d5c-d8f6-47d8-8b52-5ab2991e35d9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8207ece-1c80-4e46-8e27-6b46280b86b1", "sighting_of_ref": "indicator--61129822-6ac5-4e4a-93d3-279164528d72", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e612224-1200-469b-ab01-60b122bbc9b8", "sighting_of_ref": "indicator--61129822-6ac5-4e4a-93d3-279164528d72", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad274872-c940-4d1c-ad4c-dbc8524f2fe7", "sighting_of_ref": "indicator--0756b26f-fe2b-4c56-bc96-1eb453823cc0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1319e1ea-5b63-432f-942a-b75b680754d7", "sighting_of_ref": "indicator--58172ddf-3a43-4ebf-8ce1-c1d347ab95cf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4e2808-dab4-41e4-9ffd-36d417df3973", "sighting_of_ref": "indicator--36f3dbc3-e170-4dc9-8f23-f8be34fdacb2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6859c1c4-64c0-4ff2-832f-86b2ce2caf5c", "sighting_of_ref": "indicator--f1ece7e9-4ce2-4d4a-9ad3-fcf423f36d37", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd85fce-e2ca-408a-9338-a9f7bffefdb4", "sighting_of_ref": "indicator--1080aee6-3820-42fb-b7f0-0902a3dbae7e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf2890f-ccd0-4f70-a841-ff44a14f7685", "sighting_of_ref": "indicator--1a01f1cf-2de2-444f-acc8-ced736a6e4bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d004984-631e-4249-a929-73de0fc7aef7", "sighting_of_ref": "indicator--18fed68b-e85f-4a76-aa5d-b6af376ffd50", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85fc867-5b61-4763-8c1d-3864c5eca55c", "sighting_of_ref": "indicator--b87254b3-2e01-42a8-a959-80bdaed9692c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667d4ac8-d223-477f-b913-4427ba3d762f", "sighting_of_ref": "indicator--b87254b3-2e01-42a8-a959-80bdaed9692c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c80e414-3cfb-4e64-be84-aafac860310b", "sighting_of_ref": "indicator--4d2c97f1-1fdb-48c5-bd89-8b8abed208ee", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed8a236-d26c-42c0-bfe4-90a360d9188f", "sighting_of_ref": "indicator--4d2c97f1-1fdb-48c5-bd89-8b8abed208ee", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ab88ac-80a7-4a3a-8b0d-efe4efaafa96", "sighting_of_ref": "indicator--ee3f3a38-1f60-47a1-831f-4fdaacc3b6e6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73969f33-747d-474a-b20f-320e5de6c874", "sighting_of_ref": "indicator--33effbbe-c286-44f5-8639-57d242a496fd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e238c64e-41c0-41c6-b181-d08f9f4140ff", "sighting_of_ref": "indicator--c485a71c-435f-4e9c-a562-eb7e3238d520", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818148ee-24da-4ee4-8db1-2edbfb649296", "sighting_of_ref": "indicator--2f1d30f0-61d2-4a06-bdca-c513077aae9a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5582cdb-93b9-48b8-844c-11cb723c5f5e", "sighting_of_ref": "indicator--183bc564-03ae-47b0-82a2-6a80322c1251", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa59445-a637-44b3-b806-302ae4737d69", "sighting_of_ref": "indicator--1260c836-22d5-4013-930d-20762266454f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3286e47-b21b-42a3-b851-d79975210623", "sighting_of_ref": "indicator--acd48369-6e75-4ca1-8dbd-9122c858579a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b559e675-af67-4854-adfc-2fd0e8b17906", "sighting_of_ref": "indicator--a6b8a955-52c5-45e3-97e6-25f31d183d83", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0279913e-5e37-4d49-a4d5-521b160d8929", "sighting_of_ref": "indicator--adb92b28-c2ed-4b1d-8131-9fa55b4e2a93", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58149adf-b1e0-4694-a47a-12e9ee68c014", "sighting_of_ref": "indicator--f25e8fea-a0fb-4dc8-93fa-9a48423d2628", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2076d990-5405-483f-a1a3-eea5915290da", "sighting_of_ref": "indicator--8c9c8742-fd44-4b18-aab7-08c451ff0352", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86738335-5b43-4d30-8fee-f77bd85b3398", "sighting_of_ref": "indicator--066c4a0c-e7ab-44e0-ad59-0ff35151f982", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28c91ad-383c-41f1-b156-d3b2c4606ff4", "sighting_of_ref": "indicator--76fe61a7-39ec-4f7e-b8f3-d74f08aa9d98", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e72092-fb8f-4d6e-8592-1e5dd7229b97", "sighting_of_ref": "indicator--76fe61a7-39ec-4f7e-b8f3-d74f08aa9d98", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2dc8bde-e526-4db4-94f2-57f9a1d8d540", "sighting_of_ref": "indicator--13e5da10-b681-41bc-9ffe-284204c85cf5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9004514d-753a-4113-b99b-e326587b10c6", "sighting_of_ref": "indicator--13e5da10-b681-41bc-9ffe-284204c85cf5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1e662d-1f72-4825-9635-f94487e5bf47", "sighting_of_ref": "indicator--7590523a-90f5-4294-9606-962ecac6ad72", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebfae543-b82d-421b-9db7-95a17e5b2fba", "sighting_of_ref": "indicator--7590523a-90f5-4294-9606-962ecac6ad72", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc2fcce-1e88-4303-9f21-38903a9757cf", "sighting_of_ref": "indicator--9e54f7cc-e102-472b-aa9a-d51c4043236e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa8e4d7-0d0d-4de8-872b-2caa78625563", "sighting_of_ref": "indicator--08afc2ca-60ef-478e-ae64-a054f0eff4c0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053be4a7-f1b0-4a61-b907-7c02bbb775c8", "sighting_of_ref": "indicator--08afc2ca-60ef-478e-ae64-a054f0eff4c0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa04ba9-3a19-4829-a0b1-d90906667b28", "sighting_of_ref": "indicator--492392e4-6c2f-4a1b-95ee-e045a99e9026", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c205e73-2206-4dab-9719-fc04a7f2adab", "sighting_of_ref": "indicator--492392e4-6c2f-4a1b-95ee-e045a99e9026", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccda3281-1310-406e-a5cb-8848779936ec", "sighting_of_ref": "indicator--57fbe993-682e-4361-a71f-1e1f3a257f6b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51094807-2c5c-4a01-9fda-9a565b5f9534", "sighting_of_ref": "indicator--d9db9b28-58db-4ce8-a77a-af0df50b309c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22964de9-5140-4d08-aedf-096f08ca66db", "sighting_of_ref": "indicator--d9db9b28-58db-4ce8-a77a-af0df50b309c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182c8295-fc0c-4ca7-bff2-eede957e5e90", "sighting_of_ref": "indicator--67e104f8-f8d1-4656-9c73-c5028b23e509", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c20363ea-f987-4394-9cef-7da152c99c79", "sighting_of_ref": "indicator--20581bfb-6891-49d7-8107-594724a43aaf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15bfb3a0-ce09-46d8-adf5-880f112d5a8e", "sighting_of_ref": "indicator--20581bfb-6891-49d7-8107-594724a43aaf", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ff8318-3581-42bf-90a6-3980948625b7", "sighting_of_ref": "indicator--20581bfb-6891-49d7-8107-594724a43aaf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead7fac2-c32c-4790-aac5-74d19f342fe5", "sighting_of_ref": "indicator--17597461-98c7-4ec5-ac42-a2e1566aec65", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6da5a3f-73e6-4910-b594-0772ed92ddea", "sighting_of_ref": "indicator--34c1a7f0-fdf0-424c-a124-f37c488e7738", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e938bf-a681-4a9f-9ee5-cf7d5f1ff08b", "sighting_of_ref": "indicator--4e0e036f-aa75-4bd2-bac6-3000d5c37933", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9017f83a-ee3d-4615-9884-08096c515e87", "sighting_of_ref": "indicator--06b7b686-ce5c-4c39-ba47-6911dacd866a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a608bd8-ca0f-4bfc-aaa6-f3f9bb33dd10", "sighting_of_ref": "indicator--06b7b686-ce5c-4c39-ba47-6911dacd866a", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9b0605-78c8-4601-a8ad-4535ff542fbe", "sighting_of_ref": "indicator--06b7b686-ce5c-4c39-ba47-6911dacd866a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22307dfc-4460-41ab-9795-d87b611b19de", "sighting_of_ref": "indicator--6db1dedd-4dc0-4751-a770-2410403e5b6f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ef10fd-b94c-4601-95b5-4f9d56432691", "sighting_of_ref": "indicator--bd9b77c9-7530-4f4b-8694-4a3ab933c2ed", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeca1b82-6d13-4796-b10e-1d71d6c9e357", "sighting_of_ref": "indicator--9a443ec5-ab3a-4ef5-bac7-173141282db7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ccc4c1b-0e31-4b4d-ac62-55f43f79dde7", "sighting_of_ref": "indicator--5eaa47cd-5fee-44da-8dee-e68cfdfe5a57", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c775bc9-e592-499c-a6cd-a2ab4472fa6f", "sighting_of_ref": "indicator--522b5039-cab0-4ab7-9874-19434653f694", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f48ab7c-4da8-4ec6-b492-a1e6de9c6093", "sighting_of_ref": "indicator--c32123c1-27df-4545-a471-3ab8143e9e5f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc6a446-e204-4c2a-92a8-3c96efdb54ec", "sighting_of_ref": "indicator--0b836336-ca50-4d6d-869b-c60e68e3beed", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48bc44db-f41e-4b47-bbc8-8f85be20e9f9", "sighting_of_ref": "indicator--ce33f51f-6c1e-4b2a-9977-3e3b53853b85", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6f881c-280f-470d-94b8-151f2102c57c", "sighting_of_ref": "indicator--d0a1ed2f-9ccc-461f-9b10-6089884bc231", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621cf6d8-d614-4ea9-9bc0-7fa87f79397b", "sighting_of_ref": "indicator--d0a1ed2f-9ccc-461f-9b10-6089884bc231", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--323c9a36-47d4-4cb3-896c-003e966adfc6", "sighting_of_ref": "indicator--d0a1ed2f-9ccc-461f-9b10-6089884bc231", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ae7f57-4d97-4461-8ca6-6e98c142d93f", "sighting_of_ref": "indicator--d158baef-77ac-4fb3-8513-60556780e5d9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fffd3e-260f-469b-85e6-53e692c961e5", "sighting_of_ref": "indicator--f5bd5130-c479-40bd-a4bc-932da9ad037d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df703e5d-8fcf-4e12-b17d-66f4a33d23a9", "sighting_of_ref": "indicator--b13758c2-c869-4c09-8218-d34878fb78b8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c9565a-e9b4-43c1-8b40-2783301f798f", "sighting_of_ref": "indicator--c50eb4fd-e399-473e-8c53-bd6801a6f99f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03d6321-4134-4d00-9794-eb2afcd0a01a", "sighting_of_ref": "indicator--035ab562-fa29-4d59-8747-ecf283432396", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41a6074f-30b2-4896-8298-4609e137b963", "sighting_of_ref": "indicator--0a3d7307-2c32-4e64-9a61-cfffdb14fb93", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e216cf8-c6c7-4591-a846-cf21f84d89fa", "sighting_of_ref": "indicator--8d8ec522-b19c-4151-8ae3-bd1f59fca688", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596ad96b-2e49-4538-84f7-ea8ce861d3d7", "sighting_of_ref": "indicator--29fb75f8-0c1a-4b97-bbf9-05c11bacf454", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5572ac83-f5b7-4223-9214-22113d188d91", "sighting_of_ref": "indicator--012f3d79-0998-42a7-8795-1f2ded0059f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b6875e-f106-497f-af88-c0915f81674d", "sighting_of_ref": "indicator--375d8ac8-a53e-4de7-9341-16d2d1c09541", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad3a77f-0e0e-44aa-af39-e1761682596f", "sighting_of_ref": "indicator--cbf20c4f-7f57-4a40-b774-0aa641a76d51", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bef274c-5cdf-4d41-a7ec-abba068e44d7", "sighting_of_ref": "indicator--3ebb9a4e-be88-45a6-b4af-7f2b6d8e8081", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9063d8d7-1d00-42ee-b554-9dce8698cbae", "sighting_of_ref": "indicator--db86c676-2df6-416d-8e1b-83143c60c8ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9719353c-cae2-4a63-87fd-2e12a4ab997e", "sighting_of_ref": "indicator--e661f545-6c96-4ddc-9df9-e19e9fa1ae97", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77105d30-c925-4a64-af73-558b59b31e70", "sighting_of_ref": "indicator--bb10777f-d918-4e0d-aabb-25741ddc7c26", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153dfa6d-95ae-4f85-ac57-70efa6f378a0", "sighting_of_ref": "indicator--bb10777f-d918-4e0d-aabb-25741ddc7c26", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b048981-1793-4f1a-8450-6cbcae8884c2", "sighting_of_ref": "indicator--a05ebf28-9e15-4213-99ba-3e183f392937", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be53e1e-516c-4085-b9f7-c85f8e819282", "sighting_of_ref": "indicator--c9681331-9317-44d6-ae14-72051939d1c3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88d9955-ebfd-4a90-9f42-93c73175ef45", "sighting_of_ref": "indicator--13067de1-46d9-4fcf-b37f-9a923dc2fc44", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01316499-91c5-4fa4-96b0-04f6bb1fcf3b", "sighting_of_ref": "indicator--50b9ba19-e0f2-43b3-b213-46ade62d40c5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ef91fa-6f30-48cb-9821-9b7097a4718d", "sighting_of_ref": "indicator--a75101ea-dddf-4b16-8539-48f5cacaf8f2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a0e04b-0162-4530-a9e7-a7067673b8ab", "sighting_of_ref": "indicator--a75101ea-dddf-4b16-8539-48f5cacaf8f2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6198994-e2b9-4536-8708-c650b66c73ff", "sighting_of_ref": "indicator--ba7786af-ce8b-4dbd-8668-efa0c8d2a2f8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a96795-ff03-4577-ac87-be124ac680dc", "sighting_of_ref": "indicator--b0ddcd7f-a4f1-4071-8080-9e8bc7d8ac9b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167cad74-cf21-4f6e-9a50-779fb07edd57", "sighting_of_ref": "indicator--b0ddcd7f-a4f1-4071-8080-9e8bc7d8ac9b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f50e7a-7697-47c1-b5f4-11a496b5a753", "sighting_of_ref": "indicator--d253b4ee-46f9-40d0-9947-1251595c32fd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab94f27-b065-4beb-8ff4-5776d85187c1", "sighting_of_ref": "indicator--effc052a-a717-4617-b7b7-67d89dbfb891", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75bf4e3e-5044-4474-a02b-7a2d46c305ca", "sighting_of_ref": "indicator--6510ea2f-c77c-4065-a4f5-3b60385d4d64", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c06a70f-2f5d-4e5c-b284-79e7535b3c50", "sighting_of_ref": "indicator--6510ea2f-c77c-4065-a4f5-3b60385d4d64", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7baca967-e0f3-4503-af88-c27ee3aa3a87", "sighting_of_ref": "indicator--6510ea2f-c77c-4065-a4f5-3b60385d4d64", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b4443b-fb10-43ef-98e5-025a169435c8", "sighting_of_ref": "indicator--5d16233f-869e-4349-a318-7e37dd8f5192", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8269a68-1308-413f-a489-c7353234b6ae", "sighting_of_ref": "indicator--a7939a40-4e88-4b9f-842f-35bbfa08bb8b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea77507-2f97-456c-8316-e9760fc2f094", "sighting_of_ref": "indicator--a7939a40-4e88-4b9f-842f-35bbfa08bb8b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c4654c-62fb-43cc-977e-64c39f0cd556", "sighting_of_ref": "indicator--1dc58ce0-eae2-4f53-9ebb-a037dcf014ad", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf61db1-715d-4ec5-9a25-c510bd96e3eb", "sighting_of_ref": "indicator--e811e276-66b4-4de0-9c95-efac49de9c60", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b972c4c-cf1f-433e-8a8d-a1687fca8084", "sighting_of_ref": "indicator--88b96455-1ec1-4638-9f95-b7f34885992a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3f6412-5151-4dd0-a3c6-d76a69f3e5f5", "sighting_of_ref": "indicator--b1393417-e7a5-4e40-95e8-887feb21464a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28161756-18d4-4f54-9d1b-94acbeb1fdb6", "sighting_of_ref": "indicator--b1393417-e7a5-4e40-95e8-887feb21464a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a66677-cb35-47cd-88af-c765c51f6b6e", "sighting_of_ref": "indicator--b32b6d07-8f40-472c-b4f0-37fb046f4848", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ef680a-54e3-4b2b-a6da-22b3d62994ac", "sighting_of_ref": "indicator--2293e74e-4b2c-4290-864a-74038ac472c8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63cc384a-e8de-4567-9a75-15ba1e789ab2", "sighting_of_ref": "indicator--11d917cb-acbd-4214-b986-ce7bb6e46798", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4793d45-b2f6-422d-b814-55201f2c1379", "sighting_of_ref": "indicator--813e0811-f93b-448c-843a-b6753e249c0e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5769cc-ea74-40db-8672-76a46a6855ca", "sighting_of_ref": "indicator--9fef442c-fd17-45e5-a4eb-a6a39893f5a9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abcbda91-60f5-4157-961e-971915d11adc", "sighting_of_ref": "indicator--7bd1bb60-383b-4c56-9da4-48162dbb158c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--994eeeab-9b78-4ae1-8649-23b782150697", "sighting_of_ref": "indicator--8c82e4e7-06b4-4e09-ab85-2c3c31657703", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589627ff-472a-4aee-bba0-d95ce9457776", "sighting_of_ref": "indicator--c81c3d95-d3ef-4ec0-979e-4aa66a97f0fa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce4ddaa-b3a6-47d8-a81f-44793081e089", "sighting_of_ref": "indicator--32e2d885-a0ac-46dc-b0f3-b2e15850dfaf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d286782e-d461-41d0-bfd3-1b590d5a96b7", "sighting_of_ref": "indicator--32e2d885-a0ac-46dc-b0f3-b2e15850dfaf", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0248f2d2-57a6-4edd-aed2-f3b645ef6f50", "sighting_of_ref": "indicator--32e2d885-a0ac-46dc-b0f3-b2e15850dfaf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0c4c7a-551d-4737-837c-404b13ee16d2", "sighting_of_ref": "indicator--db07a17d-c783-4650-9911-806491b0e89e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa8625c-8a76-4a7c-9ea9-c7e7b53013a5", "sighting_of_ref": "indicator--20130782-7825-4335-ae38-d7a98af56e80", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584cb4dc-363b-4a0c-a009-edf1478d23fb", "sighting_of_ref": "indicator--baee6771-e81a-4759-9136-813da314a6a3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8dedf8-d9e3-4448-b222-ee0cdecedc52", "sighting_of_ref": "indicator--558be4bb-a97d-40b3-8776-f951345bcb05", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be3a89b-40fb-4cea-8202-1ebf61125585", "sighting_of_ref": "indicator--aebf9c1e-e6f8-42db-9c4a-ffcf3e339023", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42254156-1f52-4d4b-a73d-373f1d9094e3", "sighting_of_ref": "indicator--76eb0071-36a6-4e59-a187-52cb0afccd3c", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1651ab01-f2d7-421c-bfca-536a65e5b9d0", "sighting_of_ref": "indicator--64f44dcc-26b3-4a74-8f10-1b77468f19ee", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa52b7fb-b3ae-4af8-8063-e65867c94138", "sighting_of_ref": "indicator--c9464c56-cfaf-465e-91e4-0e18ee66282d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103149b8-25dc-4b7d-b7f4-2f7941fd514f", "sighting_of_ref": "indicator--bee7459e-4fad-40a9-ae5c-61d9733c3785", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4eaf10-ec09-4385-a405-fb293dd5cd77", "sighting_of_ref": "indicator--2c866880-0904-4743-abd4-e481fdf30a59", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a86a5b8a-a316-4915-babe-c8df244495e5", "sighting_of_ref": "indicator--e445693e-55d5-473a-9af1-ae8b36ea240c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6408eee-2795-4ddb-81f7-070f5cf430b1", "sighting_of_ref": "indicator--8a32567d-c7d3-423b-930f-9ccb5dd4765b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03563b37-1922-423b-be84-9186a796bc37", "sighting_of_ref": "indicator--df44208c-945c-48b0-9d2d-db7465f2b3a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de50dbd8-5f08-43f5-9be6-11301c43d19d", "sighting_of_ref": "indicator--415d6c66-bd39-422c-9f26-243403e7bfb9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf6796f-e90c-439e-91fc-de6f11e62eb1", "sighting_of_ref": "indicator--415d6c66-bd39-422c-9f26-243403e7bfb9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a693a8e-2a1d-483b-be84-56009281eade", "sighting_of_ref": "indicator--5391e438-e578-48e8-95bb-6b093db42854", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe05136-6b50-4296-ae91-244c869d6100", "sighting_of_ref": "indicator--b4dc7caf-4383-4e57-be2b-97998801ae5d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9968054a-f988-4b85-b533-e20a55908543", "sighting_of_ref": "indicator--b03d35ed-596e-4801-9d1c-804834040674", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d55d125-e238-4a94-9bff-e05a8b01c687", "sighting_of_ref": "indicator--1880f2a5-3ecd-46e2-a66f-073d9a740359", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b91b291-4a00-419a-8136-14fc6de2df50", "sighting_of_ref": "indicator--25263633-338a-4c90-9b59-78ece72788da", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--987c208e-c839-4b59-8789-5b67b2ddd02a", "sighting_of_ref": "indicator--10e07347-02be-4b28-978c-c419a8bbf61a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f24e73dd-ea18-4c27-a119-7acae5edfd7a", "sighting_of_ref": "indicator--7fb60c49-adbb-421f-9666-b91d61207ae2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29785454-f12c-474b-baaa-c18b62a9aebc", "sighting_of_ref": "indicator--fe56336a-593d-41a5-902e-0b5ed6e27182", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ab8190-97d2-44de-9c91-d057e683c824", "sighting_of_ref": "indicator--ca4d2b17-0085-4a9a-ad94-252abe90e7ec", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172ae138-b259-4f4b-98b1-80d7b5f44308", "sighting_of_ref": "indicator--6314aafe-e443-42e6-bda5-631cba1a4d3c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71530b32-ca4b-4842-84c0-988df90fa56d", "sighting_of_ref": "indicator--5353cb3a-7dc3-4f32-8e76-a88d22f92c77", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bedc7f7-4bba-44a0-8586-e0b908793586", "sighting_of_ref": "indicator--a287b259-31cf-46f2-b109-057bee952155", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475e5b5a-a990-4ff8-85e6-73b40a94703e", "sighting_of_ref": "indicator--7f80bf1f-4312-4f15-95c5-6fde020ec441", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe61c6e-8334-4e1c-a299-a4ac1fe63b05", "sighting_of_ref": "indicator--bca2baf7-4846-4155-b8d0-2ad8696ac563", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018c07c9-0da2-459a-9cc1-a7d1e5f58dcd", "sighting_of_ref": "indicator--0bf7e8a9-aa3d-43a7-930e-4de29f625035", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c4dd81-5404-48d3-b730-51236d3e40d7", "sighting_of_ref": "indicator--e5531b0f-3d6b-446f-9fb9-4ca3c437f87b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac437b4b-ffeb-4fbd-85e2-83a37c9ede86", "sighting_of_ref": "indicator--cbc06c27-6ba3-47c2-84b5-7c7196d34720", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71412a9-6a89-4811-99c8-e5d2850bc2fe", "sighting_of_ref": "indicator--239a8cc4-5907-4024-a315-b9522ddf4abc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c45e893-a578-467a-9098-ce13c7689246", "sighting_of_ref": "indicator--239a8cc4-5907-4024-a315-b9522ddf4abc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede14cbb-3748-492d-8f62-9cc53b898be0", "sighting_of_ref": "indicator--e70799c7-3297-4029-adb9-e4a5233a5526", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ca7570-4686-4711-8990-a065fe30e939", "sighting_of_ref": "indicator--e0ab364d-ca54-47c5-82fe-5cf600d500fa", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e6982a-30a0-44e4-b276-2184eb3649cd", "sighting_of_ref": "indicator--0bfb1aa9-e357-4a44-a90b-28a166c3205f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2e2cdd-9b7b-4946-86bc-df09df4558bf", "sighting_of_ref": "indicator--0bfb1aa9-e357-4a44-a90b-28a166c3205f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9655dc18-084d-4b3f-8f31-74cd4ddb2acd", "sighting_of_ref": "indicator--6ba6cff0-7816-4ca3-b3f0-ff59b5d69a2c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--979d17df-f47b-426b-bc87-902e2571c95d", "sighting_of_ref": "indicator--a7cf6391-ca85-4cd6-9d0b-ce4dbd3cee56", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6e2e3c-df15-43e7-a169-bc8ef459af97", "sighting_of_ref": "indicator--d5e93239-fcde-408b-a7cb-2a27f3e89413", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a978d7-7b92-4dbc-b7c6-efd71a00ea13", "sighting_of_ref": "indicator--3eabfb2d-4f02-43e2-9e7f-d7840189ff2d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ef25d1-2bdf-489e-9692-32808370c760", "sighting_of_ref": "indicator--517c766a-f7a6-4645-97bf-e9e0c3cc650a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cdd223-99d2-4ff6-af71-1d7f72f2696e", "sighting_of_ref": "indicator--4d5f3fb1-1391-4414-8f63-95baf19c6003", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a30cfd0-fe92-4441-be62-3389f92407d1", "sighting_of_ref": "indicator--c13bf347-b4bd-4c37-8c1f-ad73d79de2b3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54623f8-01c3-44e8-a0d5-7efbb3931101", "sighting_of_ref": "indicator--9353470a-8112-43e9-beb2-faefc298b1ae", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817b482b-0c51-4607-87b3-722bd6bb7be3", "sighting_of_ref": "indicator--501d7575-a3a1-42dc-8b1c-fa2433eeec4f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2d882f-f923-4afd-a1a4-f1474416de23", "sighting_of_ref": "indicator--a18b226c-6176-45f5-b1a9-8257da6efa4a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b32b94b-1407-45dd-bdd1-80c842bb40a3", "sighting_of_ref": "indicator--d11c42aa-e1aa-40ac-90e9-87a9718d4227", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d843ca-6f3c-4ca6-97ea-c9254fd58727", "sighting_of_ref": "indicator--d11c42aa-e1aa-40ac-90e9-87a9718d4227", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0812c6b4-1b57-4a89-956d-0965a32731b4", "sighting_of_ref": "indicator--34c1750e-d3ae-406d-aea6-c14e30f50893", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96bbedf4-a01f-4b9c-aaf5-592c24c5e379", "sighting_of_ref": "indicator--96de4c82-8d15-4bfa-9cb4-9a391edde282", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7103a79b-deda-4101-8cfc-8af812ad547a", "sighting_of_ref": "indicator--96de4c82-8d15-4bfa-9cb4-9a391edde282", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab16e33f-d48f-43a0-b701-5a9c438fd068", "sighting_of_ref": "indicator--7001a1ab-70c8-4a59-ad90-b2b7643886c2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e26521c-4e24-4722-877f-1443885c5afe", "sighting_of_ref": "indicator--7001a1ab-70c8-4a59-ad90-b2b7643886c2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e7a978-0f83-47cf-b8f2-c6486d1b2d51", "sighting_of_ref": "indicator--93f02534-e885-476b-8ab2-e3492c9e7867", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7c9e51-065f-4fc2-b07c-e7c8076c4a8c", "sighting_of_ref": "indicator--4d264164-80d6-46c5-b676-cb16ac3328cf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ce84f6-aec8-46ac-a292-f1ace906ec79", "sighting_of_ref": "indicator--64c65358-c370-4c8b-aec0-a2ee11ec5458", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcd0897-f0c0-4316-b0b7-230e4972c5dc", "sighting_of_ref": "indicator--cb6c5492-9a48-49b0-a709-268a6d652cec", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2ccb4b-13f8-4bc2-bc97-9a8fb90004fd", "sighting_of_ref": "indicator--0dc2b27b-638d-42e7-91c6-42faabbac345", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efba26c7-fe2d-468d-bac9-381333026ddd", "sighting_of_ref": "indicator--0dc2b27b-638d-42e7-91c6-42faabbac345", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ebfb47-43bd-4f3c-a509-cc0aabe50c8c", "sighting_of_ref": "indicator--0dc2b27b-638d-42e7-91c6-42faabbac345", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e766278-1b58-4e37-ac4f-981fa545fdb0", "sighting_of_ref": "indicator--1ac8fd6e-14aa-4168-96c6-acb9b8a5217d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30bd6ed-c710-44d4-b9f8-4df3c40b2014", "sighting_of_ref": "indicator--1ac8fd6e-14aa-4168-96c6-acb9b8a5217d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eff91ba-06a0-4ab1-a45b-ef855ee2532c", "sighting_of_ref": "indicator--a8ffbb4f-19b0-4511-a0ce-6a174e79e63a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feae5fe7-982d-434d-bb0d-d7fd1c345c40", "sighting_of_ref": "indicator--a8ffbb4f-19b0-4511-a0ce-6a174e79e63a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57fbf267-ba83-4a62-987b-61b20c4a5477", "sighting_of_ref": "indicator--9fcc8238-aa24-4a47-b27a-86e905b69fb5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6295805-9381-4ba6-ac5b-72c85188ebac", "sighting_of_ref": "indicator--6842a202-64c3-4d0f-9fb1-d1c69af4f9a5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f76e69-f553-4b39-805f-be9011845ee8", "sighting_of_ref": "indicator--9a688683-b66a-45fd-adda-558d59776006", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958edbe2-1b2c-45b1-943e-0bdd04d4ccab", "sighting_of_ref": "indicator--a746325a-b6c0-4556-a46e-fd7f5d37f389", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f22b230-b881-46f9-af21-856cf231d187", "sighting_of_ref": "indicator--ba972e2e-0dc1-4988-9cf9-cf1461ada0f2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088452bc-38a2-43b2-9df8-cce8b3ed9958", "sighting_of_ref": "indicator--0d4da8cb-630a-4c09-a7ba-1b02dc30d5cd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e113c9a-fa7a-4fd5-bc4f-7613fa5d4af7", "sighting_of_ref": "indicator--e56caec2-86df-46f9-b809-b5601372b06d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e0e554-a5c7-4ce0-b77d-2d71ccb0789d", "sighting_of_ref": "indicator--e56caec2-86df-46f9-b809-b5601372b06d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b205a7be-beba-45c0-880c-0aa5c163d557", "sighting_of_ref": "indicator--126b9ec7-a35b-434a-8fd7-ad8179b17e45", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac8ec42-8010-4aa8-ab84-f80e37698948", "sighting_of_ref": "indicator--d158439d-edfb-4c1a-b2e4-5def4ea69a08", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744050b4-164c-4699-bfcf-7ee624605489", "sighting_of_ref": "indicator--05681fd3-0d3a-4d4e-ac7d-22791a2a95ad", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d8e0d8-8502-41ca-8935-ce85541b1f32", "sighting_of_ref": "indicator--9f8fbec7-86cd-4442-8371-e017a1c0b2ba", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2cb852f-1b78-4bbd-817c-dc3007b43c28", "sighting_of_ref": "indicator--c906b0c9-3c14-4d65-ac4f-66b165c6dd85", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44208880-b503-4e68-8507-1ea2a2a23d9c", "sighting_of_ref": "indicator--77fe226d-5f22-4733-95e8-0f39eca4bf47", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca44032e-5e13-4a8f-a01e-0a244ff21232", "sighting_of_ref": "indicator--88a00358-051a-42ae-a5eb-ec9158dd90a6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab1d9f4-3d75-42b2-8438-381027d3a404", "sighting_of_ref": "indicator--6779d791-d139-4f2f-a5bf-f52a98c01959", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8deb274-408e-4e80-a910-e89cc005d5c1", "sighting_of_ref": "indicator--faf7219c-8769-4725-942e-684743fe386b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f4e12f-e8b4-41ba-805a-8cc5d9bab9e0", "sighting_of_ref": "indicator--9ed38289-5152-494f-bffa-d3ab4063f101", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5a24e6-514a-4079-8dac-dedff797cfc9", "sighting_of_ref": "indicator--9b59c80a-4cdf-40fd-8d15-f3e24440920a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80c1a49-274c-4566-9abc-a687b339423d", "sighting_of_ref": "indicator--9429f3bd-981d-457a-9079-02b8849e2c0b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9ee214-b0bd-449d-be7c-ea48d6802e56", "sighting_of_ref": "indicator--9429f3bd-981d-457a-9079-02b8849e2c0b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2503086-dc87-4b5c-9357-f44cb92e7f3d", "sighting_of_ref": "indicator--bbd06763-49ad-4f4b-9885-960c70788afe", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05ed5e2-b30b-4194-80a4-71a8c4781210", "sighting_of_ref": "indicator--03144e98-37e8-4952-bc10-f15179992f3f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b08902-1b2f-4656-918f-02acc3e6bcd1", "sighting_of_ref": "indicator--03144e98-37e8-4952-bc10-f15179992f3f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd7119a-0075-4da4-ab8c-f6abd408cf15", "sighting_of_ref": "indicator--70e54927-f495-4f00-bc5e-f3adc9efb84e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423a2bb8-0917-46c0-9248-1e1d9a22c040", "sighting_of_ref": "indicator--9f3d5add-1b54-4a83-8101-f5036327e80d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb27339-8245-4389-91e9-9d1ba4b5cac9", "sighting_of_ref": "indicator--2ba00f1f-e684-43d0-9903-0ee48c926ddf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea6ea88-1186-4b30-9afb-0b83f1971602", "sighting_of_ref": "indicator--6cb8036b-4f25-4700-adca-c9c94cfb8f8c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef9c7ead-5045-4d2e-a0f5-5e66b1c93ddc", "sighting_of_ref": "indicator--7eb9cb0b-f1fa-403f-bda5-ff17ca71f7ee", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff6de2d-347a-4d1d-889e-430818cc9352", "sighting_of_ref": "indicator--7eb9cb0b-f1fa-403f-bda5-ff17ca71f7ee", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c672753c-87dc-47b0-98ba-bb76a6d6fee1", "sighting_of_ref": "indicator--8e226919-cef4-4d97-8721-b8086dfa71c4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f730ea3-c723-4310-87e0-1c8d70bfc1b3", "sighting_of_ref": "indicator--f2852d0a-fbe5-44c9-9d60-6351879927af", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419dc737-5d38-47a9-9ca9-e3d682111587", "sighting_of_ref": "indicator--aa467515-64f0-4210-a864-4f5e0f175f93", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440a4fc1-c7b2-4cf1-ac0d-60ed29c9673a", "sighting_of_ref": "indicator--b01baa30-ecb4-46ba-a060-77b7ec0c7e1d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43038f72-6693-43f6-b103-b31abedf2dd9", "sighting_of_ref": "indicator--fddd39cc-afaf-4b12-b844-2b65fe78b046", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba61463b-0249-48e0-8f16-dcb9c84c7d00", "sighting_of_ref": "indicator--c7dfa0a7-a2dd-41fb-9614-87cc9149e2cd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c178ef39-e80b-45cd-82e9-d58bbacb86dd", "sighting_of_ref": "indicator--c7dfa0a7-a2dd-41fb-9614-87cc9149e2cd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0814f696-b76f-48d5-8506-a9c701988ee3", "sighting_of_ref": "indicator--5da631f6-9db5-44b1-a723-d464dd09eaeb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f91446-b94e-4be3-b594-4e0f523c2632", "sighting_of_ref": "indicator--a2cac5ef-19b5-4f53-9c03-978094d67696", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f770a96b-409d-4ce8-8ed9-ff7cf9290d3c", "sighting_of_ref": "indicator--6747a253-99c7-47a4-821d-f9be55de52a3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3512d7f2-a3ce-465a-a8a2-3465ded10e2d", "sighting_of_ref": "indicator--bf687fea-c396-44ae-82e7-f18e9d844707", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381e1fef-24a7-4641-b499-1aa731f8e2c6", "sighting_of_ref": "indicator--bf687fea-c396-44ae-82e7-f18e9d844707", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5438528-5af6-41c5-9016-d9db94cf87fb", "sighting_of_ref": "indicator--6b1bad5a-0567-45d1-9030-8c7c6f8116b6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72249c2-99fe-438e-aedf-925780c5c5fa", "sighting_of_ref": "indicator--bc7e8438-0904-45b9-b1a5-a67fa8703aa4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c17e0f-20db-48c0-ad66-04235353e35e", "sighting_of_ref": "indicator--bc7e8438-0904-45b9-b1a5-a67fa8703aa4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7b9d2f-ff59-4f1e-849a-6daee42b122d", "sighting_of_ref": "indicator--a73cd152-1f01-43bf-ae98-27d48db2c3fd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0677ee1-0c9a-4c5b-af89-9f2eb9062df9", "sighting_of_ref": "indicator--8e3b7a16-3aad-4cc5-ac52-58526d59ad11", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8419b4fa-9926-43f1-918e-0c68d8fd1c76", "sighting_of_ref": "indicator--08583cf2-3ca1-4110-879b-fab40296f8e2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dfbf2e7-2360-4794-bea6-4a3f3b4a2d9e", "sighting_of_ref": "indicator--7451d969-f8d8-4aad-a456-2366de94ecc8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7708567-0961-494d-8e34-d151bf2dc4b6", "sighting_of_ref": "indicator--5298c2ff-8a5a-4a4c-8d75-b3514f820b94", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02000185-e2e4-465a-b77d-1a3b0ac86d47", "sighting_of_ref": "indicator--86fc83c9-5b06-41ec-a3e3-f0799aa8d93e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2f1dc6-721a-4fa8-b45a-27774bb77336", "sighting_of_ref": "indicator--83db3ac5-19ab-4262-ae98-049d52d1aba9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700c2ed9-8066-48e7-a6ba-24fd4a63d573", "sighting_of_ref": "indicator--4f70e46b-aa2f-42d5-a056-db00ef4adf66", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6b8203-ccd0-460a-8bc9-c8eb1fad0801", "sighting_of_ref": "indicator--0747b1dc-ce4f-45ff-8af4-6e03c0197fca", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113d94d9-702a-4006-8e03-0fa247272338", "sighting_of_ref": "indicator--e7241a56-2505-40dd-bd6c-63124ec46864", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff634f37-f1b1-429f-8c08-6ce910bebf86", "sighting_of_ref": "indicator--2032da65-177a-47f8-a0d7-ce37e2e8303d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b0b018-563d-4a92-8fb5-c68ab79ad6ec", "sighting_of_ref": "indicator--c6da4203-99f1-49e9-bf85-4faf5c065507", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a0aa9f-06c8-415b-be0b-86802ca5fa5d", "sighting_of_ref": "indicator--f1c7cfc4-48b1-4017-ae3c-e28900a2a4e2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1df203-c16c-4608-af9f-9541c063059f", "sighting_of_ref": "indicator--492d36ed-4650-46b8-96a8-08ed19e7bf07", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1086039c-1748-425e-99e0-a51277e21039", "sighting_of_ref": "indicator--a317b61c-9796-450f-b8eb-42b9a1ff19ee", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad325a1-a140-474c-9415-b73a71e4a5ec", "sighting_of_ref": "indicator--1eed7dc4-fa54-4ab0-a1c8-5f2596344af4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e750c93-2c45-4af5-a99f-598df8533940", "sighting_of_ref": "indicator--09cc345e-552a-42a5-b11a-c61686327498", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4169e2ef-7f14-4fa4-904d-afb84073b8b1", "sighting_of_ref": "indicator--c2737d5d-ea1c-4f88-8413-29775e4d8835", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58eaf31-0f58-4d5e-849a-6ea0399226b7", "sighting_of_ref": "indicator--ce2593e7-0228-4905-a18c-05ed01244c7f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd247166-165b-4d1f-a294-77863e552291", "sighting_of_ref": "indicator--ce2593e7-0228-4905-a18c-05ed01244c7f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83cc3173-f3a5-4f2d-9208-c60e68d08f94", "sighting_of_ref": "indicator--95e7a157-70c7-466d-acc3-8df6ee0daf1a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1138c5-3dc9-481f-84e7-4f01e0df3d95", "sighting_of_ref": "indicator--1afeed21-7bcc-469d-a6e1-4d9745fa89db", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f742db4d-93d9-4a60-831a-80ed174261ba", "sighting_of_ref": "indicator--5db4b7d8-73dc-47e1-8117-49dbb362f7a9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12da1ef-4ec6-4bd2-a599-73edb702d88d", "sighting_of_ref": "indicator--65354c56-c8db-4889-b748-50422ed0919c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df18d8b-121c-40bb-8d2b-af5a889c4951", "sighting_of_ref": "indicator--65354c56-c8db-4889-b748-50422ed0919c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6217389-6346-469c-808b-fb8257743c7e", "sighting_of_ref": "indicator--91ac71e7-47b7-4e77-b7e9-ce24081103f0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb4d932-13c3-4bb0-afc4-c8ae53b12987", "sighting_of_ref": "indicator--72d5c9cf-e360-4f0d-a7dd-49b2a632d9a8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4d4322-8ecb-4970-a4b7-ed4945ff112a", "sighting_of_ref": "indicator--fe42aa5a-6099-4962-87bc-25c2bf58c671", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af321cec-0e23-4673-8b0c-2eed8ba7406b", "sighting_of_ref": "indicator--f7c736c8-aa3a-45b0-bb25-6816be052d8d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e24c0de-1db6-41b5-8653-84be7ec2ac2f", "sighting_of_ref": "indicator--c95a34e2-345d-4179-b26a-a5b8492dba42", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bac497-1056-412d-9aee-b782b61a56c5", "sighting_of_ref": "indicator--845ff12d-b74a-4233-a5c7-1e8476bd195a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbd7f90-af92-4e07-91d3-45c62b4daf6a", "sighting_of_ref": "indicator--b9a8361c-0142-4f3d-b472-7c8096c82101", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0229ae-25ad-4add-af75-255828467f3c", "sighting_of_ref": "indicator--3fc182e4-5ed6-4d18-8092-5efd9ffc23a9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbcb9416-51d1-4d34-9af0-b4f071b1ad2e", "sighting_of_ref": "indicator--d88a3097-e930-4f2b-8298-a842d55a6500", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4023275-98af-49e0-90a9-66a996d064e7", "sighting_of_ref": "indicator--76b0e6be-6e12-4d6b-ad44-2f2b2b9a9aa6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e811204-2f67-4281-89f7-9cfc8a44f1ad", "sighting_of_ref": "indicator--76b0e6be-6e12-4d6b-ad44-2f2b2b9a9aa6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18351d68-33fc-466d-a6bb-02ead9822a85", "sighting_of_ref": "indicator--6dccbe97-4865-45bf-b9b3-774897d5e0df", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c641c283-8434-4ebb-b7a3-8edbe6996f0e", "sighting_of_ref": "indicator--6dccbe97-4865-45bf-b9b3-774897d5e0df", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93758aa0-00e6-4bda-9ad1-b8811ee85f0b", "sighting_of_ref": "indicator--e989793e-12a4-488b-a154-d6d21d69763c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442788ef-630d-48ad-9c45-36c215601cb1", "sighting_of_ref": "indicator--3f26a22c-6125-4e9b-aa3e-5481c3a97c8d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55cb85fb-24ac-449c-825e-9c96f7133e68", "sighting_of_ref": "indicator--3cfb179e-63ac-4edd-9ae3-231780f3c5d0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7abf2d-128f-4009-b378-8895e6a67cb9", "sighting_of_ref": "indicator--29c5fc86-cceb-472a-b017-9e22b9b86831", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a653b6-fe37-4901-895d-b5e7a09e3a54", "sighting_of_ref": "indicator--2f80a7cc-3e5c-41ef-bd6d-6d77fff65987", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0860e421-d59b-4b34-88a2-d00d1d250fec", "sighting_of_ref": "indicator--1a3eb713-c6d8-4b83-9d70-d2c851faf2b4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72fd7776-6d06-42c0-a934-2fe3b6e031c7", "sighting_of_ref": "indicator--aa5b3adf-f4f7-46cc-ac88-62e0fc5881ac", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4b3592-2245-430c-865d-6eda02797fa6", "sighting_of_ref": "indicator--94f7b420-7c48-46ad-ab83-5165da29d554", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d271462-bd79-4316-927d-c46bea69f188", "sighting_of_ref": "indicator--94f7b420-7c48-46ad-ab83-5165da29d554", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723b2d1c-0384-46c3-885a-2be3f17157d7", "sighting_of_ref": "indicator--a723b707-0e89-416b-9c40-74a01082c76b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51c9bae-3db2-4c3f-adf9-02ddee33938d", "sighting_of_ref": "indicator--834a6190-0999-453d-a977-252ca59fa95a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a0fe1b-3437-4388-942f-a5acf3488b0c", "sighting_of_ref": "indicator--834a6190-0999-453d-a977-252ca59fa95a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca8a1ee-6b1b-4823-9e8a-35f1520dbed7", "sighting_of_ref": "indicator--2f28200a-afa8-45e4-8f43-50443dd02ff5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6356fee9-71e2-4ae1-b507-c242195945d8", "sighting_of_ref": "indicator--853fe05e-bd53-4ee4-9dd0-f6625ffdf26f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a99b59d-64be-4d10-99f3-1d0dfaee3578", "sighting_of_ref": "indicator--4b30d8fb-71a4-47e9-a001-2d4f0bfec0a9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf37e8b-253f-43aa-8a83-a0138bbe0a20", "sighting_of_ref": "indicator--9a546f39-54c3-4472-978d-ec192f81ba98", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8612b7bb-ba11-4d5d-a0ed-b1492e594634", "sighting_of_ref": "indicator--42844c04-399f-4a29-a3d5-ba0d829f5cd5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40afae1c-cfca-436a-abc8-58a9971a0871", "sighting_of_ref": "indicator--561c1187-7567-46cc-bd3e-bbcb33a6ea37", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923cb3fe-75e5-4d62-87e7-594a60323b98", "sighting_of_ref": "indicator--e16fc0fd-f034-4b2c-a77b-8bdcc695e7e8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd2e81a-7ac8-4d5a-be6b-270a9643136b", "sighting_of_ref": "indicator--8da4934c-c12f-4d12-a21e-043839bc1136", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b33507-b1a9-42ad-a721-2bfdae5323ae", "sighting_of_ref": "indicator--ebac3fde-c4a2-4155-a8ee-afe2d8c725a7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e3c655-e5c6-40ff-afb0-f3f4b08c217c", "sighting_of_ref": "indicator--e5c01db9-9221-4893-893f-bf341963cf97", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919ae5d4-9ee1-435b-ada0-3fc3bede1168", "sighting_of_ref": "indicator--e0376a54-0f85-42d4-920a-201d10051deb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e323d517-1e6e-4c83-b259-de068b039dc5", "sighting_of_ref": "indicator--097c620f-6c54-4cd7-bf00-7305ab938d69", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2813702e-3f1d-46b5-8776-c44a8b95eb72", "sighting_of_ref": "indicator--b400b347-02c1-44bb-b956-4e6b9c9edafb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade575f5-f4a5-41cd-a72f-47b58733aa65", "sighting_of_ref": "indicator--7bb5d7b6-f8ce-4596-bbb8-abcffca1c29a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964ee80d-71d7-4511-a99f-07e014e37361", "sighting_of_ref": "indicator--5a0d4d40-eecc-4c95-93cf-0db07b439368", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256f5765-97dd-433f-8549-f6023266efd6", "sighting_of_ref": "indicator--3d36cccd-af45-4393-8f38-d16182dba6cc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2b7dcf-517d-44fb-a124-ada51d4d2059", "sighting_of_ref": "indicator--c854da4a-0305-4f20-8cad-818288d2e1a3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81851b29-968d-48f5-b20e-84b1e8decb25", "sighting_of_ref": "indicator--8eecbc73-64d1-4440-b3cf-e7e1b5fe4db3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9226bb38-280a-4541-8b7c-eff0a9e03253", "sighting_of_ref": "indicator--24cf5537-a497-4e73-b427-4da610820f1b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca2f781-fc83-4823-b392-4967fa63d054", "sighting_of_ref": "indicator--0364a0d9-f386-4acf-84e4-5baab898535f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db3150df-91b4-4de3-852c-a1db5543e446", "sighting_of_ref": "indicator--ab8a3eba-9717-49a7-a6fd-f91b3d536b8b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169d2839-24b8-4914-a4ab-dad8ef6e8478", "sighting_of_ref": "indicator--98f922a7-fd4e-45de-959f-141dcc7f4a4e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b105fc5c-b8e9-46ec-906e-76ce70b25271", "sighting_of_ref": "indicator--98f922a7-fd4e-45de-959f-141dcc7f4a4e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3e266c-0a78-4eee-a31a-8466eb8839ab", "sighting_of_ref": "indicator--5fb0516b-1d73-4cec-a03e-058f2cac0fe7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8211f97-ceb8-447f-bf31-0273196d4e10", "sighting_of_ref": "indicator--7204af0a-cdf4-4be5-a017-46094e84ad21", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69ab1ae-0632-4d18-8081-464e20a3469e", "sighting_of_ref": "indicator--57e5d28c-611d-49d9-8e78-c6dc2ed53131", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--430ed6de-3bfc-47b9-85d8-ca52cce90ace", "sighting_of_ref": "indicator--ba40a6d3-b38f-44bc-b367-8f6931fa7708", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331ecb68-cc69-4638-a41d-885b0e30b975", "sighting_of_ref": "indicator--be01a39e-9033-42dc-81fa-7048db57cf6d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9000f04-470d-4e81-944f-fb8f282750b3", "sighting_of_ref": "indicator--be01a39e-9033-42dc-81fa-7048db57cf6d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cb3bfb-aa17-4e93-950f-86cca6e86573", "sighting_of_ref": "indicator--009921eb-9439-44ab-a9f9-25397fbc9bb7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d158200-1fbd-4705-9943-2e6792ab0324", "sighting_of_ref": "indicator--2b3d5acb-401c-41fa-8fbc-87d391acc329", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b60cef14-174e-4b63-a641-0d868505af85", "sighting_of_ref": "indicator--351d0ae2-1f87-4857-9985-3ef7fb70d843", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a01063-4919-4601-9814-5322a5d1535e", "sighting_of_ref": "indicator--351d0ae2-1f87-4857-9985-3ef7fb70d843", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2149c7a9-c82c-4d10-ab0b-79f60ce76785", "sighting_of_ref": "indicator--30d8548a-8b16-4e3f-8d19-81ac913d521e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16478561-5474-4142-adf1-54d4751ea51d", "sighting_of_ref": "indicator--5db37538-9dc9-4734-8e31-d36ffe7d12f5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db57fb31-a1c3-40f4-a863-5bcbe943b036", "sighting_of_ref": "indicator--5db37538-9dc9-4734-8e31-d36ffe7d12f5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a9138d-b2d7-419d-8d4f-a9c96faaa4bd", "sighting_of_ref": "indicator--8d269488-70df-444d-9d6a-02f68b833222", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a71e351-278b-4b84-b01c-78a47a22046d", "sighting_of_ref": "indicator--33269758-e303-4bf1-9039-f67b5699e735", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2047e06e-0c57-431b-ada6-4b722fd0f888", "sighting_of_ref": "indicator--6eda1f15-f62d-4229-90f4-ac4cb8d19590", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd3f281-9352-452c-bd74-d42d0261e220", "sighting_of_ref": "indicator--50a4c274-2a31-4dc3-8261-264bbe921dcd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee9a350-b69f-4f96-880c-9091fddd9956", "sighting_of_ref": "indicator--f7e99a62-6dd5-4b93-b18c-17ef688469dd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3d9e62-17bc-4069-bac7-e4e4979ef9c0", "sighting_of_ref": "indicator--630e3331-e85e-4df6-ad70-009bf560b0be", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2971c4d-5023-486b-b017-68dd6eb8d45b", "sighting_of_ref": "indicator--630e3331-e85e-4df6-ad70-009bf560b0be", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3ee7b4-08c2-4400-9fd3-cac67dfe1e9f", "sighting_of_ref": "indicator--fe11f35c-7da5-4791-92d0-19e3df1d822c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbe96ed-c3ab-48cf-9c18-b73e400799f7", "sighting_of_ref": "indicator--fe11f35c-7da5-4791-92d0-19e3df1d822c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d4282c-3935-4778-97e7-8c6277a90c5e", "sighting_of_ref": "indicator--311c8e05-d3ff-4059-bade-08372fe703ef", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3322aa84-3ce3-4479-8234-0376a6ba1489", "sighting_of_ref": "indicator--533bc49f-d706-4714-8eb5-f777af6bb741", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf5593c-58c9-46f8-85c8-dcbb03e90555", "sighting_of_ref": "indicator--86f306c4-359b-456d-b660-2b5caf5b24a5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12060c52-6a9b-41fa-98a9-7d9918cfca95", "sighting_of_ref": "indicator--100336e7-a17e-42c7-8fb7-2a377f747b34", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a3b181-a4f7-4b80-a1f7-f3b52d333b2f", "sighting_of_ref": "indicator--100336e7-a17e-42c7-8fb7-2a377f747b34", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382ac9a8-56eb-4b48-8859-2b2ea72c429a", "sighting_of_ref": "indicator--3e4baba5-aa6b-4e7c-9717-36fd4bf9e8be", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7aac80-e8aa-490c-a3a1-ce76dc28e86d", "sighting_of_ref": "indicator--3e4baba5-aa6b-4e7c-9717-36fd4bf9e8be", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b780ac9b-9cf9-49dc-a91f-639dc47eb97c", "sighting_of_ref": "indicator--2ad41f4a-4441-4fe8-8feb-ce5ef2372d25", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc332c24-494a-4bd0-81b0-64be4a61209b", "sighting_of_ref": "indicator--b04cbb66-3b1e-466e-856f-904947a44a48", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85eaef82-ae27-4380-8e80-f846b9b5384e", "sighting_of_ref": "indicator--8ac24e96-a29a-4491-800a-e0366ed4a12d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2962576c-b45e-4fdb-b18c-48eeadf95b38", "sighting_of_ref": "indicator--ba09518d-c500-450d-8656-2c5890313594", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb90e38-c3b1-4c92-ba52-5f4ea1f812c9", "sighting_of_ref": "indicator--689b0103-d86d-4e2e-9ad0-69a8d125cbf3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb59def3-602e-4752-a102-0e5f68d3fa37", "sighting_of_ref": "indicator--689b0103-d86d-4e2e-9ad0-69a8d125cbf3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afefffb9-96e7-4ba4-bcd0-74f5449c08fb", "sighting_of_ref": "indicator--f2acd8f2-7e7c-44a9-89b1-16771687b3de", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a85e1c2-006d-418f-a0ce-abca3ac669de", "sighting_of_ref": "indicator--ede3a2fc-0211-463a-bc27-efc6d659946a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52bf7de-68f4-433d-92f9-89e5197882fc", "sighting_of_ref": "indicator--41efe1be-3fb1-4157-8197-1f447b5fe104", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69041d9-fa8b-44ce-990b-63f8519d5fd2", "sighting_of_ref": "indicator--231d4e99-b401-4c21-90b0-a68626a311ca", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc4b299-7853-4e58-8e10-a6d73c6300ca", "sighting_of_ref": "indicator--231d4e99-b401-4c21-90b0-a68626a311ca", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce765ed2-2a82-43f6-922f-cc74f885d7be", "sighting_of_ref": "indicator--0995ff74-6036-4c6c-b085-8cc92ba92303", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420cd0a7-372a-4af3-bfec-8eb5f36d2fdd", "sighting_of_ref": "indicator--4ad45d2d-6f00-4a7f-8be5-5b552a3c500f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8632ede5-77a9-4b31-83de-def34f72094d", "sighting_of_ref": "indicator--328260fc-9e44-44c3-84d8-e55cba5f798c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac85a05a-d449-46ef-941e-07d94153d7c0", "sighting_of_ref": "indicator--d1088d84-7130-4adf-a883-93854413dfff", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a0afa3-2870-4e5a-92eb-99f56c5482f0", "sighting_of_ref": "indicator--a0079e32-76db-4953-9c47-f163acdf55cf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e51119-9208-422b-919d-d32abc8eb430", "sighting_of_ref": "indicator--96014faa-752e-4f42-982c-7de6df2c081d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0130148-2619-493f-b46c-10b013072aef", "sighting_of_ref": "indicator--ba2e8701-90c7-478e-8521-7509fb91eb29", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad018630-03ec-49b2-991b-b1af18b03a72", "sighting_of_ref": "indicator--f03e43df-4489-49f6-bfa6-1fa5b71b0a24", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f01b4d-92ca-4387-b3dc-f17817c54aa0", "sighting_of_ref": "indicator--97698e0c-a34b-49b1-8d22-3b5014b759a8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8ed2ca-9e9e-48fc-bac8-684a7526e3a1", "sighting_of_ref": "indicator--eee64ff7-dd31-4b57-b8a3-51da7decd3cf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95ae5ff7-dbe5-4de0-8b98-24c32f979d7e", "sighting_of_ref": "indicator--0166e74e-7f2d-4862-81ab-791bd542f932", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896e03a4-106a-4264-a782-a0a886ef1e18", "sighting_of_ref": "indicator--35c6ba30-aa87-4f1e-aaa3-5415117aa685", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e68177-334e-4452-b09f-2c397dd8b677", "sighting_of_ref": "indicator--8ae04eb8-a16c-4153-8b96-304fa5552d48", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a3bfb6-d588-4e96-8234-471a8d7cee53", "sighting_of_ref": "indicator--096e92bc-1723-424b-a5a7-eb254d051979", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96edd2d8-4457-42ea-b02e-a3dfa476b5e7", "sighting_of_ref": "indicator--29ac4f64-2af2-4a8a-be20-8e061f3239b3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b156ddc-f654-479d-a063-a0e4642dfcea", "sighting_of_ref": "indicator--7042360d-3017-4483-aaa0-ed871edb98bd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f7a337-0a70-4dd5-aa0e-8989e83cb98f", "sighting_of_ref": "indicator--8e79ecff-d50c-4bd5-872b-a5f33778a8cc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f394be-ee67-4d12-9369-8bf6d2b5ceab", "sighting_of_ref": "indicator--ec236b16-fde7-4269-83ac-6b61ca616ea7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7bedb1-b100-47b4-a2bb-ddca8e1e4193", "sighting_of_ref": "indicator--edc0dc49-cb4b-4283-ad60-ad0132801a68", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1cc23e-5807-422b-b88a-53836640c0f8", "sighting_of_ref": "indicator--8f126803-134c-4f1e-8b15-8b8f0ef94be7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f049ecba-6f2a-4c47-affe-02366398c6ae", "sighting_of_ref": "indicator--f0a2a850-87c1-4dc4-aeab-122cc6d111c5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5abd72fa-6cf1-4942-9ec0-430f3ff5fc1d", "sighting_of_ref": "indicator--f0a2a850-87c1-4dc4-aeab-122cc6d111c5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f56555-5780-4339-b744-4c85f9ef97d0", "sighting_of_ref": "indicator--b889e7ea-ee93-466e-bfb9-23aaa5a1833f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8033e788-4df3-4b3f-905f-6e5bc619885f", "sighting_of_ref": "indicator--9bc4d0be-d1a3-4b20-a075-f88c5854b72c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603b552f-3b73-443d-b5be-661d0f8a16b7", "sighting_of_ref": "indicator--656710df-7dea-4792-9273-c47fc14a0720", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6effeacc-489f-47c0-82f0-7c31a1934ec5", "sighting_of_ref": "indicator--61826bde-13aa-43f0-af44-c569603eae59", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed56355d-9c5a-4ae2-81cd-e283aa11c558", "sighting_of_ref": "indicator--e0443e76-530c-44e3-bd93-237ccec91fe3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--199987b1-596d-4a66-9348-b1313d06801a", "sighting_of_ref": "indicator--e3d9a5c7-eec9-4eb1-bcff-cd3beb466ce3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c2d1d3-f09b-41c3-9f91-2c41dbda8fbe", "sighting_of_ref": "indicator--408a7eb8-3e9c-41bf-bc97-360b24a50f51", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12f3dc6-8bdf-4deb-91c2-0b37c36dcc93", "sighting_of_ref": "indicator--f7765c88-3f9a-467a-9bd5-252b6e4706a2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ffc4744-0a7d-492c-9db0-f346c89152ec", "sighting_of_ref": "indicator--a56e49d2-7a4d-4b1d-a4fa-6cc6e8e384b7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189bf0fa-13d8-4669-bc78-48781858f89d", "sighting_of_ref": "indicator--a56e49d2-7a4d-4b1d-a4fa-6cc6e8e384b7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5266146-d147-4088-b951-67d1120f408f", "sighting_of_ref": "indicator--65e82774-5348-4968-b830-28d18f660ed6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22861a00-0d3a-4019-9fc7-e47866b443c9", "sighting_of_ref": "indicator--65e82774-5348-4968-b830-28d18f660ed6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a513edb-0c62-46e5-a07e-9c55cdcc785f", "sighting_of_ref": "indicator--51a7c372-264e-4339-9a99-bc6adeed9ecd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6b7597-1e5e-4d1f-a710-9596a9cdc7a4", "sighting_of_ref": "indicator--17f60826-6536-4a9d-8756-cb88a945a90d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458afbf6-cf10-4e44-a0ba-fdb0ec99004a", "sighting_of_ref": "indicator--9202674a-29c1-49b4-a37f-b387c2f06939", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a346c44-9a73-4743-ae79-0866b5ed9b84", "sighting_of_ref": "indicator--0348707a-34a7-4d56-a0b4-1bf947e79265", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae75062f-2f4a-497e-ad89-16cb8f13771d", "sighting_of_ref": "indicator--1906ea5a-423b-4df0-afb1-2180a3c40bb8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c92216d-b82b-4b4b-bf10-b74be8d3dbf2", "sighting_of_ref": "indicator--9ef130e2-0221-4906-9a8f-27d3a537679c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e1f20b-87f3-4c88-82c6-19c86eb747ad", "sighting_of_ref": "indicator--733ca630-3ba5-4802-8cf8-038bf299e61d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c610e076-4a27-4b4f-b933-d828c3a28aa9", "sighting_of_ref": "indicator--733ca630-3ba5-4802-8cf8-038bf299e61d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9be0bc4-71c6-4382-9c98-1075f56dd350", "sighting_of_ref": "indicator--3fff1891-2016-45d7-81c7-16e85d834af8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae77a239-49a1-444c-b84f-455069a549c1", "sighting_of_ref": "indicator--200087ae-ce77-417c-a2a1-81f017f0bafd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c866917d-bf51-4bda-aa64-e526ced4fac6", "sighting_of_ref": "indicator--200087ae-ce77-417c-a2a1-81f017f0bafd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca4a7a6-7d64-42c2-8e43-035cfef1579c", "sighting_of_ref": "indicator--9799acab-171f-44db-bada-4200aeb347c3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cad2ed-e86b-46e9-a178-4046457aaad0", "sighting_of_ref": "indicator--864f1e33-b43e-44d6-af85-954ce7442823", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950a3fae-9880-405f-b117-72c07bd1c5df", "sighting_of_ref": "indicator--0aa32dec-a080-4d84-8f2c-5799a3f31b42", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346f73a1-febb-413c-b931-dd9233d15617", "sighting_of_ref": "indicator--bc875393-c5c7-492f-9ea2-65cbfe2a1c3c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766995b8-c48f-46ed-a1c2-8b49e2a055ad", "sighting_of_ref": "indicator--b8c62833-17ab-4607-951e-ab04b28d96e8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea2ef77-f592-4914-bada-120e569d8d42", "sighting_of_ref": "indicator--19a505f0-4937-45e3-af59-7d63cffce345", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c13cad-bb00-4021-aee0-0e4b7aa1a5d1", "sighting_of_ref": "indicator--19a505f0-4937-45e3-af59-7d63cffce345", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea57165-4161-4949-a532-b3d343cfcf24", "sighting_of_ref": "indicator--72127413-94e7-400f-a06e-43a5dd3146b2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725db532-3274-4b18-8ecb-0ed938925b67", "sighting_of_ref": "indicator--e6eb8529-d9f2-4b07-aad9-b44dc58bec36", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a5156ca-7759-46cb-8e0b-6624180b2686", "sighting_of_ref": "indicator--15f96ca2-9517-45d7-8ad1-064575517431", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd065e6-9f6c-4baa-8ce5-44e3de491faa", "sighting_of_ref": "indicator--2c7fefc8-06f6-46d8-92ea-b8e6afa662d7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ae863d-3979-47bd-919d-755a9021e8e3", "sighting_of_ref": "indicator--eccf94ea-a722-467d-be10-f97d59049ba9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f443e7-02ad-4e3c-adb7-9840dd2c12b0", "sighting_of_ref": "indicator--e420a0fc-5695-4bfe-bfcc-a24c364f29d5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4ee378-840b-4b4b-adb5-d1514cff22fc", "sighting_of_ref": "indicator--4a069611-c770-4bea-9883-82ef1071399d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f04fcd9-0db6-4be9-ab2e-aeb2187bfbc4", "sighting_of_ref": "indicator--13c72d31-a4b2-4eb1-a3f8-1609cbd5e27d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf307c7-a26c-4827-8da5-9c2753a332cc", "sighting_of_ref": "indicator--68bba437-0b90-4275-be8d-2a26fd29c874", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00ac52f-e1ce-4d07-8f2f-94e11734e1ac", "sighting_of_ref": "indicator--0bfef025-4b4f-42f7-9f35-4b81f13e4165", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0471308-8638-40eb-ad63-27a6707278fd", "sighting_of_ref": "indicator--f6d7b89e-6c3c-42de-b3d2-daac10b64937", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37950cc6-f253-44cd-a1cd-0bcaf95b4561", "sighting_of_ref": "indicator--f6d7b89e-6c3c-42de-b3d2-daac10b64937", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98c8647-f2cc-4298-83da-b43618cdafc3", "sighting_of_ref": "indicator--7cf0889a-87c0-4f5f-83b5-f40a69af22c2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f452a4d4-c7e9-4fd8-81a9-8f17c9f3c8db", "sighting_of_ref": "indicator--7cf0889a-87c0-4f5f-83b5-f40a69af22c2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b279c9be-0aa1-47bc-8ed2-397d0fa8f6a7", "sighting_of_ref": "indicator--91e9201b-3067-4106-8808-4ac9c9b64718", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75a39bf-43b3-41b7-bf56-9c24cab7b842", "sighting_of_ref": "indicator--91e9201b-3067-4106-8808-4ac9c9b64718", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5d93c9-c60b-448f-8ee5-d79577933569", "sighting_of_ref": "indicator--7cd71a43-6700-43de-9c2a-db1baff75c02", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ad61d4-cd76-498c-ad72-d29e7d90bf98", "sighting_of_ref": "indicator--651d5f18-b1c5-4d25-9de7-e4e77e2b02cf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f728a7-7b38-4611-bed3-edd304805c07", "sighting_of_ref": "indicator--86132b0c-2b94-4fc9-b789-2581c7a505c1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fcb2abb-5507-4336-ae74-409f424928ec", "sighting_of_ref": "indicator--9b7ea585-6e15-4cc0-b9d9-5033506500f6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14981431-cf07-4be0-aa8e-27299252616d", "sighting_of_ref": "indicator--cbb96924-ab3f-45db-a75c-214a1743b0a1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc125cd7-8b0c-455b-a938-82117313092f", "sighting_of_ref": "indicator--89f7c23d-542f-4427-9f1d-7c20e4fa3e02", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17219e91-3e51-4f86-9a99-d0a6d69be622", "sighting_of_ref": "indicator--bb97221f-770a-40db-9d85-fb206781db93", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4decc590-702b-4047-9a99-3c6b89b85771", "sighting_of_ref": "indicator--ec8d40ba-e30b-4375-932b-da859beeb90a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e8d3c6-3736-44fa-8a30-53d1c5007fe4", "sighting_of_ref": "indicator--0cf3a5af-1cdb-434b-a425-ac30198f9009", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2d50fc-9071-4c3c-a21c-949d93556ed4", "sighting_of_ref": "indicator--0cf3a5af-1cdb-434b-a425-ac30198f9009", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e5a2d2-ce9b-4dd4-87d7-6560d676148c", "sighting_of_ref": "indicator--c23bba99-04d5-40e8-a9e7-28a3c275b314", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c40ab8-c273-4570-8353-9571d7e01a95", "sighting_of_ref": "indicator--d34c27f5-45bc-48ba-ad97-5eae9e4ff4ca", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1af75d-aa39-4f0c-9ec6-01ebe48daafc", "sighting_of_ref": "indicator--96771a8f-fa87-4fbb-bef4-b6326ee80460", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f69d381d-2b15-410f-9aa7-06a1e665641b", "sighting_of_ref": "indicator--170767e5-dad6-42f3-9757-c427c38f6060", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b667ab1f-d537-4a20-84f2-949c2b889e2d", "sighting_of_ref": "indicator--5083c6b7-57f3-4a23-a80b-9a41d81d3c03", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d9960a-0f28-40ba-b518-ba3a8c8b2bf8", "sighting_of_ref": "indicator--e6807ad4-8f98-4bcf-895c-104671c9901f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6988bfd-209c-4ed2-a6f5-eb35ffe05b7a", "sighting_of_ref": "indicator--b1901dc3-2a76-42fb-a5a5-5e096ae58923", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58862a4c-944d-4bba-9391-07411dda8205", "sighting_of_ref": "indicator--b05655a0-dd1f-4730-be25-5fe65f1fe3f4", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74856515-c7c7-436a-945a-54be0041bfdc", "sighting_of_ref": "indicator--b7d4c2c4-9643-4fd1-95a2-6c604746af04", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958826bf-aec7-4a13-ab71-eb17d266bf2c", "sighting_of_ref": "indicator--75a4941e-12cb-48f4-88df-e38ce65877b3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586b61e0-36eb-45be-b3a6-2b985f7fbb5a", "sighting_of_ref": "indicator--eb1a7598-b230-4fc2-9aa0-6d798536ffb7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe8a494-2a45-492d-b40c-95da45c63024", "sighting_of_ref": "indicator--381c659d-e9cf-4dc1-8400-187023cd8e94", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b9409a-f2a3-4804-936c-fd02b3e4e635", "sighting_of_ref": "indicator--5b36358c-7342-44c1-94bf-3750e605918e", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12423b5f-68a2-437f-9e48-3f05b66bfbed", "sighting_of_ref": "indicator--24621aa6-cfee-4a36-bdab-2cbc71485de3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25cc55b9-13a7-473e-b395-5be900082caf", "sighting_of_ref": "indicator--b4137ef6-80f9-4ef4-b7b5-2ecee23c105e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372ca005-ab34-4012-999c-fc5b1280c1dc", "sighting_of_ref": "indicator--b5245349-6096-4abd-be3b-705716a02494", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcdcffac-cdd3-424b-80f9-46e0abb3cfb9", "sighting_of_ref": "indicator--1a2d9a7c-dc18-4b31-b5ff-24b000678ee2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--325fbb92-3b14-4849-ad0e-9d2f0cafff06", "sighting_of_ref": "indicator--1a2d9a7c-dc18-4b31-b5ff-24b000678ee2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab807060-13f9-4931-a2b4-f1d6cffdd581", "sighting_of_ref": "indicator--2651a171-b4ff-4abf-97d9-3ed28dc23f51", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a57434a9-2128-4435-afb1-c21c4224754c", "sighting_of_ref": "indicator--2651a171-b4ff-4abf-97d9-3ed28dc23f51", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd96a53-79f5-4932-93a9-d25f3020c57e", "sighting_of_ref": "indicator--42410c55-07a0-4e01-99df-35c676a0913b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a29660-cb64-4556-96b5-cc939f0c5351", "sighting_of_ref": "indicator--021d5934-4cb5-4670-8df2-c41e74d3b8c4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2970f3b-72c5-4318-ae5f-866165975c69", "sighting_of_ref": "indicator--6dcd6808-1406-417e-9b5d-aa7671b3651e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f2cc0e-b35f-4458-b9a9-217e671d888b", "sighting_of_ref": "indicator--52d7bef9-aa46-4cf4-851c-7553e716a51a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76fa141f-9f42-4297-936f-faade0a03513", "sighting_of_ref": "indicator--a1a61fc7-0690-4cb6-b7e4-558578c35ddc", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f75eea5-edfa-4713-8a30-eda30ce714f6", "sighting_of_ref": "indicator--479b12b2-c6f8-4f5f-80d4-db211d4c9711", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--288f8a00-dc00-40c1-962d-08091c84997f", "sighting_of_ref": "indicator--33edb46f-ff2b-48dd-874a-99b8afbdfd20", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bddfe83-81c0-450f-a747-4efde771e7ad", "sighting_of_ref": "indicator--42d0ac7a-57e4-4da1-b2bd-760144e30dbd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4911fde-7400-4e7a-849a-946580d2dd70", "sighting_of_ref": "indicator--60e0dbe9-6311-4c19-bb86-037e700a7b36", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3416b7-ec64-4968-8d56-a9827d6f5771", "sighting_of_ref": "indicator--198deba7-81bd-400a-a18d-41d4bf3b44a1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5312caee-8976-4f6b-82a4-e910d4acf49b", "sighting_of_ref": "indicator--6da02f68-a4fa-46d7-9662-fe714cff95e9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283f03ce-3a2c-4bec-93ed-a810919252c2", "sighting_of_ref": "indicator--4a1a11c7-eb0b-4956-bff9-36fe7792689a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44024865-cb19-4d38-ad19-ce82b2b9f963", "sighting_of_ref": "indicator--8d6c0cc2-49e8-4691-8659-ef939dc795e1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bebce78-eb32-48b0-bc49-981d3f6a974a", "sighting_of_ref": "indicator--e5d250c8-d92e-4bf0-94c0-64f32cdcc5e1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe9fde8-8d9b-4a91-ba7f-1beda8a5e23f", "sighting_of_ref": "indicator--b9a89b44-6927-4550-870d-1bc4e47a15a3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece6e8b6-c335-402d-a497-2406289a2e82", "sighting_of_ref": "indicator--3448eb4f-0f2b-4872-a4d2-f8d3917ccfa2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d7c0e0-44b4-4351-a563-d35ab6d4a70f", "sighting_of_ref": "indicator--3be2901a-d5eb-48b6-89eb-8b146d3711ab", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb44b1a-cd4a-4034-8818-e2c1dd29a559", "sighting_of_ref": "indicator--762e4e52-8bf5-41df-b409-817b94a84aaf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d02f4409-2173-42f8-bd37-65e0539101ce", "sighting_of_ref": "indicator--466bca97-9ab5-442e-8f76-dbbe5e8c0640", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5e1572-9f3d-42b7-95cd-21f203ddc817", "sighting_of_ref": "indicator--466bca97-9ab5-442e-8f76-dbbe5e8c0640", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c19ebd-d3be-4845-a595-b3ab4a519313", "sighting_of_ref": "indicator--8f571c64-5c69-4a8d-a674-12f2657b80a0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb44dff-4d30-4111-909b-b67f8c8eea41", "sighting_of_ref": "indicator--4c889731-9424-469b-979c-b1c21c5fa3c8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b635b16f-c50f-4923-b5ba-0f734f7b8c55", "sighting_of_ref": "indicator--061e6fc5-7d78-4fbf-a197-19c7670b24fa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bcaefe6-0e36-40cf-9f8d-fd254f1c4a9d", "sighting_of_ref": "indicator--061e6fc5-7d78-4fbf-a197-19c7670b24fa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59632df8-7a91-44e8-8e8d-01cba6968239", "sighting_of_ref": "indicator--e6e5d7cb-a66a-4145-a701-62e85c287d3c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb480369-1a17-4a59-8b4e-7dea25895245", "sighting_of_ref": "indicator--be90d130-ab74-4648-9335-110f622fa751", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3fcdfa-aaae-497e-b777-4a256b2cc2fd", "sighting_of_ref": "indicator--f67bd36c-25a1-4684-b053-b68b1d3fdd9b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d834452-1fd1-476e-8803-cd075e2298ce", "sighting_of_ref": "indicator--956ef5f3-68c0-4f50-8ace-b594f3310186", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d70ba11-2d54-4759-a3fc-e4987a9450e4", "sighting_of_ref": "indicator--b4abbc23-50ea-49cf-a924-8c76649ac223", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71502e43-2c82-471b-b22d-be69b0fed947", "sighting_of_ref": "indicator--18a9f732-99cc-48ef-b994-caff15a51c5d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d663c77-6f9c-4232-badf-f7fcdd9cc564", "sighting_of_ref": "indicator--75ecaa1e-0997-4149-a4a6-543428cde6dd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26d4d14-4bb7-49ee-b7a2-71e2608819f8", "sighting_of_ref": "indicator--26a08f78-ad4c-465d-91b7-1c0f173c4d53", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5d38dd-1139-4bb7-acd7-9fb518fe310f", "sighting_of_ref": "indicator--7e432bf2-b467-43ff-ba88-ae7860712247", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9bf06a0-d81d-4bbe-af06-d79dbf22bc59", "sighting_of_ref": "indicator--7e432bf2-b467-43ff-ba88-ae7860712247", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d5a1d74-eea1-40b6-99cf-b4d83d668f2d", "sighting_of_ref": "indicator--dec86027-072d-44b6-b82c-a666e91a4fd2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51277820-05b8-4910-9d8c-3fa9889b1ba5", "sighting_of_ref": "indicator--dec86027-072d-44b6-b82c-a666e91a4fd2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f08a7e-178c-49e8-9f75-e23ea50f0f0a", "sighting_of_ref": "indicator--aeaab098-0933-45a5-8e91-7d35c8d801e2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b83b117-05c0-4897-b484-054bd89fe5c1", "sighting_of_ref": "indicator--e2eac619-be3e-4a96-b52e-f009244c32de", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640cb4c4-4eb2-421f-bed5-6f72eb92c2be", "sighting_of_ref": "indicator--46b35807-e12a-4697-9b48-9dba15d08c62", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172acdad-ed46-4f8c-a6ec-1f123270edc6", "sighting_of_ref": "indicator--ce5e5c55-ad58-4cef-a3a9-5f4589978137", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf22076-3f08-48f0-b0b8-1f9bbab1e9f8", "sighting_of_ref": "indicator--38da150b-dba7-4295-86b9-ddc706f4edf2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8164e8-5164-436e-ac7c-5d657c5045ea", "sighting_of_ref": "indicator--01a8df00-edc3-453c-9d8d-5d05b43b3de0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dbf89c0-3224-4908-8c99-87cd845d7b90", "sighting_of_ref": "indicator--e7c18376-08b7-4acf-8e40-2279553267f2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afcdab8a-a1a5-484d-884b-aa6b4f56e9da", "sighting_of_ref": "indicator--0cfc8138-a3bd-4fcd-82fe-09e6136b63fa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d6237a-dad0-4de0-b051-b17d9bd67144", "sighting_of_ref": "indicator--0cfc8138-a3bd-4fcd-82fe-09e6136b63fa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370110b3-178d-472b-a13e-dc20b67863fa", "sighting_of_ref": "indicator--12b70670-7632-464b-ad7e-bef48e7ab56d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2edf50c6-1fd9-45c9-9fd3-0ec3cf631add", "sighting_of_ref": "indicator--6c901b5a-ffb8-4485-bc21-69d9750b266e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd41ce6-c012-4e42-bdd4-64d365c65485", "sighting_of_ref": "indicator--6c901b5a-ffb8-4485-bc21-69d9750b266e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c17641-3087-4c88-b1a7-1e4ca3b78163", "sighting_of_ref": "indicator--564ff224-ab93-410f-8517-93019b2ae3d9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e46fe8c0-f8c0-469b-8517-1a267122a644", "sighting_of_ref": "indicator--b89ab6e5-4c7e-4e5e-97c2-5bbfa85c3a6b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e2eee41-d5e6-4eec-8246-fd031ff8162d", "sighting_of_ref": "indicator--c0ff825f-dadf-43ac-a6d8-f49d509d0890", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b150839f-afec-453a-bdec-0b4da5af935c", "sighting_of_ref": "indicator--45ecd0c3-18cc-4d23-b1c6-14a89316bf49", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219c6d3a-35be-4925-963b-0f7a887817b4", "sighting_of_ref": "indicator--8c67fc8d-a07f-4ab8-b2c8-e0f59e64f5e6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48871d2-09fa-4103-ba3e-46ebcb90be0a", "sighting_of_ref": "indicator--8c67fc8d-a07f-4ab8-b2c8-e0f59e64f5e6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3ec25d-ad33-4c3c-a473-43665dc5d438", "sighting_of_ref": "indicator--4152c53a-c934-49d0-8e89-de8f84b0515e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b005ae57-86b8-422b-a2bb-97a90a4abb99", "sighting_of_ref": "indicator--4152c53a-c934-49d0-8e89-de8f84b0515e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1bc3a39-bc9f-45c3-a592-02d3ecdab79a", "sighting_of_ref": "indicator--66fef9ed-eb65-47d1-8f41-b80e58b0684e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9196df11-d65e-41a3-b46f-67db57348e36", "sighting_of_ref": "indicator--66fef9ed-eb65-47d1-8f41-b80e58b0684e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb87f470-79a6-4e9e-a0c4-d4f81aa56d8a", "sighting_of_ref": "indicator--82e30682-7452-4af9-8ac1-1fd368f8d512", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f18a43d-85f7-443e-be58-ad25bef8c83e", "sighting_of_ref": "indicator--82e30682-7452-4af9-8ac1-1fd368f8d512", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e3ce76-9f6d-4a06-a602-105440e0bf7f", "sighting_of_ref": "indicator--10d2d306-1e96-46e0-a6c1-1f7e8bd0b520", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74ddebe-ce8d-46dd-b725-614fc2b7a141", "sighting_of_ref": "indicator--150f54a7-0e79-414d-adf7-913e2216a308", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c41715e-724e-45f1-a4ae-04f978a4f2c4", "sighting_of_ref": "indicator--78ba1165-53a7-4a88-bd1d-18b8f63f5235", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f5a0189-a335-46cc-83d6-10ac65873b0d", "sighting_of_ref": "indicator--90668bbc-67cd-4ff1-a459-83c4fdd16949", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bd40c5e-ac56-4de4-8705-30916f5a8f3e", "sighting_of_ref": "indicator--e594bb4d-9081-4335-bcee-4ad2cc59c046", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfec1d5-e5ce-4096-8076-83cf0ac081fe", "sighting_of_ref": "indicator--9d4f94a5-5d41-4a4b-a23d-aaac1139d5c9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e70d7791-b80f-4425-8213-bf96f8ae8242", "sighting_of_ref": "indicator--c30a5ef5-49c8-42de-983e-6580394c777b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05011796-1fa0-446d-833b-482c8d62e1f1", "sighting_of_ref": "indicator--9ee87f5b-d8e0-4057-b73e-a755be1d2d53", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e8929e-7d40-4d21-8bd2-b443efedc118", "sighting_of_ref": "indicator--ed9cfcfa-ddc5-40fb-a69f-d79f347d0866", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e810794d-ffe9-4ea3-ba1c-e797df583686", "sighting_of_ref": "indicator--7cb5ca8b-f460-4afa-b6b1-b07e445db42b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5880dd-ae04-4281-b7d6-1a95e7528240", "sighting_of_ref": "indicator--f7762b33-5847-46eb-b663-98f7825577c0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75989de3-677f-4717-aebb-3a48d7423ee3", "sighting_of_ref": "indicator--f7762b33-5847-46eb-b663-98f7825577c0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7838b30-ec03-4fb7-a879-422d3bf50deb", "sighting_of_ref": "indicator--2491791c-bef3-4ecd-8409-33a028f68947", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66276004-057b-4f6a-875b-666fe1ece119", "sighting_of_ref": "indicator--2491791c-bef3-4ecd-8409-33a028f68947", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26b2767-ab6d-4687-827c-d8c5ea9d7611", "sighting_of_ref": "indicator--d1c4d5ff-a27f-43ce-b619-6ed0a7bead25", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2eeb5c-e805-4b13-b12a-5fc5f125f4cd", "sighting_of_ref": "indicator--d8926deb-7eea-4b14-8440-316c27133adb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf2d741-2f72-45f7-bc5c-c2513b91a3d0", "sighting_of_ref": "indicator--713c5555-a59f-4916-af61-ca82017c5155", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba24660-9e60-4f4e-9502-12a789d8326f", "sighting_of_ref": "indicator--713c5555-a59f-4916-af61-ca82017c5155", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4e9f48-297d-488d-a441-99b9bb3856ac", "sighting_of_ref": "indicator--5c92fb64-1f8e-44a3-a68e-177f08a7acca", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae4dea0-2925-47b4-9105-99b06fe32c94", "sighting_of_ref": "indicator--b44d5f82-03ec-4655-ad2e-17ef2a3f1be4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ffeec04-4c57-4f97-911e-e4030d5b5945", "sighting_of_ref": "indicator--c9f6632d-622b-4b2d-b808-e9b5099501a3", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993a0b0e-34fe-4913-a20a-75b0b74cfb59", "sighting_of_ref": "indicator--c9f6632d-622b-4b2d-b808-e9b5099501a3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbbc5650-083b-4098-89f8-52104c0aabeb", "sighting_of_ref": "indicator--e8259b53-1225-4852-a507-4994d9011538", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5b0fc9-0764-455b-825d-eaabaf851f0b", "sighting_of_ref": "indicator--286fb88b-b584-417e-b940-f687755ed239", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7343bbb1-8f16-40dc-b660-757c7793fa30", "sighting_of_ref": "indicator--f219722a-a222-4b7e-b98d-617aadcc39f1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a323dc-0596-4024-8864-5b9a58747423", "sighting_of_ref": "indicator--f219722a-a222-4b7e-b98d-617aadcc39f1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4411fd93-3254-4753-822b-42373b877fc9", "sighting_of_ref": "indicator--c2e50d97-1a31-4230-81fe-e2245a157613", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d5387d-e244-4778-b92c-9e5ba3b8c52b", "sighting_of_ref": "indicator--1beaf1c0-777e-4684-9757-f293760f886b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63e5e28-0486-4103-b7c0-45ba958027ba", "sighting_of_ref": "indicator--48d9c6aa-5f26-4b58-808a-d391568e68cc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7204f672-9386-4176-a9b2-a8a8be681045", "sighting_of_ref": "indicator--fa30b956-2711-4ec0-ad95-eaa05630dd40", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be23836e-0034-46e5-93c5-5fac5c80ef47", "sighting_of_ref": "indicator--c027ac9a-1da9-4565-8b52-eb924fe7fcba", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144b3bd6-11a9-49f5-84bd-eebab9592a4e", "sighting_of_ref": "indicator--87bcf293-4d3a-4fe5-80fb-179d65fafc4c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08681747-4b03-40d7-9413-2ff38dced9a2", "sighting_of_ref": "indicator--87bcf293-4d3a-4fe5-80fb-179d65fafc4c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1a7da0-2681-4abd-bac3-76b62143625b", "sighting_of_ref": "indicator--7d78d2fa-6fd4-4f5c-8dc3-2d7693fbc607", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05159976-cbea-465f-8049-0d56a576fec6", "sighting_of_ref": "indicator--ed3458f8-d71e-48da-959f-5731bf3bd9de", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cd8cc0a-c946-4910-9f45-035115c01cb8", "sighting_of_ref": "indicator--0e539c6c-ace0-4388-bbb5-850938f5315b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56e3ffe-8f87-48be-b69d-44182859d96e", "sighting_of_ref": "indicator--9fbe25c1-8093-443c-80ff-9224c5ace39e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe03806c-52bb-44d6-9073-c7e815f68819", "sighting_of_ref": "indicator--26bd0bcd-d15c-4313-8c59-61e150776d5e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d19040-9e50-4e43-be99-bd1d6ac41d79", "sighting_of_ref": "indicator--ee4c1b95-b500-41a6-a6c5-8d1bf92b59b4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19670196-9fc5-4c35-b8dd-279160edab25", "sighting_of_ref": "indicator--cfca4845-a54c-412b-b932-48a62957aa6c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102de71d-b7b7-4875-8675-b611f6419262", "sighting_of_ref": "indicator--b7a4e0cb-8817-4059-a71d-6d91bec5311b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e89a6e2-5bd4-42aa-b990-29c84247ea10", "sighting_of_ref": "indicator--b7a4e0cb-8817-4059-a71d-6d91bec5311b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09de6439-ebdb-4512-beb9-80e90ce18e90", "sighting_of_ref": "indicator--732b1b34-ecd4-4323-b035-ebbe84fb400f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8954f22a-6d32-4d81-b5fe-e14a370f1691", "sighting_of_ref": "indicator--732b1b34-ecd4-4323-b035-ebbe84fb400f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092206aa-00cb-42bf-a49b-b0de5b86a35f", "sighting_of_ref": "indicator--a323a533-56d1-4b1e-b47a-2a2b9ecf28cf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8ce323-6f29-4b73-9991-28e8bb83f7b6", "sighting_of_ref": "indicator--4519f1a4-cc71-4629-9bea-22a901abd47e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bafd57f-32c8-4c5d-9b45-f5b5804c37cf", "sighting_of_ref": "indicator--3651ad5f-1757-4062-a3c9-727af43b4b60", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe6c397-957d-4ddf-91c6-8e279121d64a", "sighting_of_ref": "indicator--a7293d29-294f-4f00-a286-749daee6010e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a597c6c-c9f8-48ef-a0fc-4217731a95c1", "sighting_of_ref": "indicator--67b2c68c-09e4-4804-b84d-1f7a6488f897", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8197df66-47d0-4c8c-af48-832c67fefcfb", "sighting_of_ref": "indicator--12113279-e524-4263-be2e-a6bf59698a2a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893c22eb-c655-46c5-b767-659df08682ed", "sighting_of_ref": "indicator--cdb7134a-ba9c-4368-acb4-abd1fa7b3b71", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef3dd7b-8b1a-4297-87ae-e3176c488c37", "sighting_of_ref": "indicator--99b92118-fac1-4c67-ba37-48238033834e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1891f773-b57d-4220-a96d-f7332942d211", "sighting_of_ref": "indicator--9bd531bb-c51c-4afd-aa74-057e3ff359d4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ca1d62-e004-42eb-8d8c-6ade1b568e81", "sighting_of_ref": "indicator--fc5b29d7-3a40-41a5-9312-e3d141e2f7c6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662e6329-c30a-4bfc-af06-fcc8fb599764", "sighting_of_ref": "indicator--03927f51-03df-46bf-9582-187637dcaff2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85a5c6f-d130-460e-be43-1bf9c043863d", "sighting_of_ref": "indicator--5425743f-c941-4af9-82dd-85cc23fbcfc3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d311eaee-19bf-473d-9115-5842992b17cf", "sighting_of_ref": "indicator--27b3ee4b-cefc-405b-b43b-6265b6e99a37", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534389bc-0b9a-4640-a661-b42832914397", "sighting_of_ref": "indicator--dee05968-ff43-4afd-bfc2-f4659ad04a0e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2e05a6-9203-48a1-8063-4cf43d54acc4", "sighting_of_ref": "indicator--0568a809-703a-41de-9416-520f9a1e9a1e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa99167-5230-4595-bc96-785fd9437b37", "sighting_of_ref": "indicator--8759e3c3-f7e8-4d74-8e65-514c5cdc4ce6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b503f5-2cd0-4832-80f6-aa82b137b979", "sighting_of_ref": "indicator--c97d3430-fb19-40c7-8575-c46b56b11912", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef57d80-9dba-4c15-879d-7af276876ddf", "sighting_of_ref": "indicator--f1c29763-71d6-4e0d-80b9-a95e3666b985", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a26fac5-5a4e-40fe-87a8-ff9852a0a21e", "sighting_of_ref": "indicator--12c77062-c7b2-4c2c-a3a1-603e889a1fce", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4facb40-8083-4552-9846-daa6400ea59f", "sighting_of_ref": "indicator--b9d234e3-c800-432d-9cae-eb47f4e2e8b6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced779c7-3bc7-429c-958e-dfc661070ba5", "sighting_of_ref": "indicator--beecbb32-b1e4-42a6-a6ff-9f2c3225b8a6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4078b289-4299-4828-be68-f9e1c0774f11", "sighting_of_ref": "indicator--f123e8ea-0d23-42ff-8453-3045838c9a51", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd2ae15-920b-406d-ae9b-5bf557acab9b", "sighting_of_ref": "indicator--a809eb52-3408-4b8c-8361-b9b7495a87a3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ac526e-1ef3-4c13-8286-888d872e713b", "sighting_of_ref": "indicator--eba1d91f-8227-4504-9886-4a8993221c25", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4555eb04-996f-4582-9252-c0ac8e8bb527", "sighting_of_ref": "indicator--243801e0-80e6-45cc-87d8-67e0917942ef", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5fddb8-4f8d-4f2f-9876-2204857707cd", "sighting_of_ref": "indicator--3cd13c20-e075-40c1-8d35-78b4a7d79134", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac868bd6-01fc-49e6-99d9-3c327471d27f", "sighting_of_ref": "indicator--220d46f4-7277-49b2-9670-ee4e2a1cdfef", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2b23e7-85a3-4892-86fc-55cfe6e086f7", "sighting_of_ref": "indicator--c3b5d11a-e128-4f4d-880b-bd71cf763cd0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae85af2e-7661-4c60-bc68-d5c870a5fd2c", "sighting_of_ref": "indicator--0264718d-e985-4584-8967-271a0f15ef0f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c496fddf-e265-4319-b7d9-0e41f733134d", "sighting_of_ref": "indicator--0264718d-e985-4584-8967-271a0f15ef0f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb440e62-f07c-4179-bc26-b013d2d40625", "sighting_of_ref": "indicator--5cd2ea77-327a-4627-9464-14d451d56927", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de974371-4ca8-4829-b042-34db27da0840", "sighting_of_ref": "indicator--aeb89085-b883-4cfd-b0ed-e6523a9d6ba8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--359e1187-1ede-426e-a6b6-798a322252d6", "sighting_of_ref": "indicator--1a9703c0-83b1-4e57-aadd-27928aafab76", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e66053-095a-4a40-bdf9-580c204833e9", "sighting_of_ref": "indicator--b4e45c1b-a7dd-490c-8d42-87bafb8f9b1f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d413b7-3f4f-431a-a6f9-83fc5e2e58e6", "sighting_of_ref": "indicator--2a8c8058-79a8-4cf1-b388-2571d7e35d7e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803fc064-0872-43de-8e82-15c026c104bd", "sighting_of_ref": "indicator--022962e2-be7d-4d05-89cd-3d4a6864bd04", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd73f911-2bf0-46bf-844e-e5385c9caea3", "sighting_of_ref": "indicator--f8a7902d-dbe7-45f1-b485-b3b61ffb40e1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b4a74e-0e29-4cde-ae33-9d8f210399af", "sighting_of_ref": "indicator--b8aefafa-69b3-429f-a3e1-a3e3a18974eb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b998bf4a-b187-469e-9092-629243109f1f", "sighting_of_ref": "indicator--c871f25e-7097-4877-a7c5-015266577ba8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503d1319-1a16-4dae-9e13-64b4edcb2c80", "sighting_of_ref": "indicator--21bda7cb-9a64-4511-9236-4493d3b52b10", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1631742d-c3db-4647-b85a-4f0e9563fa77", "sighting_of_ref": "indicator--972f3efb-ede6-4c9c-a7a1-88619a6f4c6d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1f7cb0-80b2-42a9-9e55-8ef06ace2a4e", "sighting_of_ref": "indicator--2c32e191-77e4-4152-94db-61876134ce3c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75fc916-7fab-4295-9124-45c9915e1cb5", "sighting_of_ref": "indicator--5787be49-6c9b-4f85-a19d-59eaf520dce1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecffdb89-df02-4396-815d-48acdde9f2f0", "sighting_of_ref": "indicator--15e37aff-e391-43d2-b6a4-67a64f6ae415", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61baf31-2a5e-4e15-b413-a4a6c6279367", "sighting_of_ref": "indicator--15e37aff-e391-43d2-b6a4-67a64f6ae415", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99bbfcb-7ab9-4bf6-9e90-f84854d2494c", "sighting_of_ref": "indicator--60cdf26e-ab48-4971-a103-22ca36758f11", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60465a4c-b4a0-4e44-a121-d6ac1a306b09", "sighting_of_ref": "indicator--4ce4f968-e85f-4ae8-8326-1a0114cd8e7c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0dcea6-578f-46bb-accb-81da8b86677b", "sighting_of_ref": "indicator--7c4ea2c1-df0f-46b5-99ae-cd4b48aa7cf1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58e22c6-d737-46a6-ba78-5a3f6988a595", "sighting_of_ref": "indicator--7c4ea2c1-df0f-46b5-99ae-cd4b48aa7cf1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3c4cd5-a6a4-464b-98f4-0bf8a799e552", "sighting_of_ref": "indicator--a74ef8e8-afce-480e-a631-7baab3e9250d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8c584a-b5ae-4df0-8bb2-194224dd743e", "sighting_of_ref": "indicator--e7fa3493-ad46-4f5b-b39a-eea108ce0d9c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63fe5f05-5aac-46af-88a5-69d76a074601", "sighting_of_ref": "indicator--37c909b3-ce6e-4884-87b3-e647cc0e9082", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025a4228-8392-4c42-8095-8816848b4dbf", "sighting_of_ref": "indicator--e5f342c1-cb1f-43f4-bbd5-b7ee39e53c4b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f380aa3e-fbba-468a-86d5-b36d7b878216", "sighting_of_ref": "indicator--e5f342c1-cb1f-43f4-bbd5-b7ee39e53c4b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62faf7cc-38cd-4d4b-8935-32439dc8f54d", "sighting_of_ref": "indicator--a659463c-a603-473f-8ee5-177b90a19a28", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129c8db6-af8e-4c3e-b0a9-d884cf1f0fd0", "sighting_of_ref": "indicator--3975ae75-f3b7-499f-b5a8-2f04368d51b9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76bb0cc5-d29f-491d-b489-e790b7668351", "sighting_of_ref": "indicator--620a6a45-cfe8-40da-8fe5-a3f445d1bc7f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22c0639-517a-4c3d-b766-cb334286a169", "sighting_of_ref": "indicator--c99e281b-cb7e-47f0-b826-fbd76e5f3271", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f5fe11-aaaf-4166-8452-7559eedaf862", "sighting_of_ref": "indicator--135664a9-238e-4b42-9f32-5b979c9607c6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3163c176-52ad-4948-8643-364421da6ea9", "sighting_of_ref": "indicator--fe4b42c0-febc-45fb-b253-932656762544", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9835392a-ade1-49fb-8da4-d45d9f526b95", "sighting_of_ref": "indicator--fe4b42c0-febc-45fb-b253-932656762544", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6eb580-8b21-4999-9b6e-53f71255308c", "sighting_of_ref": "indicator--b0e63150-bfe6-4b13-9c50-2b6205980b33", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638b3966-90cb-4d43-a0de-34f97024c176", "sighting_of_ref": "indicator--8954b536-f190-4ef3-a779-6e0cf3abc31c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2227ecf3-c3e4-4217-8002-caaae961767b", "sighting_of_ref": "indicator--8954b536-f190-4ef3-a779-6e0cf3abc31c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2bf08c-7fd7-4fb3-9f4a-f44a98434322", "sighting_of_ref": "indicator--582c35a3-425e-4a66-bf84-6eff38356c76", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef4744c8-4fbb-40c1-a604-e3de85c7f2da", "sighting_of_ref": "indicator--2da6b117-bbdb-4379-905c-5c7a600682bd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27eed859-d0f9-4ae9-8ab1-bf90a40e817b", "sighting_of_ref": "indicator--2da6b117-bbdb-4379-905c-5c7a600682bd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb1848b1-8fcd-46b4-8374-9e2404a6c2ff", "sighting_of_ref": "indicator--d54ff986-997f-46b7-a84f-2a4310673c43", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61657b30-d60d-4bce-8895-a193f1f1a43f", "sighting_of_ref": "indicator--d54ff986-997f-46b7-a84f-2a4310673c43", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45e2653-b656-4106-b968-5820b97fa3b6", "sighting_of_ref": "indicator--5a703c30-6f3c-4a53-8642-fcbf1aec3828", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d658ca52-0fb8-45a4-8917-63818e2c59ee", "sighting_of_ref": "indicator--d1059b06-3f37-4e44-9009-7f1ac9b6a8ac", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7bf3cae-0fc7-4089-8b31-5e8b9c333ebc", "sighting_of_ref": "indicator--3087511a-18ea-4fc6-ae93-7c437494f4ba", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f498e53f-ff28-4649-a6ae-c2dc77131b5e", "sighting_of_ref": "indicator--968eac2e-f1ed-4a4c-99f7-47f0c718de96", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5436ac-4d60-4193-ada3-ae144d85feb4", "sighting_of_ref": "indicator--d54010c9-39aa-4bd8-baa5-9ffb85de7468", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6733f7f0-e019-4d96-ba79-1a13126ed0e7", "sighting_of_ref": "indicator--bc80e154-bb97-4e77-a321-0f7f556de938", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54077e4c-4da4-437b-8ae2-6658375dbbc9", "sighting_of_ref": "indicator--bc80e154-bb97-4e77-a321-0f7f556de938", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf6a745-386b-4d3d-86f3-adf3f89c5b0a", "sighting_of_ref": "indicator--cfc3d453-43c1-4cf6-9910-792efee073ef", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9ee773-d532-4dfd-84ce-d19e86c49989", "sighting_of_ref": "indicator--d98b90dc-e161-4d72-8d6f-dbafd1796b51", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4419c57-3081-4fcf-8fc9-1714704742f9", "sighting_of_ref": "indicator--d98b90dc-e161-4d72-8d6f-dbafd1796b51", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ed70c3-922d-4d65-ad1a-30b719e3d873", "sighting_of_ref": "indicator--d2f402c9-31d7-485b-be4f-67ae779aeccf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fb83a9-b4a0-46b6-a3d4-d443039609c5", "sighting_of_ref": "indicator--315b4dee-0ce3-4bb0-90c4-1d3de3706d25", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d141dacf-daf0-4c8e-9d20-c1b13f18838b", "sighting_of_ref": "indicator--315b4dee-0ce3-4bb0-90c4-1d3de3706d25", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d1300a-623e-4d21-9686-029c2077c68c", "sighting_of_ref": "indicator--287054b9-2e96-4cb2-bcc7-b2aae1d38c23", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc21ed7-b4e8-4ff6-b991-c9f5e5b04390", "sighting_of_ref": "indicator--287054b9-2e96-4cb2-bcc7-b2aae1d38c23", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8be3f33-e010-43b2-a6cc-1a5df78447d0", "sighting_of_ref": "indicator--1e681082-aa87-4f0d-8cd7-4574aa13a40d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c30aa4-ec41-4ff5-85cd-818c6ff79d6b", "sighting_of_ref": "indicator--010684d1-af85-4e1e-9494-017ac80f5814", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a5d1f1-4c2f-4cf9-a6db-cf6c9279b431", "sighting_of_ref": "indicator--010684d1-af85-4e1e-9494-017ac80f5814", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1abfb6-fd86-465f-933b-899ff1278b19", "sighting_of_ref": "indicator--53065999-c6ca-44f7-9631-670ee5b127cf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38743df6-d015-4899-bed5-e9490936ff2b", "sighting_of_ref": "indicator--0a3d6434-2495-4e0b-acae-6e860c8814de", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f25792-b05f-43c7-addb-9898cbede06d", "sighting_of_ref": "indicator--ea2d557c-73fb-4731-8579-1117f2b0341f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b55bcf-72f6-4874-8298-f50051483e9d", "sighting_of_ref": "indicator--ea2d557c-73fb-4731-8579-1117f2b0341f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7fb3178-eb2b-450e-94da-514cc2c565b5", "sighting_of_ref": "indicator--dc24b10a-fab6-45cd-ae33-c041cd667e56", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68aa3d3-8667-47c6-9f51-f218c7da5aa5", "sighting_of_ref": "indicator--dc24b10a-fab6-45cd-ae33-c041cd667e56", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f4e114-e1c6-4dad-8192-2e22c3ab1f20", "sighting_of_ref": "indicator--e121e2d9-c87e-4346-a35a-8f945bbc6559", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3052f0-d36f-4f15-9448-a5a7b5197501", "sighting_of_ref": "indicator--e121e2d9-c87e-4346-a35a-8f945bbc6559", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e070e1-97aa-472f-82db-751e15d0281f", "sighting_of_ref": "indicator--21cd2197-a6c6-4c66-95ee-52d1ea6821e8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20bcb745-fe94-4e8e-917a-859dc88df816", "sighting_of_ref": "indicator--21cd2197-a6c6-4c66-95ee-52d1ea6821e8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4998f9f1-02d9-4fc3-9fa3-c934d5d4f0fe", "sighting_of_ref": "indicator--2da6b484-d55e-49da-a848-822f6c9f9d9f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f3abac-ad3f-40e2-81ca-aed6815de965", "sighting_of_ref": "indicator--b78732d2-c85c-4eb0-aba5-23a2cfa5d324", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff595e27-8b14-4d7e-871b-a340411ab421", "sighting_of_ref": "indicator--3cc1bdb8-549f-4379-a182-8c769912d43d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27111e1-f682-4073-a392-0d0970745841", "sighting_of_ref": "indicator--c813ae28-9599-4289-969b-f071bcce13a9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57691c55-e802-4138-8d6d-3e3b5c0751ab", "sighting_of_ref": "indicator--b8f43f92-065d-4920-946b-34dcffc6bc42", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d48f8b-8cef-4488-a282-3d35e9500b0c", "sighting_of_ref": "indicator--04bd028d-d44f-4f72-ba48-1a3b7516f721", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e01ca3-1b40-43ce-8586-aba6ba1fab8d", "sighting_of_ref": "indicator--793d7bbc-131a-4f54-b12e-7f7da7bf6a56", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fad0715-9f4f-4910-98b4-c11221f84fe3", "sighting_of_ref": "indicator--a509c220-515a-4b8e-9a74-0b5e7d687952", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a08ab22-db0f-4834-b360-7056fe3b256f", "sighting_of_ref": "indicator--a509c220-515a-4b8e-9a74-0b5e7d687952", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d7b17c-c664-4699-b405-11c2802358e0", "sighting_of_ref": "indicator--9eb5d631-aaad-4957-af88-910f41ff7d7d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85428902-5501-4d99-bfc6-f41f5738b583", "sighting_of_ref": "indicator--9eb5d631-aaad-4957-af88-910f41ff7d7d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7fe3c9-76e2-49fb-865c-e45f7146f6d0", "sighting_of_ref": "indicator--dd2237b5-b7ae-4ac2-806b-3936068094a5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7f7f62-3291-43e0-95b8-009892c912fc", "sighting_of_ref": "indicator--dd2237b5-b7ae-4ac2-806b-3936068094a5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb639c5-ea3a-46a3-8968-fd2de6f93957", "sighting_of_ref": "indicator--bc18bf8d-6803-46a4-b47a-2575b250d218", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c844ea7c-4a45-4e79-8041-25f92caa0947", "sighting_of_ref": "indicator--64a7f3fe-3539-4765-aca6-6d878383a880", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565583b6-b3db-4853-bcd4-29b6830eee1a", "sighting_of_ref": "indicator--64a7f3fe-3539-4765-aca6-6d878383a880", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f4600d-6ce0-4a9f-a661-6130c2de4fc9", "sighting_of_ref": "indicator--7b5182a3-0fe4-49d0-ae90-4ba5d31a5462", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ca7f01-4939-432a-b93b-b15552d58d8a", "sighting_of_ref": "indicator--7b5182a3-0fe4-49d0-ae90-4ba5d31a5462", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e289f86a-3bda-4561-8efe-a9a1b3e96a6d", "sighting_of_ref": "indicator--a5e63148-43e8-437b-873c-6e6e52619de8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c147dcf-6577-4e13-934a-42ee89ef6638", "sighting_of_ref": "indicator--a5e63148-43e8-437b-873c-6e6e52619de8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2708ca9c-63f9-4576-8797-1b8e54a1d634", "sighting_of_ref": "indicator--e18e7571-c504-497d-a7cf-b8369d18ee24", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c7ab56-f069-4e87-b229-d9fe7c0426e6", "sighting_of_ref": "indicator--562a2977-a2ee-4eea-a0cf-171918671b27", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0271bf5-b6dd-46de-9289-e6162c7bd310", "sighting_of_ref": "indicator--bca4925f-5947-498d-ac2e-7e4caf510677", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffaae29b-0802-4479-8bde-ce31020cce75", "sighting_of_ref": "indicator--bca4925f-5947-498d-ac2e-7e4caf510677", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7bc6fda-5c40-42dc-bcd6-cdf26bd50337", "sighting_of_ref": "indicator--be5293df-2065-4c90-bb36-1a70ecfc31ef", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685c2798-fe78-4646-b78d-d5d099085d46", "sighting_of_ref": "indicator--be5293df-2065-4c90-bb36-1a70ecfc31ef", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4e43962-1b22-4421-a4f6-8c88ce757abb", "sighting_of_ref": "indicator--13fefa2c-499d-4619-957f-bebe8b5bd318", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774e676c-f7fe-4166-95bd-a9a9daabeecb", "sighting_of_ref": "indicator--13fefa2c-499d-4619-957f-bebe8b5bd318", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15eb6e71-8a88-42fd-a0df-f8ff1011109d", "sighting_of_ref": "indicator--1eeb8062-7e7f-4cb7-ba63-19b9c3af6d06", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e09973d-8431-4b70-ab37-83b01ef5446e", "sighting_of_ref": "indicator--6bbe42fd-3740-4860-b550-1aac607de8ff", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11fd00ec-2a73-4bc0-8311-e08c06b2a9b2", "sighting_of_ref": "indicator--6bbe42fd-3740-4860-b550-1aac607de8ff", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1312f76f-3c17-4b48-9687-256dfc185f1b", "sighting_of_ref": "indicator--e9837277-b5b9-4791-be69-db80fbadc2a6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a551d2b8-e131-4e59-b80c-de83fdd57dfa", "sighting_of_ref": "indicator--e9837277-b5b9-4791-be69-db80fbadc2a6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f3a819-b39d-4a0e-9d68-4d2f9ee92721", "sighting_of_ref": "indicator--eaf0befa-f05b-4300-b5b5-d9f22ac50d6b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1024e551-ef3e-43ce-acc1-70798d7f89d9", "sighting_of_ref": "indicator--eaf0befa-f05b-4300-b5b5-d9f22ac50d6b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fed3b76-a127-4309-9e89-1d0c5778337c", "sighting_of_ref": "indicator--ef14dccc-b33b-4cdf-be81-0eeb2f9eef4d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9d6755-1ba9-407f-824a-a22cfca8830c", "sighting_of_ref": "indicator--ef14dccc-b33b-4cdf-be81-0eeb2f9eef4d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56cb4b5c-9b18-4133-b493-150d5692969e", "sighting_of_ref": "indicator--20a45a78-b7e0-4794-9b24-642e2a013108", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddac9583-a97e-4063-8098-4a1934203980", "sighting_of_ref": "indicator--9d2d7a01-47d8-4ce5-b1d3-f53f2143b932", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7680b8e-eae2-4fbc-95b4-e412654a745d", "sighting_of_ref": "indicator--84fe7463-8c12-45a0-9c57-895880d611ca", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fa5323-3b47-40c5-899e-254bfea52914", "sighting_of_ref": "indicator--84fe7463-8c12-45a0-9c57-895880d611ca", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ffd345-dca2-4056-bf51-09c0c1eb3e87", "sighting_of_ref": "indicator--80fb495a-c9a1-4161-8e5d-ed50536e5904", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--982c313f-c663-408e-811f-c20fc51f7327", "sighting_of_ref": "indicator--e86469c7-ddf6-41c6-840a-deb110800b1d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1a88f8-2dd9-40b5-a831-9ee17d437c69", "sighting_of_ref": "indicator--8043f456-bacd-4420-8a7a-86e1a303fbdd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0ed4b7-d1a3-4af8-a516-65f40811b6b2", "sighting_of_ref": "indicator--9a17f6c5-e9e8-4c9e-9be5-3c7218e1cfaa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f381a747-120d-475e-a4fc-454174c8a52d", "sighting_of_ref": "indicator--0baa0294-af35-4e8c-9fc6-3cfc69f7784f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a284df7-c539-4346-b5ac-e949aa726446", "sighting_of_ref": "indicator--bfe4457a-4ccc-4acb-babc-b84a7b4ad6ac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79ee1ce-b3fe-45d8-b896-a2e063358d48", "sighting_of_ref": "indicator--4716ce77-9ba4-4dcf-95ee-c48432e9f4f9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a1d263-f076-4227-b3d1-21c9f328f4c0", "sighting_of_ref": "indicator--4716ce77-9ba4-4dcf-95ee-c48432e9f4f9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32157f7-ad7c-4e5d-a3f7-f7e2b51d191e", "sighting_of_ref": "indicator--3d917058-9a8d-4428-a470-8144c321130e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c30d185-85cc-4ee4-af16-1b0b1af838ff", "sighting_of_ref": "indicator--3d917058-9a8d-4428-a470-8144c321130e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740643a2-eafe-46df-89da-b8af40ec01e5", "sighting_of_ref": "indicator--a8cc1167-029a-4cdc-9487-c4e5161ce954", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d45e771-d6a9-4702-8df1-6038315398d1", "sighting_of_ref": "indicator--e5c47bc7-0228-43b6-b547-250b80364ab5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862f5ca1-ce63-4ba1-a9e3-8ce7411d71e1", "sighting_of_ref": "indicator--e5c47bc7-0228-43b6-b547-250b80364ab5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3afa5776-95ea-4416-94e1-ae637cdba52f", "sighting_of_ref": "indicator--508c1600-c687-404c-9381-518720beb4c1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f60097-a357-42a0-b5c8-c71659191332", "sighting_of_ref": "indicator--508c1600-c687-404c-9381-518720beb4c1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c25876-82fe-414f-97aa-4b374a2db6cd", "sighting_of_ref": "indicator--fd703e0a-1122-4294-8822-ca6817737628", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06af702e-4afe-4bf8-8972-0afade9a5d42", "sighting_of_ref": "indicator--fd703e0a-1122-4294-8822-ca6817737628", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239e1d49-0299-47c5-b3ce-3a269edc5bca", "sighting_of_ref": "indicator--d5cbc43d-63ce-423e-8787-a51f0ee21b95", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf05862-df40-4d92-a3ed-1a19b02b1974", "sighting_of_ref": "indicator--d5cbc43d-63ce-423e-8787-a51f0ee21b95", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97882fd4-62c0-43b0-a95f-eb72bbd1c457", "sighting_of_ref": "indicator--eefe27a8-9bfa-448e-8d45-ecb6463549e6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5b709fe-e19b-44a8-b862-04a5792e1a47", "sighting_of_ref": "indicator--eefe27a8-9bfa-448e-8d45-ecb6463549e6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702710d6-9ba4-482e-a995-3a6aebced998", "sighting_of_ref": "indicator--ee3935e6-c5d2-4884-9eb5-60c4289e056b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f42529-b142-4076-9211-167e1ed82f26", "sighting_of_ref": "indicator--4bf76797-5568-42f0-8f3c-5ce72b930c9f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a452f36-20c0-4fd3-bcb8-95a6a42bde98", "sighting_of_ref": "indicator--4bf76797-5568-42f0-8f3c-5ce72b930c9f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a274590-c8e8-4bc3-828c-13598387fb03", "sighting_of_ref": "indicator--e8c8d459-042b-47d1-9d8a-902e78b7acd1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64100206-d9c2-4bc4-99fe-568f8f36dd40", "sighting_of_ref": "indicator--e8c8d459-042b-47d1-9d8a-902e78b7acd1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b29e163-dd3f-43d1-8669-413442d123df", "sighting_of_ref": "indicator--c5ac3ed8-7195-48ec-adf3-8c1965c7b4e2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559be9fc-7873-430e-9be8-0de43069e3ff", "sighting_of_ref": "indicator--c5ac3ed8-7195-48ec-adf3-8c1965c7b4e2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8638221-d463-442f-95ae-6800fbb07198", "sighting_of_ref": "indicator--e25b9cf3-c1a0-4723-8fa4-7d015ad83cbd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb6e42b-fd1a-4ada-af08-21d5e148d979", "sighting_of_ref": "indicator--e25b9cf3-c1a0-4723-8fa4-7d015ad83cbd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f28f5a2-c0ed-44b4-b905-381a9d20b5d2", "sighting_of_ref": "indicator--de304926-aa84-410e-aebf-b061d6d06b66", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea06b8c-95ee-4384-aaa5-b3b456268ee1", "sighting_of_ref": "indicator--de304926-aa84-410e-aebf-b061d6d06b66", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6ed2ee-d62c-41b4-94bd-394ae3849f7f", "sighting_of_ref": "indicator--4b14505a-d930-404d-81b5-3a6d28f53d3e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a12598b-aefc-4262-8280-eff6e4597433", "sighting_of_ref": "indicator--541ccc7e-35b8-4427-91c9-a451cae1f21d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f1e57f-999b-4c75-90d4-5bd2bbd76b20", "sighting_of_ref": "indicator--53ea5a39-775a-4843-844c-1861dead5555", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a952a19-fa9f-4706-81ff-b3cf2db219e8", "sighting_of_ref": "indicator--a912fa84-ce00-4ced-98b3-6696dd5edbdf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044216e5-836a-4646-811e-eafe85101ae7", "sighting_of_ref": "indicator--86faeda5-f44b-4a0b-a575-ef035b78ff72", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624cae7f-75a2-49ec-aba4-1f00d9d4e6e8", "sighting_of_ref": "indicator--86faeda5-f44b-4a0b-a575-ef035b78ff72", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44922cd-7cab-411f-9e9e-614d1843eb19", "sighting_of_ref": "indicator--a16c32ba-97e8-4764-8334-43588bcaf97b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ea8fe7-46bc-40a3-8729-d9824a08e05d", "sighting_of_ref": "indicator--a16c32ba-97e8-4764-8334-43588bcaf97b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43be24e-28cb-43be-b0cf-ea54a338ac66", "sighting_of_ref": "indicator--25b70399-108c-4d2a-a192-68f607b08e29", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99150fa5-f3c5-4de1-95eb-e813f64ad937", "sighting_of_ref": "indicator--8e0cb2ae-0225-4172-a3a3-e9cad28b4e17", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e26cdcb-0f5e-43d7-9b21-e31c13cfab37", "sighting_of_ref": "indicator--1178ccc2-736c-4a10-96ae-516f6e263fd7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422e70d6-2b1f-43f5-9c89-04956568b7d9", "sighting_of_ref": "indicator--1178ccc2-736c-4a10-96ae-516f6e263fd7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4776cf-7d27-4604-aa3e-670e134161e5", "sighting_of_ref": "indicator--f894eb54-a9f5-4aba-88c7-4175e6126f2b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064e20ae-e0e0-46d4-a76b-fba4716b8d4e", "sighting_of_ref": "indicator--e2cc0086-95ec-4af5-8ad0-0fbb4ae00830", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cec3250-6dfd-46b0-adc6-796034df4366", "sighting_of_ref": "indicator--aee23653-19e0-4001-b698-4b0f3be299cd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d509ec-29cd-4b3d-a7be-9e11a955690a", "sighting_of_ref": "indicator--aee23653-19e0-4001-b698-4b0f3be299cd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a42d82-5ef0-4ac8-a140-b1287c5bfedd", "sighting_of_ref": "indicator--7c86e3c4-1a78-4a9b-a11d-ff277e182fe6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794d4ff2-ef38-4d67-9e63-54ae96df9a59", "sighting_of_ref": "indicator--7c86e3c4-1a78-4a9b-a11d-ff277e182fe6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9013fc56-a1b5-4bf3-862d-2087b28cfec2", "sighting_of_ref": "indicator--dd3a4259-7358-456d-bbd7-63a3c3f838be", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360fdfb4-9e3c-42b3-a886-bc0689d6e3b6", "sighting_of_ref": "indicator--dd3a4259-7358-456d-bbd7-63a3c3f838be", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22efb58f-0f67-4405-943b-da2100ebe7d7", "sighting_of_ref": "indicator--3069d94c-b698-46ef-a02f-27775e207db2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47ce6b7-9043-48fe-afe0-5415cd9d3fa6", "sighting_of_ref": "indicator--3069d94c-b698-46ef-a02f-27775e207db2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74163c66-6188-4232-baa8-078c64462abd", "sighting_of_ref": "indicator--18b6a2b8-4a49-435b-aa0b-2ab3398d1366", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f888aced-9bec-43ed-bf34-860a2724218f", "sighting_of_ref": "indicator--18b6a2b8-4a49-435b-aa0b-2ab3398d1366", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24b12fc-c48e-4ab8-aec9-43bab5d5ce90", "sighting_of_ref": "indicator--1e080e2c-d4d0-4e47-80db-271962592c53", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35b4ca3-4a79-4894-8a49-9fe137a43098", "sighting_of_ref": "indicator--1e080e2c-d4d0-4e47-80db-271962592c53", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8684b590-fff3-419d-944d-72d3b0ca94fc", "sighting_of_ref": "indicator--798d389d-a42c-4fec-b046-76833a34ee20", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f7f1f4-3004-426a-898c-3d4af4ff2663", "sighting_of_ref": "indicator--798d389d-a42c-4fec-b046-76833a34ee20", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58f25a4-5835-48e5-8ed1-a261bd3fd1d3", "sighting_of_ref": "indicator--b996f217-daf3-4da5-916d-7784fbc460fe", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24bd2956-58db-45d4-96b3-f7563f27b80d", "sighting_of_ref": "indicator--b996f217-daf3-4da5-916d-7784fbc460fe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412399ee-252e-44eb-ae37-1a924c95e554", "sighting_of_ref": "indicator--bb251f38-6e61-41f0-ae52-f50be81bf3d3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--459a7439-7832-4635-9e37-2429c1b8be93", "sighting_of_ref": "indicator--bb251f38-6e61-41f0-ae52-f50be81bf3d3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f10732bf-e57e-4023-b330-2dd073828840", "sighting_of_ref": "indicator--a592d3ef-78d6-44cf-9e41-0c42512ae934", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--852ed3fa-1580-4811-ae22-f108b804491e", "sighting_of_ref": "indicator--a7836ed9-cd2e-44f0-9e24-c020be04e94c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e15259-a22b-43d9-8be7-5aaefd9914cf", "sighting_of_ref": "indicator--43757390-f13a-4870-92b0-8ac3a1cf109e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40122508-92a1-40e9-99d1-3026ada68176", "sighting_of_ref": "indicator--43757390-f13a-4870-92b0-8ac3a1cf109e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8eb96c-29be-45d2-8404-2928e717618f", "sighting_of_ref": "indicator--d8a1263a-5b65-49c4-b84f-5991111e5085", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee97ffa-2b78-4137-bb1a-febd09cd4748", "sighting_of_ref": "indicator--613c935d-b5df-4aea-8a79-3fadba38fa3d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f663117d-33f6-449f-ac8d-9f6471073084", "sighting_of_ref": "indicator--1be81a38-7a59-4fe0-9c08-0da1d2a212dd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93eff8f-d0d4-4eb7-b665-9e26e23a7687", "sighting_of_ref": "indicator--20660ef6-940f-4017-ac8c-628301fccb25", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29ea99e-f7f2-4c5a-b68d-03228d2f47ef", "sighting_of_ref": "indicator--6ca31649-c5dc-4fee-a51d-46345d52637c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b8d2cd-0128-42f0-8c8d-57972d451a71", "sighting_of_ref": "indicator--394d34a9-7c79-4979-82ef-29685e39b2c8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04a0c96-1c1f-4dfd-84b2-39ddbd328494", "sighting_of_ref": "indicator--5d53c395-1131-432a-a6fc-b898ed070867", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73fa031-bb2c-4b99-a295-113b8fa92c3a", "sighting_of_ref": "indicator--5d53c395-1131-432a-a6fc-b898ed070867", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2202b137-7181-49bd-9235-5bcd1716f35b", "sighting_of_ref": "indicator--981dfc30-8beb-4300-b315-2016face9ed8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b667b51-f383-40f7-a327-af13698823bd", "sighting_of_ref": "indicator--981dfc30-8beb-4300-b315-2016face9ed8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd8cb06-074d-42d1-8994-5b773d839d57", "sighting_of_ref": "indicator--f559cc7e-7142-4d84-a368-4a009e048f51", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82bd9070-97b5-454d-a184-af61ad78a61a", "sighting_of_ref": "indicator--6e77f935-9a8e-4ea5-b820-e1d0a6b56e85", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f4d8bb-1d26-4ea6-8f84-032f62177762", "sighting_of_ref": "indicator--6e77f935-9a8e-4ea5-b820-e1d0a6b56e85", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ef5746-edcb-4960-82be-54f21bdbd390", "sighting_of_ref": "indicator--c46fb8b9-5a67-4ce5-a0ec-8d1831106d72", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62250c68-6324-47b0-84ae-ff8cf49d9fde", "sighting_of_ref": "indicator--3fab87c3-4b84-4ae4-a4e0-22ed34fcf26f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09dcd9b8-00ac-4cb2-af3c-8f6c8abe1616", "sighting_of_ref": "indicator--2d8c0725-5737-4cf3-aea4-a799b1bb9a79", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fa2bce-80fd-4e32-ae1c-d157cf372daa", "sighting_of_ref": "indicator--2d8c0725-5737-4cf3-aea4-a799b1bb9a79", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2cb594b-3de1-4b1f-9f7a-2e915405a585", "sighting_of_ref": "indicator--ddfe0e60-d485-4506-a4cf-58aa74e64a29", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2763c846-e0ba-4a41-b16e-2c1957775ed4", "sighting_of_ref": "indicator--ddfe0e60-d485-4506-a4cf-58aa74e64a29", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9526ae-21df-45f2-8c14-b07707018df9", "sighting_of_ref": "indicator--448027cb-364d-4710-9e81-606ec1fc9852", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6079372-849e-43a2-a437-0226e11c2971", "sighting_of_ref": "indicator--de20f23d-3027-45c7-89db-c6d4f95656f0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff1a5ca-3cfa-4f44-9ca1-b386fa110d77", "sighting_of_ref": "indicator--ce5084fc-24d1-438d-9e29-b8c48bef7e68", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f5a136-aeb0-4163-92be-82cedd29e05c", "sighting_of_ref": "indicator--ce5084fc-24d1-438d-9e29-b8c48bef7e68", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad8a7a5-18c1-492d-b7fd-dfc1755e6dbd", "sighting_of_ref": "indicator--cb14fb66-c745-44f4-95ee-9bf6373a6aa9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c268eff-eaa4-404a-8394-efe508cd3beb", "sighting_of_ref": "indicator--7462d60b-14f4-4285-b9ce-29ca004c2f58", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d2c36c9-9752-434b-95c0-77193dbb9bdc", "sighting_of_ref": "indicator--7462d60b-14f4-4285-b9ce-29ca004c2f58", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c793585d-62ef-4cc4-8036-1219a4b51f92", "sighting_of_ref": "indicator--e0ce5feb-a530-44f5-a17f-1a748246aebe", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248bd6a4-819c-4f9e-a368-93e278bfe90b", "sighting_of_ref": "indicator--e0ce5feb-a530-44f5-a17f-1a748246aebe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043c8cdc-c33a-4b03-b6ce-e575a7c6a6fb", "sighting_of_ref": "indicator--54ed8f3b-1544-42bd-a604-123a63bbc8a9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3d9db0d-189a-4caf-9e99-9fffebff9996", "sighting_of_ref": "indicator--54ed8f3b-1544-42bd-a604-123a63bbc8a9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13505674-d04d-4e48-9a56-a82e7e55fbb6", "sighting_of_ref": "indicator--3123bd57-96e6-4df1-85ef-ce3453896709", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17a07e1-85b2-47d9-8fc1-b27665e4bb39", "sighting_of_ref": "indicator--4df4bbd2-d572-4b16-b338-d5a212fe3704", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11b7cdc-8223-4bc7-8bd1-a22e67078153", "sighting_of_ref": "indicator--3fd8980f-488d-4012-a055-a4d5fe07b0e3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a5a2b9-dd79-4069-b4e6-ad48766d7ee8", "sighting_of_ref": "indicator--fb9577ff-89e4-47db-b593-39b97981f9c6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30591325-902c-4a0f-92f2-4be898541d30", "sighting_of_ref": "indicator--4a2e03b6-6ee6-4b41-90bd-05e3ba7432a7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5845ad-bd44-4670-9e08-c7756206fed5", "sighting_of_ref": "indicator--4a2e03b6-6ee6-4b41-90bd-05e3ba7432a7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5ed645-23d0-4ac8-84e2-fb18a71f8880", "sighting_of_ref": "indicator--4744d404-fd10-40c8-9b5e-8207cead86fa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e29eef-3341-47ae-ac3a-a1c75f84ce60", "sighting_of_ref": "indicator--87649ba6-8412-44aa-8561-6ba9c4029877", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0b09d7a-1be8-4b7b-8572-7d5394570b6c", "sighting_of_ref": "indicator--8b33b380-f373-4c60-871f-548a697708e1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f6b7d2-8319-4726-bf4f-78c9138312f4", "sighting_of_ref": "indicator--96ff5fcc-c033-4d80-9bcb-cdc22071c0f3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d856ba-1bf1-47c2-a494-afa427b34c10", "sighting_of_ref": "indicator--56d44750-84d8-40e1-a12d-ea8a455d5294", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b01f7ac-7b90-4df0-a375-774e57138a4b", "sighting_of_ref": "indicator--56d44750-84d8-40e1-a12d-ea8a455d5294", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb69a93-9610-4126-b6da-5549904ecf5f", "sighting_of_ref": "indicator--54caebd1-47b6-4d78-ae77-2ad3f80dfd45", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5acbdac8-fb31-4552-9677-457967c3cce8", "sighting_of_ref": "indicator--2c950580-720b-41fe-9915-4d4bb6b6248f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87713862-d0eb-46fd-88ee-8f8d1c64c29d", "sighting_of_ref": "indicator--2c950580-720b-41fe-9915-4d4bb6b6248f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51839bc9-9870-4d68-b031-59a877f1aa66", "sighting_of_ref": "indicator--bb0fcfad-ed33-4024-98e6-d83caad786f7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d82da75-586f-4b69-a3c1-4948e6b6c5c7", "sighting_of_ref": "indicator--bb0fcfad-ed33-4024-98e6-d83caad786f7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58530b28-9d17-4fa2-a808-708c75d9cb2e", "sighting_of_ref": "indicator--b5f8dae6-0deb-43d9-a2e5-d0cce9cf6989", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0b614b-8c0e-4918-b50a-6a5bc19b9600", "sighting_of_ref": "indicator--b5f8dae6-0deb-43d9-a2e5-d0cce9cf6989", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ebcc71-3a96-4c63-8b56-178a2c97cee7", "sighting_of_ref": "indicator--2e378968-b7d0-44df-8b9d-6059c50ce77b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c021c30-1b17-431b-8a31-12753c406aab", "sighting_of_ref": "indicator--e5eda184-611b-4ba8-924b-b9a9f509bf73", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f02245-60f8-480d-87cf-2638fbb7850c", "sighting_of_ref": "indicator--9c820e54-5c53-4187-8017-0f830a641e64", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8509fa82-5661-412f-b950-e0d0c67fb4c7", "sighting_of_ref": "indicator--870bbcef-c288-4941-96f1-39d165be3c41", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5daacc2-d2e2-4da5-a9d8-56c87939bde7", "sighting_of_ref": "indicator--870bbcef-c288-4941-96f1-39d165be3c41", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7713753-7f02-45e0-a8cf-9b26393cd7cb", "sighting_of_ref": "indicator--46e01b1f-c47f-46e7-9aac-52349fb33aa3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134c713d-8027-4987-b9a9-1b8687f87490", "sighting_of_ref": "indicator--46e01b1f-c47f-46e7-9aac-52349fb33aa3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca51d016-30ed-49a2-acf1-a836cb6cedb9", "sighting_of_ref": "indicator--aabfc832-6baf-4067-a5c1-9592b663d04c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8be13b7-cb1f-44a8-9670-4c711f5b3c92", "sighting_of_ref": "indicator--f94f72e7-3783-42c0-ac24-68f998166315", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c1c3660-093e-4dea-ab0b-4348b5fa8edf", "sighting_of_ref": "indicator--80a60af8-fdec-470d-b6c0-29848deafe89", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de5627d-42cb-4d0d-9487-f9bce0b645d2", "sighting_of_ref": "indicator--4ab6288c-6733-4a15-b585-b2f035685108", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8418c894-f0c2-419a-a854-032451b558d2", "sighting_of_ref": "indicator--4ab6288c-6733-4a15-b585-b2f035685108", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f85b9fb-8b8d-4b09-89de-d53a93095a16", "sighting_of_ref": "indicator--72ce84e9-9775-423a-b93f-b66e706c4075", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4241b39-1591-4e2a-99e0-7c0620401ab2", "sighting_of_ref": "indicator--052b75be-31b0-450d-8f8b-c4695980ee58", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b292e81d-a803-4888-8686-0e03f7f46a8d", "sighting_of_ref": "indicator--052b75be-31b0-450d-8f8b-c4695980ee58", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2a86c7-f607-496d-90fa-c8ed2d96086f", "sighting_of_ref": "indicator--b0dea444-0d60-486d-b72b-4ba47ce18526", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f823f98-7de6-4281-a330-379c2b9ce069", "sighting_of_ref": "indicator--b0dea444-0d60-486d-b72b-4ba47ce18526", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb3cdcfe-aa41-4112-8f13-1165aaa3d1f8", "sighting_of_ref": "indicator--fc43b9dd-45ca-44a8-b3da-e4ddead6b029", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac6c537-d0c0-4461-86ce-cb697b9a6e29", "sighting_of_ref": "indicator--b934ca83-849d-4f8a-84e5-14ebbf85abb5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1991f9fd-548f-4079-a0d4-58274f7fe906", "sighting_of_ref": "indicator--b934ca83-849d-4f8a-84e5-14ebbf85abb5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6ac4e0-1e48-474a-a281-3a97467217c3", "sighting_of_ref": "indicator--53a91717-7db2-4fc2-bf5d-790bee1b75da", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500cc381-8b28-4b11-bbee-fcbfefc2238c", "sighting_of_ref": "indicator--356941f0-6bea-4214-beed-e1b47c5ac619", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a709f672-3806-4d91-87f7-e1f793fa6084", "sighting_of_ref": "indicator--356941f0-6bea-4214-beed-e1b47c5ac619", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd37d81-612d-447b-a961-544d1ab9f69a", "sighting_of_ref": "indicator--ba3225fb-5461-40b6-af69-955ff3e0b747", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a301a5-9cb0-4360-a10b-2b1128ceff0d", "sighting_of_ref": "indicator--ba3225fb-5461-40b6-af69-955ff3e0b747", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d458c7a8-a45b-4cc5-b521-88e93198ae34", "sighting_of_ref": "indicator--76f9eb6a-8e65-4a14-bd1e-03332a27034a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d4f687-b611-4f9a-8625-567b40323ed6", "sighting_of_ref": "indicator--7f73982f-aa5a-4237-b337-3a74ce316258", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241647dc-0275-4306-818e-a5a369d3667e", "sighting_of_ref": "indicator--70927c23-2a27-4ca3-ad5f-d6fced291376", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4855c4-051a-4b28-be9a-959c5393b669", "sighting_of_ref": "indicator--226c93fa-b25b-4c7e-91bb-f0021c718808", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53165f5-8153-4ebc-a271-8cb3e640c19e", "sighting_of_ref": "indicator--56cc0f29-3745-4e3c-b6bb-c80a3ec83153", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8245d364-7247-4539-ab01-5628ca835946", "sighting_of_ref": "indicator--1ba02efe-c55f-41a8-a2b7-90da349f1bde", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7a8ab3-8db3-4015-900d-500ece54a4b6", "sighting_of_ref": "indicator--8f88f349-a37a-42ab-a156-b0d56189814c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e4b3e6-7c60-4dff-a79c-680bee9b994e", "sighting_of_ref": "indicator--206c61ae-8186-4ef9-ad8b-0692eea1cf71", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff53bf3b-17df-449b-81a2-d77b83d0f343", "sighting_of_ref": "indicator--dd218b15-f859-4413-aea6-5bd86fc89ec1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9556f8-4f69-4c39-95c5-8eb94c07e0b3", "sighting_of_ref": "indicator--46111af7-5f76-4ca0-b003-12d60ffceb6e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18259f2f-eb2f-4fae-8792-d7a1b99cca35", "sighting_of_ref": "indicator--5946a8d8-6392-422a-9b1e-cb7008968d02", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3586ce68-ec3e-42ac-b38f-77a6297724a9", "sighting_of_ref": "indicator--5946a8d8-6392-422a-9b1e-cb7008968d02", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1ae24a-0c0f-4218-9066-1751ba6520a9", "sighting_of_ref": "indicator--7b5769a5-ad60-45fb-a9ec-e41711ed4f72", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8df546e-e274-456e-88f8-fe855cbb1ae7", "sighting_of_ref": "indicator--1e2066cc-9a32-4d48-b9d2-ea1b8b4d2c79", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea736a1-9290-45a8-b864-759d7db63b85", "sighting_of_ref": "indicator--1e2066cc-9a32-4d48-b9d2-ea1b8b4d2c79", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b9e356-3107-4e7c-a0d0-27758192b02f", "sighting_of_ref": "indicator--1f33faf8-6821-4ee1-8f4e-86417fc18a6f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2521b491-5254-47c2-9ffc-2510101ccff0", "sighting_of_ref": "indicator--f5d06148-66e6-471c-a546-5d35c0aaad8f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e307885c-c250-455e-b463-907e5f8be876", "sighting_of_ref": "indicator--d9365859-c5d4-40dd-acf7-d909839750ae", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fadbbb7-7d39-491a-ade2-d9ddb91f3c09", "sighting_of_ref": "indicator--d9365859-c5d4-40dd-acf7-d909839750ae", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fef1b6c-c66f-4039-afa1-fde6152651bb", "sighting_of_ref": "indicator--d6a50ec7-c246-404b-a558-d93b1b9d750a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ace9698-fd83-4407-90f7-24769fe22b5e", "sighting_of_ref": "indicator--d6a50ec7-c246-404b-a558-d93b1b9d750a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc3ea0a-a1d4-49e7-88f6-c993d89ceb92", "sighting_of_ref": "indicator--473c35af-aa1f-4ed8-ad98-33acf8ae9269", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db92bde-6b1a-4626-a7ce-af5a46a4ae24", "sighting_of_ref": "indicator--473c35af-aa1f-4ed8-ad98-33acf8ae9269", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b717af3-515f-4483-907c-f00f32a8b782", "sighting_of_ref": "indicator--80cc0aac-5271-4a59-a98c-38f1fb730e1b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd58e4a-4b75-4a7d-bbca-c5ff04a6109a", "sighting_of_ref": "indicator--80cc0aac-5271-4a59-a98c-38f1fb730e1b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84cb655b-918c-4393-adae-8fab3a60bbf2", "sighting_of_ref": "indicator--f53d078e-f1fc-40d3-aff0-011b432d16b5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63676318-2f80-4b13-9a0f-3339e846eb8f", "sighting_of_ref": "indicator--f53d078e-f1fc-40d3-aff0-011b432d16b5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c1e9402-a444-4577-8ba9-be009a88e82b", "sighting_of_ref": "indicator--98af0286-878e-47ad-825f-40d2ef91652f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60cc7070-2116-4ba6-9481-0d2fd8ed5740", "sighting_of_ref": "indicator--98af0286-878e-47ad-825f-40d2ef91652f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19bdd3f6-f2ec-4f0a-9b5f-7507a7db1db6", "sighting_of_ref": "indicator--3407b511-850f-4387-b9cc-feedb7313bf8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051dda75-48e1-496f-9cc6-e4cb05db1042", "sighting_of_ref": "indicator--b75568c9-1902-4262-b97d-e8cacc48b1f1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a46d9e-d40a-4df4-948a-f0dca2938a4b", "sighting_of_ref": "indicator--b75568c9-1902-4262-b97d-e8cacc48b1f1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9492bf74-a2d2-4850-9b61-94af8f66c6e4", "sighting_of_ref": "indicator--599839a5-f587-4959-a6a6-9cf09beac5c3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c9e58b-3fff-42c2-82d1-386aca2c6eec", "sighting_of_ref": "indicator--599839a5-f587-4959-a6a6-9cf09beac5c3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae09f19-6f1b-4367-84c9-8210ef22240b", "sighting_of_ref": "indicator--13645cf9-fa2a-4d7f-a3b8-28b84af1d55a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffea7e6a-f5dd-47be-8e64-589f9d755f25", "sighting_of_ref": "indicator--13645cf9-fa2a-4d7f-a3b8-28b84af1d55a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0966468a-19bf-4035-a15a-fccc8769443e", "sighting_of_ref": "indicator--c9c78664-aa33-4e40-b44f-f37819678d6b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1181895f-aee0-48f5-ba0b-e89327097161", "sighting_of_ref": "indicator--c9c78664-aa33-4e40-b44f-f37819678d6b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd35bd88-c594-424b-aea2-54d14009a33b", "sighting_of_ref": "indicator--13bd106b-2f9f-4dec-ab42-93fcd2f34e0b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab232e98-97a9-48c9-b2ef-b09bd07bb3be", "sighting_of_ref": "indicator--13bd106b-2f9f-4dec-ab42-93fcd2f34e0b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014de62f-6cbd-40e2-bd56-d5df8ba62d01", "sighting_of_ref": "indicator--fc5ef130-6de0-4bec-b0f1-b759b521ef06", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b04e67d-4bbf-4c79-a38c-666c49e44d71", "sighting_of_ref": "indicator--960aa6c9-97ee-430e-b0bd-28a73e6c80b2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a6d6a5-dfa9-4add-b52d-d9b21803abaf", "sighting_of_ref": "indicator--960aa6c9-97ee-430e-b0bd-28a73e6c80b2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9388734-7f32-4e54-92db-4645185d235a", "sighting_of_ref": "indicator--bc9b36c7-7069-482a-bca2-a870860206c8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25eb51b8-1568-4c70-bf93-9ad2264f0fa7", "sighting_of_ref": "indicator--bc9b36c7-7069-482a-bca2-a870860206c8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa0e06f-c844-4f4c-a5ab-d202cd0bf3bb", "sighting_of_ref": "indicator--79798939-3b02-49a7-ad1b-2ff5656e83be", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8b748b-2f9f-45c9-8462-3213d1810e6b", "sighting_of_ref": "indicator--2045ef0c-9115-4398-9b54-b683c7a3eb09", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824a1da2-96a1-4c5c-aae2-9fa532712fe6", "sighting_of_ref": "indicator--97cc439e-8ccf-40d3-b4e8-ee62aed89041", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84cb7ace-3a11-4f65-a17e-a0179eb7dd8c", "sighting_of_ref": "indicator--6dd4982b-5e6b-4af1-8432-4f410fee45dd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a707b4f-3b72-4102-9b58-b9b01b5c8a94", "sighting_of_ref": "indicator--c12645ae-e3f9-4eed-88c0-fa769313212a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b373245f-74cc-48b6-8ec8-a180695c1ed7", "sighting_of_ref": "indicator--d22251c4-bcd0-445a-9120-31c32c62325b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5b4fb2-3003-41d9-bdb0-63ca460011d6", "sighting_of_ref": "indicator--d515c637-eaf9-496f-93cf-9ff274f15da9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cfa6bf7-84c5-4da8-ab2e-69e5a878cb00", "sighting_of_ref": "indicator--2200bbc2-b733-403a-9355-7a363e11933d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a2421c-94fd-4f5b-a827-4be4ef41653d", "sighting_of_ref": "indicator--d8f14b90-fe8f-4a00-bf10-81181531fb5e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5752ff-2c80-4058-9135-95336b9e6282", "sighting_of_ref": "indicator--744098b7-cfc9-482f-8cb2-d9144f3e9b49", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b4dc81-4afb-4de7-90f1-b9be39953355", "sighting_of_ref": "indicator--fd72a724-b96b-48c8-8d66-e7e2ffba1029", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d711d1b-ca61-4abc-a7f7-f88bcf2807a2", "sighting_of_ref": "indicator--389f9fe7-bcd1-4b22-a193-3aa558b1a334", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0b0e9a-8355-45e2-8aa9-21a6ec76476d", "sighting_of_ref": "indicator--1b117295-3275-4722-90b1-f881cfa9a541", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b46463-7dd3-42cc-9e5e-bdade9a6dc14", "sighting_of_ref": "indicator--1b117295-3275-4722-90b1-f881cfa9a541", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a72d458-0f77-450b-b14a-7a54d0131cd6", "sighting_of_ref": "indicator--4e5c4bc0-4894-4511-8dad-ba5e8d991db3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71727a8c-3b14-43ec-bb4b-a20ffc9fe304", "sighting_of_ref": "indicator--cc2d2d02-9764-4ef8-9f48-3fe14a801704", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096d2932-9176-47c4-80c9-866bc807155f", "sighting_of_ref": "indicator--cc2d2d02-9764-4ef8-9f48-3fe14a801704", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579549d0-175c-48cf-aa9f-b8b573286494", "sighting_of_ref": "indicator--ba74fbd5-3fc2-431a-bfd8-4ac261a2d18d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb329e01-2259-46c5-a0d6-9f2c45fb726c", "sighting_of_ref": "indicator--ba74fbd5-3fc2-431a-bfd8-4ac261a2d18d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40288a76-33e5-43df-b09a-78076dc1fa65", "sighting_of_ref": "indicator--e33676a0-2825-4f74-9342-abc6bd0fe514", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffaff8ef-2a40-4f9d-a9ab-7337c7449cfd", "sighting_of_ref": "indicator--e33676a0-2825-4f74-9342-abc6bd0fe514", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f41c91-4355-4237-9ab3-58621356b491", "sighting_of_ref": "indicator--f61eba49-1c4e-484f-8c55-a5aa028639ea", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7233fd5-0797-45fd-96e8-c32789c32862", "sighting_of_ref": "indicator--f61eba49-1c4e-484f-8c55-a5aa028639ea", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585980c6-1063-4535-86d0-358d73363ef9", "sighting_of_ref": "indicator--f26c96f2-d2ba-42c1-ad8b-530124c62123", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868d6456-f4f6-4e5d-9aa9-6b230699b766", "sighting_of_ref": "indicator--74863ffa-dcfc-4d7a-a943-fd7cd9ab30a3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6772a44-c4e5-4b80-b4d7-f2b588a490ab", "sighting_of_ref": "indicator--74863ffa-dcfc-4d7a-a943-fd7cd9ab30a3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637e6168-ab71-413f-b107-3c4c93c17493", "sighting_of_ref": "indicator--097da6a5-73d4-4960-b2dc-d0cb3fa7a741", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25f3a12-9803-4878-bf77-7a12e97aa911", "sighting_of_ref": "indicator--097da6a5-73d4-4960-b2dc-d0cb3fa7a741", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b68a74-db1b-4122-b738-792bdff731e5", "sighting_of_ref": "indicator--e8bae4e4-1318-4efc-9553-03294aa95a9f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f09adf-45e7-408d-a387-72da2217cc47", "sighting_of_ref": "indicator--e8bae4e4-1318-4efc-9553-03294aa95a9f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d975d024-498b-4e8a-b7f5-ec394c1eb2e3", "sighting_of_ref": "indicator--0875a1aa-054d-4125-9367-05b7ac73cfe3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47006bdc-760a-4649-bafa-f5926b396553", "sighting_of_ref": "indicator--9fd4422e-9a66-4280-b25b-9d03a57abf28", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef59fd4b-3ab7-4e09-b7e1-0daaba2f7a0c", "sighting_of_ref": "indicator--9fd4422e-9a66-4280-b25b-9d03a57abf28", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6600ac-7c73-4989-a107-4193b534232a", "sighting_of_ref": "indicator--8b5958b4-2a1c-4193-86e4-5d596db42dd8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--050e8ee0-69fa-4787-bd6d-a7f5cae96fa0", "sighting_of_ref": "indicator--2d15f089-7a10-4070-88db-7a7eb354b5b7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--826ff9ff-888d-40c5-bf12-24f6269e8719", "sighting_of_ref": "indicator--79e7c1d7-46a4-4e6c-8adc-8638c6324326", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0bd705-984f-4c0f-99a3-06364983c5d9", "sighting_of_ref": "indicator--79e7c1d7-46a4-4e6c-8adc-8638c6324326", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed88a6f-3250-432b-82e8-3705b431d124", "sighting_of_ref": "indicator--25733a30-17cb-4a8a-b94c-de234e818a3f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f347398-575b-473a-9c95-402c38c79be7", "sighting_of_ref": "indicator--18e5cb82-4b69-426c-92c6-95382937795a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5b70cc-62ee-444e-8a09-af878aa57b28", "sighting_of_ref": "indicator--18e5cb82-4b69-426c-92c6-95382937795a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5359cc-fbd0-4425-82e6-64b91a69a472", "sighting_of_ref": "indicator--6096f9cc-b9ae-4f08-831f-b769156281db", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce77002-f0fd-41b2-bce0-9834c7999dfa", "sighting_of_ref": "indicator--6096f9cc-b9ae-4f08-831f-b769156281db", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90438e09-65c8-4a2a-9e5d-df0fd3241bdb", "sighting_of_ref": "indicator--8d83c419-8995-4208-a83d-67b9caa3fa0b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e283dac-51ba-45ad-8edb-035c166a921d", "sighting_of_ref": "indicator--d5166387-bd91-491f-963e-3f671a8892fe", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbebf450-60e2-4db6-9dd1-9a122dcf6a22", "sighting_of_ref": "indicator--d5166387-bd91-491f-963e-3f671a8892fe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe87b19-70f0-456b-9c80-52227ae15f49", "sighting_of_ref": "indicator--22448361-259e-40eb-9dea-783d80d326bc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802ae3e2-9066-470f-9019-1902879eb840", "sighting_of_ref": "indicator--cde24732-20f1-4322-a53f-73f5a0436ffd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed99bba-aa86-4802-85d5-93d154715b3f", "sighting_of_ref": "indicator--0b651a9d-57c3-4e0c-adde-e9d1e305cc27", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67c64b3-408d-457b-a299-b6a7831f4c63", "sighting_of_ref": "indicator--54a95a8e-4461-4899-b0ab-8307e75a84fc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879445ad-c0d3-48aa-b423-b29160cff4af", "sighting_of_ref": "indicator--2d7165f1-1649-4f25-94f5-1bf0a60402f4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e0685b-7186-48de-b841-600ea084553a", "sighting_of_ref": "indicator--6ce9c601-4633-4ed1-ab84-7aa773efc378", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ad5cfd3-c5c8-4f2b-985a-f64df10ace48", "sighting_of_ref": "indicator--6ce9c601-4633-4ed1-ab84-7aa773efc378", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f8662aa-9bb6-406a-9de5-994c66fcd44a", "sighting_of_ref": "indicator--4402326b-3f95-4bef-86be-887ed7ecada2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ec076b-eaa9-475e-8105-150c196ed004", "sighting_of_ref": "indicator--172421ab-1a6e-42b0-8995-a5561ec66302", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e624b4c-261f-4746-8bcd-e7bc2fc30323", "sighting_of_ref": "indicator--4b32ceca-c33c-4b5d-a653-8902ac703a39", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12235ed-b044-470a-90c0-c231e6109e6d", "sighting_of_ref": "indicator--515650d2-6aa4-4bee-abc2-20fe3570f716", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e17473-162e-4160-87e4-fc3fd1b9b9ae", "sighting_of_ref": "indicator--084007e8-3034-4ed1-98d8-2f5a6daf32be", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e0d5f0-a672-40c9-9204-85281a523eee", "sighting_of_ref": "indicator--c0254ea3-c1b1-4152-ac9e-84aa70008d69", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73476cf3-a793-4122-b287-01bdaf9ccb86", "sighting_of_ref": "indicator--dd2e2ef0-eff4-41ef-87bf-f6820573bcd2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ad22fa-ace7-4b0a-a929-45d7d2965194", "sighting_of_ref": "indicator--7b4863bb-978c-47c3-a41f-ee5b269c45db", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0e202c-e304-4c3e-b231-d330f290323b", "sighting_of_ref": "indicator--00afcdae-654e-474b-aa05-80deefbfb730", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bdf15f8-9bbf-44ee-bab1-9acf810203d3", "sighting_of_ref": "indicator--00afcdae-654e-474b-aa05-80deefbfb730", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f0f7fd-afd7-4e70-a646-c3de0771e989", "sighting_of_ref": "indicator--eb50497c-dce2-4471-a213-77f6e4f18a9d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ab6683-834a-4a3f-be7c-d423ab3c3e81", "sighting_of_ref": "indicator--eb50497c-dce2-4471-a213-77f6e4f18a9d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe669803-c9f0-429f-9bc5-146ccbfe890c", "sighting_of_ref": "indicator--12a70a86-ce15-4944-a872-28d9d8b1b8bb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aed96ad-06c9-4f06-8a67-28331cd1f5d3", "sighting_of_ref": "indicator--226b9291-d943-437f-a0cf-d98c3ac1ea0f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61e03df0-9bb2-4ece-b756-18d7292e2d72", "sighting_of_ref": "indicator--2172d8d6-2707-476f-9886-a25e3b606282", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d96b7e75-13f9-4772-954c-40420fa96304", "sighting_of_ref": "indicator--8577933e-5d1f-44e4-9db7-6710850706c8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1286430c-b50f-4a2c-8fa2-c5494ef6de8b", "sighting_of_ref": "indicator--a312957c-af69-4efa-98c7-f9f1632522c7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac12586-8dbb-4859-847a-222a42e5cf85", "sighting_of_ref": "indicator--a312957c-af69-4efa-98c7-f9f1632522c7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a56675e-147d-4838-b7cc-ae36a4854cfd", "sighting_of_ref": "indicator--7de91b0f-6943-4f3d-a9a1-9fb3a9efae53", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ddd3ca-f2e1-44ea-8d18-227ec047e6d8", "sighting_of_ref": "indicator--f69246dc-8cc9-4247-83ca-4f250b9052b6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9c91ab-d074-4e46-a711-1534c48b5370", "sighting_of_ref": "indicator--a257c005-5819-4171-80be-dae003c0f242", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1968b05-16eb-407e-9b5c-4e56480cf9ef", "sighting_of_ref": "indicator--cd623a49-04aa-470a-b93b-a7f1cf11b5af", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86d71b3-4873-4eae-bb48-3bea125576cc", "sighting_of_ref": "indicator--f86603ee-6740-4e77-b398-17f1b7598ff2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04d14c2-a6fa-405b-bec8-6f5e8a9206b1", "sighting_of_ref": "indicator--5edd4104-efd0-4d4b-83ef-66adca9f8716", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f77445e-a708-4d70-a4f5-b96cd7e05b54", "sighting_of_ref": "indicator--17e5a669-05e2-4b00-920a-1a2082bd34e2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb5f934e-4011-4c46-9c37-ece27db3a701", "sighting_of_ref": "indicator--17e5a669-05e2-4b00-920a-1a2082bd34e2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7259aa4-7f62-4811-8f05-0c75851eebc9", "sighting_of_ref": "indicator--9ea3a33c-ddcf-435b-88fb-c0a56e4aac8f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd3db58-7977-41a6-9c54-8f70df74e41c", "sighting_of_ref": "indicator--7502265f-aa2d-4086-8595-810b78f2ce76", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a4cd7b-00cf-4430-a39d-057c4d2234a3", "sighting_of_ref": "indicator--113ac2b2-4b1b-4082-b7d4-9c4f4579d38f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc2b7c6-c314-43dd-83c8-c385c26f2e0a", "sighting_of_ref": "indicator--12065c57-501a-4c07-9abe-c1008466b37d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d36173-16ea-47f2-ad67-2845cd294419", "sighting_of_ref": "indicator--34eac6cd-ba3a-4fd8-8e2c-b040d8c761e4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb37bb4-4ef6-4406-a5f6-8c42acdebbb8", "sighting_of_ref": "indicator--9c7f59e7-099d-4fdd-bddf-7ee31ff720ad", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f25f86-5ccf-4c01-b6c6-7d42adcf4650", "sighting_of_ref": "indicator--2502005a-c460-4f00-b23d-4870e961fe7c", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70cecb07-3687-4048-8683-efd4c0065dba", "sighting_of_ref": "indicator--2502005a-c460-4f00-b23d-4870e961fe7c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d57aa17-e2e2-47cc-a453-f1b7fcca3d58", "sighting_of_ref": "indicator--81e4ac5d-2ac8-436d-b9e4-2d6b5c0ff464", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b34f279-b399-46e3-93e1-e9b8a6834336", "sighting_of_ref": "indicator--d7513309-cb65-4c8b-b841-b4bc43c22859", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531a016a-ce51-4b4c-8b62-57a9225fefa7", "sighting_of_ref": "indicator--d04e3ba1-1dda-40ba-aaf1-1463ff448571", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a828b694-6ee5-4a95-9c71-85112ea7097d", "sighting_of_ref": "indicator--d04e3ba1-1dda-40ba-aaf1-1463ff448571", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f248b3-cf2e-4840-989a-f3638e1adf9b", "sighting_of_ref": "indicator--800449e3-038d-41c7-87ae-ac05701d35b8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f05239-804a-4ccf-8d45-db2c54df32b6", "sighting_of_ref": "indicator--14ed2395-247a-4ed5-b73e-db73251a85c3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b5dc11-a322-47aa-ad93-04527f2a9b57", "sighting_of_ref": "indicator--56b52da5-613a-4043-92a0-45f240e9376c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c844c631-ed81-45f1-84a6-f2f235d2ba02", "sighting_of_ref": "indicator--7b33fcd4-617c-4b9f-91bd-150e2db175d4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ce6908-53b4-4b53-81d6-a0e20344d005", "sighting_of_ref": "indicator--fb95a455-6678-4d27-992a-cd19107945b0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba9c980-f578-419b-a713-44aff16a7263", "sighting_of_ref": "indicator--d1bf3ecf-49f2-4276-b43e-3371b69eaea4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612d719e-ea88-4ed3-b23f-02140659e8fc", "sighting_of_ref": "indicator--5df1b9c7-ab0b-40cc-adaa-735d15ae4e8f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa034003-97bb-484f-a4a1-bca4a52d0219", "sighting_of_ref": "indicator--138375d1-3c4d-4888-bb44-c7680de645d4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0215e786-6d0e-43c7-82eb-e6bf3cf69eac", "sighting_of_ref": "indicator--f60e674e-c396-4189-b1c1-fdbaea5a4f8e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90277a47-4283-449b-88c7-f43f22812298", "sighting_of_ref": "indicator--8862edcc-5088-4b4f-bcc0-42a5c36a73ec", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4655feed-d2cf-48f1-9e52-d20d4afb6dcf", "sighting_of_ref": "indicator--9a5c23d6-956b-402d-87dc-ed65dff8b35d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34c9a4f-f247-4f1c-9b3d-d0d0e5ed34b2", "sighting_of_ref": "indicator--9a5c23d6-956b-402d-87dc-ed65dff8b35d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa265809-c7a8-4550-ba01-f944519e09cf", "sighting_of_ref": "indicator--531cd660-cccd-4436-b652-afb085a7028a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56fd4345-0645-4534-ad1c-604aae1e3162", "sighting_of_ref": "indicator--d6062be8-7df1-4ddc-af12-f39aac014503", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67db1f6-c7c1-44bc-8735-ae0cad1883fb", "sighting_of_ref": "indicator--2332085a-9bb3-49e3-822a-348e33d8c38b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f862a01e-cd21-42ab-8afe-4b5829719736", "sighting_of_ref": "indicator--48c69022-f888-4d4b-95a8-0634efc75c99", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd8ec55-6c36-4d3d-8972-2147f33e1b83", "sighting_of_ref": "indicator--a2591c8c-50f9-4c91-b27a-7fd94d604bd6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e632e251-46bb-429f-91e2-cb53d78cd2b8", "sighting_of_ref": "indicator--bdf76f83-ab43-4ae8-adaa-4e3a4b080eeb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35223e22-72c6-4d3d-b4c6-36e471a65ec3", "sighting_of_ref": "indicator--6edbba53-af65-412d-91b3-6af7f991d943", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e9b9bc-f0f0-49cb-9248-fee9f23d2bc3", "sighting_of_ref": "indicator--6edbba53-af65-412d-91b3-6af7f991d943", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa59b65-8211-45ed-a144-4f17cb8a6eb0", "sighting_of_ref": "indicator--ae4ded60-17d4-4c93-ad66-fb7e22fb3130", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6f7d7ed-5c9d-46ff-b790-4460c6a83e1b", "sighting_of_ref": "indicator--f225972c-b04c-42af-8cb9-2f31fb75a512", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da38319e-999a-4da8-8edb-5ca4bfdaeb50", "sighting_of_ref": "indicator--9d57e87e-282d-463e-a287-55a37cffff5e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5090506f-068b-4e92-a0a2-10fd2c76d34a", "sighting_of_ref": "indicator--b00175b9-df3c-4efd-8351-50a38add84cc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d87a8c-63b3-414f-833a-fb54fd5367e5", "sighting_of_ref": "indicator--445e378a-f20d-42d6-9669-d89906ce0820", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b547ffd-a3cc-4cbc-b39f-4c5ae6c431ca", "sighting_of_ref": "indicator--b752614c-6754-45ca-bf2c-fc6a17480547", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28aed0d6-ce56-4177-8ba3-22543110be75", "sighting_of_ref": "indicator--19630e7f-7382-4a84-9995-5da1a6362dcf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c6562c-6928-4115-9d27-19c05caba881", "sighting_of_ref": "indicator--9939b05c-aa69-4c17-8b5c-6e538ddaed86", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30845dbf-bf22-4fec-95b7-9ddd580b7ba0", "sighting_of_ref": "indicator--a91ef8ff-1720-413d-8775-62f685d17eac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6490c910-3c5b-406e-91dd-83852d7514a5", "sighting_of_ref": "indicator--7834bcd7-20c3-437b-800a-6a43d4c0c796", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83020f60-2d5c-4a35-8330-e9a64ea1a94c", "sighting_of_ref": "indicator--84a81a10-ca66-444e-b650-ea4e60bac7bb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9563412-bc4c-4a5b-ae37-27a2c6c4458a", "sighting_of_ref": "indicator--87b90505-fb4d-4497-98f3-32fe34ef3ac0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bca74bb-1b7d-47b3-8302-0822dd2dde86", "sighting_of_ref": "indicator--7e30288e-2e6f-4f39-aece-9258ac8e430e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8343035b-6b95-42a0-8abe-a4ee20fd6f1d", "sighting_of_ref": "indicator--021fd7c1-0c4c-42d5-97f6-f3c2bc7e7194", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52fff5b-fdbe-44cb-b389-7ce2bd3f3ae0", "sighting_of_ref": "indicator--70d4e15c-92fb-4eaa-9c32-89ecbe55b214", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a65ee7c-067f-480a-a368-be2d9f5ad81a", "sighting_of_ref": "indicator--f085a14d-8024-4c7d-95b8-8cf7bf52f9a1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e93758-7755-4534-98dc-74645366bfc4", "sighting_of_ref": "indicator--f085a14d-8024-4c7d-95b8-8cf7bf52f9a1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cdd78e7-5151-491c-be60-8f167661d30b", "sighting_of_ref": "indicator--3860dd03-5cfd-432a-b79a-95c6c51273f9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1e9234-71a2-4cc4-a7ff-717113df1846", "sighting_of_ref": "indicator--3860dd03-5cfd-432a-b79a-95c6c51273f9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58afa32a-f440-4090-9bfc-ae0179e810f5", "sighting_of_ref": "indicator--751b598f-540c-4643-818c-02f58c75df89", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c73dd2c-0784-4006-bd0f-7616e5c0a3ec", "sighting_of_ref": "indicator--733c6ca5-0943-4855-a510-9ca8f608d722", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7417c1c1-fe3c-40c9-a188-c1345c297f77", "sighting_of_ref": "indicator--733c6ca5-0943-4855-a510-9ca8f608d722", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a69ebf-9720-4247-a265-e852f9f70388", "sighting_of_ref": "indicator--f33d6be1-1297-419d-8391-49288839886a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d2ee97-1b27-493e-9f3f-780e807bede7", "sighting_of_ref": "indicator--b2a66e83-c091-445b-be06-808283d9b8b7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f395b5-19f5-4dd0-9744-763a1a234177", "sighting_of_ref": "indicator--b2a66e83-c091-445b-be06-808283d9b8b7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1470b79-f675-4b0a-92f7-8f80ffe21ed2", "sighting_of_ref": "indicator--4a265700-4596-45af-bc3d-c02c603b91bc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d9f7e2-39c5-4854-ac49-a921b5281bf4", "sighting_of_ref": "indicator--f3f98717-96f0-4540-922f-dc7d03ca6eea", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a778152-3ac1-4527-94cc-119192dc7c39", "sighting_of_ref": "indicator--f3f98717-96f0-4540-922f-dc7d03ca6eea", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49858e42-80c1-4a38-b468-5d972a391221", "sighting_of_ref": "indicator--a6efdb90-c06b-4c45-a25a-bd9c94c0833b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6910fcf-8681-4158-833c-584a6dbf7cea", "sighting_of_ref": "indicator--a6efdb90-c06b-4c45-a25a-bd9c94c0833b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535d684d-12a1-4bf5-a0d5-38879c919496", "sighting_of_ref": "indicator--a7c073c7-059f-4ac7-8d80-c3cfbe4ad8cb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e84d59b-9743-4160-85f8-60494b9098a0", "sighting_of_ref": "indicator--9c384e00-4eb2-4a25-969e-bc7128be100a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69cfec1c-a3a0-4eef-b43a-eb671b839ed9", "sighting_of_ref": "indicator--5d595371-351e-4f26-b806-bd1da414aca6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6bfc88-6959-44f8-a271-152aa46657d7", "sighting_of_ref": "indicator--98794823-a778-4ecb-8e25-8e04a4907eea", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8153155-a35f-4057-bf84-9984ecf476cc", "sighting_of_ref": "indicator--568b95be-4c8b-4669-b5a4-2bf91b65b007", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d461c467-ffec-4437-99d1-3feddc91c787", "sighting_of_ref": "indicator--6f8d4978-af67-4c17-89b7-30449fbdbe65", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5961154d-f01c-461c-a6ce-af1b2f97febb", "sighting_of_ref": "indicator--6f8d4978-af67-4c17-89b7-30449fbdbe65", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b4c809-4604-433a-843d-e7030dfbb2f0", "sighting_of_ref": "indicator--1ecae01c-ae2e-4870-9b85-8526b74f3d05", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be009d4-677c-413f-b977-1ad89d1df3a7", "sighting_of_ref": "indicator--1ecae01c-ae2e-4870-9b85-8526b74f3d05", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5248d3-7390-46d5-b2a5-ffcb3e66ca31", "sighting_of_ref": "indicator--c3669958-4afa-4653-8992-0682e5c19160", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4420ef73-e3a1-4a33-8cde-b2bd00f369b2", "sighting_of_ref": "indicator--8a581d9a-d824-4174-b0c0-f8438247e77e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f05f4dd-8cd8-4dad-bfff-483cc8978707", "sighting_of_ref": "indicator--f44262da-b038-46a0-9738-41b7aa999456", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b20b15f-dfd6-41b0-b269-fac45c92c570", "sighting_of_ref": "indicator--87e86d19-a51b-422b-a5fd-093e40f922f5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2a4ca1-4582-4abf-b54e-b9ad6e491e59", "sighting_of_ref": "indicator--f3768171-589d-4b6f-ba85-96c8b69c8e44", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e48de83-6b78-4db9-8743-7ebbe6ec151d", "sighting_of_ref": "indicator--2f387a57-c56a-4def-89ca-d21d0f77d2ba", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f95de79-702b-4c72-a7cd-753b1d1cab64", "sighting_of_ref": "indicator--2f387a57-c56a-4def-89ca-d21d0f77d2ba", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffdd91c3-e3f9-4cdc-a47d-0e3bb49d7d79", "sighting_of_ref": "indicator--b7504c01-3f6a-4a3a-8d7a-aa50fbefd3fe", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a7ab37-25f3-4335-bd7f-ffc8b7379111", "sighting_of_ref": "indicator--b7504c01-3f6a-4a3a-8d7a-aa50fbefd3fe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4475f41a-d7ea-4bc6-a1dd-5e8ffc1ef9a4", "sighting_of_ref": "indicator--c640a2f9-4d72-40a4-8da7-45ed074a6c4d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd76ddc-fc07-4b77-9c09-e186eb1f8922", "sighting_of_ref": "indicator--01af3445-f478-4e9a-8c25-56848efbf133", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b5df83-8058-43f0-9074-28475d0e36fb", "sighting_of_ref": "indicator--01af3445-f478-4e9a-8c25-56848efbf133", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a953ca73-b22c-4f06-8957-bdd44e40cbd2", "sighting_of_ref": "indicator--fbd489b9-e827-4547-9c25-efd12b8ad22c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd68d239-c80f-4b4d-9d7c-72fec66cc7de", "sighting_of_ref": "indicator--7235b58e-0186-47db-8cc1-beaf76431637", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff56d937-c3a0-459a-bedc-fc0054529efc", "sighting_of_ref": "indicator--8ef08a8e-1aff-4e6c-b822-0bf6046e09dd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e351c2-2570-45db-b3fe-a5dcd916a2ee", "sighting_of_ref": "indicator--8ef08a8e-1aff-4e6c-b822-0bf6046e09dd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63dee18-3b8a-46d2-ab6b-97a51d6bf66d", "sighting_of_ref": "indicator--3ee6cf07-ea55-4bf9-90ca-d10a852287b6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f45298e-8ce5-4e43-853c-23f413ca9b01", "sighting_of_ref": "indicator--3ee6cf07-ea55-4bf9-90ca-d10a852287b6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20215830-1ea3-4446-861f-9c427c61ae76", "sighting_of_ref": "indicator--62e619e2-8264-43c9-a69b-eba197942838", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1896c784-dca1-4b8b-8b18-bf670d019fb1", "sighting_of_ref": "indicator--7c330aeb-dc57-4b47-aac3-bc987c4a43b7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270ec414-9ba5-43ef-bd4e-0b05f507dfbf", "sighting_of_ref": "indicator--77207828-e62e-4d87-ba77-6d1bd830b330", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2b0361-dfac-43db-b672-6a9cc4e0166c", "sighting_of_ref": "indicator--1d53eee0-bf17-45c9-9fa5-cf06f7bbee33", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d63e93d-bda5-4b72-98ad-26e28684073b", "sighting_of_ref": "indicator--1d53eee0-bf17-45c9-9fa5-cf06f7bbee33", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18a04c9-335b-4b13-82f7-699cf702bbc2", "sighting_of_ref": "indicator--84e830b7-53fb-4d7a-a2ab-a44987e6fb0b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63fd097-ac87-4429-906f-4c8ce10c8aa3", "sighting_of_ref": "indicator--84e830b7-53fb-4d7a-a2ab-a44987e6fb0b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849af9d0-703f-4692-93dc-52aade62b84f", "sighting_of_ref": "indicator--f616c3ed-2ba1-441f-8fc3-20ce45347c90", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f0e880-2c48-438c-9e0c-8be53c4b7669", "sighting_of_ref": "indicator--f616c3ed-2ba1-441f-8fc3-20ce45347c90", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4a5f04-abfd-4b03-8436-93375f7b65ce", "sighting_of_ref": "indicator--6119e0bc-ad22-4801-84e0-fe19c9432eab", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95cc4b56-91c1-4bcd-8987-3e2409352a6d", "sighting_of_ref": "indicator--9c36cfd7-0dc0-4dd6-8e20-07df7bc84018", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039eb21d-714e-4bd0-9005-8c7c64946cea", "sighting_of_ref": "indicator--9c36cfd7-0dc0-4dd6-8e20-07df7bc84018", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07485149-3933-40df-a77b-742be02150af", "sighting_of_ref": "indicator--1f54dfb2-a564-4039-a551-f3144d9aee0a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d639ae02-c0d9-4e7d-92ac-79f38e0f8b7d", "sighting_of_ref": "indicator--1f54dfb2-a564-4039-a551-f3144d9aee0a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b36616a-0e2a-44eb-8662-5d249a273ae6", "sighting_of_ref": "indicator--7f4549c7-69c4-4f6a-b691-273678969714", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf19beb-b661-4dcf-a3ac-565c39f56cbc", "sighting_of_ref": "indicator--03f6db0f-4583-4669-bf50-6603d969fdd9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d094c0a-ab1c-4fee-b129-48aab05d5d99", "sighting_of_ref": "indicator--75f6f81a-78fa-4f6f-b835-c38d8c2a6791", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01f2668-0de3-4757-bd24-378fbb32765f", "sighting_of_ref": "indicator--75f6f81a-78fa-4f6f-b835-c38d8c2a6791", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf22871-e9e5-40f6-863e-8a06b09b0d36", "sighting_of_ref": "indicator--d56b80bc-01dc-4e7e-995b-6d32fc38f9a9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e937a8d4-b8e5-4b9b-99ed-d88dda8481a8", "sighting_of_ref": "indicator--8673ea5a-8063-4d5e-93cb-e27d3d29240b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99936664-054f-4e1f-ba10-b7e949171464", "sighting_of_ref": "indicator--895f0e41-ae01-4641-8ad9-baf39b37d22d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5065a5e-9a94-4d87-80b3-0d06ab74a935", "sighting_of_ref": "indicator--895f0e41-ae01-4641-8ad9-baf39b37d22d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bbcb62a-aeec-411c-a925-b80cddd7aff4", "sighting_of_ref": "indicator--32659209-c173-4f30-ad69-3699b53f0e7b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8647df69-559f-4cb6-ad8e-b4b628040860", "sighting_of_ref": "indicator--b35bbc51-5314-43e4-aef4-a974a0a1e99e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7a20e3-dbb1-4da7-986e-090c3008376d", "sighting_of_ref": "indicator--191ebc01-271a-471f-9371-259ece5feab2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686a0d80-af32-4306-b4f5-469c4bd5e40e", "sighting_of_ref": "indicator--5307d0d8-ec16-4c5c-ade8-1e6924291d29", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4eb242-ef34-477a-8c16-2f64b7addc1f", "sighting_of_ref": "indicator--5307d0d8-ec16-4c5c-ade8-1e6924291d29", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9593abfb-4573-49d7-b9fd-e4a012444af2", "sighting_of_ref": "indicator--dc7d3ca6-621b-416f-8433-8f1fb9302e0a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d73566-3804-4018-a170-43dd26f39bb0", "sighting_of_ref": "indicator--a643e4c5-a4a0-418e-821c-959d33a5d901", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34e6e91-5c52-4421-8112-d0db9e526afe", "sighting_of_ref": "indicator--a643e4c5-a4a0-418e-821c-959d33a5d901", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3bd04e-2ede-476a-8ce1-006e8fd8e5bf", "sighting_of_ref": "indicator--b8cc2d98-d9dd-4ef4-a44f-155ef2d402cc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2038722b-e24c-4fee-b7b8-3a0d62817efc", "sighting_of_ref": "indicator--5163b069-3d4a-4866-a2d6-b88dd3cf3547", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5611ee8a-4417-49b4-8a32-b257bf3d52a4", "sighting_of_ref": "indicator--9992d8a3-605c-479d-9ca5-dcc015f57dd2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d23051f-e2eb-406c-9fa4-543acd0ebc74", "sighting_of_ref": "indicator--9992d8a3-605c-479d-9ca5-dcc015f57dd2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef36524c-0e26-4a68-8c77-7b38e317fb78", "sighting_of_ref": "indicator--b2c3a96c-d4de-4e62-9841-5f353da2f013", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be27b7c5-5491-41e1-bb91-b891654bea0c", "sighting_of_ref": "indicator--b2c3a96c-d4de-4e62-9841-5f353da2f013", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84b626e-bd90-4ccd-b775-0de2ae5faaa9", "sighting_of_ref": "indicator--b00bb657-9720-4122-9b4a-7301eb853954", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6431247-fe16-471f-b0f9-9ef10bc83878", "sighting_of_ref": "indicator--b00bb657-9720-4122-9b4a-7301eb853954", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6176514a-baba-4fbf-b893-c2d3bc79390b", "sighting_of_ref": "indicator--e27ff030-f7a4-4aa8-8e60-efe65627a5aa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed39f31-da13-4312-953d-cd4e1fdfb42f", "sighting_of_ref": "indicator--3716a4ee-b31b-4853-9ea7-81678e7b0e23", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4506d2a-4c58-4aef-8c6c-cbb88c91718e", "sighting_of_ref": "indicator--3716a4ee-b31b-4853-9ea7-81678e7b0e23", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c025b4-9bb3-4433-8fd4-bb014aeb57cb", "sighting_of_ref": "indicator--e9a166af-addc-4d48-8621-a01cf85a78fc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09fcc505-ab41-4f33-8a91-ec831825f6a9", "sighting_of_ref": "indicator--e9a166af-addc-4d48-8621-a01cf85a78fc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7739585c-23a2-4600-a45b-d97178e87527", "sighting_of_ref": "indicator--fc26141f-60c1-40c3-8d50-8af6c1b0a5bb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec18eea-accf-4b21-87e8-3c3e9d248da8", "sighting_of_ref": "indicator--fc26141f-60c1-40c3-8d50-8af6c1b0a5bb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d39f95-e52d-48eb-bd2c-e613c780803c", "sighting_of_ref": "indicator--b3b38521-1346-453d-afcd-3a7ace30dc67", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717514ba-e581-4840-8947-496b5fb3ec7e", "sighting_of_ref": "indicator--772dc25b-fffe-48dd-ac0f-a538f3d7579f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34009824-b707-43d1-926c-1fc4f7120382", "sighting_of_ref": "indicator--c1c39772-d708-42d4-bf41-308221e8e42e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6b8b63-31f6-4748-b1a6-49e4c9fa2989", "sighting_of_ref": "indicator--50e4bbcf-6f5f-4fcb-b78f-ee814b11e63f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6e62ef-6be2-454f-af60-e3f679b05b12", "sighting_of_ref": "indicator--50e4bbcf-6f5f-4fcb-b78f-ee814b11e63f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74574423-56f8-4722-a30a-4a3b68dea491", "sighting_of_ref": "indicator--41b1946b-2386-4ae9-bdef-f375a02301f2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e349fb-4d9d-4255-aff4-a65487ab3b2e", "sighting_of_ref": "indicator--2d8ba44a-482e-454e-bc27-0537a556c93d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad7c702-a5c4-431a-9906-a1d371ea6fe2", "sighting_of_ref": "indicator--2d8ba44a-482e-454e-bc27-0537a556c93d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb0ec7e-3e92-4bd4-8bce-a4a9b689a4e8", "sighting_of_ref": "indicator--664edc28-2e15-4a69-b07a-c1757c319573", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6990f66b-d31c-4baf-89f9-30dc4db936aa", "sighting_of_ref": "indicator--e87b1716-db3c-4376-a4e3-63ab8139db9b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53fcc886-cb3d-4bc3-95b1-8dcfc20b7d3d", "sighting_of_ref": "indicator--ed748324-edf1-4bc8-bacf-621ee253d07c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906c641b-614f-4058-a827-5bc72162f9c8", "sighting_of_ref": "indicator--ed748324-edf1-4bc8-bacf-621ee253d07c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2717a1f-4971-4dbd-b2bb-833eff7f4c36", "sighting_of_ref": "indicator--0ee1cc8b-160e-4372-9546-85e98469a05c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d905e2a1-1ade-42cf-a908-1d6133f54989", "sighting_of_ref": "indicator--8dfe9baf-fcb2-4fc9-91fd-d720622c8532", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8369c1e6-18d8-467a-994d-87f2e4f4808e", "sighting_of_ref": "indicator--8dfe9baf-fcb2-4fc9-91fd-d720622c8532", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13dd27a8-1b08-4979-b106-aeee20be767c", "sighting_of_ref": "indicator--dc45c7e8-c098-4d71-9183-87dacd63a15c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06038515-f760-4548-ac1b-a346ba237778", "sighting_of_ref": "indicator--fb06aa21-900b-4a39-b37d-5154316ae3d3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11cedd75-260c-4b9d-9509-452084008aff", "sighting_of_ref": "indicator--fb06aa21-900b-4a39-b37d-5154316ae3d3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d69ac80-613e-47d4-9933-cc7ee3f8696b", "sighting_of_ref": "indicator--d825a41e-3187-45ee-9eef-cee46de166c7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6e29db-c02b-4380-9f8c-9db2eb681d09", "sighting_of_ref": "indicator--6bc3c190-c502-42dd-95b6-571bed5d91f3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e6238b-a1bb-4e40-be47-5413b359f32d", "sighting_of_ref": "indicator--6a6c6099-dc3b-4cc6-af70-fb5bced4d21b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed84ff6e-4b4c-45f1-a175-696c4da3b98f", "sighting_of_ref": "indicator--9372c6b6-eb1b-4d7b-9426-edbc79627fa7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3419d532-9a42-4f91-bed1-ae20d8502843", "sighting_of_ref": "indicator--432f7d3b-02a9-41db-8f50-14ec0a501fcd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2336b52-4df3-49f3-b687-cce3609f6c86", "sighting_of_ref": "indicator--432f7d3b-02a9-41db-8f50-14ec0a501fcd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d226f4f5-2816-4b07-bd7d-2b8835e33571", "sighting_of_ref": "indicator--37699d1c-da93-46ed-a31d-ae13cdd5abf2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68dd380e-6fa1-431b-b9e2-bcfb7d2d6355", "sighting_of_ref": "indicator--37699d1c-da93-46ed-a31d-ae13cdd5abf2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad80efc-15ce-4715-bd7c-9a6dbe988b51", "sighting_of_ref": "indicator--6251ad5d-5b12-475d-ad8e-19a67c6ce4d8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd60cdc6-87ba-4059-bf90-af92ab24b4dd", "sighting_of_ref": "indicator--6251ad5d-5b12-475d-ad8e-19a67c6ce4d8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51db4d8-0b54-48fd-8952-feb677d2d8cf", "sighting_of_ref": "indicator--2a86bf55-722e-4ee8-9e7b-e469cb9a1ab6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--971dbaab-b791-4269-96d6-09f51f49ebfc", "sighting_of_ref": "indicator--2a86bf55-722e-4ee8-9e7b-e469cb9a1ab6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bff5e03-d816-4ec7-8757-5993bcd2b662", "sighting_of_ref": "indicator--84c07130-1f2a-4140-a3af-d9d3ae6361ff", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0dbe64-f891-4186-96d7-709132953b68", "sighting_of_ref": "indicator--84c07130-1f2a-4140-a3af-d9d3ae6361ff", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa42c57a-1deb-4171-bd1a-69c64b5d2156", "sighting_of_ref": "indicator--a92ab460-eaf7-4618-a5a0-e378d9d7bcb8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c30c7ab-4323-499a-a7d6-7b25a805d10e", "sighting_of_ref": "indicator--a92ab460-eaf7-4618-a5a0-e378d9d7bcb8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c9a287-65dd-4dce-a489-d958aeffe9ee", "sighting_of_ref": "indicator--44d4044f-534e-46e9-b259-1fb5d285085a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b03c9b-a6fa-493e-bb35-d1c89aa6a541", "sighting_of_ref": "indicator--44d4044f-534e-46e9-b259-1fb5d285085a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189bcc9f-2cc9-43a1-824e-e4862335e1ac", "sighting_of_ref": "indicator--b73c55fc-c932-4844-a459-022146073691", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e7c6cc-0987-4f0f-852e-42a3ca3bf619", "sighting_of_ref": "indicator--d8c62b08-00df-44bf-9413-d765ad3ef50c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2af0c4d-a455-4a1e-9500-348448572d02", "sighting_of_ref": "indicator--e026a288-19a0-4c5e-903d-cc2bd789247e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1efdb1b7-cb53-426d-ae45-1d2c2cba3cc9", "sighting_of_ref": "indicator--c563f3ba-98e1-427e-97a5-1a35026b23d9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aef5248-8b20-465a-b423-80ee80da3927", "sighting_of_ref": "indicator--212046cb-6e97-4f12-bf8c-4e341330657a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78387650-9b8c-485a-9b04-1cfc42f2cf43", "sighting_of_ref": "indicator--54541ded-008a-40dd-b4a2-3d87e9141504", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eacc241d-ac33-4bd2-85fa-b62f67781911", "sighting_of_ref": "indicator--87cd1929-6570-42e0-bfa5-b9d654846481", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfd7c6eb-dc8e-44cd-a50a-be07e5b69330", "sighting_of_ref": "indicator--87cd1929-6570-42e0-bfa5-b9d654846481", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13f2835-a085-49b1-8c42-00fcda1fdacf", "sighting_of_ref": "indicator--a5fc9040-6b9f-496e-a70f-c2d169b2eda7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3190c862-79ae-462c-a2bf-48967847d8e4", "sighting_of_ref": "indicator--a5fc9040-6b9f-496e-a70f-c2d169b2eda7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1285db88-eb24-4649-b72c-0cd3d4901f4d", "sighting_of_ref": "indicator--8bbb1f28-e9af-4889-8e3a-95df7b1f554e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cedffc-904a-4142-a4e7-d5fb995f47f9", "sighting_of_ref": "indicator--8bbb1f28-e9af-4889-8e3a-95df7b1f554e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51027901-60e5-4d9e-b2b6-3d889e2542f6", "sighting_of_ref": "indicator--bdbae430-f60e-4ebf-b3f6-be2aa5d804e7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69801e90-9391-4aed-9154-4a304132fa9e", "sighting_of_ref": "indicator--da07aecc-10f5-458f-b3fe-dc2050ef6f65", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7ced1c-5f2f-4d29-adb8-ff9f99428b38", "sighting_of_ref": "indicator--da07aecc-10f5-458f-b3fe-dc2050ef6f65", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa2947e-84d2-4d6c-8741-ad73effe261d", "sighting_of_ref": "indicator--50f32b75-aaec-40e0-b357-d0d84ecada02", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--becc5915-5584-47dc-ba13-d175dbbdf6ae", "sighting_of_ref": "indicator--50f32b75-aaec-40e0-b357-d0d84ecada02", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29307b86-347d-4ce1-8e74-56d3ea3411ca", "sighting_of_ref": "indicator--1c33135d-821b-4bd3-8da0-d64b14f0361e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e829960-a44a-408e-bd68-8cbd245dd038", "sighting_of_ref": "indicator--1c33135d-821b-4bd3-8da0-d64b14f0361e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d841c5c-7813-48e8-8790-52308b043313", "sighting_of_ref": "indicator--db90e430-d194-4318-b326-bac6678b7c12", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10fc47d-6ba7-4be9-a0a8-29b92d9a0d04", "sighting_of_ref": "indicator--db90e430-d194-4318-b326-bac6678b7c12", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60440c5-a909-440c-8ff0-71da60909ee0", "sighting_of_ref": "indicator--3b3fb75d-1bd1-471a-8d61-f4ae84c1dabf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efa6b8e-3002-4dec-88d4-9d9bc3c4cdcc", "sighting_of_ref": "indicator--44a81563-1d29-4edc-a233-317296310634", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1aa533f-0cd3-4c89-abe2-28dfd87bc4b0", "sighting_of_ref": "indicator--44a81563-1d29-4edc-a233-317296310634", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae096280-8f62-496f-a43d-8857770efa84", "sighting_of_ref": "indicator--3ef908f8-fb41-420d-aa00-fb5cb22b6063", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85973cb5-dae4-41e9-aedb-39117186f138", "sighting_of_ref": "indicator--ca9f09b8-ea48-495e-ab5b-674048303166", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491c6826-2f2e-4880-9e06-436ebda1066b", "sighting_of_ref": "indicator--ca9f09b8-ea48-495e-ab5b-674048303166", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0cb660b-3a3a-4cea-ac51-4a3ad7a985b3", "sighting_of_ref": "indicator--e02bc0cd-b430-4567-8abb-fb40a6fa2763", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eeefd1e-592a-44d8-8868-56c4b7bf0732", "sighting_of_ref": "indicator--e02bc0cd-b430-4567-8abb-fb40a6fa2763", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2231de8f-04ec-4fc3-9e45-9b57abff4ed0", "sighting_of_ref": "indicator--5155851c-0d2e-4af0-a677-be1ac0fe11f1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a33b445-0c83-4c2c-8f53-09ed22d3134a", "sighting_of_ref": "indicator--06923ce5-0e2b-47ea-81d6-f3c1e9385725", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92544c71-6d3b-476c-b7e6-0c8c479b39d4", "sighting_of_ref": "indicator--ac80a4f7-e00d-4c7b-8bc6-35d91b6b188a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bec8636-2c89-4fb0-b33b-7414a0f67435", "sighting_of_ref": "indicator--ac80a4f7-e00d-4c7b-8bc6-35d91b6b188a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7ba75c-27d9-4878-9941-d142d4f93133", "sighting_of_ref": "indicator--e0d5efb0-6b86-42d2-aeec-9c4e41167231", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b0a4b1-fd75-47c1-864f-7fbbe04ee9b1", "sighting_of_ref": "indicator--a2ec4001-49de-4ef3-a286-5ee645bebb0c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa98043c-cfd2-40d8-b6d4-5ea7ae6f4f92", "sighting_of_ref": "indicator--a2ec4001-49de-4ef3-a286-5ee645bebb0c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb5e037-5493-4d50-9421-4ef1b1dc90de", "sighting_of_ref": "indicator--a97c081c-a8d0-4b8e-bf78-1bd1318e947f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8193cedd-c9ea-4c3a-b30d-cfa637375026", "sighting_of_ref": "indicator--a97c081c-a8d0-4b8e-bf78-1bd1318e947f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d3c3cf-551c-4c02-ad58-609c1b343d77", "sighting_of_ref": "indicator--a5f40d4e-afcc-4cbf-931d-a5f8e94ad46d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44889c2e-a261-4a70-a01d-f60464e36561", "sighting_of_ref": "indicator--1d65e581-dd92-42a9-b7f9-13f20653a585", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6335dc-ae5c-4178-aa9e-63e24a19507d", "sighting_of_ref": "indicator--d4562eb6-fd6a-4f4e-88b8-40912fec7232", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e216d657-8bc8-418c-a012-1b05376eefac", "sighting_of_ref": "indicator--d4562eb6-fd6a-4f4e-88b8-40912fec7232", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04cf2ca7-1029-4705-ae58-bb711451b6fa", "sighting_of_ref": "indicator--ca8a4d3d-637f-4221-a7d4-d7b0fb1ed683", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa249a29-6de2-478a-af1f-79bc5f786ad2", "sighting_of_ref": "indicator--ca8a4d3d-637f-4221-a7d4-d7b0fb1ed683", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689ed9da-c424-42b3-a3d2-055219729db7", "sighting_of_ref": "indicator--afc22833-0d29-4a6d-b8ed-a6cfe932246f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733e8fa5-536a-4bd0-8eab-e4495711c628", "sighting_of_ref": "indicator--5e810a73-b840-4eac-9705-95dd6e3cf9c8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf15c5b-9ae0-4f53-99a7-ff13903e0eca", "sighting_of_ref": "indicator--eb8a9a1c-4263-45a6-bc79-22f39de20e39", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d65200-be84-4628-90a6-ed00692aa02d", "sighting_of_ref": "indicator--eb8a9a1c-4263-45a6-bc79-22f39de20e39", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e83b2e8-e1d9-436a-85d4-f46fb0090672", "sighting_of_ref": "indicator--5b482451-64c0-4dd4-8281-b83086ace05d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3344e25-0fcb-43a4-bf64-7b8e510058d8", "sighting_of_ref": "indicator--4dccfccf-7626-4222-86ef-757f25680580", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88db2f19-507b-4b4e-8313-ce5fa80ec88a", "sighting_of_ref": "indicator--dc9a66e9-3ef3-4efd-ae7e-8091df2c7ba4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b67a890-e7d9-42af-82d9-200e2aa7c046", "sighting_of_ref": "indicator--7a0863bc-1dba-4aae-b7c5-f6e0d58c4d55", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a6a207-d7e1-46e3-bdc6-040cc495798a", "sighting_of_ref": "indicator--a8e3bc39-6835-4af5-9bd0-b10eb118fe45", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdcc8cb4-5b96-4790-8da5-cab9965b8aaf", "sighting_of_ref": "indicator--a8e3bc39-6835-4af5-9bd0-b10eb118fe45", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3e4bf2-824f-4c0a-9a78-ed20b2259863", "sighting_of_ref": "indicator--09675050-13da-4b52-88da-ff0071b23203", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ec1465-7116-4f1f-9f6d-ad80623f8c0b", "sighting_of_ref": "indicator--7ed3f774-10ea-4d62-9855-05068197db6a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b381097-3cd6-4987-9584-aec10f2d79d9", "sighting_of_ref": "indicator--3de0be3d-b06a-4967-be2d-9da6cc67d7bc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f832a1-14a3-46c3-b96d-ffa46ef7147e", "sighting_of_ref": "indicator--7b1e727f-c831-437b-a2f6-9acb62e1aa8c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a37bbe1-6cac-4c5b-b139-4d05c8f10af6", "sighting_of_ref": "indicator--4903c308-a577-4618-b079-266673b25755", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98633467-4625-4fbf-8241-9b4a289bdf6d", "sighting_of_ref": "indicator--b96b265d-5dd6-4b47-b8d3-3e85c0a1a3de", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fca0947-e3a7-4e46-8e4f-9b3c67d35fa5", "sighting_of_ref": "indicator--cc02b66d-977f-4321-8d52-e2cbeae4c121", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59de5fa9-409d-4323-9c68-5e12b634c909", "sighting_of_ref": "indicator--27585b67-fadb-4814-9b88-208e986ba5eb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1df7f4-8ec6-49f3-9ca7-9f891fc51fe9", "sighting_of_ref": "indicator--9764ce8c-cd6e-44e9-9f1f-99f071734b23", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ac7981-f455-4c26-a61f-b06749175cb0", "sighting_of_ref": "indicator--e3c36cc1-ebe4-42f0-88a5-6a26ed275fb6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4023b899-ab68-4549-8965-ce92f2ef176b", "sighting_of_ref": "indicator--5aa637d9-6582-4475-a650-0a9536f80c41", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9bd0dd9-1716-4321-8846-904d4553d581", "sighting_of_ref": "indicator--ab63e848-e760-4d3d-9b29-d65fd981397c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efec4696-b0d4-4e45-8819-368fa9c13bab", "sighting_of_ref": "indicator--ab63e848-e760-4d3d-9b29-d65fd981397c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160189ef-ed59-4312-b764-8ff8736eecd3", "sighting_of_ref": "indicator--5ccbc606-17e9-412b-83d0-19be70e96dd7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--effbe0e0-1288-4df1-a1e1-5794c10ebfb0", "sighting_of_ref": "indicator--ba6138fd-6f7f-4cf0-ab95-6a8b8c6cdbcd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e304a6-a3f3-4d6c-82ef-6d9b0441bf26", "sighting_of_ref": "indicator--ef49dc7c-5a00-4d3d-9eab-4afc58ac5a4b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a81a14c-0a48-4f4c-8c63-ded449f326c3", "sighting_of_ref": "indicator--05241a6f-7869-4a8d-9d7a-362ba2753b1f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f32777-e0ec-4d05-b73e-99b7307656de", "sighting_of_ref": "indicator--b3b72ae7-d647-429e-895a-34f942ed995e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0219b3-305f-4c96-8b45-d578c961baab", "sighting_of_ref": "indicator--da34bd6d-4993-4bb8-be67-0c7ca291cf9d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ecc7c90-e71f-4233-9c90-4db8dbd041c1", "sighting_of_ref": "indicator--4e4c5533-cbc3-457d-b560-e99667411a66", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ddc201-9611-4a51-b864-33864dc1a4dd", "sighting_of_ref": "indicator--28411a01-1e5a-484e-add9-2ea510bbe542", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98bb533a-ea23-4d0d-8a2f-7899bd531c65", "sighting_of_ref": "indicator--aaead317-e499-4f42-8fe3-1f1562bb16b9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd588237-961c-4337-9b2b-809b8638823a", "sighting_of_ref": "indicator--aaead317-e499-4f42-8fe3-1f1562bb16b9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbcb4050-0abf-4e9b-b072-f211326b831a", "sighting_of_ref": "indicator--0a39e63a-4dfb-4886-9b3e-613d01fa049e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f43890c-c7f0-49d9-83d0-d54b54f6c463", "sighting_of_ref": "indicator--9bcc58f5-7556-45e4-8914-adc2ba11bcc9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8892de91-a3c0-4b88-adf4-9aaa835cf6fc", "sighting_of_ref": "indicator--d3d0530b-babb-43d1-b78d-af9d1b6946da", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce17f0d-75dd-4d85-94dd-92034963cd83", "sighting_of_ref": "indicator--d3d0530b-babb-43d1-b78d-af9d1b6946da", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27c5da4-26a5-45c5-a2ee-bdfde8084f4c", "sighting_of_ref": "indicator--b651d86f-af41-49b0-9b1e-35c3ae1cbeb7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a45b70-47cc-469d-abe1-39b919e5f164", "sighting_of_ref": "indicator--f9ad34a2-60e3-4455-964b-9f707418ca8f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fde7563-fc3c-4808-a67e-bfff15b091a4", "sighting_of_ref": "indicator--f9ad34a2-60e3-4455-964b-9f707418ca8f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df016e0b-a030-4b93-84d4-5b65c62064f4", "sighting_of_ref": "indicator--060cc9f2-25a2-4c75-a25f-ef5c48f1f5f4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa07fde1-d4e2-45b6-a677-19a70f3e1355", "sighting_of_ref": "indicator--5509ab91-3920-4f2b-af26-3490bc6393d6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60611d03-a83d-405e-bfa8-2c2960745a7a", "sighting_of_ref": "indicator--a6475115-f44b-44d5-be26-1ad16cde1de3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20df9b43-8592-4483-a701-1d285a0f7d61", "sighting_of_ref": "indicator--47dc0556-cd2a-4015-9abc-b109ecb7355e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681154a2-70bd-430e-8f83-d7b54b98b537", "sighting_of_ref": "indicator--34fe30c2-9ee8-498b-8534-8e776bc58d78", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0823ef5-4b08-4327-b065-a2dd3fbf426a", "sighting_of_ref": "indicator--68dface7-dc5d-4073-94ff-99286ee03001", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d82fa0-d279-4a1e-a0e9-546b455488b1", "sighting_of_ref": "indicator--fca258c9-5339-411c-84b9-2b4b1d12ae02", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53072fed-4ed7-4392-b6f0-b805c318bfe9", "sighting_of_ref": "indicator--4cbf74cd-e1fe-4577-8256-3b667de3cdb5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a11c46-78ce-4644-837b-422846878fe4", "sighting_of_ref": "indicator--a5b82ba4-7e83-4b56-b160-54c136e00806", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0897c960-c067-4773-8136-126edfaf9288", "sighting_of_ref": "indicator--2b4ff77c-0deb-4f2b-acf2-7dc811dfef05", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e8f69b-67d3-40b8-bac5-f4f50a8888e0", "sighting_of_ref": "indicator--2b4ff77c-0deb-4f2b-acf2-7dc811dfef05", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd1188a-33d1-4105-9a77-57fe34ff7163", "sighting_of_ref": "indicator--9936807e-4eb9-43ce-8c7c-5f370bd071e7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7531bbaa-007e-4b2a-922c-0207e2758996", "sighting_of_ref": "indicator--68fb2e06-3bd4-46ad-ac1d-cf05d6c0ec66", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9b0f79-da95-4a0f-900a-42ae591a874e", "sighting_of_ref": "indicator--bd8b87c0-9da2-4aaa-8c29-4c2c3959b211", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb556abb-a627-477b-8e10-c3b07fb93ff0", "sighting_of_ref": "indicator--8c0d98b7-2211-47ef-b38d-69207cc7ef15", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb5c874-21cf-4e6d-9c33-c9845aa8da65", "sighting_of_ref": "indicator--8c0d98b7-2211-47ef-b38d-69207cc7ef15", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d87dc9-1037-4b06-8d37-29d5bebf2a18", "sighting_of_ref": "indicator--66f3c352-b9fa-448a-81f5-fb9c23fa3a54", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54353024-9539-4947-88ee-abc89d466d3c", "sighting_of_ref": "indicator--66f3c352-b9fa-448a-81f5-fb9c23fa3a54", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce278f6-2925-405a-b76b-ce617dcaf20a", "sighting_of_ref": "indicator--76a35793-3fd9-4dbb-af2b-cd0c5fc4c71a", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3fef81-4ffe-49bd-86c1-cf1de2689ff5", "sighting_of_ref": "indicator--71fb0812-e028-4081-800a-86715de49980", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31dfd5c6-c496-43ae-bcd2-9b330d54116f", "sighting_of_ref": "indicator--40bde691-2503-403c-8fb6-279d18e77950", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f7194a-a935-47fd-bdff-21cd2cfc4e83", "sighting_of_ref": "indicator--0680b4d3-7d2d-4a86-b804-f880538b490c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea06100-fdd4-4b3d-8d06-f627182a4fc7", "sighting_of_ref": "indicator--0680b4d3-7d2d-4a86-b804-f880538b490c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62bc236f-2c09-45c3-ac4e-0271dd519e78", "sighting_of_ref": "indicator--9d5356f3-0110-4775-af22-192744da4cb6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956f55de-4d36-4d3c-94dd-92895eee8732", "sighting_of_ref": "indicator--c1a2dde2-d85b-4a32-9c06-849ad18fae5b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81295803-35af-4358-bd9e-8f3c5a3c97c0", "sighting_of_ref": "indicator--c1a2dde2-d85b-4a32-9c06-849ad18fae5b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33be2cc9-376c-4d40-b57f-a1bb623d0b3e", "sighting_of_ref": "indicator--a89c9bcc-287d-4c2f-af30-12124570c27b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785e1d3f-af42-42a9-88d3-901a61a9d152", "sighting_of_ref": "indicator--8f9edc09-4632-4e20-a00c-b2d4f2f5e2d5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184624fb-f0df-4463-b03e-960be80f9891", "sighting_of_ref": "indicator--8f9edc09-4632-4e20-a00c-b2d4f2f5e2d5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5cc6bf-01d6-47e9-bb5b-dbd13784276d", "sighting_of_ref": "indicator--4155f83c-fbf0-43b1-ac9d-3c3679edeeb4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46357043-beb6-4ed4-8443-ba7be127e8a3", "sighting_of_ref": "indicator--4155f83c-fbf0-43b1-ac9d-3c3679edeeb4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f96053-4770-445e-bfa3-4dda72835a49", "sighting_of_ref": "indicator--66b9aa1f-787a-4663-b59b-da06d2eaca0b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74223f5c-9b99-495c-9c1c-252d92907cd1", "sighting_of_ref": "indicator--66b9aa1f-787a-4663-b59b-da06d2eaca0b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3939827-aca4-462a-85e3-f054e01c43a5", "sighting_of_ref": "indicator--168a9eca-7681-43cf-b9de-1ec9bb5229d0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688e24ba-9919-437f-b437-e60305d3da65", "sighting_of_ref": "indicator--9e9e1b61-544c-4a89-87a5-ebedf791d8fb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--083ef1f0-9896-4f2a-b0f0-12e60972772e", "sighting_of_ref": "indicator--9e9e1b61-544c-4a89-87a5-ebedf791d8fb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a45d601-3f54-4e44-819e-a40453e664b9", "sighting_of_ref": "indicator--d6236056-abe2-4829-bcd5-0bdd6fc4a991", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8a3eaf-1b19-4fde-b35c-8c1410778379", "sighting_of_ref": "indicator--6e5658b6-4d08-458c-99ce-4795795a7776", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c0884e-84e6-44bb-acf0-e78ada0d547e", "sighting_of_ref": "indicator--6e5658b6-4d08-458c-99ce-4795795a7776", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b18fbe-c63a-4141-94d7-df6fc84d2193", "sighting_of_ref": "indicator--709d1980-140c-40a2-a97c-0ff1aa58c6f2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357b1713-18fc-43fa-8928-f4db8c0d243f", "sighting_of_ref": "indicator--3172d797-27c8-4da9-9816-40749cde7056", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d0dba3-6108-4307-a323-229152473db6", "sighting_of_ref": "indicator--3172d797-27c8-4da9-9816-40749cde7056", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede2247a-b6d8-4fd7-9693-b1d0ce9f5bf3", "sighting_of_ref": "indicator--a8ef28b7-090d-4cd5-b387-5277535e57b7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7560dd0-260a-49ce-b96d-100bba302509", "sighting_of_ref": "indicator--a8ef28b7-090d-4cd5-b387-5277535e57b7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01bfb2b4-9b1d-4cd1-8418-93c760c62382", "sighting_of_ref": "indicator--6c9acbb7-f22f-4554-947e-32c349c354af", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b12cab-16b5-434d-b720-97add13b7cd5", "sighting_of_ref": "indicator--6c9acbb7-f22f-4554-947e-32c349c354af", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd2fa1f-a913-4745-a324-7b61a90ed8ca", "sighting_of_ref": "indicator--29eb83f8-2326-4306-bfab-8a205e0a01ac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebad0df4-863b-4a58-9bad-f21acb09871b", "sighting_of_ref": "indicator--29eb83f8-2326-4306-bfab-8a205e0a01ac", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed993204-2148-4579-9e5f-910a4ab826b3", "sighting_of_ref": "indicator--cc3709fb-ec1b-4b39-8638-0027f6f087f8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f48f6a-543d-4e58-ae54-5ce5ac3838a7", "sighting_of_ref": "indicator--cc3709fb-ec1b-4b39-8638-0027f6f087f8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccab284e-7b2f-4560-aa5c-d3bd791b173b", "sighting_of_ref": "indicator--cffb07a5-28fe-4832-9e72-79836e56fc58", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9998cf68-6e76-4371-8035-866b488c34ed", "sighting_of_ref": "indicator--cffb07a5-28fe-4832-9e72-79836e56fc58", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a95fab-fa54-4b35-841c-35ed04885eb8", "sighting_of_ref": "indicator--904b10a4-a7f4-46a3-9410-6982cdd332fc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac072c9-d27c-4983-9b7e-f04bbcae4561", "sighting_of_ref": "indicator--904b10a4-a7f4-46a3-9410-6982cdd332fc", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e506bed-eb96-4cfe-91ad-64dac906679c", "sighting_of_ref": "indicator--904b10a4-a7f4-46a3-9410-6982cdd332fc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d710fed1-8ff0-4b58-b7ff-45a5b9caaf87", "sighting_of_ref": "indicator--9b0002fa-0662-4443-b846-e60c77469a41", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720c5378-7d65-41ea-a283-3b4eb0af2056", "sighting_of_ref": "indicator--9b0002fa-0662-4443-b846-e60c77469a41", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a9414b-95fe-4f14-a8eb-b815c208b8e2", "sighting_of_ref": "indicator--9dfa34af-f756-495d-b341-343e0eb6d45b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294eac9b-290f-4a46-9c57-4b72893ec090", "sighting_of_ref": "indicator--9dfa34af-f756-495d-b341-343e0eb6d45b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2db00e-06b2-406f-8c48-8cd31ee6c04b", "sighting_of_ref": "indicator--2e37173a-b10a-4b00-a670-ce5d6b77b6d0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80318e48-9614-4461-a79d-d91cd55d568f", "sighting_of_ref": "indicator--6f1e03fb-38ee-4e11-bbe4-4aecf0e3c068", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689865b5-dfd4-4dc1-9df9-be95a5c4cad1", "sighting_of_ref": "indicator--6f1e03fb-38ee-4e11-bbe4-4aecf0e3c068", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de41c0c-d87a-40be-918f-a7de5b23cbb2", "sighting_of_ref": "indicator--1c9177b7-7061-484b-9daa-1fbb314b25c8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21609adb-c335-478f-8b76-d5e58296f25e", "sighting_of_ref": "indicator--1c9177b7-7061-484b-9daa-1fbb314b25c8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3ee4c5-6d62-4665-8206-83e3f3e6b41f", "sighting_of_ref": "indicator--206c8348-b222-41d8-90bb-b5487bd0d99b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7614ec6-fa01-446f-ae13-8e9d3c4e822d", "sighting_of_ref": "indicator--40a45b3b-1b69-4675-9de3-814eeeeb528a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fe7dcaf-a123-41b2-801e-106ca1d643c0", "sighting_of_ref": "indicator--40a45b3b-1b69-4675-9de3-814eeeeb528a", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2a6133-5260-4c65-bcc3-0edbfd9ee88f", "sighting_of_ref": "indicator--40a45b3b-1b69-4675-9de3-814eeeeb528a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da5905d-0ff8-4c71-bce9-72a0e479e577", "sighting_of_ref": "indicator--9438a4c8-8284-4880-98cf-068d6362896e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a477dbc0-0a9d-4aff-bb56-0c394c7e8ecd", "sighting_of_ref": "indicator--9b0c0aac-a06b-4df2-b2ef-e3b3ae74e76c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d9a912-3b8f-4cd4-a1fa-f7e5753a69f8", "sighting_of_ref": "indicator--9b0c0aac-a06b-4df2-b2ef-e3b3ae74e76c", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6340c20b-9095-4bb5-8bba-8a8226044dbb", "sighting_of_ref": "indicator--9b0c0aac-a06b-4df2-b2ef-e3b3ae74e76c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d63b79-105d-4c84-bbe9-0298767a2421", "sighting_of_ref": "indicator--10df19e2-453a-4c86-85b9-228f1920e71f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3a0743-d333-4d4f-aefa-d95691feead7", "sighting_of_ref": "indicator--e3d870a3-c75e-429b-be97-ea693c830900", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7355b105-2559-4037-99b3-4d00d9a4d8b3", "sighting_of_ref": "indicator--e6bb4a27-fe20-4fbb-a70b-f90a0c9b41c7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5dfb5ea-3210-4f69-b52a-880666c1383d", "sighting_of_ref": "indicator--e6bb4a27-fe20-4fbb-a70b-f90a0c9b41c7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42deb033-399b-47dd-adab-ccd199122603", "sighting_of_ref": "indicator--5e4ab6dc-ef73-4592-aa9d-c865bf7e66ea", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45de5c58-de0a-42d4-9f84-3ab8cd81fb20", "sighting_of_ref": "indicator--696b042c-b6d5-4b12-b9b9-e7927b065123", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd75a0f7-7752-46e8-8aa6-bd582c078836", "sighting_of_ref": "indicator--696b042c-b6d5-4b12-b9b9-e7927b065123", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae81c6bc-f166-4f65-8c5c-a15f4d4ec776", "sighting_of_ref": "indicator--06011c4a-1726-4955-89d2-95286cc3a069", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c70ea9c-81f2-45a9-bf72-87af8c798f45", "sighting_of_ref": "indicator--06011c4a-1726-4955-89d2-95286cc3a069", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af4a87b-910a-49d0-b1a1-c9bbaf0247d8", "sighting_of_ref": "indicator--2181031a-10ec-47f6-81b3-0d7abddb6a5e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d9df35-507f-43f2-8fde-aec52e999409", "sighting_of_ref": "indicator--b345d7dc-adc6-45eb-911f-6e8104f90f34", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0094334a-2dfd-4991-a375-8c894f90f831", "sighting_of_ref": "indicator--141f3854-d51d-4520-bff2-24f42d80df93", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61bf8cfe-04d4-423f-9e44-481da39a72a5", "sighting_of_ref": "indicator--141f3854-d51d-4520-bff2-24f42d80df93", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e76596-ed2e-463a-92f7-8c80d68188c5", "sighting_of_ref": "indicator--5fb6a4a0-27f6-4a77-8c83-cddcdf63c094", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3320c5d5-36cf-4d33-b79b-cd56eaa00fcc", "sighting_of_ref": "indicator--6cfd7e6f-0a2f-4de4-91cd-c81a4af9599e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2c4515-f1df-4aca-b9b7-30d987830c4e", "sighting_of_ref": "indicator--fe767604-0a60-4b81-af9d-4e6898da176d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eaa4693-44b9-4790-a410-0447f692fba6", "sighting_of_ref": "indicator--b89ef12d-ed4a-44c9-8c4b-3118a7cd005d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11b2bb0-34d7-4e72-af75-c9407ec985cb", "sighting_of_ref": "indicator--46ad5d78-fcea-41d8-a648-c23f4cd83029", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fda83f23-269c-454d-819f-4880546b9d84", "sighting_of_ref": "indicator--a224156e-9e7a-4585-93f4-d2d362b5d47e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6485e018-ee0d-4e6f-bc2f-42ebb9019f16", "sighting_of_ref": "indicator--9690fcb8-9e1e-47b9-bf2a-10cc8ac25e79", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb313cac-69a1-4e9e-89ae-71872dbcd08a", "sighting_of_ref": "indicator--f0e33f6e-35b5-488c-a3cc-17a7877a8e15", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c178374-1060-4e0c-94ff-d1c7d5027539", "sighting_of_ref": "indicator--e660f0d0-75a9-49d3-8eb8-1a708fc46229", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10eeffc-a2fa-4f8c-b7e2-b364dd2148dc", "sighting_of_ref": "indicator--332897a4-e371-40a7-9b32-5f1c97af6ed7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b770398c-2d55-4ac7-8154-a6a444e78b10", "sighting_of_ref": "indicator--332897a4-e371-40a7-9b32-5f1c97af6ed7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e780f4-2eb4-4bb7-ab67-e6be5b7dddda", "sighting_of_ref": "indicator--2e229ac2-0d33-4fb8-8b29-385785f3fe1a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dcf1deb-44c0-406d-b708-9f2d284c948a", "sighting_of_ref": "indicator--5a78e84a-b69e-4640-a590-76d331c34975", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ac9806-585b-4262-9d69-c2ba7b6c3997", "sighting_of_ref": "indicator--6dac7861-f1c4-4513-a2a6-8d89ad96c8ff", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b27715e-0ade-4771-b24f-ec4dc1b549ee", "sighting_of_ref": "indicator--d7896638-01e2-49bb-89e6-f3665a94ada9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2bd092e-a04d-4dfd-8863-6d617b5e83be", "sighting_of_ref": "indicator--4471cfdf-c7d4-4032-bbf0-b3a78af26196", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0f3cd1-df8d-4806-8c13-f71b75ca9106", "sighting_of_ref": "indicator--18bbfa38-fed7-4566-8a3e-7b585b846092", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a0c175-bfe3-4fa4-bbf2-a522cb19b8d1", "sighting_of_ref": "indicator--18bbfa38-fed7-4566-8a3e-7b585b846092", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b06acc-7c40-492e-a7e9-c4bf6999bcf8", "sighting_of_ref": "indicator--79d175ce-4a48-4a41-98df-d188f834003e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524b314e-4cd3-425e-8a98-649a0dccd94d", "sighting_of_ref": "indicator--f3a0bbcb-ca72-47fa-a559-01970976992f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d1d00a-1e56-4f92-9381-54f30bc667fc", "sighting_of_ref": "indicator--a2ec715d-0bc2-47da-b142-ae654758b77f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505858f0-2fb7-4ec9-bafd-eaaf212d0999", "sighting_of_ref": "indicator--f1634877-784b-4f7c-be03-5099cb3ddad9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb5e6ce8-4504-4d44-8eca-a165799b50be", "sighting_of_ref": "indicator--eb82094a-aa1f-4c41-b98f-d5d2d969b972", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b098e5-f4f6-48e6-9396-1970cc51eea6", "sighting_of_ref": "indicator--9883c813-6644-4d62-bbff-affc497f4fbb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9106cb-82b7-4042-a970-a1e1562d0b2c", "sighting_of_ref": "indicator--27e95cc0-3bd7-429d-b126-b58a9684482a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e46fe0c-8eda-4b93-bb35-e8a7cb50022b", "sighting_of_ref": "indicator--2bbb7bd7-2598-4d3b-b8dc-5cec2dbe12f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c17e4b98-d40c-40c9-a497-f735bba6bbb7", "sighting_of_ref": "indicator--c4c64ea4-e928-438c-b6dd-40e1f59664c7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e156d7d2-9fcf-44a9-8b27-321207e89568", "sighting_of_ref": "indicator--e73f14a0-81ba-4e2d-aebb-a0edac369ff5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c4cee5-6c0f-45b2-b558-9aecd19ebf30", "sighting_of_ref": "indicator--0d2ccc24-3031-4d70-8a4d-465c5bfaaf21", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610153ce-7a73-45e4-b1a2-c5baa733101c", "sighting_of_ref": "indicator--ac5b4aa6-43c3-4fc0-9492-e5a17a1b08a1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e193554-a9f6-43ff-af20-abdfe10e42c1", "sighting_of_ref": "indicator--3cdf528c-b55f-45f5-bc20-670bff859fde", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb833c49-63d9-46b0-abb0-0c8f785fa140", "sighting_of_ref": "indicator--fef6033e-a5fb-4fa6-91d2-9b5c9eec30fc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597c235a-9b55-45d0-95cb-29b5747375f6", "sighting_of_ref": "indicator--fef6033e-a5fb-4fa6-91d2-9b5c9eec30fc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65692ef-95da-4848-aabb-2575013314b8", "sighting_of_ref": "indicator--dd962136-73be-4d0c-829f-b218e5d1866b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b870bce2-f717-4988-aebf-66dcb57cf8ad", "sighting_of_ref": "indicator--dd962136-73be-4d0c-829f-b218e5d1866b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6de10ac-8d2b-45da-ba4c-812c680e1d6f", "sighting_of_ref": "indicator--429a6993-2131-463f-bbcc-994110cde32c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379c916b-5504-47b2-9424-d0e9e0feb521", "sighting_of_ref": "indicator--1faaec3c-9dcf-4322-9f4c-91eb5b14eab7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62d21a4-e1be-4242-8478-54162478b67c", "sighting_of_ref": "indicator--1faaec3c-9dcf-4322-9f4c-91eb5b14eab7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05d3a9f-c748-43b5-a43e-356ac444374c", "sighting_of_ref": "indicator--d3961d31-9d1a-4f0e-bff0-3d0bd7cf1780", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abea7f05-c48a-4bac-8257-72f696037be3", "sighting_of_ref": "indicator--a11db041-0af8-48f2-a394-9c38cbca2c7e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7865ea8-012d-45f4-bfcb-37a78f0179fc", "sighting_of_ref": "indicator--f717cd76-8eae-49df-99b7-884518e6e345", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd10c60e-4346-4353-8f23-bba4dfa027ac", "sighting_of_ref": "indicator--f717cd76-8eae-49df-99b7-884518e6e345", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--980fb98f-db8f-4c13-874c-eb0f23ee04d9", "sighting_of_ref": "indicator--c4c18d94-e3ed-4fab-bdb0-da33088e45a9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd293f69-5235-4bb9-9a44-24210b382069", "sighting_of_ref": "indicator--5a514aba-7105-4537-b0a5-49dd78ce09b1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7bcdc3-a25a-4dfb-a9de-d35a9f432b1d", "sighting_of_ref": "indicator--99842a99-d0ba-4773-a3b0-ae788720f6f2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d30885-1c16-41ae-ada6-45479659bf97", "sighting_of_ref": "indicator--410b4037-20a5-48d9-bab3-44bec12b54d8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fee0d4-2c83-46da-ab41-46c925093114", "sighting_of_ref": "indicator--14b501e7-f75a-4ed2-b637-f1aecf48bafe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61409ab3-44da-44f3-bbec-8c5c752a9798", "sighting_of_ref": "indicator--883c17b8-f6d4-4255-9559-d8aef8d38635", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b650273d-29b1-4bcb-9070-e530f7c849a0", "sighting_of_ref": "indicator--ac9f0c2a-ac32-4c2b-b955-5be53abd5f3a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca26324-81a9-4f6b-8759-e1bde36d5ec4", "sighting_of_ref": "indicator--ac9f0c2a-ac32-4c2b-b955-5be53abd5f3a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f768b6-11ea-460c-8352-760a998518ae", "sighting_of_ref": "indicator--3a7af3ba-0ae1-4210-b14a-8e76c9d69054", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c002bf8-2202-4e05-993d-1c7fd25a9db2", "sighting_of_ref": "indicator--4b9138ca-fe11-467e-b98a-50301801bf12", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae82662e-3ad9-411e-8eee-eda8311ae8e7", "sighting_of_ref": "indicator--a551e90a-fcfe-4f4d-9f60-7ed9e69e5bdb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f652d07a-8ed3-4ee7-8366-166e58b7d168", "sighting_of_ref": "indicator--4e056ed6-d12b-49bf-936e-74d75e9853b5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93bf9356-cfc6-4d51-b2a3-ac5e73144630", "sighting_of_ref": "indicator--1f4493de-42c2-4c30-bcab-11c1d7c4684f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb691b4-af87-41f6-9870-803b1b820d44", "sighting_of_ref": "indicator--1f4493de-42c2-4c30-bcab-11c1d7c4684f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea71d53f-f9fa-4308-b4b5-4dc5e4ba94ce", "sighting_of_ref": "indicator--79e98131-06a5-482d-b8e0-3d2f292ae260", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42003359-bc26-45f7-8167-637d98a6c65a", "sighting_of_ref": "indicator--8d6e416b-8bc8-4c54-90be-2762569fd2c1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235f54c5-2b12-4688-a142-9e0a84b5f9a2", "sighting_of_ref": "indicator--6c9e21a8-65d8-4601-960e-01a1fea90e08", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36d08536-e8ac-46c0-bb81-8df0facae721", "sighting_of_ref": "indicator--db529cb0-7c75-4891-aec5-b13f68c1e419", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe628a92-0db1-4152-84ec-7df4f5594958", "sighting_of_ref": "indicator--36c1e012-269a-4a86-a7bb-4b2c45e30de5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4822b16d-284e-4b3b-88aa-d9d144c3f497", "sighting_of_ref": "indicator--ed419bf3-46bd-410a-ac76-5e2ddb1fdf3c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1722652-2f7c-47fc-befd-3cfdf5fd8336", "sighting_of_ref": "indicator--c30fd9b8-8f6f-4277-b882-020ff0a5c77f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8362925-d893-4c2b-a555-51da00a346f8", "sighting_of_ref": "indicator--0d220641-ccc8-4017-907a-c57566f3293c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764bf081-a9c3-4378-a4f4-80f0bbc89a29", "sighting_of_ref": "indicator--0d220641-ccc8-4017-907a-c57566f3293c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0660a72d-864e-4e7a-9077-21f5d749b775", "sighting_of_ref": "indicator--67170d83-9a23-4a57-9567-d97d2117be9c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfbe386-1374-4f7e-917c-aa4912b2b8ce", "sighting_of_ref": "indicator--3d6ba8e8-a420-4fe9-9aa0-1c95e6113775", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82a9d49-a180-493c-9ad5-18ad9f296d6d", "sighting_of_ref": "indicator--3d6ba8e8-a420-4fe9-9aa0-1c95e6113775", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71fb22a-af87-44bd-a671-2e29519d1907", "sighting_of_ref": "indicator--1741ff92-9e11-4433-a698-4e1f77d5f38b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661b8942-2c23-4384-895e-6e03bd5b2148", "sighting_of_ref": "indicator--78b65361-a38f-4d82-9462-915a20b1b6e5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9fd1e21-2256-4174-bf3d-5794e07d43f4", "sighting_of_ref": "indicator--24d726a9-3869-4134-96bc-ceef98cd8f14", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11111056-d2d2-4280-b045-e042a1661711", "sighting_of_ref": "indicator--597a214b-7d43-4167-8ef9-76c503453926", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72fac39-e545-4854-a214-df85dc567191", "sighting_of_ref": "indicator--28a1de1c-be66-4c74-821b-3e8671393abe", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78c9fab-246a-47e4-b87c-92001bc52d28", "sighting_of_ref": "indicator--23e9603e-c8f2-41f0-b956-5fb3c99818cb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56aab28f-5937-4b4f-8b17-467e2e01c316", "sighting_of_ref": "indicator--ae3e040d-2cd7-4c14-8401-34a4af7e5396", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef58ef09-532a-48af-98c1-f31e4100dafe", "sighting_of_ref": "indicator--58397ec4-e106-4016-9a37-2c47f388705c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2613999-bdda-440c-96d1-d865f73a0572", "sighting_of_ref": "indicator--58397ec4-e106-4016-9a37-2c47f388705c", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d03262e-489a-4024-b160-d704f37c7dd4", "sighting_of_ref": "indicator--58397ec4-e106-4016-9a37-2c47f388705c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b509703-368f-4de8-a184-57bdb292a144", "sighting_of_ref": "indicator--34759d41-936f-4595-a6a0-a9df5e06874f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3b7c7c-3b6a-4266-a210-555b7306e1b8", "sighting_of_ref": "indicator--63f3b1c9-d983-44cb-b900-fcc7b9c62597", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f005ade-8bfd-48d5-97c4-e755aaad2f17", "sighting_of_ref": "indicator--63f3b1c9-d983-44cb-b900-fcc7b9c62597", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9c0355-6cf1-47af-a3fa-d27762aa5a57", "sighting_of_ref": "indicator--994d030f-1743-4411-9df7-2c7ec8144b16", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48243c4-890c-4aa5-b940-8ec962c87a14", "sighting_of_ref": "indicator--7a7c52b0-8a29-47a1-b3c7-39f0ea6fd60f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e389e3-28ee-4d44-875b-63886d351acd", "sighting_of_ref": "indicator--c6eab58d-d26a-4a5c-a28e-831aaf474827", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e75dbb-373b-4cbb-a8d0-3be3c06b466b", "sighting_of_ref": "indicator--c6eab58d-d26a-4a5c-a28e-831aaf474827", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4947f7b-0879-4416-be62-edd18a0eeed5", "sighting_of_ref": "indicator--dfe9ee54-c917-43ac-a41e-36293cb4108d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650f2bd7-810f-44a1-8560-2b8ed8d0d6a1", "sighting_of_ref": "indicator--dfe9ee54-c917-43ac-a41e-36293cb4108d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87696ec-6c44-4824-9941-e5f70f97871a", "sighting_of_ref": "indicator--6cb5842f-5a98-46fd-9452-ebf73ee5ab75", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9196be38-8d2c-4b07-840e-493cd0048fd4", "sighting_of_ref": "indicator--6cb5842f-5a98-46fd-9452-ebf73ee5ab75", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a0edeb-16ed-431d-89be-5ca777cf8576", "sighting_of_ref": "indicator--1b875cf4-a7da-420e-8ac6-fbadbe59e85b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad300ad-55e3-4701-a5c5-6e269d339250", "sighting_of_ref": "indicator--f8622499-0bd5-49b3-819e-e5ab416f3dab", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175dcf65-0334-4d66-a341-4a7c3f245709", "sighting_of_ref": "indicator--f8622499-0bd5-49b3-819e-e5ab416f3dab", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f64a99-c3ee-4dcd-b27a-7be3485e194c", "sighting_of_ref": "indicator--f8622499-0bd5-49b3-819e-e5ab416f3dab", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06698c53-2f82-4b2a-b718-9b0da39a1674", "sighting_of_ref": "indicator--6c0b0c26-bf0c-48ed-be63-91e67ad803c1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26c9da5-7929-405d-8afb-09fb61b1df7b", "sighting_of_ref": "indicator--f7048372-2c1e-4a5d-ac86-99ae44eff795", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1359c458-0144-474c-a394-69dff2fd0d1f", "sighting_of_ref": "indicator--f7048372-2c1e-4a5d-ac86-99ae44eff795", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0f8619-2862-4e16-8cb9-5303011792f2", "sighting_of_ref": "indicator--95193aa7-2af1-43ab-911e-691dc660c55d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b8e2d8-5b7e-4bcd-93de-40aa8da188fd", "sighting_of_ref": "indicator--95193aa7-2af1-43ab-911e-691dc660c55d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af91c1ee-6045-4339-b416-6da30d1d073b", "sighting_of_ref": "indicator--7daae333-2f92-4d52-995d-f35e1075a19e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb0ca06-0e01-4838-aa75-cf8e52aa44d1", "sighting_of_ref": "indicator--7882696a-8750-4ee7-90a1-38b2fdea653b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aaa200a-846c-412c-ac6b-512410c8f32d", "sighting_of_ref": "indicator--327130db-49d4-481d-a3ea-840c7625fc2c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4842db-a498-4ab1-9a6f-d104f6be81e7", "sighting_of_ref": "indicator--35a19172-767d-42b7-85d3-1278ba8115e6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3fcc37-a891-4b76-9dbd-8702d3a75df1", "sighting_of_ref": "indicator--568789ee-16e8-46f5-9ade-32edebe344f4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832c5cd7-84c9-4944-b3bf-1f79cb7a197a", "sighting_of_ref": "indicator--3015f9d4-c600-475a-856b-7ce54bf4d943", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54d96b4-610a-4c68-80e7-0b46875def89", "sighting_of_ref": "indicator--3015f9d4-c600-475a-856b-7ce54bf4d943", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667550bf-101e-4eb2-aa4d-197ba3a08803", "sighting_of_ref": "indicator--73fff566-dea8-47f3-9867-2110199f4607", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00325342-f198-4d04-a549-54143202e61a", "sighting_of_ref": "indicator--62819c9e-d06d-4975-97ef-c41e2a9fad96", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631b6209-fb41-41c2-bfd5-5e5a4d45f8a7", "sighting_of_ref": "indicator--cacf5c80-38ad-4abe-8cb7-f53eec855d4a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d3e970-7904-4d8f-8a7a-97bf94d41f12", "sighting_of_ref": "indicator--b8911d45-3e95-4dbe-806f-60b8c126563f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c6caba-3176-4f20-92c3-800b31112f92", "sighting_of_ref": "indicator--ffbd5f1e-88a4-4100-b1c2-34bdf48838d0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358c0174-5381-4f66-ae50-e6c09075c78b", "sighting_of_ref": "indicator--a09670ac-08a4-4334-8641-1e9d98b20313", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32071ced-20bc-4e60-868e-80bf490bf602", "sighting_of_ref": "indicator--57d15677-f0a6-4756-a099-d97773eff472", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa48905b-c674-44fa-b3d1-6b87b118cfe9", "sighting_of_ref": "indicator--18a29972-aa68-46b5-9c39-29f0c79ffbd1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7633b36b-b10c-43aa-8bae-ba117a5240a0", "sighting_of_ref": "indicator--e3570564-2347-4eac-bc78-4c7a8bfbac5f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99386fba-a08b-4e02-9908-aaa3d611d037", "sighting_of_ref": "indicator--5fde3bac-ddeb-4f1a-ab6b-07a87cbcb214", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be95a134-e492-498c-a0d8-0a49b870dbb6", "sighting_of_ref": "indicator--b2b5def2-76fa-4dbb-a78a-5390d01d3293", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5311cae4-b80a-47e4-9e6f-fd80cce0e68b", "sighting_of_ref": "indicator--3bdb289e-8574-488a-88e8-2f9ac51612eb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678259a0-af2b-4c24-804e-1fd1dca2e95e", "sighting_of_ref": "indicator--3bdb289e-8574-488a-88e8-2f9ac51612eb", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fbe2c21-65d7-4dd0-987b-c9639287b168", "sighting_of_ref": "indicator--3bdb289e-8574-488a-88e8-2f9ac51612eb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa2b4ec-d71e-4fb8-9edb-44a59e3d087b", "sighting_of_ref": "indicator--3507309e-631e-4194-bfea-cd37aed5d6ce", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca37a7b5-4dad-4201-85ae-b1e0b004fc76", "sighting_of_ref": "indicator--3507309e-631e-4194-bfea-cd37aed5d6ce", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f38737-8460-4b15-8291-87929b9c5ae1", "sighting_of_ref": "indicator--3507309e-631e-4194-bfea-cd37aed5d6ce", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf910cca-cd66-41ad-b80d-1d8210f97acb", "sighting_of_ref": "indicator--5f1adc4b-52e0-41af-8afa-761b34573688", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90d82c0-13c6-46ba-bb17-4362d967d7c2", "sighting_of_ref": "indicator--5f1adc4b-52e0-41af-8afa-761b34573688", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543882c9-ddff-402f-a796-f1ea52049973", "sighting_of_ref": "indicator--5f1adc4b-52e0-41af-8afa-761b34573688", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3caf64ce-8be6-4ed5-8ffc-f7e62d840f1a", "sighting_of_ref": "indicator--ead292fb-811d-463b-9dc9-a6a7377e18e9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d6e1d0-e8e3-487a-b6da-2784c8474e3f", "sighting_of_ref": "indicator--ead292fb-811d-463b-9dc9-a6a7377e18e9", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a576b19e-d464-4351-9365-dc6fdd1f5ba5", "sighting_of_ref": "indicator--ead292fb-811d-463b-9dc9-a6a7377e18e9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05471d50-dd94-4e62-8646-295f01360177", "sighting_of_ref": "indicator--4ca3365a-50fd-45bf-ae01-c39c3ed9502b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f571c5-c58d-4ba5-8ed7-32b71fe3a07a", "sighting_of_ref": "indicator--7f11351d-28c0-408c-8290-ddc0043f6c23", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe42a43-067c-4c72-9019-974913767aaf", "sighting_of_ref": "indicator--7f11351d-28c0-408c-8290-ddc0043f6c23", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70830213-eaa9-44e7-91fd-114b8cd47d5c", "sighting_of_ref": "indicator--1c249e10-6f67-4243-9bc7-cf5f5f6c4721", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--204480d4-9bc1-4cc0-abf6-002cdd5e5698", "sighting_of_ref": "indicator--1c249e10-6f67-4243-9bc7-cf5f5f6c4721", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17554f63-6d24-4ba2-9de9-7e8f929e2478", "sighting_of_ref": "indicator--1c249e10-6f67-4243-9bc7-cf5f5f6c4721", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1b6fc8-3db2-459c-8c87-5495de8a9f7f", "sighting_of_ref": "indicator--5556d831-34c6-4af4-8476-0c214acdc837", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e42527a-aef5-4f5e-90cb-5f00d80a1798", "sighting_of_ref": "indicator--5556d831-34c6-4af4-8476-0c214acdc837", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9644b4e1-3cb8-4986-9225-9f46c14570c6", "sighting_of_ref": "indicator--5556d831-34c6-4af4-8476-0c214acdc837", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b7cad4-6207-41f9-81c5-a6c7a9a9465f", "sighting_of_ref": "indicator--ebfbf065-7127-4e2e-9bc0-49e330b404cd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b1778e5-b767-40d7-a1ea-dc45f223a8e9", "sighting_of_ref": "indicator--ebfbf065-7127-4e2e-9bc0-49e330b404cd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d07e4c5-9dbe-4b8a-8d8c-fc2d9561c9cc", "sighting_of_ref": "indicator--1404d4b5-8f85-4d8a-987f-2622575f0349", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abbbc7bc-86e7-4242-8c67-d83670cb1584", "sighting_of_ref": "indicator--20923355-baf4-4484-bb77-e1b45f68aeea", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f1c618-b09b-4cdf-b935-379ee8825498", "sighting_of_ref": "indicator--20923355-baf4-4484-bb77-e1b45f68aeea", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b4fc4f-f16d-4ac2-b436-f26aad287fe4", "sighting_of_ref": "indicator--20923355-baf4-4484-bb77-e1b45f68aeea", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4dc285-c16b-4ebe-a149-8b0ceab28677", "sighting_of_ref": "indicator--1b50c3ef-dbaf-4971-9cdd-31b40abb04e4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bac5848-7f07-4121-a80f-b4babd380d9d", "sighting_of_ref": "indicator--1b50c3ef-dbaf-4971-9cdd-31b40abb04e4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac8a362-9759-4d07-94d6-cb6b6bbacde5", "sighting_of_ref": "indicator--d262e054-67bb-4362-b0a5-1e8a32009069", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4ed6c0-6034-478b-bbfb-e9a51882308b", "sighting_of_ref": "indicator--d262e054-67bb-4362-b0a5-1e8a32009069", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55304d9e-31ba-4d1f-8ce6-96fef3434679", "sighting_of_ref": "indicator--d262e054-67bb-4362-b0a5-1e8a32009069", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e95e5f6-5a3d-42fe-83ab-fcdaae45fac0", "sighting_of_ref": "indicator--aaa5ab33-5e30-4462-9daa-e6a916967ac4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144a0dc2-eb10-4374-afaf-495bbb1a3db3", "sighting_of_ref": "indicator--aaa5ab33-5e30-4462-9daa-e6a916967ac4", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028371a2-4600-4c61-82d9-d9f4599198dd", "sighting_of_ref": "indicator--aaa5ab33-5e30-4462-9daa-e6a916967ac4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38a66d0-f4bf-41e4-99ff-6a4fc0cf662e", "sighting_of_ref": "indicator--e9672855-ae16-4480-888d-f94d0e3515ce", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--826abb16-4940-4893-ba3a-7c50ebc2fb5e", "sighting_of_ref": "indicator--e9672855-ae16-4480-888d-f94d0e3515ce", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe3cd75-7669-450f-b6a7-89cb52d61714", "sighting_of_ref": "indicator--e9672855-ae16-4480-888d-f94d0e3515ce", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54796081-7c73-41da-bfe3-e5661a18b918", "sighting_of_ref": "indicator--3f727465-cda6-46b4-9e13-47e1de21ba64", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b13fde-cb00-4850-9b18-6921f9303ffb", "sighting_of_ref": "indicator--3f727465-cda6-46b4-9e13-47e1de21ba64", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7857f3e7-37ef-411e-8580-17da27b8e816", "sighting_of_ref": "indicator--3f727465-cda6-46b4-9e13-47e1de21ba64", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f183e1d3-4cfb-4d43-8b8a-bf6663c0d1dd", "sighting_of_ref": "indicator--629fe5c3-8660-459b-9c97-3b01892564ce", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8695e9c3-8abd-4bd5-8056-fa269030c006", "sighting_of_ref": "indicator--629fe5c3-8660-459b-9c97-3b01892564ce", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19774baa-275b-4d41-8be5-563eaac916de", "sighting_of_ref": "indicator--629fe5c3-8660-459b-9c97-3b01892564ce", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716f4c90-0777-4d68-9bd9-0bfeaf88d5ee", "sighting_of_ref": "indicator--4ade063c-bf0b-43a4-920b-16bd96276b56", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b901c57b-20b6-4f0a-ac34-7d53c6a50142", "sighting_of_ref": "indicator--4ade063c-bf0b-43a4-920b-16bd96276b56", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe365e83-4cad-4707-9817-a8d9f2ab83a9", "sighting_of_ref": "indicator--4ade063c-bf0b-43a4-920b-16bd96276b56", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a680e599-789d-40f1-b9b2-6f518b7472e0", "sighting_of_ref": "indicator--87d301b7-b345-4b90-a6c8-ff51fe0efb01", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778b2a8f-c7c2-4027-a280-0918bb1e1960", "sighting_of_ref": "indicator--87d301b7-b345-4b90-a6c8-ff51fe0efb01", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc909d4d-95c1-43f8-a983-c1762b186bed", "sighting_of_ref": "indicator--87d301b7-b345-4b90-a6c8-ff51fe0efb01", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8373d7c-85ae-4e93-9e2b-c54d24d2ff2b", "sighting_of_ref": "indicator--ca1e3d23-22dd-49f4-a988-614f0dfc7c72", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a24a62-fd48-4143-88a7-28708347bae9", "sighting_of_ref": "indicator--ca1e3d23-22dd-49f4-a988-614f0dfc7c72", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9baf9d75-6dc2-49f3-a02f-8507d2914ce2", "sighting_of_ref": "indicator--ca1e3d23-22dd-49f4-a988-614f0dfc7c72", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262ad34d-f729-4347-8434-db95148d6e48", "sighting_of_ref": "indicator--40e2f7d1-1c34-4b1d-a8ac-4416922db941", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271029a5-69d3-4215-9113-782157653bfc", "sighting_of_ref": "indicator--40e2f7d1-1c34-4b1d-a8ac-4416922db941", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--084eaeb7-b53b-4bdf-8bfb-2d729d30a7aa", "sighting_of_ref": "indicator--40e2f7d1-1c34-4b1d-a8ac-4416922db941", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bdc2695-1fea-429e-b620-2ed958dcc102", "sighting_of_ref": "indicator--31937b13-0d4b-4a3e-82fe-834253041808", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1356f8-d153-42b2-a701-33b94b6edc9b", "sighting_of_ref": "indicator--31937b13-0d4b-4a3e-82fe-834253041808", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed25781-2a9b-4e5e-855f-be91cfd9b4b1", "sighting_of_ref": "indicator--30abe4bf-cc0a-4cdc-8470-7cc09d517745", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8dfb0c0-2b8f-4f99-9e5d-27fef6e45a1d", "sighting_of_ref": "indicator--30abe4bf-cc0a-4cdc-8470-7cc09d517745", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c40102-bb74-4a82-be74-566a2a1e800b", "sighting_of_ref": "indicator--30abe4bf-cc0a-4cdc-8470-7cc09d517745", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4f93bb-df45-4c81-aca8-12071a1c83a1", "sighting_of_ref": "indicator--0ec628bd-36df-443a-98de-c83dca784244", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a23515-1a08-45b1-a284-baa661f3c3f9", "sighting_of_ref": "indicator--0ec628bd-36df-443a-98de-c83dca784244", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0dedd70-b37a-4b70-a1fa-9dd4086e7907", "sighting_of_ref": "indicator--0ec628bd-36df-443a-98de-c83dca784244", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a755f5-7d3a-45b8-b5f6-e60778ddd11b", "sighting_of_ref": "indicator--c365ee73-1850-41b3-a042-4b69e265281e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0380c18a-d565-45e8-b4b5-dec003bdcb0f", "sighting_of_ref": "indicator--452f64e0-abab-424b-a65c-91c3618464e9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ee58f4-9d11-4d0d-ab23-62285662e591", "sighting_of_ref": "indicator--1be6900a-a52e-4b8a-8e34-ff47f2e10817", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77cbc229-340b-4114-b7e1-5d28ffdfe2a4", "sighting_of_ref": "indicator--3df7e7f3-2d80-493f-8b69-08484e6766f5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d57ab3-2fb0-4710-bf50-8e2613205425", "sighting_of_ref": "indicator--c9abd92d-306f-405c-9772-772907c3ca7c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aede1bf9-e9dd-425c-b9ec-b11324f9f3e3", "sighting_of_ref": "indicator--cf7d5d91-3868-4c8b-8c21-53ba63dd6ccc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e49668-9294-4f2b-8edb-568a71544ae2", "sighting_of_ref": "indicator--11f43247-5a01-4cb0-9cee-97514fcf276c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b17402-b3a1-4d65-b477-32e147c2668f", "sighting_of_ref": "indicator--3ffedaad-c526-4e39-8cf5-9185886e5dda", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc19e867-6307-4ac4-9bde-29fbbb7b3c23", "sighting_of_ref": "indicator--3ffedaad-c526-4e39-8cf5-9185886e5dda", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2265831d-312f-479f-ac01-1fe339419114", "sighting_of_ref": "indicator--b3e3f8a0-e720-4b18-935b-1fe36bfd6320", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--209cfca9-3c71-49cc-90b8-3a915d9fad9f", "sighting_of_ref": "indicator--b3e3f8a0-e720-4b18-935b-1fe36bfd6320", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ddfc84c-6753-4ea7-88c4-cb815a14679a", "sighting_of_ref": "indicator--a6053ad6-9e03-4ccb-a953-cfd346221ae3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7591d6db-ac81-4906-9df5-95d917c975c1", "sighting_of_ref": "indicator--a6053ad6-9e03-4ccb-a953-cfd346221ae3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5430ab-3c47-4308-a44e-0bcbea70f77b", "sighting_of_ref": "indicator--d093165b-87b6-4e9c-ae04-212f8d95c88d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f614771d-8151-4654-955b-839d29336bdd", "sighting_of_ref": "indicator--d093165b-87b6-4e9c-ae04-212f8d95c88d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de00373-2dfa-41c0-a8c9-6b0538216157", "sighting_of_ref": "indicator--c846cc7e-bb52-4b35-9056-2736ba8eba83", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e127b80-db04-4aa1-90b1-cebc925122ac", "sighting_of_ref": "indicator--c846cc7e-bb52-4b35-9056-2736ba8eba83", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff828a40-cfa4-4273-b4ab-09d1e37cd76d", "sighting_of_ref": "indicator--dc0efa8a-5f09-47ac-952e-ffa0e3c8085e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c6d027-6b6f-4b36-b85f-f61d33cd71ae", "sighting_of_ref": "indicator--5dc7ec14-223f-471e-b664-e5faab66a0f4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6876d5-400b-49c2-9f3c-ba5bf52c3fd6", "sighting_of_ref": "indicator--5007ffaa-0d91-4246-846a-69838b338944", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ca88ca-9386-4169-ab80-76346197dd78", "sighting_of_ref": "indicator--5007ffaa-0d91-4246-846a-69838b338944", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4ef46a-4d0d-4951-8a0f-5597b41fb00b", "sighting_of_ref": "indicator--11d1ba6c-3942-4db0-85ae-badef877eb75", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c188010-fc8e-467d-80d2-2ee12a274091", "sighting_of_ref": "indicator--fccc016f-00ee-41ed-a409-a4f2befac8ad", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d2d1f2-c421-4751-85c7-94e7f7e70611", "sighting_of_ref": "indicator--48dd5371-edff-4bd0-8079-545fb29c714c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027944a2-8843-4965-bf04-d1178264313d", "sighting_of_ref": "indicator--48dd5371-edff-4bd0-8079-545fb29c714c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0c8d18-8186-4f9d-afb3-c04238fc1b32", "sighting_of_ref": "indicator--d0c0e046-4ed1-42c6-8898-eedfc86cbc6f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79220cb-4b96-4a56-924c-bca1bbd267c5", "sighting_of_ref": "indicator--ad68ab80-5c68-4d9b-81d2-9df68099a323", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f380522-70dd-4be1-9726-1d2274fe5948", "sighting_of_ref": "indicator--adbaf926-1de0-407c-a2f5-821a7cce1f89", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2a5169-7121-486a-9fea-76c2c9a1149d", "sighting_of_ref": "indicator--73aa34a5-37a3-4443-98f5-84213cace293", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8125fd1c-a31e-4fc5-91f4-ae1532b8a0d1", "sighting_of_ref": "indicator--f4fe62ff-53bf-465a-b890-362ad9e0ae88", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558076e9-e3ce-4067-aa0e-d2616a962c52", "sighting_of_ref": "indicator--f4fe62ff-53bf-465a-b890-362ad9e0ae88", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f09713-9174-4ae3-99c7-e393803bc3a1", "sighting_of_ref": "indicator--c5e643d9-9c3b-40c0-bb0c-91c2e4aa20d3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44c8565-64c8-446e-9a80-0607fcca4149", "sighting_of_ref": "indicator--46b5759b-2eca-4dd8-b129-58e670d1e516", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--581a4571-6aa3-4b65-b5df-24200ed09783", "sighting_of_ref": "indicator--0017710c-e91d-4a93-8c2b-a25576218e54", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47656bba-d0d4-4163-973e-a000b4ed131c", "sighting_of_ref": "indicator--0017710c-e91d-4a93-8c2b-a25576218e54", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81366496-a080-4751-bfec-94daf3602ae0", "sighting_of_ref": "indicator--42a39bd2-bda9-495d-902e-b4ac8bf2cb56", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d634e01-c201-4486-854c-9ab0fe6afc6a", "sighting_of_ref": "indicator--cbe9e90b-e489-403f-8adf-ea40ec825eb7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef238afd-0d54-45ba-a954-4fb40320a8f4", "sighting_of_ref": "indicator--7fd2bbdc-1158-4558-a341-f692d0166fcb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ebd9c7-4018-4fc1-b5d9-0fc3d169aaab", "sighting_of_ref": "indicator--deefa6b3-d266-43c6-856f-795914685208", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879aa406-08f4-46a5-a4fe-c42a021c43bd", "sighting_of_ref": "indicator--deefa6b3-d266-43c6-856f-795914685208", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d386b7e6-fb7c-48be-8157-3b0ee49f63fd", "sighting_of_ref": "indicator--0b7e6c52-8a17-4340-b67f-87257a43a772", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171d63e2-6bf5-47e9-ba11-b96645fd027b", "sighting_of_ref": "indicator--25a0ea75-c6d2-49d3-a3d0-ee0921970aef", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e622cbeb-c14a-4e88-b372-20cab0c29149", "sighting_of_ref": "indicator--84bebb98-aad7-4a58-b16e-818ebf95f8e5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9236f0da-5e04-4c67-81d1-55d85598ce43", "sighting_of_ref": "indicator--8a21eeec-9a60-4cd0-9be4-757bedbf808e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e831ba-8465-40e6-89ab-46fc66c7d86c", "sighting_of_ref": "indicator--a37f7f5a-e3f3-4def-b618-e9bd176ac3c1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edfc83e-1150-4b59-99fd-55f6ee544c32", "sighting_of_ref": "indicator--94542236-ae81-430b-aac5-27da10b2bc6d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb52b8a-9016-4086-a436-641c68297424", "sighting_of_ref": "indicator--51f1169c-3bc8-445f-bcfa-dbc5617a9ebf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22bd089c-31b2-401f-89ba-b2782f42489d", "sighting_of_ref": "indicator--a4950891-68dc-4d82-b082-c10193f0b834", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae38f9e-6ed0-4e36-bc3d-c68b1c73d0c8", "sighting_of_ref": "indicator--0aa9048e-50d7-48c4-8fb7-c89c411c7fb4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1678ced2-5990-42c5-91b3-85454382e679", "sighting_of_ref": "indicator--b4a21e3f-bf1e-429b-bb65-0b86853faa73", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9314c3f-e5d0-4fe1-afde-ce6c3f423534", "sighting_of_ref": "indicator--b6b12048-479b-45f1-b47b-fd9d0018f73f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720cf164-dd17-424d-b222-25b61f67c400", "sighting_of_ref": "indicator--d16bd0b9-4a88-43c2-80a9-f88f00d42745", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4367db6-8bd7-4858-a379-0852ae8a1735", "sighting_of_ref": "indicator--3de6088f-dc63-4b7d-99b1-369168642f3d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862066e8-d11b-4194-950c-15fdd626e4e5", "sighting_of_ref": "indicator--394e5da0-5381-45ed-8e25-4bcadb2e7ca1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bae4b8c-49cd-4d0e-bff5-11b029c98fe7", "sighting_of_ref": "indicator--bdf5540d-35f8-4fc8-a46c-9bf045420cec", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d4dd5b-9950-4191-85a5-c0163209be4b", "sighting_of_ref": "indicator--a80284d4-1de5-4832-9446-1648bd538a8d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455dc0e0-07e7-4f2e-958d-4de0d7af2392", "sighting_of_ref": "indicator--affff226-b8a6-45d2-adc9-7669c4d115ba", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9620691-54ee-45f0-af41-c13fd897765a", "sighting_of_ref": "indicator--9b7276ab-e2d6-4c1d-891d-defffa109d5b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d26645-5562-44ea-abac-fade57b96e6d", "sighting_of_ref": "indicator--b62496fa-ac26-438c-9bf4-bb5877e2adaa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3b4f08-37cc-4fea-84e1-14e956a6374b", "sighting_of_ref": "indicator--37314887-3850-4a37-88ad-04d50f719dbe", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97c8e1b-2e5e-4ae5-9434-048a9f73bc42", "sighting_of_ref": "indicator--fc7fca5a-d84d-461d-a1a3-0bd0839341cd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3bc301-fd8c-4ddf-bd0d-faf58e7f6b98", "sighting_of_ref": "indicator--3fa2b60b-ec66-4669-98f4-3e9d292cee06", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6960595c-52f7-4efd-9652-cb0b85e26fe7", "sighting_of_ref": "indicator--3fa2b60b-ec66-4669-98f4-3e9d292cee06", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bca41b6-b62b-4e50-8db0-5df75698688f", "sighting_of_ref": "indicator--a2ba26c2-30e2-4044-b954-f79612ee67d6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5caa09ed-8ae3-4e4b-ae48-bbdd5a737f12", "sighting_of_ref": "indicator--498601ed-a0d7-4817-9c98-859d54aa10f2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9035cd-f9d0-4067-b308-3ac403520177", "sighting_of_ref": "indicator--a298c072-9d84-4ab0-9d44-436b8824edc6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98d70ab-b40f-45e6-8c10-9d4fbbbecb53", "sighting_of_ref": "indicator--4098f42a-db03-4545-bbc4-88eafee56402", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74561d35-b23f-439e-8321-df190bc29b54", "sighting_of_ref": "indicator--291b3b98-6712-4cdb-a114-418143aa62b7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f720aaa-52a0-470a-88d3-c83b65ebaa48", "sighting_of_ref": "indicator--4ae18f62-59c8-4cf2-85dd-719561a47877", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11b1eb8-e7ab-40c4-8611-4b90a1ec43de", "sighting_of_ref": "indicator--ef85759b-7f69-4b04-8a38-da1ba25569c6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195f780a-ffa5-4b5f-b005-093892d444a9", "sighting_of_ref": "indicator--0c6d5aae-35aa-4d1f-b543-37e501b27850", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239d8c4e-be72-4c2c-85b7-c05f420cd8cf", "sighting_of_ref": "indicator--2e757bd0-0b8a-4a81-832c-b9fb25afe2bf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb18e7e-f710-4795-8259-7576816a111e", "sighting_of_ref": "indicator--98da130e-7411-49a6-ae13-988441895cd9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a64847-db98-47a2-a5fc-39cec53d0ce8", "sighting_of_ref": "indicator--d2c748ee-b5b0-45f5-8c81-910d7aae1b45", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77020180-595d-4ac0-8f7f-85328576c3f3", "sighting_of_ref": "indicator--bdb5c164-30e2-4d0f-808d-1fb83b57f633", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5cd53a-e268-4dde-b9fb-9ebd48e77533", "sighting_of_ref": "indicator--1e6dbb30-f0e4-4be0-9ba9-d30bc68b6304", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92736679-6f33-4513-aadb-8a9944f36d0d", "sighting_of_ref": "indicator--30a00da4-0ee4-4849-be7d-57d9e81faf4e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4607ea72-a549-48a4-85fe-348ac04bfaa6", "sighting_of_ref": "indicator--d4f0859d-3f63-4880-a001-bdf4ceb70036", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6f0a6a-d92c-4a98-8306-089d3ba2b5e4", "sighting_of_ref": "indicator--e79fd37e-013f-4d77-a8b4-3e8256ade2d5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212c977f-d95a-4f36-83a3-d2e5f01ae349", "sighting_of_ref": "indicator--f1230348-dc1d-4914-bf97-fb7737f6cec5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368d337c-1959-484c-b5ff-d0b4c366f8ac", "sighting_of_ref": "indicator--e949e62a-8809-415d-b514-f35261b0c024", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2ddbda-390d-44d5-af03-432ccf9d9320", "sighting_of_ref": "indicator--588b6ab2-43ec-4ebc-8ef4-2c9b82987f78", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8483033-44eb-4ff4-a50b-dffd8b1be638", "sighting_of_ref": "indicator--eeaece77-5684-46b1-815a-4943e805388f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041d9030-b2b4-4e76-9c33-c13b1cae0743", "sighting_of_ref": "indicator--b16d550b-392f-451b-bad5-b3f0416cb35e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45bd790f-96e4-4591-b627-97ccae578980", "sighting_of_ref": "indicator--aa800eb2-335a-4dae-a3b9-639ff651c422", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e27ec9-0a23-431c-8649-718ac99a002b", "sighting_of_ref": "indicator--8b76e508-771a-4f34-80ea-a5a961b48041", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d1b098-4544-4f21-b59d-3de80552c457", "sighting_of_ref": "indicator--441160fb-91e1-4bd0-ba38-7f36364cbb67", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59a667c-e676-4839-b0b3-cdab619f04db", "sighting_of_ref": "indicator--4483f70f-7e59-4f7c-a8ec-b80b10717ee3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4248bb7-702c-4cd2-a116-1df2f3095a47", "sighting_of_ref": "indicator--40038ff2-59c6-4615-b52c-8a3094832bdd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--874eadcb-3c48-4207-9f3d-84801afbeadd", "sighting_of_ref": "indicator--7a4e7bc2-2598-498a-a8e6-6cf2daac8a10", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3ae3e0-82c6-4642-9ad6-ad8111c1b14a", "sighting_of_ref": "indicator--07c5e7f2-7826-4076-a279-b6dfc5bfc81a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278d3d77-22a4-4009-9d75-44c1eecacd61", "sighting_of_ref": "indicator--f785b344-2053-4628-b664-cdf33ffd348d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8021d9ed-29b1-4f0d-9458-0de61715c0cd", "sighting_of_ref": "indicator--8812062c-1ee9-442a-ae2f-0a7cdd77aebf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42900ae-1294-4afd-a1c7-68993aa56717", "sighting_of_ref": "indicator--a1de34ea-d184-4b9f-8d8c-079c2ff3aa20", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249d8d1a-bfec-4cc3-9cd0-a6e46826c7b1", "sighting_of_ref": "indicator--081c75ca-28b0-4581-b427-1d8f3f4091e0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18d8d52-b1b5-428e-b7cb-18f4a9fad723", "sighting_of_ref": "indicator--daba380b-6633-4015-8896-5545e2f17264", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f481aa8f-928f-4496-a7c8-d14df09cf038", "sighting_of_ref": "indicator--aff115fa-ecb9-4429-81ad-ab0d4bec2d0e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdad4e51-2639-411f-be96-d52c2a996706", "sighting_of_ref": "indicator--c405b207-d8ba-498a-849c-ce0d3702f8a7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0de603f-2d77-4889-980c-4e1d7eb01286", "sighting_of_ref": "indicator--1bfb364e-e2a2-4fd9-b066-8b845dac34d2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf4efaa-0e41-49a6-905d-fb5fcde23162", "sighting_of_ref": "indicator--04cba5b7-25fc-4711-bb18-f57d8147c1de", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45635c71-b155-4c00-8935-3a792972b67b", "sighting_of_ref": "indicator--cfdbc4d5-25f9-4e8f-be0f-c46765945125", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777b9e72-e77a-4c7b-b101-4261d2dfe0f5", "sighting_of_ref": "indicator--cfdbc4d5-25f9-4e8f-be0f-c46765945125", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43f76b4-e24c-4b3c-b290-320c473e5c9e", "sighting_of_ref": "indicator--9dfaf2cb-388b-4e23-8a19-e10034fc7d4c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b63438-c9ba-47d9-b34e-40808b9e9746", "sighting_of_ref": "indicator--cfa44ce2-4575-4398-add5-ff5440cf0abe", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944a2355-76ff-40a6-9bd0-7a3d0c95bc5a", "sighting_of_ref": "indicator--c0bbc610-683b-4cc3-9650-3e9e4df2e5e6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44dd7119-e50c-4236-8d23-ff4601a5c7cb", "sighting_of_ref": "indicator--c0bbc610-683b-4cc3-9650-3e9e4df2e5e6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b727436-cc97-4649-9fa4-699cb14d325b", "sighting_of_ref": "indicator--e919d594-9da9-4a00-9166-b6dfaf653b6c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95f2cd8-5dd6-407d-a5f1-85a926f44b96", "sighting_of_ref": "indicator--e919d594-9da9-4a00-9166-b6dfaf653b6c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f9f095-0472-4744-bffe-fb7dc6a0aba8", "sighting_of_ref": "indicator--0b9b69ec-a071-48e2-8b42-be22583bebf9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2889b477-71d0-494e-af1c-5855a418fc1b", "sighting_of_ref": "indicator--afc5afe3-79f1-4957-9979-bb34f332df0c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d87e92c-5a9d-46fc-b113-4f04f2104bd5", "sighting_of_ref": "indicator--83b63d5d-b14e-42b7-8069-85698fd21197", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eefb9ccf-0d49-4cc9-86ca-4c69c75c619f", "sighting_of_ref": "indicator--0eabf05b-0407-4cfd-8408-037e5f5e6407", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c6bfd4-0da4-482c-95d4-05d00d7294d7", "sighting_of_ref": "indicator--cdf00534-4d08-4ff5-b846-5e59b83e38e9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22430f44-bad3-468d-8849-03b2f7d1b95e", "sighting_of_ref": "indicator--0e6aad17-5570-4489-9482-9c745f18e792", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903e66b4-6e52-4e6c-9bba-2137a8f662b0", "sighting_of_ref": "indicator--a5e979ec-fad0-42a8-81d0-f3e2a5aff50f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2690f4-2ecd-48d3-8177-51ff90d10fbc", "sighting_of_ref": "indicator--1f68a26c-deb6-4c3f-8b23-06992aab14e2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0cd125-dca5-4b76-9afd-5955d7a9d6f5", "sighting_of_ref": "indicator--4c231276-48f6-4f35-9c1a-dc2e47166f59", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d0a73d-bed3-4819-85dd-90208e1a50e5", "sighting_of_ref": "indicator--b8b7e0c1-e36c-4d2a-b759-7e23bd06f94b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17731fb-42f3-4038-bc28-99f31401367f", "sighting_of_ref": "indicator--042207f1-d722-4a32-b7ac-1682c79c2de4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bced1065-d9b9-4e90-a25a-49300f7eedb5", "sighting_of_ref": "indicator--83024cb7-12c8-4918-8c45-bc0770c40359", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca062679-2af8-4da6-ad8f-2cf183cedb3e", "sighting_of_ref": "indicator--83024cb7-12c8-4918-8c45-bc0770c40359", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927aed79-f2c8-41af-bfde-117bf1c4dc97", "sighting_of_ref": "indicator--de5c4ee0-6472-43af-b5fe-2ad36b972e5a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24443c6e-8e3b-4d67-9819-5fad3dc3070f", "sighting_of_ref": "indicator--3368785b-b576-4239-a57a-502e127241f6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722e5e84-5e0b-4903-9917-f1ab45bf1728", "sighting_of_ref": "indicator--a6532649-24e7-4ca4-96fe-8ea5ec0c3c62", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2b034d-f239-475b-9ab1-313c4a28e73e", "sighting_of_ref": "indicator--a6532649-24e7-4ca4-96fe-8ea5ec0c3c62", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e205857-6a26-4569-bc09-807beee8e174", "sighting_of_ref": "indicator--5c3f6f0c-74a8-4e4f-ac58-f99c3e0e4d33", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ffbba34-6b20-4d14-a2ab-12c71ed99b7c", "sighting_of_ref": "indicator--2186b7ce-6075-4572-a990-96982bf992ac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b944174-c0f1-4796-8b60-a5cf0d6ef9f1", "sighting_of_ref": "indicator--2186b7ce-6075-4572-a990-96982bf992ac", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9677d5f-f3c4-415b-819a-a8609c1fc4c2", "sighting_of_ref": "indicator--2186b7ce-6075-4572-a990-96982bf992ac", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1531b3-20de-4abb-b560-27336d97d060", "sighting_of_ref": "indicator--b79c0cb8-ff1b-4b66-a108-d589ab00e192", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303b6c89-e3b0-4b96-a505-2402d85de57f", "sighting_of_ref": "indicator--b79c0cb8-ff1b-4b66-a108-d589ab00e192", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bcb7d08-ae10-4f60-afb8-51c08167dbe0", "sighting_of_ref": "indicator--0979dccb-ed16-4bbd-9f47-ccf3636723c1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eea8107-9c5a-4065-bd85-61f99453b451", "sighting_of_ref": "indicator--ae99b9a7-7f84-4ae0-b63d-eabdb6044ee1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c01dc02-725c-4492-a39a-b0d1618cbce7", "sighting_of_ref": "indicator--44eedabe-896d-4f8a-af60-0419f1b5f511", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2558a9d8-6c4a-4dc5-91c6-e26218d9fd31", "sighting_of_ref": "indicator--44eedabe-896d-4f8a-af60-0419f1b5f511", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9d55a0-7d28-4dc6-b14a-b2abc87b380f", "sighting_of_ref": "indicator--5a14e2f5-1252-4fb1-9a00-182bd1326793", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f455324f-fa8e-4ea4-9418-2713300dc40f", "sighting_of_ref": "indicator--5a14e2f5-1252-4fb1-9a00-182bd1326793", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3c7e3e-3edb-4e36-a616-5ea12b9f5069", "sighting_of_ref": "indicator--dd036563-8bff-405f-adf0-2ef5543a786f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743645c1-a770-4ff3-bf7b-356495a8651b", "sighting_of_ref": "indicator--dd036563-8bff-405f-adf0-2ef5543a786f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb6d3f1-b1dc-491f-ad71-2569a32811da", "sighting_of_ref": "indicator--ced6c126-d0c0-4dec-8a9e-6b550e26dc10", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf99175-1d35-4360-989c-cdb1ee12822f", "sighting_of_ref": "indicator--e57c2585-1400-475b-8458-caed321a8514", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c936f21-0b30-487d-bad2-6abc85e13997", "sighting_of_ref": "indicator--e57c2585-1400-475b-8458-caed321a8514", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258f1115-e1a3-486b-92e8-75d40b7eaeef", "sighting_of_ref": "indicator--2e88df07-511a-4c6d-8b5b-e6f3d95e02ca", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f606f221-d03a-4cf9-bd54-25db230a25f1", "sighting_of_ref": "indicator--2e88df07-511a-4c6d-8b5b-e6f3d95e02ca", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75bdd99-a507-4b44-8086-2d43f9994f17", "sighting_of_ref": "indicator--f815fed6-7ca7-4c5c-abf1-5c1d3d9b8463", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aba9634-f5a7-439a-bae6-d563699db550", "sighting_of_ref": "indicator--179f39cb-b3b4-4ac7-9cc6-f21f8aceae22", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9600f9-a2d2-407d-84e6-47d89591a282", "sighting_of_ref": "indicator--44d7dc6a-3aae-42e1-8709-ea0ddb09de42", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c813317-a103-4c2a-a4a3-467ca243a814", "sighting_of_ref": "indicator--44d7dc6a-3aae-42e1-8709-ea0ddb09de42", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e62273b-91e9-4edb-a46f-aebb9f10853d", "sighting_of_ref": "indicator--99c3f76e-7d0b-4661-a5da-5fe0e58694ae", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b986bb6c-2318-43e4-9957-f00647bdd15a", "sighting_of_ref": "indicator--99c3f76e-7d0b-4661-a5da-5fe0e58694ae", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ec35da-23ee-4faf-aba8-b8e47bd766c0", "sighting_of_ref": "indicator--99c3f76e-7d0b-4661-a5da-5fe0e58694ae", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7cd5a27-9b47-41c6-89b9-50cfe587dd1d", "sighting_of_ref": "indicator--4f6f5acf-63d8-4868-b844-46a899b5c928", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2b5b82-3106-40ed-af25-7981576c6cb8", "sighting_of_ref": "indicator--6d5f99c6-3965-497a-873b-a94d8c19389f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8200686-d95e-4ecd-ac04-0511e9c77dac", "sighting_of_ref": "indicator--6d5f99c6-3965-497a-873b-a94d8c19389f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d465db45-cfd9-4e26-a719-917d27490cbf", "sighting_of_ref": "indicator--12e5b229-4b9f-4145-b1e8-7ed60a6c0db4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d446b4-ee0f-467a-862b-c8636bdd1ef6", "sighting_of_ref": "indicator--12e5b229-4b9f-4145-b1e8-7ed60a6c0db4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e06b77e-18b4-4f12-982f-b93a6e86c4ec", "sighting_of_ref": "indicator--5d600e48-d7a6-489e-9e62-33809d1ecfa0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8411bb9-dd26-4a32-98e5-f9363abf7a26", "sighting_of_ref": "indicator--b8d8e847-dbf8-4789-a37a-b7038ae35cac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8e6dc7-e45e-44ff-89d7-cfc5f448b117", "sighting_of_ref": "indicator--b8d8e847-dbf8-4789-a37a-b7038ae35cac", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464174c6-d8c6-487d-838a-c87c74c8c26f", "sighting_of_ref": "indicator--714852d8-5977-4f34-ba9c-e9514abe4f46", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a813f4-6c9b-4109-8199-4d180ee2c5e8", "sighting_of_ref": "indicator--e519b0c1-f899-40b0-bd03-8df2ce4787a4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa343a94-e27c-4153-b106-85419537f2c3", "sighting_of_ref": "indicator--e519b0c1-f899-40b0-bd03-8df2ce4787a4", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a8df14-acd8-4b44-b350-fb4e28fe3faa", "sighting_of_ref": "indicator--e519b0c1-f899-40b0-bd03-8df2ce4787a4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e667a7-f534-49d6-a0f6-b386a4fe448b", "sighting_of_ref": "indicator--360d5275-5048-4b45-8546-aac345c992ae", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6deb0591-1072-48af-b3fd-fe0269214a7f", "sighting_of_ref": "indicator--360d5275-5048-4b45-8546-aac345c992ae", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e74a17-7cc8-4566-b54e-9cf79ba9712e", "sighting_of_ref": "indicator--360d5275-5048-4b45-8546-aac345c992ae", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36236b13-0cec-4460-af0a-c3495560f387", "sighting_of_ref": "indicator--5779fcc2-db08-48c5-83ad-f8bfa14ec27f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e5887b-7f4f-4353-a862-da4d27d67d61", "sighting_of_ref": "indicator--5779fcc2-db08-48c5-83ad-f8bfa14ec27f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709a6bff-3592-4df0-8c9d-13219ecb7992", "sighting_of_ref": "indicator--8016dbb3-7c95-421d-bdaf-1ae6279737bd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8917b5-4334-4c24-bcdc-13d14aaf4980", "sighting_of_ref": "indicator--9ba12325-9f36-4866-bad5-14bfb3563ba6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4779c4-11fa-4321-9890-1a0fb470c0a1", "sighting_of_ref": "indicator--2704865b-506e-4a12-98b1-024be4af2d88", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ff05b6-3a2c-4a54-950a-0bdf01297b1c", "sighting_of_ref": "indicator--7df6fa20-5deb-48b7-a6c5-a2687f4c38c1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eef9269-7fc5-4ba8-b204-65efbbd1bd6f", "sighting_of_ref": "indicator--0b1e604c-47cd-45b3-8e6e-97bfe017423e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21be48f6-2172-4fd9-a128-5a4084c6daa6", "sighting_of_ref": "indicator--08613792-5b18-4c33-a22e-e81f7c646e9a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b287b51f-982a-48ea-b7a4-28d7dfab9da8", "sighting_of_ref": "indicator--8e2b599b-513b-4f94-823b-a78be64da622", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5108c55-efcd-4620-b405-8ccbf59c6521", "sighting_of_ref": "indicator--e16692c9-a4d3-44a3-9f46-9089030eee32", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7e26bf-e2fa-4f79-af53-e4482d9a8e3c", "sighting_of_ref": "indicator--750b14e8-7666-4cf8-8932-a46116d32be1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0dca7f3-dc1d-4e03-b89c-5b05ad450677", "sighting_of_ref": "indicator--750b14e8-7666-4cf8-8932-a46116d32be1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2432355-1a21-4732-8a4d-7fd15f376071", "sighting_of_ref": "indicator--6528d7b3-e91f-41de-bb37-150384b1767a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9a02a8-1d58-4ad0-8731-f2029d9758ca", "sighting_of_ref": "indicator--6528d7b3-e91f-41de-bb37-150384b1767a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e68d05-c058-4165-92e1-48480e7f67b5", "sighting_of_ref": "indicator--03fa4f79-5fe6-4dbc-b7a3-6ba5b19f1de0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c562340c-706a-4638-9024-9a58733ef779", "sighting_of_ref": "indicator--3ef82771-30b8-4a3c-afd8-958e3a64c268", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce69fcb-a72b-44ac-a5cf-700895c0a29e", "sighting_of_ref": "indicator--3ef82771-30b8-4a3c-afd8-958e3a64c268", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c5a481-46ae-41cb-96c9-b682fe23a02c", "sighting_of_ref": "indicator--0d14a309-dd60-424f-a680-bb58d2972484", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffae8683-4669-4b8d-9e3c-72e759f7d43f", "sighting_of_ref": "indicator--0d14a309-dd60-424f-a680-bb58d2972484", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3495324-105b-4e66-8ea4-3ea4322beb81", "sighting_of_ref": "indicator--06567025-41c2-4a79-829c-d791ace873d3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f037a9-ee6c-46c0-ae4d-1d498d53a96e", "sighting_of_ref": "indicator--09c1f6f1-3e79-456e-accd-e1b81ddca370", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da29dec-65ae-46e8-a4ed-2efb8c1f5aa8", "sighting_of_ref": "indicator--09c1f6f1-3e79-456e-accd-e1b81ddca370", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8549230d-be9c-433f-b13e-8b5803feb9eb", "sighting_of_ref": "indicator--2b8e81c4-2fce-465b-8736-9bc3f10897da", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c749d4-42ea-4e13-aa57-5a8feb4856d6", "sighting_of_ref": "indicator--2b8e81c4-2fce-465b-8736-9bc3f10897da", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32722de4-8616-40fb-9bf1-dc741a66c5c9", "sighting_of_ref": "indicator--da3b0ff1-8e44-40de-a040-0d9a9d2df57b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2832de-f532-4ba7-a426-31a7052f4502", "sighting_of_ref": "indicator--e60b1e7f-776a-42d7-9e0f-1690c2878dba", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396ad327-d99d-44eb-91de-56ca78a4e7cb", "sighting_of_ref": "indicator--c1eefeae-b671-4041-a1ce-e51f9fe2e541", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5732a172-e3cb-4bd2-b07c-c1015c874a07", "sighting_of_ref": "indicator--c1eefeae-b671-4041-a1ce-e51f9fe2e541", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b893dfde-2eff-4ed7-b371-c1c729f602db", "sighting_of_ref": "indicator--c1eefeae-b671-4041-a1ce-e51f9fe2e541", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ee48d9-6233-49b3-997e-5ad004adce0f", "sighting_of_ref": "indicator--b4524661-5121-447a-889e-e385f90d0605", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1a0f7b-ab3e-4909-9dca-a55c0c0cfbda", "sighting_of_ref": "indicator--b4524661-5121-447a-889e-e385f90d0605", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379dc358-3dca-46b3-ab03-2e4b815b68c9", "sighting_of_ref": "indicator--9410d010-ac64-413e-ab90-20551f3f1050", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8a43aa-01df-4695-904f-209f14e34b0c", "sighting_of_ref": "indicator--7c3dc13e-4824-4fd2-821b-1f2ac8ccd595", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--186f4879-90e4-434f-b49c-eb5884a79b7d", "sighting_of_ref": "indicator--127dc5ce-6c05-4cd7-9562-687fe480c261", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2879473d-5709-403e-85c0-be11e8af59ed", "sighting_of_ref": "indicator--554edfa4-7346-447e-a96c-e0cc070cd278", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d169d98-330b-46ef-9dc5-267f2babfbfb", "sighting_of_ref": "indicator--7cf18010-c5f7-4b09-bdce-7d09d9501665", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09fced98-55c0-48cc-ac08-5ba118b58a31", "sighting_of_ref": "indicator--7cf18010-c5f7-4b09-bdce-7d09d9501665", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea49b277-db21-4c57-bac0-458b02bc1f25", "sighting_of_ref": "indicator--32588ea0-da7d-4d9f-a15b-2a607f339514", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b11fab9-0b41-4b39-920f-4d5eba8102b7", "sighting_of_ref": "indicator--2f1a4d13-9791-4188-894b-16d4ce5d9507", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09dea82d-a30c-4d2f-804c-4c2e67008bb2", "sighting_of_ref": "indicator--e00b8280-0b82-48f0-926e-e890e9f31d73", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbfe81f6-b9ca-42f5-a98b-d1cf91bf250a", "sighting_of_ref": "indicator--1c3358a0-5de4-4cd9-848c-11f7fb594ad5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32834df9-f379-4f03-82e7-5c5942f3be76", "sighting_of_ref": "indicator--4b50cbc4-4b3c-4a7e-b6c5-4370fd82e856", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55886809-0c14-49f9-8fd5-d9c65c818717", "sighting_of_ref": "indicator--25cc0b8e-4407-4a7a-8333-85e9b9e662b4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6b606d-4d8d-4cda-9c4a-fd3d103e01fa", "sighting_of_ref": "indicator--63b0857f-efc8-4b44-b823-b4dfe4ba896d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f631353-adb6-495e-a924-25aefadf8322", "sighting_of_ref": "indicator--f8fad8bb-6e00-44b2-8804-885d2e8c259a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5182e1e6-8d83-4dd4-b65f-a6831923b1d7", "sighting_of_ref": "indicator--572ffb5b-1d8c-4913-9761-23d6858751d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd4d242-1045-49f2-815a-6d8daed379cc", "sighting_of_ref": "indicator--0bae54b2-8d96-46bc-9433-8431e1e617c3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3129b939-d655-4817-9dc0-335c6a9ab1cb", "sighting_of_ref": "indicator--896f8541-c8f6-43c7-98f0-369e120206d5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c748c728-0483-4935-aad2-5dc9fa472ec3", "sighting_of_ref": "indicator--896f8541-c8f6-43c7-98f0-369e120206d5", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10698956-cedd-4523-a522-47a7b6c88c51", "sighting_of_ref": "indicator--896f8541-c8f6-43c7-98f0-369e120206d5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904ad507-543d-4a93-a445-39b9d917c440", "sighting_of_ref": "indicator--d63a8ae4-ca20-4ecb-a405-e5a31cc73089", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbbbc293-05f1-400a-9ad6-a5e3a4879624", "sighting_of_ref": "indicator--1fabf831-ee0d-42d0-9e24-736502e825f8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c713976-c37f-4f36-bada-dcc684dd8fd0", "sighting_of_ref": "indicator--aab9d020-094f-4126-9c8f-0ed05f847e6a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e8523e-d755-4ebd-8bce-adf1a5ead072", "sighting_of_ref": "indicator--aab9d020-094f-4126-9c8f-0ed05f847e6a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2f0127-895c-44a1-9b04-86c0a5034ccb", "sighting_of_ref": "indicator--efe59093-b425-4d0b-8b58-c1bdc29ec038", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d142f4-b914-4221-81b8-74e2372f1fed", "sighting_of_ref": "indicator--353b894e-06b6-4653-9c3e-8857f13d49ad", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a261157-837d-4922-9d9f-e59f320b9cee", "sighting_of_ref": "indicator--caf9ae24-9731-472e-8416-a9e57ada62f3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e18b4a-05fb-4c56-b5ab-700a89d513e2", "sighting_of_ref": "indicator--89a2de24-6aa1-4438-8a2f-6eca5042fe4a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cedb78d-39a7-42a3-8cf5-ce19a3f1f429", "sighting_of_ref": "indicator--1bce4215-a201-4024-91a8-3950f5412057", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a6a578-46bf-4600-809b-5d1ddcb48479", "sighting_of_ref": "indicator--1bce4215-a201-4024-91a8-3950f5412057", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793ddd9a-e4d2-42a5-8513-7cabf6411a8e", "sighting_of_ref": "indicator--1bce4215-a201-4024-91a8-3950f5412057", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee832a57-2210-4935-9db6-dc37391b6005", "sighting_of_ref": "indicator--4e6beb2e-1b0d-41f7-b1f6-482aea451607", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a21970f-7125-4c99-a21b-6f7b490692c5", "sighting_of_ref": "indicator--4e6beb2e-1b0d-41f7-b1f6-482aea451607", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47661f40-c6f2-4a2b-a809-b8fdad02b307", "sighting_of_ref": "indicator--29a3a099-ede9-434c-aa35-f239760011ea", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf50d83-09e4-4a94-b71f-0c7b4d672376", "sighting_of_ref": "indicator--29a3a099-ede9-434c-aa35-f239760011ea", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8994e684-6662-45d6-990b-b582051c3ee4", "sighting_of_ref": "indicator--29a3a099-ede9-434c-aa35-f239760011ea", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62c07068-3b5b-4d94-9c08-8c6026f4fe42", "sighting_of_ref": "indicator--2ff3aaf2-e3fa-493f-9d36-c0b94cc490fe", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ee3eee-ae7e-4c3b-9567-1be43299b717", "sighting_of_ref": "indicator--2ff3aaf2-e3fa-493f-9d36-c0b94cc490fe", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5d94e9-a7d3-474c-84cd-740f09c98a49", "sighting_of_ref": "indicator--2ff3aaf2-e3fa-493f-9d36-c0b94cc490fe", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e77e0f8-7f2b-49d2-89cc-4a779caaeab6", "sighting_of_ref": "indicator--53a3f304-ab71-47f9-9b25-86d0895793d6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936fc18d-e464-4eba-b31e-d06d1e516304", "sighting_of_ref": "indicator--53a3f304-ab71-47f9-9b25-86d0895793d6", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cddecf01-4f5c-422e-b912-91bea4274c8f", "sighting_of_ref": "indicator--53a3f304-ab71-47f9-9b25-86d0895793d6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1e2df9-441d-4869-8e0e-6afc8641bc20", "sighting_of_ref": "indicator--6c6a88e8-6b28-4df5-b814-8b8b4cb1c1ac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d234793-72e4-4b65-b841-d23ac275d319", "sighting_of_ref": "indicator--d0676146-0187-4459-b33d-f3a7b0ce9ab9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be73f06-1960-4909-bab6-907352597c11", "sighting_of_ref": "indicator--d0676146-0187-4459-b33d-f3a7b0ce9ab9", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a689b2e-b1b4-46f3-b433-3524de6003bf", "sighting_of_ref": "indicator--d0676146-0187-4459-b33d-f3a7b0ce9ab9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db3cb49b-b062-4f0b-8f8d-2d151fc632c1", "sighting_of_ref": "indicator--0628b494-4959-4d24-bef4-7c941d31676e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1388ef62-184e-4ce0-9b3c-78c954af9302", "sighting_of_ref": "indicator--0628b494-4959-4d24-bef4-7c941d31676e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aa1d85e-a995-434c-8397-2e87a3fb55cf", "sighting_of_ref": "indicator--d54bc937-e172-4728-a5ac-bc5d8eaee8f5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64deb8a5-508b-47c6-a917-f97570bb56e4", "sighting_of_ref": "indicator--d54bc937-e172-4728-a5ac-bc5d8eaee8f5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5e54a3-4b19-445d-8866-e263ea7d6ce3", "sighting_of_ref": "indicator--1c6de581-c0af-4173-92f8-acb234295532", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e091664-9b6a-4e8c-901e-4349ecf1c86e", "sighting_of_ref": "indicator--1c6de581-c0af-4173-92f8-acb234295532", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541bc010-544f-4be8-bd1d-8c3dc0da1628", "sighting_of_ref": "indicator--27c5dfd1-4af4-42e4-9af6-21f72fe37b61", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a6b867-7b4b-4abb-9e2b-542a0aef58f1", "sighting_of_ref": "indicator--27c5dfd1-4af4-42e4-9af6-21f72fe37b61", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2804b609-c4bb-422d-b8e4-cdf75282acb6", "sighting_of_ref": "indicator--c471e619-b5da-44d8-ac5b-a856cefb4c58", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ff8f25-e49a-4246-8681-52f5348dbdcb", "sighting_of_ref": "indicator--2c6641da-26ce-4782-8209-c2ee51d132b4", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0c68a5-56fc-45d7-b20a-8c11a330ce84", "sighting_of_ref": "indicator--2c6641da-26ce-4782-8209-c2ee51d132b4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253f9e71-f004-4270-91d9-6fb749cdf8ef", "sighting_of_ref": "indicator--ece36585-ab90-498a-8e90-73af2de9edb7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cccda9b7-2a1f-4f0f-8bd6-ee3451b9d2d6", "sighting_of_ref": "indicator--ece36585-ab90-498a-8e90-73af2de9edb7", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d5fb8f-fb66-4c27-a0ba-28ddbbcb6dee", "sighting_of_ref": "indicator--ece36585-ab90-498a-8e90-73af2de9edb7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce3c06a-200a-484e-9ffc-3e63a445c37e", "sighting_of_ref": "indicator--2acece12-4031-4103-b901-15ef836ebdeb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58b0e2a-8610-4a39-aa79-ebdc985bb0c5", "sighting_of_ref": "indicator--17c24f98-9b14-4f46-8788-a4eb453dc6cd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea441ed-31f5-48b1-b00e-09c482ebe7fc", "sighting_of_ref": "indicator--d5584637-6b9a-4192-ba59-7d5de4d42212", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a989b471-52f2-45c0-816e-683f2ab9fb11", "sighting_of_ref": "indicator--48afba16-c449-4ff8-a7e9-a95151dffcec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdbfc3cb-3f03-4e01-a4d6-6730dcdba8fe", "sighting_of_ref": "indicator--977e09b8-5d4d-49df-9685-bb72802af394", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e5f9ce-683e-472f-95ef-200d769c9195", "sighting_of_ref": "indicator--235fe557-720e-4acf-ad2c-f22e22b809cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3786f9eb-e57a-47c3-ab75-922f2e7e7f34", "sighting_of_ref": "indicator--2e003816-5aca-42f8-a603-234f2b90487c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f30713f-ef02-4dde-b8cc-534b4b63e30d", "sighting_of_ref": "indicator--11f43b2a-6dc9-496d-82e0-9054b326bcd0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1e3426-d5d7-4aef-a392-0610e8c39a58", "sighting_of_ref": "indicator--a298edbf-01d6-4edf-a8dc-90dc4d286357", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c740b9-36a1-4f07-8b1e-6a37fa483f0d", "sighting_of_ref": "indicator--b26c7586-1476-42d0-b018-425fe82c6c00", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa9e4a2-babc-42fe-b486-de38d1e54c7d", "sighting_of_ref": "indicator--3b6761e4-8d7d-4021-a22a-181e4001260a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba02d6d-b3e9-4f13-8093-50049d934574", "sighting_of_ref": "indicator--6d33d108-e316-4eb2-97f8-43fd9da50866", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f679640-4c20-4713-b804-fe435e9cc16f", "sighting_of_ref": "indicator--7e048392-4993-4148-8917-565b7a35324c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c439e2d-2664-4a39-bf4c-7f382dd3ffd2", "sighting_of_ref": "indicator--fba134c9-a115-461a-9db3-747f735faaa6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876a6bcb-2688-4b66-b0ef-2a71282e2de2", "sighting_of_ref": "indicator--87384c50-7593-4244-8bd3-d3d448a88ef0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2fe63f-f650-4c0a-aa72-4f669818d8da", "sighting_of_ref": "indicator--8b84ddea-7488-4d93-82ca-53afc8b93d01", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a270ad-6977-41a4-95a2-e2daf91e870c", "sighting_of_ref": "indicator--5345f3a4-cf07-4ebd-81b5-6dc57a5e778d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1153c224-e377-45b2-9431-b95ebc2f10cf", "sighting_of_ref": "indicator--3664c553-d8fa-42ad-8c2e-dab27cb91c7b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2537dee2-b6b3-4a85-87b4-60b98999b1cf", "sighting_of_ref": "indicator--edf678e6-9a95-4e8a-bc0e-a21d34b17912", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f3eb47-abd4-4135-adaa-9ccb8f2740b4", "sighting_of_ref": "indicator--3745b31a-d83d-4969-9eab-fc1e867c6908", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36829915-8f44-4d20-bdc6-fee03c21b4f3", "sighting_of_ref": "indicator--a03a8903-2a77-4680-814a-129d0b8ef921", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49c21d0-9cbf-4f9b-9fc7-e8574d282001", "sighting_of_ref": "indicator--e9d5b733-49a7-4469-a973-c81436fabd2d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50eef99-303a-404e-94ad-c0b2d8cd5d21", "sighting_of_ref": "indicator--a9ff1252-923e-4e7d-9ef6-5e3e92e0f31c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2a19ac-be31-4992-b010-b12331db2056", "sighting_of_ref": "indicator--e82f8830-bc5f-4c11-a4fd-407b777db60c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--035f0fb6-acb7-4d19-95cc-0a02b558ae33", "sighting_of_ref": "indicator--5b9369fa-c19d-4ead-a61b-f0c7c82bba81", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246d77fd-9499-42eb-a925-796b7809ad61", "sighting_of_ref": "indicator--aa80eb90-5817-4429-b9d9-21d757984d15", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db23e9ca-af00-4d70-8386-61d51e841133", "sighting_of_ref": "indicator--8fa54664-3c69-4694-89ef-b487ce8da98f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaefaba0-e7fe-4cf9-9d30-b5f2de53b1c9", "sighting_of_ref": "indicator--2b563f94-42e5-4fb9-aad7-812060a83139", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67a726e-1451-4cd5-8a23-eac2924f9747", "sighting_of_ref": "indicator--6b70853e-d5db-4649-bdba-9fdaf2a12244", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e7365f-c72c-43e9-a2e5-ea1eb87a2f99", "sighting_of_ref": "indicator--57af07b1-0cf0-46f3-a93d-4c99a9be3ef4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c837b29-2932-4007-a16f-baa62e40e209", "sighting_of_ref": "indicator--cec6bb27-a6d9-4936-baf4-329be1e4f744", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02fe4e78-166f-4ba4-bd9c-0af8d031c850", "sighting_of_ref": "indicator--7454aaca-6e8c-4c04-9db7-945d45c44184", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796e1c59-6a00-40d9-a5c1-6ad0f1fdcf7e", "sighting_of_ref": "indicator--8f328a99-70a2-4329-9adb-2219275dda23", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd6a256-e7ee-48f9-9513-ba82eeb4f948", "sighting_of_ref": "indicator--63ac9784-f54e-4780-93bc-319142e5c47b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b41d213-409b-4128-a625-1e6c379ef490", "sighting_of_ref": "indicator--1e70aea6-9c6e-42ec-9aab-64693c5b98af", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2640db98-2611-4241-b9be-0b0fae61c9fd", "sighting_of_ref": "indicator--7334ee49-21a6-4cdc-bd60-bbdf1051b422", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315eb30a-b01b-43c7-85c4-071b66f40b48", "sighting_of_ref": "indicator--81702b29-771a-4826-9a80-4ecb59e15055", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7358dea8-032a-4daa-8166-f38c9f77d8b3", "sighting_of_ref": "indicator--ea08c613-17ee-444c-a896-df43cdb52a05", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558db446-e84e-4964-a238-001318471e77", "sighting_of_ref": "indicator--694c6dbe-0735-4060-840c-849afba3fc64", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c5126f-e067-4557-b60a-3b39976fe0f0", "sighting_of_ref": "indicator--39d8426f-430e-40b7-aca1-6345ba8a31ba", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97cdcfb8-21bb-44ea-bef1-cf2d0fa4baf6", "sighting_of_ref": "indicator--1cbf08f9-7d3c-46f3-980c-a4fa313ac3a8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e007f6-a773-4deb-904c-efe429a5e999", "sighting_of_ref": "indicator--5e11e5a9-1508-426b-813b-9a6d309541d2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65bf9686-2a13-4249-8e12-3c980522a4c5", "sighting_of_ref": "indicator--ddf9a4de-88fd-481a-a614-2c57858f99e9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b9b803-34dc-4557-8f79-8f1ec18290ca", "sighting_of_ref": "indicator--a93e8d6c-88d8-44cf-b297-a30b3712e7ca", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdff5eb2-496d-4b9c-ad64-9cf1c75f4236", "sighting_of_ref": "indicator--ca1be872-7250-4689-8d06-df48b3a8bae4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35c5683-85e4-4253-8798-b9f30301b8bc", "sighting_of_ref": "indicator--151630f6-3287-4334-a374-5398d689b7f9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffeaed9f-bc36-4f28-8aa3-cdd48d907a89", "sighting_of_ref": "indicator--09199b09-1a46-4c08-95b9-0a49d874f916", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c98b74-d242-4866-9628-acb94f391a5b", "sighting_of_ref": "indicator--d307dc68-09e5-4e59-8b0d-2b686aab3a3b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4863ad-70e1-4f0a-957f-e6413d468704", "sighting_of_ref": "indicator--8943f970-1f83-4453-bc00-148b6847e262", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed00d6d7-7879-42a1-b1b1-4b6402118836", "sighting_of_ref": "indicator--03ff070a-a7e9-497c-9630-89c946d87827", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997e98e4-ddcd-49dd-9be6-030033e0f10e", "sighting_of_ref": "indicator--01350db1-77ea-4525-a9fa-d0d192e019e0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3598e50-7674-4463-b5ef-d6d17e1ed391", "sighting_of_ref": "indicator--2a90510f-ffe4-4c94-80f2-999416af4424", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d2e134-0b1e-443a-a1d0-b55f064accad", "sighting_of_ref": "indicator--f0fde7fa-2a9a-43f3-a22f-87081e9169b9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e0c0bd-2949-4746-a2b2-659aab04bf87", "sighting_of_ref": "indicator--44c16c5f-420f-404f-97b8-b9f1ae9851eb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d692ce38-b76c-4134-9253-81d380f1fe62", "sighting_of_ref": "indicator--bf50f987-f58c-4ba2-b0a1-cf6bd397d9aa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5bc2f8-d89c-46b4-87b2-c91dc530dba6", "sighting_of_ref": "indicator--f11858ee-4c50-4050-8ad8-a67ed05cef92", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401f3da3-6e9d-4148-8c65-a68f5a82bd24", "sighting_of_ref": "indicator--118a20ec-4996-4511-8b01-b6488cd14ea3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2809b99d-d610-4d5b-ae5f-f718e97646e8", "sighting_of_ref": "indicator--de161528-9cc7-4029-8e77-2ac4f83e04ac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2df2a5-8643-4d17-af34-97ae2c5914e4", "sighting_of_ref": "indicator--84486f08-71e9-4a9b-9c50-ac550c4f148b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d13b4eb-1363-41a8-afb7-9e58307df054", "sighting_of_ref": "indicator--23ef7c8d-e2ac-4adb-836a-0085d3668020", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--780bc7bf-4c05-4c4b-b206-7a276bb2717b", "sighting_of_ref": "indicator--d4ae0d2b-2e54-42e0-bcfc-6bf6428f70f7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7f3403-dd44-44ee-983c-ae7a04912085", "sighting_of_ref": "indicator--89014f41-a436-4ce3-b88a-3cf8e1ec4ce4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a599f60f-8381-4d33-b4e0-8ecdaa07c1e4", "sighting_of_ref": "indicator--438305c8-1f70-4f08-88a7-8aaa5bdd27b0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76b7045-1615-482a-a2ac-eeee249b0f2b", "sighting_of_ref": "indicator--51e6be0f-34e5-4e30-8759-265de25bb094", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--077621c7-7147-4740-9c96-f22170d4a34f", "sighting_of_ref": "indicator--35534a0f-470d-4db6-a28d-9672fa8fa969", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb40cc9-8a77-4e48-b92b-768fe1fe18e6", "sighting_of_ref": "indicator--d608c301-1a58-4ee9-9c25-86a49900e070", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d844a4-cafd-4829-9203-86d8e6e6f6dd", "sighting_of_ref": "indicator--d9d8d02e-f484-4df9-9c0a-0e332fa5e58c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18bca933-e3e4-4653-9ee4-6517b7c18016", "sighting_of_ref": "indicator--2a2b0518-22b3-4f5b-92a1-053e1990059e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2ea175-6516-4c8f-8394-97460284e899", "sighting_of_ref": "indicator--397ef2a3-f774-40f1-8699-34304a13027f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456bba02-def3-445d-8bb0-98dcf040b1bc", "sighting_of_ref": "indicator--0c1e97d8-c8a2-424a-95ff-bd65d0ac9cd2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8c0cdf-be77-4d54-b62f-8661e95b05df", "sighting_of_ref": "indicator--9c8c7556-a509-4e16-bb2d-58cbf0ae8a58", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff381f7d-c526-49d7-b510-2a39706dbcda", "sighting_of_ref": "indicator--e59db556-cc2a-4a34-a1fd-dc1c4f480539", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e19b37-2dd1-4f20-85ac-8bba8c852a25", "sighting_of_ref": "indicator--bd51685a-38c4-4679-aa1d-7a8ee8a2cfff", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221fe8c3-eaff-4906-8781-90ea90793c5f", "sighting_of_ref": "indicator--75d2cda0-72bf-43a1-b5ae-5032a2c8095e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ea6e43-9fd2-42b9-b0c0-6a5c381c34e2", "sighting_of_ref": "indicator--b07b1c41-2b5b-4f65-adaa-f121a9dfeda0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06bcc4d0-72cd-443f-9a08-9e0af475dab1", "sighting_of_ref": "indicator--bac734d3-f817-4c5d-9b99-d10a51d9682d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755e5276-83ca-498d-9015-0d3764b164c8", "sighting_of_ref": "indicator--ca9e785d-cc07-4a40-a6d5-8bd95a5e0578", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b5ca8a-5ebe-44d9-8f23-b00ff109facb", "sighting_of_ref": "indicator--985a6b43-9e09-4d87-a297-ce8cc3783051", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2768a92-14d4-4088-a78e-b76e122d2641", "sighting_of_ref": "indicator--c9a78236-0f29-4701-82a3-ac7a8ea9cf84", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75d97c4-aaa1-4485-959b-c6c4e9111287", "sighting_of_ref": "indicator--55b6e973-483b-4882-8e9c-45fa799b5e57", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10bd8749-4f65-4f7e-8b1b-cfbbc67f6960", "sighting_of_ref": "indicator--0e720672-0407-4a85-90c9-667ae5a792ee", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1cfe3e3-3553-4f1e-8048-0c1064e5b1da", "sighting_of_ref": "indicator--08a6b19b-f508-48a2-a3cf-5f878e98c15e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a456e69f-86b9-4050-9524-84004b973c04", "sighting_of_ref": "indicator--08a6b19b-f508-48a2-a3cf-5f878e98c15e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e16cb13-a4cb-48fe-862e-921e79d12bb0", "sighting_of_ref": "indicator--c26ce34c-0e7e-4a0a-ace6-817d45cfcaa1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ffd07d5-4c4c-43fa-83f9-32a5eaf9f750", "sighting_of_ref": "indicator--d5e324a8-2844-41e4-8006-9041b3c0b8f0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df980fdd-72cd-4714-a42d-c9df6b643364", "sighting_of_ref": "indicator--54ef998c-c988-49cd-81a7-c2f4ce8d35f7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f316e23-f26b-4933-ab2f-01cecdd2089e", "sighting_of_ref": "indicator--1af09b80-ff22-4a5a-bd7a-07ef05a41672", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070e4750-965c-4f21-b5d5-24f08815da57", "sighting_of_ref": "indicator--e3c5346b-72e8-44ac-a6fc-897b8d9fd37b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef1d0f3-d4d7-4703-8660-c2bc7e856134", "sighting_of_ref": "indicator--926261f3-1fe9-4a0f-bc65-9080c1dfb195", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f91de9-5edb-42ae-aceb-020a674d7ea8", "sighting_of_ref": "indicator--83bb687a-a4e6-46ae-a985-7b1b02180ca0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea801e7-608e-4e3e-b473-279a8fa077e5", "sighting_of_ref": "indicator--9bf1cd47-8fe8-456b-9d94-711d77081466", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616a68ac-bdf7-4ecb-b119-920a01286836", "sighting_of_ref": "indicator--6634d572-cf8d-40c0-84ff-9804fd852996", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df524bb8-5272-4684-a863-8fb470fce5b5", "sighting_of_ref": "indicator--70384b02-f480-4ecd-8517-d6746c96d39d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f7c1d1-4b73-4188-89ca-18dd2cf00907", "sighting_of_ref": "indicator--7fa5969e-40ee-4aa4-84e1-bb95d5281201", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e25c460-0c03-41ad-abc6-9877f9025b70", "sighting_of_ref": "indicator--1a279de8-3a60-4c43-9da1-17651f2badc2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5e8327-bb77-461b-8408-e124363fe2ba", "sighting_of_ref": "indicator--88fa9712-22db-4f52-8357-77c372293dc6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b3ceec-f375-4410-98e9-27f9dcba90b2", "sighting_of_ref": "indicator--692394cc-7ac1-4417-90ac-cab593811891", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45d0b19-9eb3-405d-b0d5-3043bbab3b60", "sighting_of_ref": "indicator--86ad6710-8b5e-4827-b48a-396d47b2a8a0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f008fd0-45db-4f6e-ae5e-21371a534e32", "sighting_of_ref": "indicator--54ceb53b-6bae-418d-b86d-32728f7fa4bf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f744fc2-fb80-4dcb-8e54-c1035194b9c6", "sighting_of_ref": "indicator--349ec438-5c18-4386-9293-b4db7051d911", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a262c5-f4bf-465a-b1e8-28552564e4b7", "sighting_of_ref": "indicator--680834a7-fcbd-40a1-b035-781a166d8181", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0784a9ba-ded3-480f-8757-7be7844bc0cc", "sighting_of_ref": "indicator--19a145f2-09fa-4dcb-8883-3aed2bd9b07a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1accfb6d-df53-4d22-a98d-08ac6ec61554", "sighting_of_ref": "indicator--2f8ff6b9-e985-4604-80f5-5867fed9eb5a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610899a1-276f-48bb-83d0-eb76fe5512a9", "sighting_of_ref": "indicator--0e448f4d-5495-42f1-97a6-0f1f002f0065", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6f9bcc-ff2d-4f6d-bcd8-9308f56aaa4f", "sighting_of_ref": "indicator--d36fb7f9-bd28-4196-95ad-c4fda3fa8326", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39593fb2-8a2a-4177-a380-4410a7be06d6", "sighting_of_ref": "indicator--6101a826-e9bc-4358-b4bf-9f98b4e29aa2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009afd2a-f5aa-4a92-94d3-e5b1239cb808", "sighting_of_ref": "indicator--778a175a-f07c-4cc9-a0ff-c6d22be40b2a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58876494-4eb3-4cdf-af8b-f96d4215c61a", "sighting_of_ref": "indicator--5a915871-c4e1-4d35-84ee-5b4af4556d56", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db7504d-2ad7-488f-b67b-9a1f555e32da", "sighting_of_ref": "indicator--e6a96a7d-6dc2-4ded-bede-8a12720cc963", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12bde35-8196-4261-8f1d-f43354be1b75", "sighting_of_ref": "indicator--7f6c19b7-2bb0-48ab-bd8c-64b1d3861a0a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8c08cd-a569-4365-9720-f628fb77445e", "sighting_of_ref": "indicator--11b89efb-c105-43c9-82bf-0c95eef32743", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5278f7d2-0115-40e9-99b6-f0f6c80b9827", "sighting_of_ref": "indicator--e40c1470-cb5b-4341-92fd-faa629f60173", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef577e2-326a-487e-aeb2-d494264b6b59", "sighting_of_ref": "indicator--bb04926f-7a60-4588-9980-18e78d8627b0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f467f184-4d9e-4fb9-827d-fc50d35afbae", "sighting_of_ref": "indicator--9e1a1452-0b74-4b92-a9a2-4b520dabbef6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00bb9b1-527a-41e5-af45-396b09de7735", "sighting_of_ref": "indicator--7492dbee-c468-40f9-a338-753fb491afb2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690f24ab-4a6e-406f-ba40-c9b8b899d535", "sighting_of_ref": "indicator--b2ffae76-0807-4a47-9481-ab3283d6e918", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ef6ddf-007e-4142-8c1c-798625fc6e84", "sighting_of_ref": "indicator--f6795f30-078b-4a94-add2-c7499084af2c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca211a5-ae37-4ce2-85cc-7620f377143c", "sighting_of_ref": "indicator--a6cb156b-3b93-43c8-90f2-bdea2dcb4af2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32045814-797d-4f17-9600-240d41a29182", "sighting_of_ref": "indicator--5b33f8dd-cd99-4a12-8e77-36d4032f7acb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f655316e-a8e6-4b83-af0e-43b9a8276c5c", "sighting_of_ref": "indicator--6e6d9e66-b7ff-4ea1-9f1b-e3cc762ca66e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afeca2a6-4477-4922-8e88-2b2ec89f5e85", "sighting_of_ref": "indicator--5e954f91-ac89-487c-b3d4-61b2ed79853a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--737fa399-4e00-4fe2-833a-99736ec286a5", "sighting_of_ref": "indicator--0cb2e003-f91c-4331-beb5-5fd50c279e89", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a832ef9-0416-4b83-b9b9-bd1d20f36109", "sighting_of_ref": "indicator--7a965e7f-7db0-49cb-ac33-ae5623e42d81", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a54448-695e-4011-9278-74a371a424af", "sighting_of_ref": "indicator--e68c2cb4-13de-4921-aaa3-8ed54c66c9c1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1b66d4-58ed-441b-95dd-75cb4c246bad", "sighting_of_ref": "indicator--1be52d55-a1ac-4130-aba2-6b1477c279e9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2366f0-ed60-4ce6-a9e4-1d8e96cbdc63", "sighting_of_ref": "indicator--f6e4dcf5-8f64-4dae-a46c-6d18dddb63c7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bd6382-bc29-4640-a558-0340fcd6b59a", "sighting_of_ref": "indicator--97a586f4-0ea9-464e-8b9e-2dffa08d0630", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8523c503-8f4f-4b11-a0b3-95595c617e02", "sighting_of_ref": "indicator--6b2d77c2-7d66-4c30-bb93-e76197410077", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa5a876-dadd-4ec6-b58b-0359a9f86795", "sighting_of_ref": "indicator--6cf657ce-4c7d-49a8-801f-d6cae5efae19", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de2595e-293b-4ff4-8e28-a1f6f23333fb", "sighting_of_ref": "indicator--b7982bd0-d366-4835-9abd-1786aa45a332", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--781134f3-dfbc-4674-bdd4-a815193a13e9", "sighting_of_ref": "indicator--6c3ee380-e37e-4271-b0a4-333b20c14735", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd7a5d2-6cf5-4f57-a06f-ab63daf8ca80", "sighting_of_ref": "indicator--199ce867-d1c0-4913-b814-5220b75b8330", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed120eb-0ddf-459c-adf6-d7b5c73ed4e5", "sighting_of_ref": "indicator--199ce867-d1c0-4913-b814-5220b75b8330", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e01952-9190-4afb-9cb2-1f8842defb99", "sighting_of_ref": "indicator--a5fe80af-2043-48dc-bcd7-b4825c17a8cf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb40b09e-acfd-4e71-8b09-c5c26c20ebc5", "sighting_of_ref": "indicator--a5fe80af-2043-48dc-bcd7-b4825c17a8cf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea4bd9a-4e3b-4cf6-9005-02abc004dda4", "sighting_of_ref": "indicator--3a67bfd2-1710-4354-8902-7a26fe03eb18", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc7bff8-06f5-44ac-88ea-33b3da50cf1b", "sighting_of_ref": "indicator--87af2073-cdea-4beb-b8e9-d3e160e43f50", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a680e7-a6e7-44e3-8396-a343a632c095", "sighting_of_ref": "indicator--87af2073-cdea-4beb-b8e9-d3e160e43f50", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708d478f-4c5c-4046-b0e9-d0c51684ebc3", "sighting_of_ref": "indicator--87af2073-cdea-4beb-b8e9-d3e160e43f50", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c86ff91-ef0f-4512-80f4-49a9c554ec60", "sighting_of_ref": "indicator--474b3599-b88b-428f-be75-7eb2e56019fa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abaef156-3712-49a8-83b5-9ff19769d8d3", "sighting_of_ref": "indicator--474b3599-b88b-428f-be75-7eb2e56019fa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f635699-c50e-4c82-879c-4d7eb41df19e", "sighting_of_ref": "indicator--f9d7de54-badd-44d4-af7b-e1598dd1e986", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa88201-a677-48b3-8efc-a002f0d4fe3d", "sighting_of_ref": "indicator--f9d7de54-badd-44d4-af7b-e1598dd1e986", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c826c6-49a9-40d6-b6e3-51558601dde4", "sighting_of_ref": "indicator--f9d7de54-badd-44d4-af7b-e1598dd1e986", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35438c36-0c78-4809-b484-d7458ecd6cda", "sighting_of_ref": "indicator--59fb982d-113b-4325-bd4f-3e2fe4b273a9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257f7302-c00c-419d-8190-f87e460a7d41", "sighting_of_ref": "indicator--59fb982d-113b-4325-bd4f-3e2fe4b273a9", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8639cb6-0ba8-4bc4-a831-2a0a0a59fd83", "sighting_of_ref": "indicator--59fb982d-113b-4325-bd4f-3e2fe4b273a9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482dd15e-4592-46b6-9fb5-7c599e0e777e", "sighting_of_ref": "indicator--9130cd12-5a0f-4daf-8c08-ace336cd9344", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea598a1-9865-4b37-8736-cc94fb35304a", "sighting_of_ref": "indicator--9130cd12-5a0f-4daf-8c08-ace336cd9344", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a36f42d-37b6-407f-a817-3e8c12682cdd", "sighting_of_ref": "indicator--9130cd12-5a0f-4daf-8c08-ace336cd9344", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74e6bf4-5633-4aa7-892d-96efaf4d07bc", "sighting_of_ref": "indicator--e0895d8b-de4b-4d19-b596-a1c2e9f76e61", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ac1587-4637-4095-b0c2-ea8051b557b6", "sighting_of_ref": "indicator--e0895d8b-de4b-4d19-b596-a1c2e9f76e61", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b66acc97-9585-4785-b4d1-b28f1c2ac903", "sighting_of_ref": "indicator--e0895d8b-de4b-4d19-b596-a1c2e9f76e61", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd33d2c-ef5d-43c9-9e0e-aa4c4b7f5a60", "sighting_of_ref": "indicator--3b644e95-1af9-4a88-bc8a-7b025ca46175", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4f66b5-51cc-45d5-9774-a2eea6622e5b", "sighting_of_ref": "indicator--3b644e95-1af9-4a88-bc8a-7b025ca46175", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f2ef8f-b5eb-499c-8acf-c0d3172879fd", "sighting_of_ref": "indicator--ec1070ba-95c4-4000-9925-bf4678821272", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce1e9f7-4c53-4d91-882b-0e3600d14b27", "sighting_of_ref": "indicator--68bfe2ff-22f5-4308-b072-f6dae1e3900b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157700c1-8628-4173-be91-4bb190c2a42d", "sighting_of_ref": "indicator--68bfe2ff-22f5-4308-b072-f6dae1e3900b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3678cf-78cb-4fed-9d02-2f683f881e69", "sighting_of_ref": "indicator--14c08f65-f53b-4cea-a50f-78649fb65345", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e91cdf-38eb-4f6b-8c56-2a54799bacb1", "sighting_of_ref": "indicator--14c08f65-f53b-4cea-a50f-78649fb65345", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adfc1ddb-9e4a-45ff-893d-63bdcbf53778", "sighting_of_ref": "indicator--3869325a-665b-4ece-9d5e-0f9c2a9111d4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02abf8b-f84c-43e5-b3fa-fc9b89e25067", "sighting_of_ref": "indicator--3869325a-665b-4ece-9d5e-0f9c2a9111d4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd897158-3187-426c-a15f-b77f75596ced", "sighting_of_ref": "indicator--e673fb8a-dd95-4c62-bdce-af10591d5222", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307ca971-add4-4f59-87eb-37c97bdc16cc", "sighting_of_ref": "indicator--e673fb8a-dd95-4c62-bdce-af10591d5222", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a3af07-28f3-4ac7-ab48-090beee2c498", "sighting_of_ref": "indicator--e859a8e5-4e99-4e14-8d7f-a2c3286e4d58", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b691bd4-129f-4fc9-9cff-be05d8e66343", "sighting_of_ref": "indicator--0b65d66f-41a6-4abc-89ac-39697af198ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--308f188f-1a76-47f9-b1c8-c264a45b2ce7", "sighting_of_ref": "indicator--cb66f2e9-34c1-4b87-ab04-c91d60fd245b", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073afc2d-8198-46f7-ab30-46b37f2020b8", "sighting_of_ref": "indicator--8a130492-bb14-4126-b144-0082a2b00dcd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad8a6a4c-d9f4-4f69-8278-e8ee98c15d17", "sighting_of_ref": "indicator--8a130492-bb14-4126-b144-0082a2b00dcd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc93a7c5-5673-4f43-93cd-9d597ddda95a", "sighting_of_ref": "indicator--2b8c713f-db8b-4efa-bf27-2a26e755d7b2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c88f531-e52b-44f3-9383-235942716bbd", "sighting_of_ref": "indicator--e6d5c409-0a22-4454-a78a-c60068ef1be1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54487d2-f895-49c0-bfd1-2f479b6bba3d", "sighting_of_ref": "indicator--bc0e8023-b1c5-425d-b3cd-3e0c2d992422", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c042e8c8-89dd-489f-ac5f-d39083fac62f", "sighting_of_ref": "indicator--d5737409-40d4-4639-a555-14e7e4c30b3d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b6e37ba-31fa-4625-be97-f2df4980df43", "sighting_of_ref": "indicator--3800d675-2b2d-4faa-9412-06306b66d5fa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21627959-3e7b-41ae-8ddf-afeb6fd2355e", "sighting_of_ref": "indicator--e4ff0553-67db-4d85-aa01-ffd3e56ced2c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf732cd-9d09-4d85-918c-e7cabba60d46", "sighting_of_ref": "indicator--5e0c9a3b-8f1d-4e9d-90fe-fe86cad35447", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12885d7d-137a-47f4-bc1b-34abdcf63c15", "sighting_of_ref": "indicator--bc90851c-7297-47a8-9bc5-9d6902d5173a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034c3914-32c9-4a10-a17b-7fadf3e57546", "sighting_of_ref": "indicator--ac731099-0e07-40e4-9cd2-e982ebeb15c3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e41ec45-da2e-4c40-bce7-17d194e5a647", "sighting_of_ref": "indicator--5b82061d-3f5f-4458-a474-48e2e4626b66", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa90fb12-cf73-4836-8889-d9267583c260", "sighting_of_ref": "indicator--9072dba4-e23a-44e0-8bc0-4cc8cb5687aa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--671ddb7f-b601-444c-841f-c6740fe503de", "sighting_of_ref": "indicator--f2ad0448-10ad-421f-a54a-4039fefb6b84", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64743b2-07a9-4288-a5a1-8943e2c79db8", "sighting_of_ref": "indicator--be7f5df4-9559-4c2e-af9f-79336683ec99", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b477b3-eeca-44d7-887f-8d0d71e64f24", "sighting_of_ref": "indicator--2d7ed1f8-a380-4709-987a-3a7f7f394bb6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc79f45d-87ed-4c58-b08f-99189cc9c275", "sighting_of_ref": "indicator--52661864-e7ae-4519-891c-0929ed49a640", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c76d192-f82a-48f4-9478-9b069303a23d", "sighting_of_ref": "indicator--05983558-ec14-4638-a9e3-43a265d4db4b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4029f2-8d95-473d-a133-7e01f861a433", "sighting_of_ref": "indicator--9026ac92-7a77-48fa-a088-f3a103c4d073", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02bb45ee-5a34-49d0-a103-f0d483faf13a", "sighting_of_ref": "indicator--9026ac92-7a77-48fa-a088-f3a103c4d073", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa18ae5-e646-4609-9bf1-ca23990d5afc", "sighting_of_ref": "indicator--9026ac92-7a77-48fa-a088-f3a103c4d073", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d44d35-79a7-4c71-9209-f0dc40f65893", "sighting_of_ref": "indicator--76d6b657-32d5-43d3-a9a6-1f5e24e1de2e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2fc9c35-36aa-41ad-89e8-721225019078", "sighting_of_ref": "indicator--0dafa042-f96b-42f4-9ab9-9c5186647564", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3930ec2-4f2d-4148-a19a-054a7b7daa2f", "sighting_of_ref": "indicator--3f50d426-5458-497a-97f2-938901bc3670", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70187546-6b89-4151-b1ac-f44174c8be69", "sighting_of_ref": "indicator--dd839290-ede2-469d-8391-a7137f8d1658", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a556d98-f56a-4155-8a1b-d5a9e435cf92", "sighting_of_ref": "indicator--2a2007ad-c292-4e84-888f-5cc043a8deb4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d66eacd-1f08-46cd-8f85-221178cbc676", "sighting_of_ref": "indicator--8546cea7-7b3f-4c23-949b-f4173748794b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1004dc4a-4a8a-491f-80a6-4ceacf514fcd", "sighting_of_ref": "indicator--2e80cbbf-0c7f-47e3-98a9-3a4141eb6222", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a84100b6-01f7-492f-ba7b-a7a181cb46cc", "sighting_of_ref": "indicator--635f5ae2-840d-42e8-b2e8-652874eff8c0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3bd30e-0a90-41e0-bd46-e7ad3811d590", "sighting_of_ref": "indicator--03aa6946-aa9f-45f9-8cb4-5f5f05a713a4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85827ef7-9468-4fb9-ace1-293569a1025a", "sighting_of_ref": "indicator--ff03ca18-79d1-40e6-9b5d-18a940839e25", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7dbd9a-4692-48ca-981c-8ecc9653836f", "sighting_of_ref": "indicator--82512c25-2d17-4e3f-a18a-3bdd497627ad", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c181a5-f3a8-42d7-836e-5132d0cb2aff", "sighting_of_ref": "indicator--d3112d74-4455-4c11-9c53-27e16a1d45d2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50cd6bb-2f90-491a-b16a-e99134d067fd", "sighting_of_ref": "indicator--30b60b8d-1f04-46b6-b0d1-d8a8f40a2f2d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a596d4-5ca6-4dba-8a39-4221e26fc571", "sighting_of_ref": "indicator--09295e96-b82c-4948-9cf3-f0139762ddc4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62545835-e55b-4004-b63a-e4fc7de8a95f", "sighting_of_ref": "indicator--0fb16459-0cc3-4672-81c6-1ec763ae0c34", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b014cee-6af3-4d8e-a865-48fd7bfde41d", "sighting_of_ref": "indicator--50058bd9-46d1-4561-8e81-053a8917535b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f73ad2-cf1f-48b2-931a-7579d2de17ce", "sighting_of_ref": "indicator--7b1d8395-987c-49ed-9c76-6e17a8293cac", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b01b5d0-d7fc-4873-8d08-c4905daf8c82", "sighting_of_ref": "indicator--e928c392-4566-493e-afbd-945e80f1d1da", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f793ba7-b3a8-4feb-80dc-72c77774335f", "sighting_of_ref": "indicator--3f8d4cb7-84af-4d8b-b412-4182f266de6b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b90ef3-8a55-4c6f-8783-4c44211ea1ab", "sighting_of_ref": "indicator--4d7c8207-e621-4efd-acaa-47f994c020a0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50923d4-a489-4306-93e8-956eae295724", "sighting_of_ref": "indicator--7c27192b-d1af-4833-bd7a-1dc4038e4426", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae45ab7-e0c9-45cd-853c-835052cc02f6", "sighting_of_ref": "indicator--a85a9c05-86d9-4ab4-bce9-1ad1b4901478", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed837d56-eaba-478d-891f-9a9382f15edc", "sighting_of_ref": "indicator--cfe92458-0462-4231-91fb-94281fbc4860", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091980fa-b8a2-455b-b8d4-43535af2baf9", "sighting_of_ref": "indicator--bd69246a-9572-4a44-a5f9-eeda987192f6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9efc3708-ce83-4578-b16a-36b3fe24596a", "sighting_of_ref": "indicator--dbfac167-0f6b-4e23-b7c6-37638690af6b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ece7f9-f370-4b7a-8748-a29cb787538f", "sighting_of_ref": "indicator--0c2af797-8296-456d-946e-06fe25fe802a", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b088add-2d62-458c-9405-ae23d0334113", "sighting_of_ref": "indicator--c86c4e30-662a-4a95-a522-ef1a1abf5a39", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b105cc-e89a-4e50-ac43-ed58269c448a", "sighting_of_ref": "indicator--6f551c73-5197-4727-a8a2-d5f42881d2b3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4052fbf8-0c6b-459e-bf88-d6f563e8660f", "sighting_of_ref": "indicator--6f551c73-5197-4727-a8a2-d5f42881d2b3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab755fd-4f0e-44c0-bf8d-254dea0ac7fe", "sighting_of_ref": "indicator--00e2c602-b39d-4abe-95e5-58275284ff64", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184522bd-89dc-413f-a694-574b9704c3df", "sighting_of_ref": "indicator--4d075f8e-8a64-4d04-921a-179a9dd8c76a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba8b68b-2306-4666-8715-d4373fb74705", "sighting_of_ref": "indicator--4d075f8e-8a64-4d04-921a-179a9dd8c76a", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7073ae1b-29fa-4083-b105-f5487f7e977e", "sighting_of_ref": "indicator--4d075f8e-8a64-4d04-921a-179a9dd8c76a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f711930-8319-4cb4-bd59-1fb5d0f431ad", "sighting_of_ref": "indicator--c19ccbc5-9ee3-4c1c-be83-828c4adf8dce", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5488be-a220-485c-87e0-7d8f066c9cda", "sighting_of_ref": "indicator--c19ccbc5-9ee3-4c1c-be83-828c4adf8dce", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f507e8a1-9c2e-47db-829b-c2d72014ab19", "sighting_of_ref": "indicator--6d1fe2e4-e9b0-48fc-b162-da6ee7a1d556", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6383ac07-db0a-4f88-89ff-210b08b70f32", "sighting_of_ref": "indicator--6d1fe2e4-e9b0-48fc-b162-da6ee7a1d556", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9123061e-560a-431c-a28f-776a5f9794d3", "sighting_of_ref": "indicator--6d1fe2e4-e9b0-48fc-b162-da6ee7a1d556", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81d00b6-0972-4e12-8f26-8cbb9801ffdc", "sighting_of_ref": "indicator--5cb101ae-ddd4-44a5-aa56-009b1fb3d809", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a83055-b7b7-46c4-8979-0586fe1bb8ef", "sighting_of_ref": "indicator--5cb101ae-ddd4-44a5-aa56-009b1fb3d809", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf9d73a-cf3b-4350-9ae2-707cbacff205", "sighting_of_ref": "indicator--5cb101ae-ddd4-44a5-aa56-009b1fb3d809", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d44371-446f-46e1-a41d-04c201b04d44", "sighting_of_ref": "indicator--90ee1543-2d85-402c-a312-1f9486b2909d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94003a43-61f0-4bc1-9538-949801f27727", "sighting_of_ref": "indicator--90ee1543-2d85-402c-a312-1f9486b2909d", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44edaace-3c6b-4cdd-aecf-c988d64053da", "sighting_of_ref": "indicator--90ee1543-2d85-402c-a312-1f9486b2909d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5750b3bc-fc0e-43c2-a0bc-5e8c0d27ae5c", "sighting_of_ref": "indicator--0d0aaaca-4cd1-4bee-abbb-b90571aa9b22", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe18ddd-ce1b-427a-b8d6-3d0583123deb", "sighting_of_ref": "indicator--0d0aaaca-4cd1-4bee-abbb-b90571aa9b22", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2b453ea-fdd2-46a2-b671-8637f5c894cb", "sighting_of_ref": "indicator--3d062e1f-ff0f-4dd2-92cd-89709e05b8aa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742861f6-6287-4002-a0d9-edaf4cadb702", "sighting_of_ref": "indicator--3d062e1f-ff0f-4dd2-92cd-89709e05b8aa", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131bbf18-c6c8-40cd-85e3-18df58ee0993", "sighting_of_ref": "indicator--3d062e1f-ff0f-4dd2-92cd-89709e05b8aa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc326193-b366-43d0-857b-9fd2ec2dd7b2", "sighting_of_ref": "indicator--3780360a-8ee2-4b09-9c93-fab877ac9400", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc350142-2752-4f14-b1cf-1b7b535a6883", "sighting_of_ref": "indicator--3780360a-8ee2-4b09-9c93-fab877ac9400", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1490c29-153e-4c02-bc0a-64e924dd65fd", "sighting_of_ref": "indicator--3780360a-8ee2-4b09-9c93-fab877ac9400", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78180b49-a3d2-4c5c-afa6-bde70e44142d", "sighting_of_ref": "indicator--d442be1a-b114-4e3d-a5b9-c5197a0fac88", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45de0f0b-4bd1-4bc8-8675-975ac940208b", "sighting_of_ref": "indicator--d442be1a-b114-4e3d-a5b9-c5197a0fac88", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d476fb40-c45a-48b5-9535-7d7c1b24b435", "sighting_of_ref": "indicator--d442be1a-b114-4e3d-a5b9-c5197a0fac88", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb8adc8-7836-47f2-8112-145a790d533f", "sighting_of_ref": "indicator--48ca2c49-bd3d-4436-8110-8c3a1f689eaa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe975e6-323c-4178-9006-a4c80497c593", "sighting_of_ref": "indicator--6a311298-0d0a-44a5-bb56-50fb46864bfa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0edddf35-7eb2-459d-a44f-25aca57d41d9", "sighting_of_ref": "indicator--2df193d4-6474-4426-9e27-a28a9036852f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94b7888-b36a-4f5a-a221-ec65ab7b7f5f", "sighting_of_ref": "indicator--00e8d6ac-480d-4fff-a254-f28d4e4a2420", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f20b3ec3-d2a1-4a96-b061-2fd5b261b367", "sighting_of_ref": "indicator--997fd588-7a7a-44a0-883c-75fe297fae9a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e3befd0-e07b-40af-93e1-dcde65b3b7b2", "sighting_of_ref": "indicator--fcc55667-a8ae-4ed0-a7bd-c75b8fb7fd9b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877a744e-b37c-4f83-9f43-9b64dfa130ae", "sighting_of_ref": "indicator--c5909500-f4f3-4440-abef-7cc719136f8b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8999e6fe-b312-44f2-90d4-389e3b9f6ab5", "sighting_of_ref": "indicator--767f228a-b63f-4fa7-b7b2-043d7377f0dd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ffa798d-f579-4632-8f4b-68898d7134b6", "sighting_of_ref": "indicator--2e25a2a6-2e97-4476-8a4f-f3196eb5cb0c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce1b386-fff1-4a65-ac00-c3a21fe8d58c", "sighting_of_ref": "indicator--02d45db1-58a8-4ef6-bd62-5b9fe2b7563e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af968b6c-d161-47b0-b94c-e18e81549bfe", "sighting_of_ref": "indicator--97947207-15e6-4d5f-b828-8f56504cda19", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c54d6336-a886-478e-839e-a7fcd1d0e539", "sighting_of_ref": "indicator--c8b0bd15-ad80-435d-9031-b1f70451133f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9ded8e-bab5-48c5-bc86-69b12798f382", "sighting_of_ref": "indicator--851a7ae2-8998-4e88-afcb-2fe5196688d8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c0c553-d823-4664-83b8-5849cabda270", "sighting_of_ref": "indicator--851a7ae2-8998-4e88-afcb-2fe5196688d8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9633303c-e84d-4ea0-b80d-318247a7e326", "sighting_of_ref": "indicator--3a4e3ee1-9792-4657-a81e-8e0cb7ae3151", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc8063b-c907-4040-b7d4-15252a325d94", "sighting_of_ref": "indicator--3a4e3ee1-9792-4657-a81e-8e0cb7ae3151", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb730c7-b619-4a1a-8a02-00e338ae6f94", "sighting_of_ref": "indicator--953a72b2-d598-4217-a2b7-9df1269ac4b1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c49ea9-9e14-44b1-8ada-c532b7cc973e", "sighting_of_ref": "indicator--953a72b2-d598-4217-a2b7-9df1269ac4b1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d6d301-6bee-4b2a-af29-80ea0e59f5b2", "sighting_of_ref": "indicator--c61eca1c-6746-4889-92d3-da018fc9535c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac74416-e29c-40c3-92a5-2c0c2ad5abef", "sighting_of_ref": "indicator--c61eca1c-6746-4889-92d3-da018fc9535c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48550a43-8ad3-4ade-9680-93b294b5f6f9", "sighting_of_ref": "indicator--da24996b-1c81-46cb-98df-1ad2c80a7e6a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c336ae-aaa8-4cfa-b23c-d44fa0f13ecd", "sighting_of_ref": "indicator--da24996b-1c81-46cb-98df-1ad2c80a7e6a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088e8e50-28f2-4cd4-bcb7-7a1843c50187", "sighting_of_ref": "indicator--b792ef96-dde0-4226-9320-c003b1633666", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3cbd77-331f-454c-a433-3d45044bce83", "sighting_of_ref": "indicator--b792ef96-dde0-4226-9320-c003b1633666", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--495353e4-ce4d-423c-a813-148e9db9db30", "sighting_of_ref": "indicator--b792ef96-dde0-4226-9320-c003b1633666", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a74aedfc-a6bf-4934-8a54-3cec71c3595a", "sighting_of_ref": "indicator--51b8c5ff-6702-45d9-8614-d537a9602f53", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37cb63e9-69e6-438b-8c6b-f57c2a9bf743", "sighting_of_ref": "indicator--51b8c5ff-6702-45d9-8614-d537a9602f53", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591c2fab-b37f-4998-9a3e-d2a3dd8f211c", "sighting_of_ref": "indicator--3eb35b0e-2b85-462b-9efb-f5bee909f658", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45a34db-a7f9-470e-8729-20c6785b8928", "sighting_of_ref": "indicator--3eb35b0e-2b85-462b-9efb-f5bee909f658", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2963de6f-03f9-43a6-85c3-ef9806f564d0", "sighting_of_ref": "indicator--4aae013c-4367-4aba-8d9c-70f31ceb25b2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab15882-24ad-4b24-b020-0bc471432a2a", "sighting_of_ref": "indicator--dce92d1a-baa9-43de-807c-248772921a9e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5dfb94-4d04-43ab-95a8-4d95fc28c2d6", "sighting_of_ref": "indicator--be96884e-b51d-4e3a-8980-6d1ab1218802", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d948e6-9c2d-4e45-84e5-d20abacbac3d", "sighting_of_ref": "indicator--be96884e-b51d-4e3a-8980-6d1ab1218802", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1786808-c3e4-42d7-8e0d-3a549eb339ca", "sighting_of_ref": "indicator--cdd8152d-cd72-4274-ad7f-f4b9205b10f2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29cf7e3c-2c5c-4b61-8abf-45d9bb9c8fdd", "sighting_of_ref": "indicator--cdd8152d-cd72-4274-ad7f-f4b9205b10f2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca59e9c-5c48-426e-8e03-339d9a04d186", "sighting_of_ref": "indicator--c5cd7440-95eb-4998-8fed-77783f947a04", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e506d0-a232-4bdb-ad6b-407f85df96e8", "sighting_of_ref": "indicator--c5cd7440-95eb-4998-8fed-77783f947a04", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27de9bda-a7de-4da2-8213-fac3394eafb5", "sighting_of_ref": "indicator--2bc7030f-0383-4d57-93be-6315b59a7a69", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92f3fdb-f908-4db8-a6ee-36f826c4cdd1", "sighting_of_ref": "indicator--f028f90f-7804-4780-9f95-8188c9608fdb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcfbf03-d762-40f8-a164-ecc66d89afe1", "sighting_of_ref": "indicator--d7f095f3-3152-41d3-ba04-87e3fba7212e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22cd51d7-839d-45aa-92a8-6e9909a1776f", "sighting_of_ref": "indicator--af6a859e-3046-45ee-b940-abc33fdeddfa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54ee712-77ff-4d2e-8d61-2d1885dbe3dd", "sighting_of_ref": "indicator--af6a859e-3046-45ee-b940-abc33fdeddfa", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9365dbb7-50e2-4600-a1e2-58f4c194cfeb", "sighting_of_ref": "indicator--926a22fb-a30e-4d13-9f5b-dcd97fbc83a9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e94fd8-7d3a-4dd2-8659-d4c481ea294b", "sighting_of_ref": "indicator--e8a31a0c-4541-420f-bc99-32a7c9450075", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43223e6-84cc-477a-b8da-eba2c22e9780", "sighting_of_ref": "indicator--5d22eddd-eae8-4974-a9dc-07d523b35b7b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee8ab45-1479-4b43-8e62-a5baa09be787", "sighting_of_ref": "indicator--e8fc519d-5649-47e4-b3aa-c95572f9dd34", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a58ad78-bbf2-4681-afb5-9010a8c6d603", "sighting_of_ref": "indicator--8cf9ff79-eca6-45c9-aac1-60dbe51bee17", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa5105b-c1ba-4aed-a0f2-2d1817805f0f", "sighting_of_ref": "indicator--8cf9ff79-eca6-45c9-aac1-60dbe51bee17", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9750cdf-1dbd-42bc-97b6-95f4c8142881", "sighting_of_ref": "indicator--8cf9ff79-eca6-45c9-aac1-60dbe51bee17", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2952b4c2-10c5-49c8-98a7-97af3628a56d", "sighting_of_ref": "indicator--725d4a7c-8287-4ab3-87aa-f30918755d6c", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c68393-ac41-4f2b-9ed1-fd3513cbb35e", "sighting_of_ref": "indicator--4909cb59-78e1-40da-bb30-85e4c7e3f08e", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dfc7618-7162-4b16-ac9d-d34f4fc84605", "sighting_of_ref": "indicator--244e4a19-5f88-4ddd-9692-865502f0c804", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1fcc81f-c09f-481e-a437-793d6fe16059", "sighting_of_ref": "indicator--1aa4069b-e9ac-48a1-9eb1-8ca357d203f4", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702a2117-b0d0-43bc-8bc0-eb331b88494b", "sighting_of_ref": "indicator--0958aca7-77f5-4fef-b2b8-58cba1dd7bd1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abb653f-615d-42d5-88b7-d4ef87261097", "sighting_of_ref": "indicator--822ca7f9-cc91-4444-944b-02975d1f6356", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18042c2d-39bf-4253-961c-65d0fd656da3", "sighting_of_ref": "indicator--822ca7f9-cc91-4444-944b-02975d1f6356", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23cf9086-a12d-49ad-abcb-84bb6cf87681", "sighting_of_ref": "indicator--822ca7f9-cc91-4444-944b-02975d1f6356", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55101a0-9eae-42af-8f95-26db3d3b5c75", "sighting_of_ref": "indicator--bc8a5009-6b9b-4dc8-b68a-649ab1751329", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c47c3b8-ff2f-451f-af91-ff19b600dc23", "sighting_of_ref": "indicator--50e62f96-607f-49b3-a4d3-9e0d4c598a3b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a48e5ba-d455-4a49-bd83-d1cd483a3098", "sighting_of_ref": "indicator--f87674b8-3a74-489b-bcd8-5bf6daa56656", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912f1fa2-3e29-47da-9ecb-b99b8f0d2f4f", "sighting_of_ref": "indicator--2130bf3f-61fc-4664-a638-1e8c48816317", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f49b31-d55d-4e76-9237-2355ec872f8e", "sighting_of_ref": "indicator--2130bf3f-61fc-4664-a638-1e8c48816317", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013b970f-1250-4443-a09e-2d93074267d3", "sighting_of_ref": "indicator--2130bf3f-61fc-4664-a638-1e8c48816317", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f260e7db-83a5-475b-bf23-1461ae8c9be6", "sighting_of_ref": "indicator--92e0c345-cb36-4419-8e1d-ee4cc4c682a2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9922c5-3798-4ecd-bf99-48e758385412", "sighting_of_ref": "indicator--92e0c345-cb36-4419-8e1d-ee4cc4c682a2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22a58b4-427a-4c9e-a57c-eacf9876ee81", "sighting_of_ref": "indicator--d9ba8f89-95ee-48b5-980e-9f8e4af819a5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933fb987-4568-4009-b198-2a44a0089938", "sighting_of_ref": "indicator--0554ef00-e5ce-435a-97ef-d91a47c6260a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71509ce-f832-4b91-96ef-6742e688d1e7", "sighting_of_ref": "indicator--0554ef00-e5ce-435a-97ef-d91a47c6260a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df85ff1f-0433-4735-81aa-d438c3103955", "sighting_of_ref": "indicator--3025f07b-6564-4ccd-9ed0-035bf044986f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd4cd73-f0ad-473b-a8fa-aec8654b3b68", "sighting_of_ref": "indicator--43c52f4d-5af2-4b1f-baa9-e823cc69835a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3658d179-7c99-4f7d-b761-dd88a4080ee8", "sighting_of_ref": "indicator--ca205833-4073-482c-99c1-9ead05c2f46d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f251bae-cbdd-4ab1-aef6-f6d445245f3b", "sighting_of_ref": "indicator--dd62282d-a7fe-4fc7-b645-dd9838cf260b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d166ed0-dbd2-4684-a68c-3994ca4b604d", "sighting_of_ref": "indicator--200a3dfa-c719-4f56-97d2-0b5eb9b4de4d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31896147-8ddc-4ba2-80a7-c50b0057d8fb", "sighting_of_ref": "indicator--fca21028-cbfe-480d-b952-b3e45e09c50b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc9faa0-8626-4a16-9fad-abb04ed0d6a6", "sighting_of_ref": "indicator--548687b4-2a38-49de-baf2-c56ad4f61cba", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43d65b1-954a-4a85-af16-79331156838e", "sighting_of_ref": "indicator--0955beb7-7a8f-4f39-9fda-448678176fe5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78561688-de7c-4480-a302-0d074bdba76e", "sighting_of_ref": "indicator--d8fa5ff3-c4d0-4818-9e21-3f29de595a17", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb00e93-7b76-4002-8c5d-75eacaaef22e", "sighting_of_ref": "indicator--0986cddb-88b8-4e9f-90fc-405facb5886e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684fdc15-2268-4d69-99f8-5e1ca9f660a5", "sighting_of_ref": "indicator--757ef555-a53f-40dc-80ad-82fdffd744dd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335fefa6-d9aa-4b61-9937-f19cb6faea01", "sighting_of_ref": "indicator--0e43f71a-26a6-4041-8e10-9a7752adf4d2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201ea7f3-c604-44d9-9b1a-ad04a5a95a15", "sighting_of_ref": "indicator--f7d9ef5d-822d-4c87-af5d-2dfefe465ed7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b47207-68e4-4017-8386-6c060da33037", "sighting_of_ref": "indicator--d24e55f9-37ad-422b-84d0-1d400cd135b8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--484238ba-789c-46db-8f99-945e579699b8", "sighting_of_ref": "indicator--fe30e64d-6733-4cd8-8477-fbc2decf0b7e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197abbd0-0496-4dd3-a820-8a7ed6fbe706", "sighting_of_ref": "indicator--ab15c697-62e8-4369-b028-49c75ade364e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb894cba-1d94-4ebf-9594-3611bc14d1c8", "sighting_of_ref": "indicator--3a06f56b-686e-4a59-9708-38afcd508fbc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d594616-9871-4a3f-8b7c-0a9e601f0631", "sighting_of_ref": "indicator--9c738eda-b7e5-43f6-971c-dbe7eb89e5a1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea8d01b-0b21-48e4-8265-4ba5c8405141", "sighting_of_ref": "indicator--3d84f1a0-dbf1-48ee-a6dc-12f9a29bd7da", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d43d86-df6d-4467-a36f-7f77a13ef6f2", "sighting_of_ref": "indicator--4450f76f-2ac8-4985-8daa-550a8bbfea52", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61ac046-5923-4b83-a857-1cffea619cbb", "sighting_of_ref": "indicator--fdfe4b11-7325-41d6-9e75-8727d9663a22", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b83274-93e9-4d91-949a-7dbad469564c", "sighting_of_ref": "indicator--d35c3aa5-e9b3-4fcb-8b95-e1acda64d366", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cbf3c78-7daa-4221-b833-ea190b809a1d", "sighting_of_ref": "indicator--79b0339f-b256-4416-a887-8d64fab7bfee", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfe2f07-c932-43af-9c23-f419e746bb16", "sighting_of_ref": "indicator--96bc0968-89fb-4c1b-b2df-700c091fed2a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b1ba02-d62d-4bd4-b711-6a74a7f660c5", "sighting_of_ref": "indicator--165c3fc3-7add-44cf-85c8-bc02335ad8d0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1137ca18-fef8-4357-8ff1-91439af3728d", "sighting_of_ref": "indicator--072f0e6b-1451-4619-a580-2fd1a2eb2c45", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dbf6703-6f50-4aad-8da9-50659ac73561", "sighting_of_ref": "indicator--b998c420-35a9-41a6-9ec4-9f4db32a1f13", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5aeed5-3f50-480d-aa5c-e963252e9560", "sighting_of_ref": "indicator--bd43dbdd-3b51-4fa7-8283-b006776bd325", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ed0a23-8727-49a3-965c-37aad8a9d2d5", "sighting_of_ref": "indicator--0b1fe332-904e-447a-932d-53c28215f5d8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf8ceef-9704-4a7c-a344-6bf58bbd29d3", "sighting_of_ref": "indicator--beeadb04-1194-471a-91fc-580e4d74b60d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b997677-bd01-4127-8884-b003782637dc", "sighting_of_ref": "indicator--f7840b6c-4cce-41c5-bd7e-d88cb2138def", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33204408-9d14-4f9b-8762-15bc291b8da1", "sighting_of_ref": "indicator--e70aee5e-f35f-4e49-9d90-93881877652f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4137107-9375-456c-ac51-501c54d00c67", "sighting_of_ref": "indicator--0d81b70e-11ae-4cf4-9331-5fa796d1d08b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440c42c2-4942-464d-8a8a-7f574dd31dbe", "sighting_of_ref": "indicator--69a00f7d-75fa-416e-877b-4daf8f84d8f7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06fdcd76-75fa-49b7-b26e-f0b5eb795442", "sighting_of_ref": "indicator--ed71a87e-31a0-4259-95f1-2c438116a562", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd1221b-0111-40c9-aedf-cda1dbf618ad", "sighting_of_ref": "indicator--4e530359-17e0-490d-b1d7-086fb01faf36", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c703bd8-10d7-4b79-bcbb-fe47027a95ca", "sighting_of_ref": "indicator--e4ccee41-b715-4669-9044-655d2f91aa2f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d0b6c7-b4df-4eb1-b8b4-058217f62162", "sighting_of_ref": "indicator--adf8fb5d-a342-40bc-b04e-221a7ef93b2a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20b549d-1a2e-4e66-8729-604ba22f9910", "sighting_of_ref": "indicator--fef974a8-7bf9-4fbf-8623-8d7d760d7f26", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95773247-8da7-40f7-a7b4-846957a3488d", "sighting_of_ref": "indicator--74e800a7-4f58-41b9-929b-fe148b30ca29", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113ce2c3-8828-4887-857b-7f52a74e7a10", "sighting_of_ref": "indicator--aafa2dee-4079-4b9d-83c6-2e6cac1727ba", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3db201-b544-4ad4-afbc-740d603bb254", "sighting_of_ref": "indicator--eaa514c5-0f8e-4c8e-b288-ee82a6b3b37a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f152b7a9-f392-44aa-8173-a76b42deeacb", "sighting_of_ref": "indicator--1b2055c0-202f-4fca-ba18-266cc0a402f5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c11a78e-d2c5-4e11-a670-19438306fb6b", "sighting_of_ref": "indicator--971ed5e9-59cc-4a6d-8f4b-c550332fd172", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d4b419-aa07-4418-8753-26888a234121", "sighting_of_ref": "indicator--b051aa80-38a0-4a38-9800-faf3d77bfcea", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e221a348-cca8-49db-994f-faface3b34ba", "sighting_of_ref": "indicator--797d1485-6626-4e4a-bacf-90b6728407e5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ad3b5a-0521-44d0-9ec9-2940ca59800e", "sighting_of_ref": "indicator--5c922816-5a75-40dc-8ab7-0a56ad502ea1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f8933a-e2d2-421d-a63e-27997079e539", "sighting_of_ref": "indicator--401266c2-709e-4ea7-8ac0-ca34c2ef6e2a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d2fb2d-c23b-4b22-ae4e-f96aacfb1bdd", "sighting_of_ref": "indicator--f05140de-3620-4a62-b826-44bce135262a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2033a16c-25c7-496a-b953-8151c77786d5", "sighting_of_ref": "indicator--6ffe6d7b-b834-416f-a9a5-493adc5ba114", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--315f5092-922b-4a06-be78-f16f96d9867e", "sighting_of_ref": "indicator--1d2fa3eb-9f70-430b-9f40-825e909d1e32", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8a06d0-b3c1-494d-8c7d-225f351d0e01", "sighting_of_ref": "indicator--22e8b123-90f7-4f00-91eb-0818e933aa48", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00def8df-8020-4eb5-ab91-83e85a94d8dd", "sighting_of_ref": "indicator--d87275fe-00e8-48a4-8e4e-1e8cf01fad2e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04010f64-fa3e-4ca2-b81f-19e830aaf5e4", "sighting_of_ref": "indicator--ffa44537-2eff-4f28-a492-67a5d2ed59b5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55768ceb-e889-43f0-913d-44d91c2b4ac5", "sighting_of_ref": "indicator--374ef751-aef0-408b-bb83-9c32834e480c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96db2d0c-872f-4f65-8fb8-574da365e79f", "sighting_of_ref": "indicator--47734838-62ed-4ffd-aa9f-ebbd48402fb4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35fe126a-e270-4234-baec-336321df3500", "sighting_of_ref": "indicator--d668e931-0b45-4357-8838-974925a5c809", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582d3020-d94f-44fa-80b1-16057c3a28dd", "sighting_of_ref": "indicator--f6161847-74e8-4523-bae1-a1ae57a9c880", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f35c7c-fdb1-4eff-bff5-a34c01aecdaf", "sighting_of_ref": "indicator--3f38b68c-8a80-40f6-bfc0-4563bbbe5946", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb637e2-f22c-4ada-b303-942fb255f4cb", "sighting_of_ref": "indicator--ffd5b00d-3517-4b36-9762-eebd2b3a15e1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5e6988-acbe-448d-8897-e72dd6175b3c", "sighting_of_ref": "indicator--3933b89f-dd7e-4dba-9211-101cd74e57cb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ff9b80-18f7-487d-896b-5462352a58fb", "sighting_of_ref": "indicator--cf09ff5b-1112-4a52-a24b-0aabcfc4ec8b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a9623c-8a5b-4fac-815d-2dee4097b998", "sighting_of_ref": "indicator--c5a7924b-ac9a-4a20-9d21-c1d3e70f9753", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e6c368-70e6-4813-a65c-9a47963101f9", "sighting_of_ref": "indicator--ce324494-34b6-4137-82f6-9520818355c2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b201d62e-6ba3-455c-af73-225ada1f7126", "sighting_of_ref": "indicator--abd34ab4-c5ca-4ed7-80b0-8639b813fb5f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad87bee-bd07-42c9-969c-14b5a3db0690", "sighting_of_ref": "indicator--3eed87b2-b979-4eb0-a641-0cd4799e21f7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06000518-1dd1-441b-bef4-390c431ab2eb", "sighting_of_ref": "indicator--e62f4349-3897-4606-a422-72010a04219d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ec4f66-5573-467d-96f6-edbba7cb0fbe", "sighting_of_ref": "indicator--f60b47e5-06d8-41a7-a87a-604b006880bf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58611ab2-d74c-440a-9d38-3326f20951e3", "sighting_of_ref": "indicator--c47743bd-fb65-431e-9317-5094dbf19271", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af2cc62-94c3-4739-84b2-3b6abbe5f36f", "sighting_of_ref": "indicator--437ecd70-a701-490e-8cca-e9a0c8ac8891", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e19a98e-1e28-44a1-bebb-119fa77c5349", "sighting_of_ref": "indicator--e7bbf358-909f-4be6-a659-b6123b837635", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6dd9ab-f2d5-4367-b9d8-6285cd95f6f0", "sighting_of_ref": "indicator--9dcd1213-9c0f-4add-81e8-a9592fbe18b3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279d1860-a935-443e-9c35-83a41cc07088", "sighting_of_ref": "indicator--e02b12e8-a648-4e21-979c-179a6f4eef57", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eefa25a-d1aa-4079-9c98-1aa91eca6e26", "sighting_of_ref": "indicator--6e01e3e0-4e8f-4215-a17f-f6764fe49931", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c817d912-d3ef-4bf5-8a7a-c5f1f56ecdc9", "sighting_of_ref": "indicator--cd82af05-a7f5-463c-a8c7-937994220ccb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a90dd45-37fa-41f8-962b-7c86373f3158", "sighting_of_ref": "indicator--b5e233c2-8bbd-45d9-975d-e8e8b2a440f4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17be094-4b8c-4cb0-9eca-f53df000c969", "sighting_of_ref": "indicator--2f0127be-19c4-45c4-bf09-d50fd2063725", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7b31c8-fc82-4843-a1af-0d3ba90d91bf", "sighting_of_ref": "indicator--8b872eac-93c3-475a-858e-899bb184751b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9336e29f-4e69-43a2-8450-b0fb9022570b", "sighting_of_ref": "indicator--3914ca89-8aa8-4980-a9e9-dc764f77aadb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc578b50-6674-4be7-9773-b640ea1222e8", "sighting_of_ref": "indicator--96ad7499-a825-47fd-b3e3-a10147780b4b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538c63ff-f193-4ca5-a71c-75879c35c411", "sighting_of_ref": "indicator--7d456509-d2b7-459a-9cf3-c39f54957bdb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518be4a6-7771-4293-b7ba-c9920dcc5c73", "sighting_of_ref": "indicator--7a2ad140-fac9-40b7-adb2-2c0695e7dfd8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d0a160-99d4-4a6f-b656-5e13f04ef1bb", "sighting_of_ref": "indicator--6b44a27d-02e2-44ef-b790-cbc2b2e45edc", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12fb093f-bda2-4def-bbd4-6a945df5b6fe", "sighting_of_ref": "indicator--4d69b8bc-da6e-4d5a-bcfb-b073fe12ddf1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec1b59f-41e6-4f19-ae76-28f33e212f61", "sighting_of_ref": "indicator--519e16b6-7d04-43a4-98ec-e239f0c2b37f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13300c57-9219-4495-9a36-44fbdd10de25", "sighting_of_ref": "indicator--0892cb7b-5dc6-4f3a-b436-b68ccd8f4511", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66229d0-79cf-4e00-a9dc-b4dcaf591484", "sighting_of_ref": "indicator--dd51e47f-f92b-44e9-ba26-435db5e588a4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81646780-76c8-48de-a739-0fcbd95d3e63", "sighting_of_ref": "indicator--bc317d5a-2bcf-48aa-b9a4-f1c02479f78f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b2fb9f-812b-4e6b-8158-7f58b2616f58", "sighting_of_ref": "indicator--cbc96e9c-1ffa-43f6-b5ab-c598dadabe34", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c155629-7c59-48e5-bb1a-5d2ac2722916", "sighting_of_ref": "indicator--69136c09-5d4e-4d05-a51b-70572df09772", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e01f2b-8d17-4ad4-a717-8912f8a29de5", "sighting_of_ref": "indicator--07f6be7c-6605-4f68-b77d-418d9b609025", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a65ccac-674a-40c5-aacd-7d25dc02aeb4", "sighting_of_ref": "indicator--07f6be7c-6605-4f68-b77d-418d9b609025", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c4cec1-ef58-41f8-affb-5e936f962101", "sighting_of_ref": "indicator--c76f8e9d-e124-468e-8838-c63daf12914d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9bcf0e-47aa-43eb-af28-2cfc97a813fe", "sighting_of_ref": "indicator--14bfe4d8-dcc8-45cb-8285-97459314a641", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d25dce3-c398-42a0-90e2-4284344cb7fc", "sighting_of_ref": "indicator--4277d4de-d356-4b43-8290-e13f4a6c63e2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2580172-914a-49e7-8e28-a9c88f5087dc", "sighting_of_ref": "indicator--36ff20c5-4b2d-4b50-8d69-89cc44969b0a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ba4dc8-1aff-499f-bfba-b85e58da408b", "sighting_of_ref": "indicator--93349719-b9bf-4121-8c7c-335d6b0c898b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02a863f-782c-4331-a817-601dded7a972", "sighting_of_ref": "indicator--fe1439c2-0f44-4154-ab7b-753233946062", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a7be326-fc9a-41cc-b912-2d7212356071", "sighting_of_ref": "indicator--e53600d8-c326-4ae0-98c4-03373667798d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7532e2f0-14bf-45e4-9db9-a78e7b57823e", "sighting_of_ref": "indicator--a36aa6a7-8418-489e-a0be-dd1886e46080", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f2348e-4c84-41d7-9b20-956f121046f0", "sighting_of_ref": "indicator--ed5d363f-ecf3-4de5-8824-0644eaf2de87", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65b8060-8630-4106-adcb-633ba1dd353a", "sighting_of_ref": "indicator--816a95f8-aee9-466c-a3d1-c906c128d198", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9cff42-084d-49be-99bc-4583f90eeade", "sighting_of_ref": "indicator--36dc79db-dc36-4a0c-b186-5c44b311a176", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd40b576-0796-4f41-b279-13bcf99e3f3f", "sighting_of_ref": "indicator--6372bbf6-6cc4-4b3e-bbfb-80860bfebb97", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45aaa87c-d0ed-4da1-a03f-fa8301dec8a9", "sighting_of_ref": "indicator--dc0a2628-bcd3-40bb-8037-d9054a9f40c8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a187d634-145e-41ab-9517-bbf44397a2c5", "sighting_of_ref": "indicator--4af68902-a6a5-446b-8ae2-976e0bd8566a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90d33fb-c3cd-4699-93aa-8709a83707da", "sighting_of_ref": "indicator--4f44044f-5249-4adf-a9df-ac15cfe3465b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70fbd6e1-b054-44c9-89dd-96d179c71f3a", "sighting_of_ref": "indicator--b758d99f-16e5-4fde-b085-186fc2e8922a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce42f85-639c-4818-9453-ae80b6ef8501", "sighting_of_ref": "indicator--e4f13365-323a-4adf-b138-d30b6018ced7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6745c564-0fc9-42a5-9c91-f724f8a1cc31", "sighting_of_ref": "indicator--2f489e24-5f77-461d-ab47-43adf8dc9c8a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5e0941-8282-40b3-8df5-9f76a253f416", "sighting_of_ref": "indicator--75df705e-63b4-4d43-a266-38bfbc29d42c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f51c90e-bb24-4e23-a99c-33a874e28f9c", "sighting_of_ref": "indicator--d6d983ca-ec70-4c66-8a9d-be53f7661d9b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13be43a2-db80-44e9-9b27-ae85c903a9cd", "sighting_of_ref": "indicator--db51f51e-ad9e-468c-ac4f-dbea3c46ce62", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e352b86-0b88-4cbb-b662-13a3c352d99d", "sighting_of_ref": "indicator--07733bdd-010d-4b34-9139-b7d41885455a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163494f9-cbc1-488d-9b00-cd36285a31dd", "sighting_of_ref": "indicator--1775b625-2aa7-40d3-953e-f162f769050c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e86f1c30-2389-4649-9665-8cd121933160", "sighting_of_ref": "indicator--dca2a799-4d01-48b7-af96-7d78222f3287", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b96500-a672-481a-b5ee-37318b8a8ef7", "sighting_of_ref": "indicator--e302d94b-d879-4686-a4dc-e0b066f52d3e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02945af-4b17-41c4-9744-20ca3adb0e87", "sighting_of_ref": "indicator--9ed96b31-3952-46a0-8c7f-a9494424e0fc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f192f06c-9496-45d2-a045-a4546f94396a", "sighting_of_ref": "indicator--788bc933-1268-4642-9179-09368697b4f1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e845265f-2544-4db4-95ca-d91ca0a84f97", "sighting_of_ref": "indicator--ce7fd39c-c6f1-460e-ad20-cb23fdc0b299", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbaa116-93a7-465d-82e9-32f359889c6f", "sighting_of_ref": "indicator--5f0d31e2-8e91-46c2-a69f-e7b4160c0e0e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253415af-d304-450c-a06e-1bff0e830920", "sighting_of_ref": "indicator--db18b1e2-9b55-4276-ae09-00ff70245a8c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e4a4818-e2d1-4fdf-8ec1-24cabed707ad", "sighting_of_ref": "indicator--401a8fc9-0312-43a4-ae29-e7cf255b9325", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff88ec27-7688-4568-a739-a5059f20e791", "sighting_of_ref": "indicator--d44cdf05-1436-4cc6-8fb3-3469eb7e1bfa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c0fcbb-8e6d-4e47-b368-6f90532fd54d", "sighting_of_ref": "indicator--51d05927-2e68-412c-bfda-3cb053e9c0bf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d277059-60ea-456f-9960-8c0d0062058b", "sighting_of_ref": "indicator--ff6660e5-f718-4359-a14e-4ae7d89e5213", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ff91c5-a40d-4113-b5e4-070f89917566", "sighting_of_ref": "indicator--2ba3a2ea-892e-4fb0-b8f1-2f5e8423d3bf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9126fb3a-7d49-4662-ae55-fa45a45d9aed", "sighting_of_ref": "indicator--b5527e86-721e-4cb4-90bf-c04cb810f4a2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0e2254-8491-4b55-b7aa-d79fc55462fc", "sighting_of_ref": "indicator--6f98eb2e-5e2a-43bd-b42c-146dc4203267", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307d1244-e4e3-4c1c-b475-a08075fce029", "sighting_of_ref": "indicator--12af4390-9305-478f-baf9-18487c8469d9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4bff89-6c64-48da-affd-543b69042da7", "sighting_of_ref": "indicator--15d402c9-d3fd-42ee-b4d2-d3fce33ff9d9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732fd694-05b3-4070-9678-e15f25dc1b9d", "sighting_of_ref": "indicator--4be2b821-958d-4ec4-8131-ad88dde3109f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78258722-a1a5-4675-bddc-87a0bdaba829", "sighting_of_ref": "indicator--dcabf318-5bc3-40a4-98f1-083557860eb7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983e2781-31bb-4239-8004-2c248f8203c1", "sighting_of_ref": "indicator--3587b2c0-3a30-4c67-b25a-bf104742313f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727f577a-5e27-489b-a5b9-205d80a8c718", "sighting_of_ref": "indicator--cf7003fc-7776-46d5-800c-7c934269a9d2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e200479c-be81-46c3-b879-0d24c454eb14", "sighting_of_ref": "indicator--1e10ec53-af76-4065-a931-a6cfb79c6fe9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6380b4b6-3e08-4003-9fb0-be1bab66967d", "sighting_of_ref": "indicator--4eaa84bf-3ef2-4c25-a825-81b1874fa52e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c1b3ac-b530-44ba-9138-c22553bb7dab", "sighting_of_ref": "indicator--bf54e291-b80c-4d95-83aa-b811e95667ca", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46397644-69ec-4db4-8b99-a5b9243a3e38", "sighting_of_ref": "indicator--a708c02d-b658-4aaa-b486-91c667bfd90e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa793ab-f2da-456c-afd8-a30e9ac8a96f", "sighting_of_ref": "indicator--667b3b49-4b71-40ac-b373-43b19e4f443f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07c745a-14e2-4df0-9245-f0f3a3f6bef9", "sighting_of_ref": "indicator--b96f36f2-4f7b-4a93-a59a-46461d7c05c6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7488c49-1c57-4beb-bcbe-5c454f49ed45", "sighting_of_ref": "indicator--2f96cb48-844a-4a01-8e6d-de57ba75a5ca", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5b0798-00e5-48e3-a0c2-8faa2042a195", "sighting_of_ref": "indicator--a294d749-44a0-4397-aeb6-350b4594af50", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe6bc6a-3f3e-4599-9343-1a60b4b7060f", "sighting_of_ref": "indicator--8fd27d10-6a76-430a-bfee-95295f7589cb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de557f7-6fdc-4206-a268-08a921efbb28", "sighting_of_ref": "indicator--a41e5499-3601-4230-83fe-3b9b60b4d27c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c432291-407a-489a-8a20-2bc407706a16", "sighting_of_ref": "indicator--a283769d-770f-420f-be8f-9c8e6dc1cf5f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37adc73e-0ec8-4fe7-bd75-1b846278f16b", "sighting_of_ref": "indicator--155e6812-3b00-4fed-b7a2-c3beb78c47ab", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882e8917-7151-4801-91fb-302eb8cc9a70", "sighting_of_ref": "indicator--7cbc1806-6972-4f7b-92cb-4a2800aae451", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78bde766-f36c-4a9b-98e5-4a428eae25c6", "sighting_of_ref": "indicator--27de6ded-ed57-4638-b311-71ab41d8366a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9719c45-5fbe-41fc-92dd-cf8a4bad5052", "sighting_of_ref": "indicator--7b23055a-bfd5-4203-94e3-7ed8be7024e0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1714877-96f3-411d-a694-4296ed99f80a", "sighting_of_ref": "indicator--d61de657-2bbd-4ac0-bfb7-70a4fc6b9801", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da9a4a3-af99-4dab-aef0-0940523083f5", "sighting_of_ref": "indicator--d37b8a99-aa00-442b-8be1-dbc6689bcddd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739d07ae-663c-4410-8c0c-c0972fad8777", "sighting_of_ref": "indicator--a19bbc17-125d-47a0-a526-9d3c88943182", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb3315f-9b8d-402b-a023-63cbef535c42", "sighting_of_ref": "indicator--b17deb08-0bca-4796-8955-82d13192af30", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f474599-c95a-4775-9c7e-81f2737497c3", "sighting_of_ref": "indicator--44482146-ec0f-43aa-901b-eff1e79839c2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5f00fa-779a-4f2d-8f40-444a8017998e", "sighting_of_ref": "indicator--8c905bd8-232c-4afd-9cfb-bc61c8a358b9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d226b7a6-8a44-4267-b16e-734d9905ddbb", "sighting_of_ref": "indicator--fe29cc6c-ba8f-4b56-8985-566bc05e9593", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a218a08-22d5-4705-9363-555ce40f4e4e", "sighting_of_ref": "indicator--2e48a8ef-f1d1-451a-be6d-de5082d90f94", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97918a7-31d5-4ac6-ae1d-15c56794de9f", "sighting_of_ref": "indicator--1086aaa3-ab96-4953-aa5b-3d6d708e0dcd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651ad4ed-4e89-4bb8-b213-8adf76cdb55f", "sighting_of_ref": "indicator--99a328e2-75e2-4ea6-b478-438feb9811c4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5e09cb-2e18-47eb-bf26-9458a30412b2", "sighting_of_ref": "indicator--c56bdd39-92f0-4963-8554-308de5a87299", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a8e3f1-140f-4ce2-b4e1-b08e59c15322", "sighting_of_ref": "indicator--75d912a8-f583-408d-ae82-80e3821a68ab", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83739af7-9dda-4bc2-9ee1-8b9c23f5554c", "sighting_of_ref": "indicator--cdf2f5ad-27b2-4816-8401-f02136bda436", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d697623-43ee-44a3-a018-1b3688b6ce42", "sighting_of_ref": "indicator--1ff1f9ab-03ee-4809-957a-9326f38ba636", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0c8f68-a64f-43d6-9440-df8f3c2cb233", "sighting_of_ref": "indicator--becd67aa-6f3a-47c9-8657-3c43ca350c3f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7562e2e-a007-46ad-adf5-a15be9a7d631", "sighting_of_ref": "indicator--becd67aa-6f3a-47c9-8657-3c43ca350c3f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e772c939-4cb1-49d8-b9a3-1fd2f291819d", "sighting_of_ref": "indicator--fad6ce20-e1d8-4ead-a759-b02faeda9b1c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e261d50-e4db-46bb-8429-c10e44c19b9a", "sighting_of_ref": "indicator--ade270a0-157f-4bcd-b963-0225a72f08bc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dcd8734-55df-44bb-bf26-93b376eef662", "sighting_of_ref": "indicator--e46aa5cb-c126-4277-ac40-c540b740d5af", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebd187df-05e5-4edd-880f-557ad4038953", "sighting_of_ref": "indicator--968e22f7-d20b-4355-a330-7662bd30388c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8399b50b-e999-4a94-bb1a-8e720809b7d1", "sighting_of_ref": "indicator--39a2eaa2-9a71-4b9d-b94d-8cdb53a968aa", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce1cd7c-032f-4a30-a731-9fc90324fb9f", "sighting_of_ref": "indicator--5c53efbe-ce61-40be-83f6-66e8e901a11b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22069cfa-4637-4a75-9fd0-098d101e441b", "sighting_of_ref": "indicator--4fe2f9cb-bbad-4a7f-af30-a33764766833", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dccc194-72f5-452f-a013-ecbbd03acdf0", "sighting_of_ref": "indicator--314c9fa2-df37-471e-bff1-c00f84233a2c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9232bae2-2d75-4658-9945-611877ce7a44", "sighting_of_ref": "indicator--40c688d6-cbc2-4263-b436-d2da0d0e0f72", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f564caa-78e3-4af7-a21b-76cde03de831", "sighting_of_ref": "indicator--cadfbfc1-4dad-4b87-a252-37173fee7ffb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d0244d-9d19-4d4e-a565-70bceedaadc4", "sighting_of_ref": "indicator--d7cced20-87a8-4ff2-a098-4a04d2dfa30b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e30076-f609-4ea8-99a9-b094aba2bafa", "sighting_of_ref": "indicator--68e53276-b1ac-4ea6-a964-0dab8675efa4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26dcd46-e89c-4a03-a21c-301602b093fc", "sighting_of_ref": "indicator--3c0c0e2f-02fe-43a7-b529-c05d73d43bd0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ac97e1-fc81-4ce0-b71b-9a5cbce60327", "sighting_of_ref": "indicator--39c3670c-608f-40dd-b0eb-d87ca2412d7d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db78ec5-5bfe-4c05-89a6-28b2c145eeaa", "sighting_of_ref": "indicator--3ed0c69b-31e4-4b0c-bc20-69a9a0495ee7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89cf5280-a676-4010-ac02-51c6fdb77cec", "sighting_of_ref": "indicator--04f30b99-1b80-450e-94d4-669d82c4784b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa39f4e-37af-47bb-b4b5-bd63c610c223", "sighting_of_ref": "indicator--4f8900a9-d132-4307-b3ce-48ebd06f3c4c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04945a68-799b-465b-ac04-3418a37d947f", "sighting_of_ref": "indicator--ae917158-e965-4565-a098-f0ea343cc4ce", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a06e620-8277-40d0-9deb-9326905f40b5", "sighting_of_ref": "indicator--7df06c4a-951e-4dd8-a7b4-d345ddef5022", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9095e8-6cdd-488f-83d3-7c35f1d4cffd", "sighting_of_ref": "indicator--4f4f1726-87c0-4528-9929-ebf5b127d8de", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577e6f6f-7b8a-47e2-923b-bddf62ec60f4", "sighting_of_ref": "indicator--cbe03c64-9387-405c-9e89-9ba9e67ae2f1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82dd2807-4696-4131-8ff6-8fe5630b2f21", "sighting_of_ref": "indicator--51378ce5-73d1-4509-88dc-9884945b550f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--083d1716-0e0b-48f7-8e5b-8c87fa63be20", "sighting_of_ref": "indicator--b8c15000-81f9-4d55-bd67-cbd9c9f3b394", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5444e7d5-0045-48ae-9e15-61ce4739e101", "sighting_of_ref": "indicator--455ea0a5-b62b-4c87-adf3-a80083219494", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ccefb89-0eef-4991-a73e-a08f07441886", "sighting_of_ref": "indicator--3f5580b7-2138-4056-ad04-3e8ac6dd9bf6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f7fa43-aa84-4167-91de-369a9792e797", "sighting_of_ref": "indicator--30d663f8-3c1a-45b9-be14-afdcb880e131", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510cb6d0-e77a-4701-9053-178b31eb5824", "sighting_of_ref": "indicator--482e6657-639c-4f1c-bc26-824f62bdb337", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0018adae-4378-477c-8847-1caf93e62f91", "sighting_of_ref": "indicator--3c47f714-1c94-47db-ade8-c0890977f67c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3bc02f-31fc-4a0b-b52f-52a82e7ea398", "sighting_of_ref": "indicator--40e968c3-c042-4dec-9c83-95f9ae473aab", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58bd6c4-e88c-4fd5-ae5a-f90dc5458259", "sighting_of_ref": "indicator--29718f04-ab09-4cf0-8d66-8a7c41e76e7d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2e01f6-dfd9-4395-9048-94090f2bb01b", "sighting_of_ref": "indicator--b04db508-e26f-4ac8-b71f-f10714e691ae", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af533429-a5e0-4b32-928c-f37ad8969df0", "sighting_of_ref": "indicator--7c31af2b-7bc8-4b85-ac71-4071377871f7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58599e77-47a2-4f02-8a35-ecb9794a841f", "sighting_of_ref": "indicator--9e8177ce-721e-487a-b7a3-319be559d397", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcaa5dd-604c-4a3e-a495-2dd2fa6f9632", "sighting_of_ref": "indicator--2491b7a2-e574-45dc-9633-37e72bb81e84", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2253134c-e066-43d4-bbc1-213a6b491898", "sighting_of_ref": "indicator--693059f6-9a1c-4e20-b3a8-d5ee92c2a25f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd1720eb-b0f4-4ce2-8b06-bac393bc10d5", "sighting_of_ref": "indicator--71e4693e-252d-4f7c-83df-ed88f1a2ed4f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa91fe17-3b48-489d-8bff-2c927d3148cd", "sighting_of_ref": "indicator--abcd6824-9212-4641-966a-af93f1fe5af2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54df3d65-fadf-4c36-a2d8-12fb47470b1b", "sighting_of_ref": "indicator--0ea41161-8f5e-4c4b-8da3-9d411c34afdd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b220b025-d11a-40fc-856b-b46b8d09d43a", "sighting_of_ref": "indicator--c99b6ec5-2fcd-4d8e-95b6-193ae16b3e4d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--146afb9e-2001-4f8c-a125-cb02fd7e5ef3", "sighting_of_ref": "indicator--3e867e56-0161-4ae3-94cc-a768a02973da", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56fd0f63-6d39-4b7a-82ff-70de7f2f4a7f", "sighting_of_ref": "indicator--2750b976-5256-4290-811b-d4538e7ac364", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5a2b0f-1082-43fb-8d41-795bb08ab74a", "sighting_of_ref": "indicator--f1f88889-413f-4ff8-8805-84d42269ddee", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d23c05-6e69-49d1-92e6-7f5ca5d96014", "sighting_of_ref": "indicator--c5bbc22d-87c6-4829-b05b-c2a647e2d60e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e18022-7eda-41fa-9dd0-588b53f6f5db", "sighting_of_ref": "indicator--a9284434-6de9-4183-90b7-41a0563575c4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb0d029-bfcf-4905-859a-e58e0b1008c5", "sighting_of_ref": "indicator--dc2b1384-5e9d-48b6-8139-bd181d522ccd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77cf5b9-c587-4817-8a6d-10aad7f3ca8f", "sighting_of_ref": "indicator--b4994dba-6c8c-4edd-8a05-ed3cfe82bece", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e749a6-b293-4d95-858c-8a8ceb174cb2", "sighting_of_ref": "indicator--d088fec8-f2d6-4265-933d-9e3eeb37ea90", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977f4ce7-81e7-48b1-becc-edc9d4394984", "sighting_of_ref": "indicator--777c6bed-1348-496f-8725-cebac283ad16", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7022ac67-8743-419b-b152-ab2fe23a6370", "sighting_of_ref": "indicator--97bed082-49d0-4ca7-a872-4435f0266fea", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ca0fad-177b-49d3-a726-a9aba51e5572", "sighting_of_ref": "indicator--1663aefd-c15b-40aa-8904-dba87194b76d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ce4089-7363-4a90-8fae-a9d6aa6b56d9", "sighting_of_ref": "indicator--50926c49-eea2-4f98-9fc3-807653f11ed1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c547912-023a-4bb4-84a8-d6dfdad36d80", "sighting_of_ref": "indicator--114e3ec6-7a82-40d6-8a2b-31c7352b912d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e908af-bbac-43dc-9ab4-49063d11768d", "sighting_of_ref": "indicator--a98d7964-f67b-4fbd-97f9-bd6adcc5b921", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b13bf39-e461-406a-903f-8b50d80fd4cb", "sighting_of_ref": "indicator--4e54b559-247f-4801-8df7-935571a297de", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613e2f84-ff13-45ae-864b-1f21ec5929db", "sighting_of_ref": "indicator--ade2e621-9a16-4abe-9c9c-0d53831155be", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a659c4-2c6b-4042-a249-4ef7e982b25a", "sighting_of_ref": "indicator--159ae412-2bf5-4963-b0df-9fea688857a6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1604a1bf-1d22-4d61-84cf-57ffd107aeb0", "sighting_of_ref": "indicator--dc3060d5-8ff6-491a-8cba-dd72de806e7c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7191bb-8a79-4e89-9e67-bb949eb8f24d", "sighting_of_ref": "indicator--16540fb7-90b2-4dba-bf3d-59a38c25d2c4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63587ba-1a25-4e43-b6b5-20f10e255c1b", "sighting_of_ref": "indicator--89c6ef23-999f-4b61-9013-a35364fd5f5c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73bf6e5d-017f-480a-8aac-d604ff85b088", "sighting_of_ref": "indicator--214af73b-775b-42e8-8c06-e306c658e5d0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa6593e-e9e2-4aad-8892-7ac60ebcedd6", "sighting_of_ref": "indicator--43d4568c-f4d9-4f3c-918c-5ccfbf223e28", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b57d2711-44bf-4e02-9af1-75c060a566a4", "sighting_of_ref": "indicator--7945f526-30fb-477b-a7ae-497062ad1dc5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8d502e-d2fd-4377-ab84-bd657148ca8c", "sighting_of_ref": "indicator--e1816685-ce88-4d87-b2ad-d729c940b719", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2656d03-99f9-46f2-99e1-e64ac220e4e6", "sighting_of_ref": "indicator--d6a3f457-1855-4cd1-8179-10999a49fbe7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8647173b-1dd5-4ea8-b57b-8de56145ddd1", "sighting_of_ref": "indicator--aa169293-105e-4e12-81c7-27ad8f372fd9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4140f9cd-36c2-43a2-9b3f-d12cd8b8ac07", "sighting_of_ref": "indicator--38f6a14f-8d0c-4bb6-8e8d-1ca56403569f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5c315e-851d-49ca-987c-a7ff002947a4", "sighting_of_ref": "indicator--75dc9f91-7375-4ff8-8efa-273a1a3f9f58", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d76ee8-d5a5-41ee-b7cf-6b269eab609e", "sighting_of_ref": "indicator--6de0a3c1-fd73-46ee-889a-3c2f44b4d333", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee0ff06d-55f1-4210-bc01-5f9154e5203e", "sighting_of_ref": "indicator--f9f4e89f-65cf-49be-b522-223f29c737d7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8a2612-5ab9-497a-9200-750bc13b430c", "sighting_of_ref": "indicator--42ac5510-29fb-43f4-a246-b6f9ad8fcd52", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf74574-24b8-4262-93ce-326fc56d94e2", "sighting_of_ref": "indicator--26aedeb0-da74-4198-8a8f-f3f1608b61dd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd33f6c8-45e1-4a32-8894-590f14ad3cd8", "sighting_of_ref": "indicator--38cb180f-7c56-4e83-9106-c9aa1eb6cacc", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5c6e85-7284-4ab5-9b50-a0d11d2943fb", "sighting_of_ref": "indicator--61b8f7ce-5639-40fd-9ad3-a067a41432c3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa7400f6-d7fb-4273-87e4-d1e2431d9cb3", "sighting_of_ref": "indicator--00438ccf-99c7-43d1-8276-91ef445e41b0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ae9366f-3039-4f72-ad3c-d7491a2c3d89", "sighting_of_ref": "indicator--0125f803-ced3-42d6-abc6-5dced9930672", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa79033-206f-4018-a18e-7ddfc244d198", "sighting_of_ref": "indicator--1840d2d2-2dbe-48c3-b2d7-2439679427b8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4570e25d-9d25-4158-80c1-f43c2ac0499a", "sighting_of_ref": "indicator--2b66a0d1-7f0a-4664-8327-2bc71632f4ed", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049975b2-aae3-4e07-a571-a9a9222c0800", "sighting_of_ref": "indicator--1513c063-5867-4932-99b2-315f6de5953b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072377a7-214d-498d-b755-0c5924051d47", "sighting_of_ref": "indicator--a7ba967c-f85a-4c62-b57f-d3926d0a7ff6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9970b3-6391-4787-b6ca-5562486db48e", "sighting_of_ref": "indicator--6acb68f5-a597-47c3-94ea-14031ef882e0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a026630-1915-4986-b588-ce56aeecf20c", "sighting_of_ref": "indicator--21ed500f-40b3-47fc-9ee9-bb301a35ac36", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da747a24-f922-4e46-b172-74476db27c2b", "sighting_of_ref": "indicator--b164b3e0-d7d4-44db-8ee3-d416260549ca", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84770f04-c669-4084-bedf-71c369442917", "sighting_of_ref": "indicator--04e7ecd6-cc63-4dd6-8da7-9ebbad737718", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bcb4f69-b763-458d-83a7-be6e31d1d909", "sighting_of_ref": "indicator--ccfcb00a-9dd8-482a-9188-d08c95840fbb", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e2f9cb-ca94-4190-bb08-e0a3e4553331", "sighting_of_ref": "indicator--5d7e21d2-754c-4903-b678-b18786cafd83", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecbbc2f2-dc95-4337-8f74-3942d671d75f", "sighting_of_ref": "indicator--3b2325de-f076-4f5f-b8e6-416b83ffbf38", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f8f53c-e8cf-46bc-b72e-6999d30f18a2", "sighting_of_ref": "indicator--e6c399ce-ef26-4499-b9a2-ffd0a20c338a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a792d19-82c5-4613-83ed-46ef5f1161c0", "sighting_of_ref": "indicator--4d77dd05-2fd9-4370-80fc-93a647c17800", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff59f2f-ed18-4bac-942a-ba14bc3f0cc5", "sighting_of_ref": "indicator--b6f59c1c-b681-489e-80f0-678c19873db6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2476bb-d361-405c-82ac-eba4739941d6", "sighting_of_ref": "indicator--6aeaf43d-69c7-4d36-bb1f-a4bb4ab030b4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1f0a40-d937-4d1d-a1e4-3beaf450c118", "sighting_of_ref": "indicator--43294aab-225d-448e-967f-b019dcfe6654", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f345b7ac-ee77-4f00-9551-e12cf49bab96", "sighting_of_ref": "indicator--448bc58d-6705-4ced-ace1-a98bb5a3056e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0568b80f-86b2-4f55-95bc-d73a40b0dfb2", "sighting_of_ref": "indicator--ea0aa2ce-a26a-40ab-901b-072254664d55", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b04c4734-d61b-464e-bad4-85db98e5a75c", "sighting_of_ref": "indicator--62af3855-f650-4c02-9de1-f4b669000d08", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c2dcbf-ffd0-443e-bc86-bf8a24c6a04d", "sighting_of_ref": "indicator--e584cc86-6eb4-423c-bd49-2716500a6c8d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb70cec8-8e62-426a-8aab-2b61d91c235f", "sighting_of_ref": "indicator--e95f1445-9b64-4764-a87f-fadf5fa50b23", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2613ed9a-cf5b-4f5d-9aef-a959ff5a0160", "sighting_of_ref": "indicator--e95f1445-9b64-4764-a87f-fadf5fa50b23", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7694f9-9f37-4209-b9d8-71218bcc0e1f", "sighting_of_ref": "indicator--5386715d-b0c0-424f-86f3-4aec62e3002a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe802aab-513a-47cb-8032-7d1c688cd5e4", "sighting_of_ref": "indicator--8fd1947b-43f3-427d-b01c-98f644d9d8ec", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d420f91-e795-4dd5-9e23-c5438995f945", "sighting_of_ref": "indicator--8fd1947b-43f3-427d-b01c-98f644d9d8ec", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe63450a-716e-4865-8fc8-8b8220f6e129", "sighting_of_ref": "indicator--3c0f5358-850a-4986-942d-87fad88898e5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8acb9b-92e1-4ec4-a94b-5ccdea0a1181", "sighting_of_ref": "indicator--7bdead80-0ff4-46ac-a4da-f45bf64f99e6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c384bed-81a4-47ca-a4b0-c1fd5fd5b050", "sighting_of_ref": "indicator--b8dc5e27-0d0f-49a8-8ff4-c2c7176f049d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3486bee0-4e7e-4599-b5b7-0e28c44ec50e", "sighting_of_ref": "indicator--8dc06775-420b-4ae2-a282-933d689ee2a4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c003ab1-e3c7-4dca-9301-8ba8d36f5dcf", "sighting_of_ref": "indicator--a8b94f47-21ae-43bc-a75c-c51437864b67", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c43c28-10da-4963-82cc-e6dab72d424e", "sighting_of_ref": "indicator--8e875975-b069-4963-af1c-cf037e8d9716", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68722ee-5c9a-405a-a724-ae813fa05698", "sighting_of_ref": "indicator--9eabc045-5263-43ac-9aa7-e586485b14ab", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2db16dd-f0b6-464c-b336-f3f941aa8542", "sighting_of_ref": "indicator--dcbd5a21-8fa2-4e4c-af70-ec46fbbcbe33", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206cf325-f55b-4d73-817e-141df073fd99", "sighting_of_ref": "indicator--edeb624b-d0a0-47b0-adfe-ed8359a3ef7f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8188d7ca-fbbd-430a-b111-7b31a3d1bd1b", "sighting_of_ref": "indicator--58bdda49-c4b4-416f-8ba7-1197edc6dc78", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420302ae-fec1-4a6c-ae5e-6acca71c8f22", "sighting_of_ref": "indicator--136038a7-45b2-43c0-8e55-5eb0df17687b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f892966-84c1-4463-9a9b-1f27570ba820", "sighting_of_ref": "indicator--8164bcc6-0254-4ae9-9ffa-9365438f1c09", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f5eeca-00e2-47d0-966d-5c8abbcb8bb1", "sighting_of_ref": "indicator--1a884557-1e21-4e04-938d-a8ee87923388", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9789fca1-9d5b-4634-9603-4cb460bddaa9", "sighting_of_ref": "indicator--00acbfda-5aa2-4442-9932-563e645b5d56", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c9fa279-b1bd-41c1-bda5-aab5ff6fdbe5", "sighting_of_ref": "indicator--187be7b5-f317-40c6-9cc7-98009ef54ea9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90027993-4284-4d5d-9f31-a1bbb4434f51", "sighting_of_ref": "indicator--6acd23e3-258d-40d4-ae30-45e342b5719e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d0db5d1-5502-4c95-aa4a-27bcca6142d3", "sighting_of_ref": "indicator--f250f604-712e-43eb-920b-6c5be4fa13f1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf39d306-31ec-467c-b44c-13e1db4a2242", "sighting_of_ref": "indicator--2aaa06f2-5759-4972-b3a6-6ecf9b164125", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1849310a-6ae5-406e-8387-709f534c3654", "sighting_of_ref": "indicator--fc6afb8c-1f07-4cae-a9b1-fa7f67358beb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911b1b76-a140-460a-8a04-b7902c89e052", "sighting_of_ref": "indicator--b53df380-812f-4ae7-bd58-095504a3bcc4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c1f769-091c-4076-9db1-5fdce03422a8", "sighting_of_ref": "indicator--21190b57-7f2c-4fc4-8e14-f10eed4a4059", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0be7f2f-5e2f-41a5-a144-ac42b7440ac9", "sighting_of_ref": "indicator--93fec50a-895b-4075-9aa6-c00b9aae5099", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e217c43-325a-47e2-91a7-a5116a33f4ed", "sighting_of_ref": "indicator--bc5cc3d0-0b5c-472a-8e14-9518293a4f87", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043b036f-0dcd-46ae-9ddf-f6bf218fb615", "sighting_of_ref": "indicator--1a6b253e-9248-4213-839c-43ed29d6bfa7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--713e990c-c2ec-417d-941b-8a07736e5515", "sighting_of_ref": "indicator--0b320595-45ec-4837-814f-07a6a8c333eb", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520c64fe-49e8-4200-9bd2-252c5aec89c5", "sighting_of_ref": "indicator--2f6ed1ce-7ae1-4ebe-a218-303d165a756f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349e695c-bd1b-447b-8a7c-47137be101a9", "sighting_of_ref": "indicator--cde19f39-be47-4bd4-9884-6538595f6676", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6282e56a-a910-4801-886d-015c61390068", "sighting_of_ref": "indicator--aec727ab-4853-4897-9b5f-f0366246132a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8344b87c-79e0-4e1b-af77-213abbd0f8ad", "sighting_of_ref": "indicator--db0748f4-63a1-4f85-b3a7-27ef77c59ed7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d740d5c4-0cf4-45c8-a02e-0f98391dca17", "sighting_of_ref": "indicator--9a7dc968-6ca7-4901-a749-cc1ccb6b2051", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b09f62-6123-4e43-a098-454e2193f71c", "sighting_of_ref": "indicator--31224b54-9a30-41df-b86b-da69ba25c36a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f50299-5251-4402-ad43-4b8c30411628", "sighting_of_ref": "indicator--90afd3fd-0632-4455-8f7e-77218f2e7c80", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e31beb-0292-4fad-bb43-41c996090162", "sighting_of_ref": "indicator--42146df1-eaa0-4ec4-89cd-d1065f388798", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fee3a58-8d88-4329-b335-e4f288f1e2d2", "sighting_of_ref": "indicator--e979c966-b8ef-451c-885e-78be30431f78", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce1b6fb5-c54b-4226-91ba-3251c32f3c19", "sighting_of_ref": "indicator--0665f6c9-8175-415c-9753-6f955a4dc650", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c725558-0ec3-4bc9-a597-8b32261a6136", "sighting_of_ref": "indicator--b1e3c45e-5c43-486e-a01f-f033078b1d4e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd8c3fb-c2b5-464f-9be4-d51bb39c6624", "sighting_of_ref": "indicator--e2d2354b-0499-4b0b-9d06-f8b74bc28ef7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d393cf6d-fe6e-4db4-8b6b-15bafbfe1565", "sighting_of_ref": "indicator--8a5fb78d-5951-443a-a1b6-f248215dee29", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1fd229-209b-43f6-a980-d8334e81f609", "sighting_of_ref": "indicator--6b777778-2222-4015-9c4c-4b9b5d6a5452", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33887488-4ab8-4bf9-9058-808cba535308", "sighting_of_ref": "indicator--7e6bb0ce-8c7b-4f75-8b23-967e8d4780e6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--509f0393-35b1-418d-8580-e7c52f981c93", "sighting_of_ref": "indicator--551b5591-1c17-461e-851a-9f8730411f59", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd709e86-e45a-4ed6-90fa-fcf8d7e18998", "sighting_of_ref": "indicator--46a51091-3a1f-43a2-9745-0285b8b22738", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a20a67e-b661-4761-bfe3-bd0363449e90", "sighting_of_ref": "indicator--c2685bbb-48a1-4adf-9ef2-39ea5059d1a2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17421128-42cd-4445-80f0-6466e13bf72a", "sighting_of_ref": "indicator--fc9719f6-6890-41aa-abfd-48620c88e915", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309c877b-7058-4030-915d-fb2cac910c4e", "sighting_of_ref": "indicator--bc03db73-825d-4333-aff8-560807ec205f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a40aa84-a71e-460d-be0c-351110980093", "sighting_of_ref": "indicator--4bf5b7b6-49e3-42e2-a52c-ee1be22f05e1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0e427a-21cd-4d87-a010-b01696febd5c", "sighting_of_ref": "indicator--3ffe561a-d430-45e6-b15c-ab0da6822f5f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d162351-697d-41bb-a713-0093dc0de18d", "sighting_of_ref": "indicator--5bf826c9-43d9-4971-b504-989a4e89fc6a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d679ae-9016-4545-980d-4fc4e359e816", "sighting_of_ref": "indicator--c6fbddef-c7ec-46ff-a6d3-79d6f5e951f7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02116698-9252-46d4-b0bc-bb95f47570e1", "sighting_of_ref": "indicator--bdb6a8f3-be71-4f3a-82c0-501dfbd1bfd8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaeebb50-e3f8-419d-ae95-eabcee6ba643", "sighting_of_ref": "indicator--b42f9241-13f5-47d7-8763-fceaf5834009", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72742187-1e5a-4735-a29b-d810cbc4a45f", "sighting_of_ref": "indicator--b520cd10-a5c8-4181-8dc9-20a8a19ff779", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f18cda5-0a5a-42a8-a42c-8c9230a544a4", "sighting_of_ref": "indicator--fa9644c1-81ea-4c37-9d7b-ae1caa8861ce", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2d6987-7612-4859-a237-12ed6fc409a5", "sighting_of_ref": "indicator--8c090bdd-d1a6-49e3-aebb-b7c2e8713417", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7056199d-1e0d-4dd5-8a66-05fc82ea2125", "sighting_of_ref": "indicator--50c1fdef-4cbc-4c82-8d1b-8f6ab0b197d4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e206e8f-82bf-4242-9ecc-92993180309c", "sighting_of_ref": "indicator--878be2aa-6cc4-4b6a-ae19-4e92c1205531", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504db03e-1d57-4bfd-ad3f-a155320c53e5", "sighting_of_ref": "indicator--6ba51d46-1565-4836-8902-5c5acda83a70", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01af01a0-4b3b-4157-9f5d-bba24de992c2", "sighting_of_ref": "indicator--0678bcea-bb04-4746-826e-9811dc80b13b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ca93f0-6889-4794-82bc-4aaf9a5d175a", "sighting_of_ref": "indicator--549143bd-3ad0-4bd4-a9ba-573f906e5b07", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49ed75a9-665e-4d58-90ad-b3ab73f878a5", "sighting_of_ref": "indicator--2ecc098b-c238-4bab-845c-1020fa3a4694", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030efe13-7023-4ae1-b8a6-90cafe5bb18d", "sighting_of_ref": "indicator--83181f06-9352-42d5-bbfb-38d492f75c83", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947a8127-1c70-453d-b13d-2a4ddd0a886d", "sighting_of_ref": "indicator--69bd0033-374b-4f5f-927e-0591c08b63ac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02011861-c78e-4566-bf15-f615b63eaa5d", "sighting_of_ref": "indicator--58b112dd-df2d-4571-97e4-8cd440d2849a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9b8cf5-9cf4-4b65-89c7-900d2999f5be", "sighting_of_ref": "indicator--82281fdc-de64-4d7a-89d0-dc9e2e3f8526", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ef58ce-54ff-4203-982b-384c4d99fade", "sighting_of_ref": "indicator--fbca5919-115b-45cd-b00a-d56588be8b0a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a2d3e6-882a-4386-9027-46c663689098", "sighting_of_ref": "indicator--44e49bea-170a-4147-b9ee-0da54a3b69d8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657ca138-bdc6-4378-9b06-2271d4c2df2a", "sighting_of_ref": "indicator--96bd0711-1972-46cb-90e8-5e650f8167f3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933c8755-e3a0-4c43-8203-b73610b232d1", "sighting_of_ref": "indicator--921a0f03-36c2-4d11-b078-1022e72e6b3a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5f9d53-2405-4947-8637-1743ca210ee4", "sighting_of_ref": "indicator--0beaa768-da53-4416-8093-3ca4b7b3dac8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf87f6b-5401-403f-bf22-70cf174ed914", "sighting_of_ref": "indicator--694b5a57-65b8-4eaa-9f8c-2e335c946c84", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0effacb8-6c75-4185-a316-401891aa5ce9", "sighting_of_ref": "indicator--07d16379-6b0e-4720-9288-f5ba66fe2405", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3fa78b9-30ca-4eef-a11a-9732eb985d23", "sighting_of_ref": "indicator--2d3fac7c-7986-47ef-aeca-70d30d0afa3d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22cfb0bf-889d-4687-897a-e394d5f8ed2a", "sighting_of_ref": "indicator--c9e35582-4850-4599-a968-2176ff85b95e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1358a7-8447-4405-8759-6ab1802ed930", "sighting_of_ref": "indicator--d93a435a-a243-4468-81e2-7ff3f7e9dcee", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f500d938-6630-433d-b610-ac9118b51a39", "sighting_of_ref": "indicator--34bf20e3-27c0-4385-963f-1da8d558a1b3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55766b00-d501-464d-8a4d-409d25a6082c", "sighting_of_ref": "indicator--eb11c230-0118-4f7f-9348-bca62ae6891c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d699496-9e50-45c2-a818-141edc8eb5b9", "sighting_of_ref": "indicator--2fabb654-911c-4e5a-b7b3-47af3ff6a056", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919d14fb-2806-4693-9845-11c8b8376b3c", "sighting_of_ref": "indicator--2e0de455-4417-4e98-a4fa-0f98c66bbd68", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a7cb7e-3b1c-4666-9e39-ec4979c0f6b4", "sighting_of_ref": "indicator--bd4a33bd-e0ab-4375-baf7-cfee1b3528a3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39935841-4c35-44e2-b99e-4bde75c69608", "sighting_of_ref": "indicator--3d0febb0-adad-46d3-9d47-6c1839a9728c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb10388-2f21-4995-ac99-2ba88781cb87", "sighting_of_ref": "indicator--503dda28-3706-4ad1-bad5-9fcabbf2f49b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06647ca3-e6b4-43de-80b5-c83ff860d95b", "sighting_of_ref": "indicator--63ce6d0e-7912-4975-95c7-001ef7715eda", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d5523a-0a24-47d9-8c9c-5477e49cc95c", "sighting_of_ref": "indicator--8c2b39dc-54c6-48d4-b589-be031587b6ff", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1027df59-99b7-4fb8-8fae-7bd90a0f6d63", "sighting_of_ref": "indicator--c9597252-347c-41f4-bdd4-e403b385c858", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52af6e87-df6d-4d17-933c-16cede5d5761", "sighting_of_ref": "indicator--8282ca54-93f5-4319-aaa3-df2a1062dd33", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d196e1a9-84be-4836-b512-a69fc02ae190", "sighting_of_ref": "indicator--9bd9d6d6-3444-4d1f-893a-0b41b735a37c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe666bde-ff5a-4f9c-9e5c-6471907315c1", "sighting_of_ref": "indicator--a49a9e1a-3589-4870-a80c-0bc47c7312c8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c647eb9-49a8-475f-b6fb-70f139514d96", "sighting_of_ref": "indicator--89410515-9178-4c94-8404-0575f9bbccc8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001a8500-6337-43ab-9b13-63ffff8f1028", "sighting_of_ref": "indicator--4e55af39-7a03-49e2-a8bf-09118cdfd0a7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--987fe222-aa56-4dfb-bda9-7db1c63a638c", "sighting_of_ref": "indicator--8ebfdf9a-6a32-4d40-82c5-69c063087891", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--424d01be-4c7f-4d8f-a44a-7b7f2f56e9c8", "sighting_of_ref": "indicator--7f2ece4a-3829-44ae-9a4c-4485147a85e7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e38929f5-0ae1-4abb-8e01-6501c08b0b18", "sighting_of_ref": "indicator--2fb62011-b60a-4353-883f-f8c621884407", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d548492-4a9f-4b5c-bb32-ecb112227fd3", "sighting_of_ref": "indicator--5220cb70-656a-430f-b9b8-0977d0a6e92d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344d699c-1107-4493-9b18-d1f09a04a1c9", "sighting_of_ref": "indicator--8bf5cd57-a64c-44a0-acce-5d5ea883be10", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af3ebde-736f-4c3f-a774-d350fcd04917", "sighting_of_ref": "indicator--d6f70705-3723-4885-892b-769280d71b95", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f013d426-6e9d-4476-af32-ee77cc2d7012", "sighting_of_ref": "indicator--d7d2a205-0fca-48b1-8d0f-b0e93d8b67f4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7da0a1-4e7b-4709-a90b-ef2767ff89b0", "sighting_of_ref": "indicator--24ff85dc-2c2c-45cd-9a75-e529d2a08b82", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14853d09-ac92-4705-9fa1-109d1ee8d0b1", "sighting_of_ref": "indicator--09502b48-cccf-4742-8a4a-50cf0aa62eb3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b21e3aaa-6ac7-4710-9d31-f1eabe316b12", "sighting_of_ref": "indicator--d7cd9f2f-4e70-4b85-97b7-7798b9d21f5b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab51fe04-e850-405a-8044-1a9ea83316aa", "sighting_of_ref": "indicator--bc643ef8-f5b9-4a16-8052-de87022056f4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3007e9dc-735c-4b89-9169-b2c282d8d040", "sighting_of_ref": "indicator--48bdd55e-4bf5-4e42-9b86-e928f5b2f1e1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd7b198-779b-4439-893e-9479ced5cf30", "sighting_of_ref": "indicator--48bdd55e-4bf5-4e42-9b86-e928f5b2f1e1", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9658a389-9bc4-42b5-a282-a8b0adf14c93", "sighting_of_ref": "indicator--2ce1e8ad-0ca6-4db0-9ce8-0f3dcb20b964", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6179370-b853-4c3c-b57d-36780888988c", "sighting_of_ref": "indicator--99ff0d6f-4d30-43c1-a89b-c1a2502655e4", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0912152-d069-45c4-83db-04a4056bf5cd", "sighting_of_ref": "indicator--99ff0d6f-4d30-43c1-a89b-c1a2502655e4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffef6d61-3c0b-469f-ae8c-61091e6a8af4", "sighting_of_ref": "indicator--0aa92ff7-8f43-40e1-a82d-68453e046b4b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608b05ad-4977-4361-ba17-e698ff1bd7f2", "sighting_of_ref": "indicator--0aa92ff7-8f43-40e1-a82d-68453e046b4b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7735807-7b35-4a6b-8420-cb6c6966b3e1", "sighting_of_ref": "indicator--0243d9f2-e451-4b2a-bd48-417fc65d1793", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7f9c8d-e362-4601-a975-9f03f98310ce", "sighting_of_ref": "indicator--0243d9f2-e451-4b2a-bd48-417fc65d1793", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dcae663-0817-45a8-ac73-5d4030f70b4c", "sighting_of_ref": "indicator--e2173a1e-8aef-41f0-9ed6-39102f7ed738", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8764a6c1-b086-49b0-a326-ec54770202ee", "sighting_of_ref": "indicator--e4b538b6-5101-4ca0-88d6-e5e21a6dda67", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ad6242-02af-4a36-8de9-37d2802b4411", "sighting_of_ref": "indicator--8bf04ff9-63ee-4b35-a1fe-9ab9e5594e41", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c977cbe1-c540-4814-b4bc-bcb3438e4487", "sighting_of_ref": "indicator--8bf04ff9-63ee-4b35-a1fe-9ab9e5594e41", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878cd161-2230-4feb-b73a-b8ba8590be6b", "sighting_of_ref": "indicator--d272b010-8225-4bb7-97c3-b61ef2b18fa1", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3767c5d4-5e42-494b-a97b-b92301accec0", "sighting_of_ref": "indicator--9081b7c8-5914-42e0-9435-007860dba391", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2165682-f408-457c-acef-e53ba960b83a", "sighting_of_ref": "indicator--9081b7c8-5914-42e0-9435-007860dba391", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3210f1f-9998-4412-922e-37045b7b253e", "sighting_of_ref": "indicator--ca92d24c-5d4f-4e8c-9e08-725c0cc54fe4", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea08127c-5706-45c7-b43c-b688cf556c18", "sighting_of_ref": "indicator--1ef0e54c-4028-4bd6-8be2-fd35f4a2dcf6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f3c605-b0cb-49bd-b4ad-8080b18db39c", "sighting_of_ref": "indicator--1ef0e54c-4028-4bd6-8be2-fd35f4a2dcf6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0c01a0-28ad-4a77-9d29-7717f53711fb", "sighting_of_ref": "indicator--e07eaad8-73e0-4346-a2e9-a22cb58b2675", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abdc1b0-c8ad-45b4-933e-a6dd03852271", "sighting_of_ref": "indicator--e07eaad8-73e0-4346-a2e9-a22cb58b2675", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1919c1-1454-4731-ae28-b2a58c8ca41f", "sighting_of_ref": "indicator--a2594a39-e6f1-4aa7-ba84-eadaeebd7361", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--413e0c1c-7192-4c3e-9615-bedc888f6d6e", "sighting_of_ref": "indicator--3e8cfe10-ceb0-41d6-9cac-132579e3fe3f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab46060-4b0c-40da-8e0b-e6107258c96f", "sighting_of_ref": "indicator--3e8cfe10-ceb0-41d6-9cac-132579e3fe3f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b2a7d27-21e7-4d9e-a829-07f0fcac1543", "sighting_of_ref": "indicator--e3f3b8a2-e3c7-4fb8-81d8-a2408a8b9c01", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377fb02f-feb3-4349-ab74-a233ffcfebc7", "sighting_of_ref": "indicator--a3ae9fae-b990-40a9-96f6-5b35158ca6be", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a0edda-73fc-4885-8950-b95ab2262f45", "sighting_of_ref": "indicator--ca13ebf5-1816-4214-b1d3-477032c7214f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4448019-aeb5-4d86-972d-0eac975a27e1", "sighting_of_ref": "indicator--55e76d70-6283-4046-bed3-b215b63167ac", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67829466-376b-435b-90ce-ffae40812f3d", "sighting_of_ref": "indicator--55e76d70-6283-4046-bed3-b215b63167ac", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522ed250-433d-4258-ae1d-b2288e212ce6", "sighting_of_ref": "indicator--7b3e870e-4f9b-4a6e-95b6-d7a60df3054b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db1a65a-c9b2-4b7d-be52-7c3a792c26ca", "sighting_of_ref": "indicator--d3988f10-45ed-4fe2-8a5e-fad5b332aa16", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a470840-c8d4-4d19-9a45-688f6134856a", "sighting_of_ref": "indicator--d3988f10-45ed-4fe2-8a5e-fad5b332aa16", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6860d288-67c6-4901-9e29-211e0ddfd47f", "sighting_of_ref": "indicator--d3988f10-45ed-4fe2-8a5e-fad5b332aa16", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8384fcf-5d3f-47d5-981b-f4c8f6836678", "sighting_of_ref": "indicator--41a52aac-248b-4bd0-99bd-8fa22a609cbf", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf395af8-f94b-40c6-a3bc-079513f19732", "sighting_of_ref": "indicator--41a52aac-248b-4bd0-99bd-8fa22a609cbf", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf0d28d-8505-4782-8a32-140fc3512707", "sighting_of_ref": "indicator--41a52aac-248b-4bd0-99bd-8fa22a609cbf", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8ef72f-a4a2-4313-a48b-dbfe30f9c0d7", "sighting_of_ref": "indicator--e8a3e987-0273-4fe1-bc0e-aa9e729c9d29", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d52d6af-d719-4be6-b3e2-921cf763050c", "sighting_of_ref": "indicator--e8a3e987-0273-4fe1-bc0e-aa9e729c9d29", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450ce855-6f99-401d-8701-63a5b517448d", "sighting_of_ref": "indicator--e8a3e987-0273-4fe1-bc0e-aa9e729c9d29", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc8ca51-1b94-4051-967a-d9ffff0f2c53", "sighting_of_ref": "indicator--9814eb51-2f5a-450b-a81c-e9c9502aba7c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6ef7fe-3dff-4909-b7df-7283f744e079", "sighting_of_ref": "indicator--e90d6dbd-9491-4628-be49-dbf9dd6f075d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab944cf5-c741-474b-921a-a97c68706d83", "sighting_of_ref": "indicator--b08507c9-b1da-49e8-9b61-fe471ac90f5c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb158e9-42bd-4934-b127-040a24aec576", "sighting_of_ref": "indicator--dfa475a2-757e-4604-9c8f-b8ccd8f14a65", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b33df0-522a-4830-8b39-8e7bd95c5f0d", "sighting_of_ref": "indicator--dfa475a2-757e-4604-9c8f-b8ccd8f14a65", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6596e43-ec94-4572-aa70-1557d48e6912", "sighting_of_ref": "indicator--f5f36d5a-1e3b-4214-864e-c0f114586e39", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442b6334-fff0-4db3-8b58-d0d5bbcdad1b", "sighting_of_ref": "indicator--f5f36d5a-1e3b-4214-864e-c0f114586e39", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a01b0eb-62bf-4ade-8493-09c2573dccbd", "sighting_of_ref": "indicator--4138521d-400e-4377-91c4-0c2f38952ad2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c30d12c-441f-4e95-8f9a-6c1af7583255", "sighting_of_ref": "indicator--7187ded6-0990-4890-a0a5-891dc4e321fc", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ae395e-d0e7-453e-9432-12315e86cc62", "sighting_of_ref": "indicator--db0a4139-cb55-445e-9ddb-5026f9ae7cbd", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14324f52-0f51-4164-b794-31d40d5e3e90", "sighting_of_ref": "indicator--dca18dde-769b-4eea-92e9-c154ba24f43c", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a695e2ca-5b5f-415f-b503-1af037459582", "sighting_of_ref": "indicator--befe4e88-6d3d-4702-ae88-407c0da37480", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9698b2c-8911-46ee-a561-70a3418c1ca9", "sighting_of_ref": "indicator--3934bfa0-6b08-4912-b6e2-1fce113dc14d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a789ebc-aabc-4adf-a444-98d8900cb976", "sighting_of_ref": "indicator--3934bfa0-6b08-4912-b6e2-1fce113dc14d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17855028-9790-4fb5-b58f-a4c12fb04791", "sighting_of_ref": "indicator--a9312ec4-4ced-4fc0-9fb0-bd35642032a2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627b7f8b-cd66-48b6-a469-0cfc188b473b", "sighting_of_ref": "indicator--a9312ec4-4ced-4fc0-9fb0-bd35642032a2", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f477844-0741-4798-8bfc-f1997caee6c8", "sighting_of_ref": "indicator--a9312ec4-4ced-4fc0-9fb0-bd35642032a2", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57fe3a41-a500-46a3-9734-49578b30768e", "sighting_of_ref": "indicator--1484421e-a449-4a77-a1db-bae02442a964", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82200248-5089-438a-8f0b-6304cf6eb5aa", "sighting_of_ref": "indicator--1484421e-a449-4a77-a1db-bae02442a964", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b675ca2-f430-4ee6-89c4-c4aad8357be2", "sighting_of_ref": "indicator--1484421e-a449-4a77-a1db-bae02442a964", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa78222-fa71-410a-8651-7459219e55ee", "sighting_of_ref": "indicator--a2399455-8b4f-4ff6-827d-725ae52ad35c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbafe24a-3fae-4920-b8d9-dde42814a1eb", "sighting_of_ref": "indicator--7ae3146a-6b20-4219-8b2d-980fcc290e92", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3145a0a0-64db-4145-aa97-90429b920fcb", "sighting_of_ref": "indicator--7ae3146a-6b20-4219-8b2d-980fcc290e92", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7633a32f-b67d-4bbb-8f3f-ff72c323caaf", "sighting_of_ref": "indicator--bb884669-1981-4d03-bd6c-064a5152b263", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fbb9fb9-6770-4d03-a202-1256f2dd5a1b", "sighting_of_ref": "indicator--bb884669-1981-4d03-bd6c-064a5152b263", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a584e294-d207-4615-a90f-9e28f412b0e9", "sighting_of_ref": "indicator--bb884669-1981-4d03-bd6c-064a5152b263", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e622b9c8-adf3-4be5-9dda-90e408b1f66b", "sighting_of_ref": "indicator--b5cfdf6d-21b7-4853-a4ba-5947a78e70f6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f89f09ae-dfec-49ae-9c1a-2ab06d5d2ad1", "sighting_of_ref": "indicator--b5cfdf6d-21b7-4853-a4ba-5947a78e70f6", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3178aa-b863-4c7b-99fb-48f8a655ad9e", "sighting_of_ref": "indicator--93e80944-cf43-4c16-bbf7-f413aace3a57", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4620e966-8386-4a0a-a33d-c6d27098434f", "sighting_of_ref": "indicator--93e80944-cf43-4c16-bbf7-f413aace3a57", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056098fd-882b-4937-a034-c3e672341b6a", "sighting_of_ref": "indicator--93e80944-cf43-4c16-bbf7-f413aace3a57", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53cbb20b-0cd3-4687-8f9f-9aa9ca4ee69f", "sighting_of_ref": "indicator--e410a5a8-9bba-4c91-8d81-83ef29319d74", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73f4174-3095-4f11-bb41-3fd1c4358b25", "sighting_of_ref": "indicator--e410a5a8-9bba-4c91-8d81-83ef29319d74", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a3a40e-e2ad-469a-b872-3c4487640aae", "sighting_of_ref": "indicator--2244d08f-3f0f-46a1-be4e-58183ba4cd44", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75886ec9-b7ce-40a4-b0f3-3edc8bc8ddaa", "sighting_of_ref": "indicator--93016a41-92c0-4145-9a77-293b2210d8c3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f699d4-b1bd-46dc-9638-3dffd934d734", "sighting_of_ref": "indicator--da755b96-7457-4d98-bd76-0351af7751ff", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ebb0c6f-0a50-4460-8f2e-38d9245423fd", "sighting_of_ref": "indicator--da755b96-7457-4d98-bd76-0351af7751ff", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7672e8de-8b58-451d-aa68-d7364bb65e08", "sighting_of_ref": "indicator--f182d5ef-9b2b-4411-951d-80d638bceca9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf27e85-a712-44b4-9dfd-acf75b7ee78e", "sighting_of_ref": "indicator--f182d5ef-9b2b-4411-951d-80d638bceca9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7edc1ace-83da-462d-9644-121dd07204ea", "sighting_of_ref": "indicator--3693605c-e492-4158-8a36-d9fb5cdf1cb1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e823733b-dab1-469c-a2c1-2eb45a59a26b", "sighting_of_ref": "indicator--ce9dcb6a-9238-42d9-a3ad-9f09daea7ed8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04be3c54-94a3-484b-8bc0-39930025b4cb", "sighting_of_ref": "indicator--446af704-3f02-4d68-9c4f-f4a4f0b71461", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5cc9478-61e6-4efc-852d-763e776ea010", "sighting_of_ref": "indicator--446af704-3f02-4d68-9c4f-f4a4f0b71461", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b0b1bf-b20c-45c0-a4d6-d87b3117a832", "sighting_of_ref": "indicator--446af704-3f02-4d68-9c4f-f4a4f0b71461", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f261a6e-9c0e-42fc-9b3b-cbcab500a4a0", "sighting_of_ref": "indicator--4df096df-69ab-4257-b833-fbba7a84df48", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cdb3918-bfc3-45fb-a51a-317ca5855c5d", "sighting_of_ref": "indicator--4df096df-69ab-4257-b833-fbba7a84df48", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56691833-689e-4737-a4b0-ef9ecb0a6922", "sighting_of_ref": "indicator--4aed588c-77f4-42c7-9fde-d49d71d5707c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1463a3aa-d98d-452b-b06b-e308a96e8abd", "sighting_of_ref": "indicator--4aed588c-77f4-42c7-9fde-d49d71d5707c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01174310-fa1c-462b-b92d-314bf2871681", "sighting_of_ref": "indicator--c8c67484-19e6-4823-8799-fae6788a3e01", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d066d18-2a39-46e6-b78a-df63cc0fdad1", "sighting_of_ref": "indicator--c8c67484-19e6-4823-8799-fae6788a3e01", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e689ce5-90d7-451f-9954-8ac5d6e34abb", "sighting_of_ref": "indicator--51e003c2-1dd1-4e37-b63c-d550c6da64c3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62fc14a8-e93f-4e29-be4c-e76f462fc57c", "sighting_of_ref": "indicator--51e003c2-1dd1-4e37-b63c-d550c6da64c3", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f70e547-557a-4f0c-bedd-4431bc412ab4", "sighting_of_ref": "indicator--c366df2c-b7a7-4237-a6eb-5e5763e659b5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f5a20c-4de8-4a83-9701-3ddc8415a53d", "sighting_of_ref": "indicator--c366df2c-b7a7-4237-a6eb-5e5763e659b5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ceadce-2942-472c-92c8-429e9f96505f", "sighting_of_ref": "indicator--c32dcbde-4a9c-45f6-b237-51390b93b575", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685578ef-bba8-4a4f-b27c-f3a68faa0794", "sighting_of_ref": "indicator--c32dcbde-4a9c-45f6-b237-51390b93b575", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82218ebf-aecd-4df8-af63-d6385bdb1df0", "sighting_of_ref": "indicator--e9a7cf9e-742c-49eb-aa00-cc4fae2b8177", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--595151e8-0fe2-42f5-89f2-90ea932c7bc1", "sighting_of_ref": "indicator--e9a7cf9e-742c-49eb-aa00-cc4fae2b8177", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ba8c7e-ecd8-493f-ae89-dea362af268b", "sighting_of_ref": "indicator--1b5fd4e1-0171-4aa4-b463-3629ca06e56f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448c4dfc-8d0e-43da-b8eb-86b793afeaf1", "sighting_of_ref": "indicator--c9788f09-140b-4381-8c72-21189e1fa966", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d3bfdf-504a-44b6-8482-c0f602ffa9da", "sighting_of_ref": "indicator--c9788f09-140b-4381-8c72-21189e1fa966", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55cab3c-9099-4103-89fd-71c021e768a9", "sighting_of_ref": "indicator--c235a4bf-bff8-4d12-9af3-c1c947306e9d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6800cbeb-14fa-445d-b547-a31e8c743536", "sighting_of_ref": "indicator--c235a4bf-bff8-4d12-9af3-c1c947306e9d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd436232-e538-4dd2-8ea4-bd32c675ade5", "sighting_of_ref": "indicator--fb6f7e23-917d-4b79-a60e-a81f4466ae40", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bfc8c0f-b396-43c9-b5a2-e44b30afd148", "sighting_of_ref": "indicator--fb6f7e23-917d-4b79-a60e-a81f4466ae40", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fdf92cc-a2bb-41a2-b670-d3ea09788e9c", "sighting_of_ref": "indicator--fb6f7e23-917d-4b79-a60e-a81f4466ae40", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f8c8a3-c9ec-4cc9-b61b-307d6aa1b84a", "sighting_of_ref": "indicator--1ce84ec8-d179-42a2-9203-eb69b60c30ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4231af6b-da7b-422c-9c85-14c10c24a3d5", "sighting_of_ref": "indicator--5edd2357-8c70-42b2-9165-1bedd62752e8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d35236-bb0f-4c35-b847-c409b620a53a", "sighting_of_ref": "indicator--85b476a8-2f6f-4e66-8fc6-6ba0fd9f50aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd130a3d-6e09-4366-b444-ab18fa08f463", "sighting_of_ref": "indicator--4715a4bf-e541-43d3-9100-c3ec2e66851d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100020cf-f0fd-4c8e-8db5-dd459f65ccd0", "sighting_of_ref": "indicator--4715a4bf-e541-43d3-9100-c3ec2e66851d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51333ce4-b406-40d3-bb5b-8b36ba093712", "sighting_of_ref": "indicator--1db2a5a5-391a-430b-8591-b4646b3359ec", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9410b296-7a03-4ea9-93e8-8d1bc907a208", "sighting_of_ref": "indicator--1db2a5a5-391a-430b-8591-b4646b3359ec", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd992302-5817-4229-951a-4c956aeb6fbb", "sighting_of_ref": "indicator--1db2a5a5-391a-430b-8591-b4646b3359ec", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fda6947-4667-43ca-bfe1-de6c6bd7a3f7", "sighting_of_ref": "indicator--aa5a248d-f7d8-4b78-ae34-367e11fa057d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef77733-0073-4a3d-b200-5a1c426a6ead", "sighting_of_ref": "indicator--aa5a248d-f7d8-4b78-ae34-367e11fa057d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a366f3-71b6-4b32-8b53-c6b87aca5b1b", "sighting_of_ref": "indicator--745f3cb8-6842-44e7-990a-d543da198a2e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5168a6-43cc-4016-86f4-b49eb2bffc4c", "sighting_of_ref": "indicator--745f3cb8-6842-44e7-990a-d543da198a2e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd94090-f1f4-4ace-b35a-43fbac0b8632", "sighting_of_ref": "indicator--d5219d47-1880-4621-baba-8895d7eee26f", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b0b667-f7fe-46d9-8c68-7fb2fff97593", "sighting_of_ref": "indicator--d5219d47-1880-4621-baba-8895d7eee26f", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5f4371-448b-4f7e-a72c-e5c4e9efdf2e", "sighting_of_ref": "indicator--b85cf74b-c709-417d-b377-fafbb075e0c7", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23b6dde-f9a6-41a8-8bc8-1a4558184423", "sighting_of_ref": "indicator--b85cf74b-c709-417d-b377-fafbb075e0c7", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd3b698-ddef-427d-aa80-8b63f8959ae8", "sighting_of_ref": "indicator--1f4d9ec7-bfe4-466e-81a8-449d36f82600", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5cf2da-8fb2-44c1-ad16-b749f7ff8af6", "sighting_of_ref": "indicator--1f4d9ec7-bfe4-466e-81a8-449d36f82600", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece08ab0-b251-4624-ab1f-bce59d947b4d", "sighting_of_ref": "indicator--58909d4c-99b9-4766-a498-e30cc109a414", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69fc0570-e8ab-4936-921c-4961017013c6", "sighting_of_ref": "indicator--58909d4c-99b9-4766-a498-e30cc109a414", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ba78b2-57a5-477b-8de3-1f787ef83dcb", "sighting_of_ref": "indicator--f5bf083f-8342-4efd-a94c-e0c8eb121549", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd08398-8e88-4e85-99ba-36255dc3675b", "sighting_of_ref": "indicator--7a12decc-5224-47c1-9376-428020d8c840", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e70e87-dd66-44f1-b2bf-360b4b591192", "sighting_of_ref": "indicator--09d12b43-3ec3-46ea-af59-5b951b2cf0ad", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58465d11-5e15-4936-a037-b687ccb5d4c0", "sighting_of_ref": "indicator--09d12b43-3ec3-46ea-af59-5b951b2cf0ad", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98ae7399-5e2b-490d-8de4-12aeee37ff0e", "sighting_of_ref": "indicator--544ae400-7c2e-4f10-a368-f598090b6205", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a3a3ac-70ff-43e9-a852-2ea23b74a496", "sighting_of_ref": "indicator--544ae400-7c2e-4f10-a368-f598090b6205", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a947f60e-3db4-439d-b6fc-c90af452903c", "sighting_of_ref": "indicator--451ff2c2-9b54-47a8-bd8a-3c6e3e6be52d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8971194-15de-4f19-a42f-a22a9dddd3ec", "sighting_of_ref": "indicator--451ff2c2-9b54-47a8-bd8a-3c6e3e6be52d", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962fe345-6f90-46a4-b6b7-3087536d4b6f", "sighting_of_ref": "indicator--316fdf27-733a-4307-b489-638f6c9559f5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8432f6d7-8849-4bd4-98e2-8283219a6553", "sighting_of_ref": "indicator--9dff25f8-c742-4f30-9852-5714e94820c5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a059a9b1-cf66-49ab-854c-26c105e97fa9", "sighting_of_ref": "indicator--9dff25f8-c742-4f30-9852-5714e94820c5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--296fc0b8-cbb5-43fa-ad4d-bb1cc629a0f9", "sighting_of_ref": "indicator--0af2e6d2-8755-4bd5-8b23-89e8a24e2c61", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8acaad17-8409-42c3-9c0d-300ff82b47e0", "sighting_of_ref": "indicator--0af2e6d2-8755-4bd5-8b23-89e8a24e2c61", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3445c4c-5578-4265-831d-f3a8a1c0286b", "sighting_of_ref": "indicator--2b431705-665a-4405-a769-ade25a48e147", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa402ff9-05a5-4e9c-85a1-ab1e53ad44d3", "sighting_of_ref": "indicator--2b431705-665a-4405-a769-ade25a48e147", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c977156-ae7e-4734-8e0d-f0b070f96c78", "sighting_of_ref": "indicator--a3abe252-9cdf-4a96-90b6-f94f3ad19386", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4164685a-998a-449c-b58d-bc7007c9dfc5", "sighting_of_ref": "indicator--a3abe252-9cdf-4a96-90b6-f94f3ad19386", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9573e9e-050c-4e98-abc6-1711cd84d075", "sighting_of_ref": "indicator--d437b945-fb66-47eb-a90f-2b776edc991b", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa35808-83b6-47ff-b1c9-7ac266247a94", "sighting_of_ref": "indicator--d437b945-fb66-47eb-a90f-2b776edc991b", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ebfaec-d814-44d1-b544-940e7c34320a", "sighting_of_ref": "indicator--1ab69cdf-7197-4538-960b-6009c0bea948", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79edeeb2-c0c9-4019-8b81-ee987a2d3a72", "sighting_of_ref": "indicator--f336547d-2e4d-4e01-a857-9f9c1ef40e73", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20c9410-9c23-4163-89ac-cde141eabbc2", "sighting_of_ref": "indicator--f336547d-2e4d-4e01-a857-9f9c1ef40e73", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78be596-9ffd-4cbf-87c6-63dcf941b0b5", "sighting_of_ref": "indicator--f336547d-2e4d-4e01-a857-9f9c1ef40e73", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf24cc2e-4952-47e5-9548-b15c04c1d2f2", "sighting_of_ref": "indicator--bece9c4b-d677-4ada-a142-11d77305bab0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5b4c2d-f2bb-4962-81ee-81e8ae9b2073", "sighting_of_ref": "indicator--cc8cd6a2-859b-4d70-a8b4-8422735d6624", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e676735e-bebe-4785-89df-549aa45c5cf4", "sighting_of_ref": "indicator--8f659e74-2c88-4fe5-8b2e-6b1f3ff71948", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7733884-d052-4b8d-9130-c3d6c05a1ed1", "sighting_of_ref": "indicator--60f482d5-9129-419c-9ac5-b5f6e0fcfb27", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e23ab7-19db-4f17-9389-5a868d6ef101", "sighting_of_ref": "indicator--a527f519-85d3-4682-ac23-5d962f71eef4", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b7e4e9-fc6a-4ab7-959e-fffde2d9e06d", "sighting_of_ref": "indicator--a527f519-85d3-4682-ac23-5d962f71eef4", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d024ab6c-3a81-4316-99b1-647be4c689e1", "sighting_of_ref": "indicator--822b9bf8-e5b1-49bc-bb9b-0fd20403e0a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84119356-b8d0-4d3b-80ee-3fe1afb06b63", "sighting_of_ref": "indicator--a523ab4c-2c93-44e8-ae56-ee3569bc1c9c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c281c0-1de2-43d3-b8ba-92112e6a922f", "sighting_of_ref": "indicator--4fcf74cc-09f4-413d-b8a5-987c485d9bb9", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48944e04-345a-44d7-b052-d749c407bf71", "sighting_of_ref": "indicator--4fcf74cc-09f4-413d-b8a5-987c485d9bb9", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d76a835-177d-4c7f-aba3-e4ab33c9b32b", "sighting_of_ref": "indicator--4fcf74cc-09f4-413d-b8a5-987c485d9bb9", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c0023c-2db5-4366-8c89-7f8cce7de9ad", "sighting_of_ref": "indicator--81b46109-46f2-4bde-bda5-115b83b6d603", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceff9186-d897-49e7-80e3-dbb2f4ba7401", "sighting_of_ref": "indicator--1a96a35d-5942-4c4a-9d3a-5cecf7d9400c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23a4f57-cd0f-452c-84be-7f5bd6cecd5e", "sighting_of_ref": "indicator--1a96a35d-5942-4c4a-9d3a-5cecf7d9400c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141fc6d1-8a32-432a-a8d6-e5fbe0fabf66", "sighting_of_ref": "indicator--d40f22eb-7345-4105-9189-e744dd1d7877", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90c4e15-879a-4969-81f7-4038a6f6a103", "sighting_of_ref": "indicator--d40f22eb-7345-4105-9189-e744dd1d7877", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273cb5aa-948c-4aa3-ba03-12255521e171", "sighting_of_ref": "indicator--d40f22eb-7345-4105-9189-e744dd1d7877", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab1bc69-345f-48d2-9730-d92ccb663a95", "sighting_of_ref": "indicator--3ea1dacc-0122-4cda-8922-0a623360f225", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3262a7a8-e0e4-4f7f-9a52-a47794c2381f", "sighting_of_ref": "indicator--7d1fb709-a413-43aa-9b4a-06ea02e255d8", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f191a2-c34f-48ed-8de7-751f160d91d6", "sighting_of_ref": "indicator--c69e0980-a970-482f-8ee0-5c74fa778778", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed40379-9d3a-449d-a6d7-27afca95edd3", "sighting_of_ref": "indicator--310535ea-2fec-49bf-947d-da55046116ab", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767f3652-315b-4e2a-93b2-17664fbcd5c9", "sighting_of_ref": "indicator--310535ea-2fec-49bf-947d-da55046116ab", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20bc3791-f1e0-449e-9d44-5ff0953d8eb4", "sighting_of_ref": "indicator--310535ea-2fec-49bf-947d-da55046116ab", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0072e01-43c7-4c45-9ce1-d9a0370ef067", "sighting_of_ref": "indicator--1c7621c8-7950-4182-a554-87fbbe38757a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd86dcde-4047-4696-a83e-d826760cd0e7", "sighting_of_ref": "indicator--7162cce8-7c8f-4999-85f7-3e4362e52747", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88e9caa-8e19-4b5c-b650-f2adc9c1fa14", "sighting_of_ref": "indicator--7162cce8-7c8f-4999-85f7-3e4362e52747", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e800c0-656f-4fe5-8567-5ecdd123e1d0", "sighting_of_ref": "indicator--3b80c1dd-5b71-4420-a228-0d5f837334df", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36975f53-ef3e-4f12-b1cf-5a80fa469777", "sighting_of_ref": "indicator--276be746-9094-47cf-899a-4a75a96dd17e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ee1be7-8c74-4984-a466-f3a70f3f2147", "sighting_of_ref": "indicator--2ffc8a62-2e75-4f7e-8ff2-89ef3166765c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff611c4c-11f8-4d65-a4a3-57e3d88db7f1", "sighting_of_ref": "indicator--2ffc8a62-2e75-4f7e-8ff2-89ef3166765c", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef51e028-7956-4cba-8d61-18db936e9c50", "sighting_of_ref": "indicator--2ffc8a62-2e75-4f7e-8ff2-89ef3166765c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6847906-1ab2-4d78-b6fe-4543a1325308", "sighting_of_ref": "indicator--8f7b4354-b190-4b6a-8c85-046b2361aac5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e37a9f-fe60-46ed-bd47-ae68e7aba1f2", "sighting_of_ref": "indicator--8f7b4354-b190-4b6a-8c85-046b2361aac5", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d586455-27fe-41d1-acab-3afac3c7bb05", "sighting_of_ref": "indicator--8f7b4354-b190-4b6a-8c85-046b2361aac5", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32958759-dcf1-4d2a-911b-44ce403a8f80", "sighting_of_ref": "indicator--a1928ec3-2088-4655-8c49-fff986e1cada", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac7143d-e439-438c-b2b1-26dbea8560cf", "sighting_of_ref": "indicator--d02ab7d3-8012-44c2-a87a-fa1a6fc8cd97", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aadfc1e0-34e0-4aa0-99b1-9eb3319178db", "sighting_of_ref": "indicator--56be2b84-7171-41c9-8d12-42e2534936c8", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d6c433-d6af-4231-8ca3-489311c19d24", "sighting_of_ref": "indicator--b55ea360-eb4b-4e65-aa04-40f93f2e5ce5", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9ee4a4-f558-4832-aeb4-24edde1da345", "sighting_of_ref": "indicator--2cbfff40-ece6-4c00-9277-66826c1e3b11", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00076a9e-62cf-4d4d-b8d2-1fd0addf2fae", "sighting_of_ref": "indicator--2eeac41f-ae58-407c-af2a-e61afecc0d70", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893110a6-b1be-47e7-950a-b8c359571fbd", "sighting_of_ref": "indicator--30701bc2-1525-4cef-9a1b-7d9e77f1e4ef", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b3e97a-5cd4-42c4-bdc4-cb44d722723c", "sighting_of_ref": "indicator--9ddc43e6-cb21-484c-bd88-5e40ef92bcb3", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c442c3e2-aab9-41bf-b13e-cc02c56d50fe", "sighting_of_ref": "indicator--7c0ab50d-12e6-44d5-8d02-d1ec3bc9b28e", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef60b2d-34e1-42fc-b1c6-12378031566c", "sighting_of_ref": "indicator--9c93a9c6-75c8-4459-afde-e2f480ea0fca", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2a1e35-a74c-415c-9c40-29fdf0335381", "sighting_of_ref": "indicator--00ae7380-cd67-4bbd-ad4b-71898d3a2f7d", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2718b4ec-e183-4517-8cdb-8a47ed8b9104", "sighting_of_ref": "indicator--9ceea52d-ef61-4f28-a052-ab80e8d33f8c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dcbc76a-2bfa-48d6-b907-4b5416391361", "sighting_of_ref": "indicator--757be359-395d-48e2-88d4-9bea61fb6ea1", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9353ba26-8611-46e2-87d4-9806862af466", "sighting_of_ref": "indicator--7538b9ff-e172-4e96-935d-0034ae27e5fd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56bfada-7df4-45b8-8a73-bfbc7f7ef649", "sighting_of_ref": "indicator--b8286048-04b5-442f-ac29-bb498bb446b2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c075d1-5350-45b0-b9aa-1e237e82e143", "sighting_of_ref": "indicator--533d7003-a628-455d-b5b2-d85c671b3106", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f3b7732-86de-49c8-84ce-627361c055c2", "sighting_of_ref": "indicator--b77645d9-2e64-408b-9dad-31d82b3c9e3a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b24241-e8df-421f-88d6-425c79f72987", "sighting_of_ref": "indicator--becf1386-b372-4eff-970a-59fa4b016a7c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7335157-b663-4069-8c67-690a9526976e", "sighting_of_ref": "indicator--7d5df129-ea46-40fe-ba21-b6a03bebe6b0", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b39a55-eea6-4630-b773-4734fbae6305", "sighting_of_ref": "indicator--7d5df129-ea46-40fe-ba21-b6a03bebe6b0", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0184d378-4c37-457e-a943-ce387f017804", "sighting_of_ref": "indicator--9daf4fd1-4eba-479c-8639-0390072394fd", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bcd8140-0cc7-44de-8eff-259354106178", "sighting_of_ref": "indicator--cdf994a1-73af-4c9f-a157-d5721c323d58", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39406afb-5072-4780-b3e1-15bff9ab73d3", "sighting_of_ref": "indicator--e578d6ff-3fd0-46ec-9004-7c88a6f8fce2", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36364bd9-d7a1-4fe8-8928-d78a45000e0a", "sighting_of_ref": "indicator--f6e35be4-7488-4d6f-a916-19611721855e", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7852c311-499b-4aad-b761-8b08d9f7b6fb", "sighting_of_ref": "indicator--23b8d438-4bf1-4190-b7f0-133d9c3aba4a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b0a871-b657-4bbb-8c08-1daf719d55e1", "sighting_of_ref": "indicator--23b8d438-4bf1-4190-b7f0-133d9c3aba4a", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5eded0-ab13-43f0-8b2f-c37337e5c6e9", "sighting_of_ref": "indicator--f6da98ea-f8d0-42d1-989f-7e404191df7a", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928fcef9-e096-49a1-afe6-5fbab9bc1c58", "sighting_of_ref": "indicator--e81dd91b-b87a-4605-b1c5-99cd8e810b91", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1afabf2f-afdc-4311-a3fe-1e1fe2b92927", "sighting_of_ref": "indicator--5ab197b0-0777-467a-888e-eebf1fcf9dd9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1cc66e2-3b1c-4c95-a921-d5e78dc657a6", "sighting_of_ref": "indicator--c7c2c5b7-10d4-435d-89bf-760433511f2c", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f1a74d-2054-4aed-8735-8646604a5428", "sighting_of_ref": "indicator--c7c2c5b7-10d4-435d-89bf-760433511f2c", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9891de6-93fe-4a0f-a999-0e5ab16e2e35", "sighting_of_ref": "indicator--c7c2c5b7-10d4-435d-89bf-760433511f2c", "where_sighted_refs": ["location--29170a96-f913-42f1-a92d-e7cc84451498"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cff395a-1171-4b7a-8a96-791aab6680d4", "sighting_of_ref": "indicator--47fe91b2-3b29-4c90-a90d-204b6557ede6", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7e07cb-6fa6-4f4b-880a-be9e30981cd2", "sighting_of_ref": "indicator--4265b31e-a76e-431a-bba2-93dbc3863770", "where_sighted_refs": ["location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809044c6-dd28-42da-ab88-a5985fbc03f4", "sighting_of_ref": "indicator--b8d90a1b-e402-47c0-a84e-6d7005704fbc", "where_sighted_refs": ["location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a"], "first_seen": "2026-07-22T00:00:00.000Z", "last_seen": "2026-07-22T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--196b1e9c-1fdc-4085-9f03-3afdf5a90387", "name": "Threat Report for 2026-07-22", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-07-23T11:00:03.373Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--f733540c-bcf0-4d18-a3b6-c2aa9b1fbaf1", "location--43db01f0-10b9-4c9b-a55f-abe1bf2c182a", "location--29170a96-f913-42f1-a92d-e7cc84451498", "infrastructure--ec35903a-3873-49f0-b18b-8bb6312b18c5", "infrastructure--5ff6d39e-877d-4f2d-8954-a1669707cf57", "relationship--b475b9d1-8130-498a-87bd-258cc7d3b271", "infrastructure--b0fb9765-65b8-4e15-9b0a-cd86eab4d24d", "infrastructure--7340d8ce-e219-4acf-99ab-d478eda35fb6", "relationship--6c3f4cca-2d54-4cf3-9eec-434848d19960", "infrastructure--8177fa18-c756-446a-8127-1e314c05e69a", "relationship--dae69172-b13e-48f1-a06b-bc34fa4bacf3", "vulnerability--6226460a-f6bd-499e-ad45-722342f04aee", "indicator--a63fccb4-20fa-40bf-990f-59a0d92ab861", "indicator--c3511f56-8dc4-48e8-918c-bfd83f1a1534", "indicator--d6e7fe77-60b9-4515-876e-5d96f2bb43a3", "indicator--84b22f02-4329-4788-b627-ca0a5efaac78", "indicator--8517c136-1d79-463a-93ea-52865e1d351f", "indicator--fb0844b5-23ef-4ba7-9a00-2ccbd01fa815", "indicator--98735b9e-9428-4cdf-b1d4-0d5df9d73e43", "indicator--932b41ce-7664-44e5-8567-7bce1c608853", "indicator--d00135dd-eb15-4a7d-8819-8f1b644ceb4a", "indicator--23a01b7d-708f-46e3-aa7e-1eddbf7c1b80", "indicator--f84b6380-ef5b-445a-b95c-dbe4de4e94f7", "indicator--23f9cdfe-a123-41a5-8c7c-3ccfd52b2c11", "indicator--a946c48c-c945-477b-bf8d-e636db8a4050", "indicator--da3a2fb3-0dcc-489d-97fd-eb648a67d0da", "indicator--9894b474-a66a-4295-b6ae-daab3e7f982c", "indicator--ee5c9394-0dd2-48c7-84ee-50906738202d", "indicator--c9cf53c3-8066-4b9b-93e1-6f608ebca299", "indicator--a2a8f95f-e6bc-435d-a128-2b889825ca34", "indicator--06c3c036-249c-423d-bca2-475d1a686fa6", "indicator--569470d0-3401-478c-bef2-b04f062e4aac", "indicator--eb205a29-0e03-42e0-bf54-c611eb881974", "indicator--812b90ca-c99c-4c25-97b2-06ad6bba1193", "indicator--7a8b8f9e-de13-4e49-bf39-4135db4f4375", "indicator--2ad1afd1-d9b7-4a8a-b04e-4c7d2632c196", "indicator--3a027c5f-17c4-4ff3-bd04-cdc43f7d40fd", "indicator--21ce167e-f70b-4365-804c-08f3e78e04df", "indicator--78be9346-29bd-433d-a617-7235c6698792", "indicator--353a9dd4-e426-460a-a535-ddc5dcdcb5ce", "indicator--b350c2c1-0cef-472e-9241-a944b320f8eb", "indicator--5eb61e06-f841-4029-986b-bccd4bf3e65a", "indicator--c5068c45-87d3-4722-a633-9a5f6be7f937", "indicator--6f1b57b7-a0cf-4bbe-9ee9-997650c2093c", "indicator--8ee8cb83-62c6-452e-a02b-086f6c5b6574", "indicator--20776611-ffd5-409e-85fd-7350c181b100", "indicator--281bb02d-59fe-4c43-88f1-038fd3bf411b", "indicator--927f8a12-44e4-49a5-9eb5-41e00fd4e534", "indicator--5d04c4d9-a5c3-4d0a-85e1-010bffb82cf3", "indicator--dd3d8717-7748-42b0-b878-c891d641ea48", "indicator--ca88ef10-c366-4a08-86c1-2caca23e7231", "indicator--319eb60b-2128-499d-a366-d023cdd1eb7b", "indicator--5020d906-1b16-4c87-bb31-dcba40085cba", "indicator--65d380f9-9c3a-43d0-8a2f-ddec4f2805bb", "indicator--43e63fd9-00ee-4d6c-9b6b-dcacb681a4f0", "indicator--2bdfc579-0206-4287-b22a-492fe86f7993", "indicator--2aeae2b4-caec-4d36-9aaa-122c0eb1ccc0", "indicator--8ef7dada-2700-44a1-bd41-df6add2f0f19", "indicator--451886c8-4b62-45e8-8c01-87ffe2d9e31e", "indicator--1b806c2a-fb4f-4e2b-81e5-6ad143c01a37", "indicator--373af92e-b0b6-4501-a4ce-37bd4af06faf", "indicator--eb789a64-bd33-43bd-8b59-2db18a5a0be1", "indicator--5232a118-20cd-48f0-a328-ee130648df61", "indicator--163a1f78-5343-4623-ac3e-14ba007549e7", "indicator--e087eb5b-fbed-4349-b663-b2c9e3eebe83", "indicator--b0d76f5d-4746-4621-9b51-97089e25d131", "indicator--929975e8-3409-4832-8dcc-b6ceb1e647e4", "indicator--20e8bb41-4bc5-41f9-8f54-370f5d263bd3", "indicator--ee29fb54-14cc-4db9-a02d-1e403f13e095", "indicator--ee267927-cda5-45d8-91ab-4aa965303cc2", "indicator--f0a5456c-1f29-451c-b968-73214eae5fb8", "indicator--e2857bf1-7fbd-4362-b7bf-a96b0676e6a5", "indicator--8b3c83d0-6fe6-4b48-8c98-f0ac362dc72a", "indicator--e6b789ba-5b34-4044-853c-8e46583b5e3e", "indicator--3c6bcc13-d95b-41b4-b9f7-0207425c8912", "indicator--41a95e8a-aec2-45b6-bd25-c62c1bab70b6", "indicator--5911de47-88df-4bfb-b279-061a36ef4a03", "indicator--1bb37f48-e5a1-40b7-bd99-ddbbe726623e", "indicator--a6874a07-5914-45ad-ba57-4150a9a78171", "indicator--2f35799f-e144-4a2e-86cf-91505df44139", "indicator--e5351839-d998-4973-acb1-84df87c08039", "indicator--79f23d42-5a14-4bcd-a1b0-1b79f9231a29", "indicator--00308a3c-ba32-4111-97bc-935c36b3e58c", "indicator--8901c190-bb2a-4887-aa85-5837512f9f6a", "indicator--5db189b9-e8b2-41a8-a194-6ae6e8ef3166", "indicator--975cd314-0493-4d4a-948b-b37b98e1d64b", "indicator--8a897628-411e-4c84-9089-4d4513648554", "indicator--74188537-342c-466b-8475-94ee9dbee5bb", "indicator--b9a62bc9-840a-4dda-9555-5bb208393475", "indicator--16531e3f-3d73-479d-a654-432a3c1cadcc", "indicator--3530bf0b-5027-4501-9bfd-b349f238966b", "indicator--fbe2c90f-349a-426d-b4ec-e4a7a40efd56", "indicator--603f1632-dc51-4bbc-b43a-8495f1cb568e", "indicator--b44da14e-a43b-47ca-ba42-e253f767d331", "indicator--ffc5ead6-cbf9-4c4f-b43c-d7bfcba23bb4", "indicator--8298c277-7583-4870-a038-6c2105daec6c", "indicator--a9061582-b5e8-40b8-8969-d910b3fa7417", "indicator--b0a8e586-a95c-4602-ada7-71a87c89c39c", "indicator--ade53add-8824-4b15-9996-f08c7126e8b1", "indicator--7527db04-a205-435f-92cb-1fb83dd7e703", "indicator--97a829f4-7657-44a1-b968-caa6953def38", "indicator--6e365803-9d9b-47b4-806d-a3af70258322", "indicator--0b4ab42b-5402-41d1-9d88-085fb3111bdc", "indicator--f353e513-4394-4d67-b9eb-7be933cb7692", "indicator--eb5d4868-869c-4ff9-8959-95443216e707", "indicator--fcce4384-c52a-4e73-9701-0334b470c2d6", "indicator--0dd5368d-1c56-401d-b778-941fc8de1011", "indicator--937f03e6-537b-4e9d-aa5a-2bf4f819ff3b", "indicator--d2cdf491-a479-4b38-a612-e8750afcbd6e", "indicator--89bf0c18-32c5-4aee-b556-d340388e9549", "indicator--20df398b-9634-4095-a633-8e9df4be14ed", "indicator--574afb7b-6cc6-447f-ada9-4ea5fc8471f1", "indicator--858d3e42-1016-473c-a792-6d92500c03a6", "indicator--003a3435-de0d-4538-9b54-f35034353765", "indicator--a1b70504-7746-4d0f-9fec-fe303911580e", "indicator--ad51ecd4-7c53-42e8-b8d4-b9aaec138e8c", "indicator--63a7f870-1d3b-4747-949f-5866c29bdd93", "indicator--7d9bac5a-c876-4e8d-ba2d-ccb53b542866", "indicator--1463dea8-0781-4da6-8a39-74c81f8af5d9", "indicator--0010209e-432a-4895-8a17-bea6ee4cfc8c", "indicator--ebe11a63-95f5-4be7-b3f3-ec8f13fa52d1", "indicator--ad60cef4-5381-40d3-b390-e9a051b5c6ed", "indicator--05ae6fe8-deb9-4569-ab0e-7e9d83e76e20", "indicator--bb84785d-a448-4e5c-9366-d91f6cbea4fc", "indicator--737260a0-c2f7-41a8-9b53-57f0a081faea", "indicator--2056e0cd-b072-4fb8-b9c0-678aa60dfd99", "indicator--d1a8627c-c29c-48ea-a70f-ed5136d14d92", "indicator--7442667c-48f4-404b-9afb-9b402661aa24", "indicator--7126172c-5473-4ffd-a32a-5083e7609b80", "indicator--f45cac80-26a7-464f-b762-eab1b7ed78b0", "indicator--8d2c803a-fc74-498d-ab3e-b87b6c66b0bc", "indicator--240cb23b-2ed1-4210-94a3-6ee2be5f5fa8", "indicator--d19c15dd-4ea9-4ce0-8ebd-54e0b737725e", "indicator--143a77ab-b996-4710-b0f2-57f0c9977d25", "indicator--7a7ab154-5b00-45fe-adce-74964f51a045", "indicator--ff25b8e8-5038-45d6-983c-802a24526ad4", "indicator--264e74d7-92fa-40ac-a8d8-3c3526f98173", "indicator--605d1035-80a9-483a-8ed7-52c78c9f215c", "indicator--607b8cac-2c1d-4173-ad77-5359d9f01b07", "indicator--60e441e1-dc0b-4681-8229-aee227cdc921", "indicator--54f78a14-f3ba-4535-8f35-fc65cbc56002", "indicator--8c23e421-6a17-48e9-928c-7b8025ee96f3", "indicator--3e795111-f67c-48e6-a48f-aa103954715f", "indicator--7369eb86-956f-43ab-b621-b99faa27d3d7", "indicator--5d6a40fb-44da-41de-8a44-346e48b95cd7", "indicator--c694e6b9-9632-4ffd-a39a-7305209380d2", "indicator--4c19bd77-ad10-4f53-803a-c5f03b943344", "indicator--1b6ccd4c-bce6-45fa-ad68-583e2fd6e615", "indicator--5bf7ab24-39c7-456a-aa30-34c1739711b6", "indicator--989031cc-477e-4ec7-bf1a-01229038cca7", "indicator--efd74ccd-0c96-4453-a16e-5bede9883cb4", "indicator--434e20bf-4715-44c1-a1e4-778888d2a7b5", "indicator--cd539ec8-8edf-4310-adf5-6042b8f53744", "indicator--45efb867-4e05-4aec-82c6-21c7ef2baceb", "indicator--bf679953-fbd9-460c-bc4c-059a189bc3f2", "indicator--663fead1-7544-43f4-ae8d-53c4d48e3d82", "indicator--4f59507c-5040-4886-9fef-fc13cb2591ee", "indicator--ca6857d8-704a-4cdc-8ba2-51e33c77a180", "indicator--8748e14d-f539-4637-9705-c0b03110bc25", "indicator--0dc2d099-b725-44d9-a95f-109ae926f14d", "indicator--255bf3e7-7915-457d-b857-a7e197f57ac2", "indicator--faa66569-c4fb-48d5-bbde-daf438f26153", "indicator--ca7cf531-994d-4b9f-8a08-6141b8afd0ac", "indicator--aad56f6d-b7f7-4381-a7c7-fcb346d04bed", "indicator--c4aaea63-6303-46e0-a6f0-15decb1a35d0", "indicator--346601de-62ab-4fd2-9ea5-a23eff35e162", "indicator--6a7ea31c-6525-4053-a663-00e651763a95", "indicator--3c14934b-8068-448f-bd40-68af886dd9c4", "indicator--ce265ddf-0e35-4035-bf0c-5abb2bbb6520", "indicator--c3b10713-e1ba-4ad5-bd52-df478b13ceab", "indicator--d8bc519c-0e24-461f-b7d6-aff4bce0c428", "indicator--4ccc84ff-fd73-4ce3-a4f8-cc3b59458344", "indicator--7c11c06e-6b59-4e7e-ae7a-a242e619256e", "indicator--f6df9214-61cd-4923-adce-c1eac30de3fd", "indicator--ed675112-c0a9-47bd-936e-f3bf82ad3ba2", "indicator--6b573e6f-f7d8-410d-a14b-73cd0a21d18b", "indicator--fa16f4d8-578f-4d73-92a5-a08aa056341e", "indicator--964200df-a3a2-4dc0-87e7-6a6909cd1aa6", "indicator--4b6c763e-fbff-4a08-903e-a4acacd2f9f4", "indicator--55e9f0bf-193a-4f07-8c44-cf0dda1ac50a", "indicator--e034256c-db08-4ad8-8f14-3ebe0a50a6cf", "indicator--0df670aa-c932-4632-abfc-986c73b73cfc", "indicator--5965e70a-3bc2-403f-9d3d-5363136e9508", "indicator--9b59f524-8874-4cd6-87c3-817f69cb17fe", "indicator--21f67d38-b6b6-4aa6-9eda-c2be9efd00aa", "indicator--96d6ecdd-315d-46d7-ad16-036ebf2b00b4", "indicator--d1754af3-8ec3-4373-a6ff-71408e01b5a6", "indicator--98cfb32b-4b89-499f-b08c-e7154f5fcbc3", "indicator--f9f9b0a4-b7db-46bd-9a55-29f16cec7614", "indicator--a95dbc7b-00e3-4b19-acd3-654344047bb6", "indicator--65343c97-75b0-4e3d-b687-0b408b7816d1", "indicator--76a8ed85-ced6-4f87-bfb3-3fca9774c487", "indicator--d2f4f1da-2c42-43fb-a024-e84d77ce4485", "indicator--c6b0ac91-c326-4872-b113-b2c32f0fe935", "indicator--dfba2c31-e21b-430b-992e-e9ee04d24188", "indicator--c6baba13-5a45-488d-a490-bd8736d2a509", "indicator--c3f8c4c2-da47-49bd-93b0-a5df94721e3f", "indicator--3249998b-2b89-47f3-b231-927faae1cf2c", "indicator--0a2e5454-3f92-45b5-8723-48bb748fd93c", "indicator--a0ba5a80-7dd7-4ef8-905d-f835c2086339", "indicator--2dda8e0b-ac40-4def-8261-27bbc2b14cb1", "indicator--11675bf0-99a6-4ff6-8a3f-41f2b5c26e9a", "indicator--f6d3a0f0-33d3-4fc3-a225-50da69bdf59f", "indicator--e19054dc-4f08-41a4-84d9-98d9fdef8c77", "indicator--3cd7426d-b384-4fd4-a30e-de7cc427346f", "indicator--c5b503ef-b79a-48c9-9f34-73153b8075e5", "indicator--7062734a-de34-454f-b3cb-0f121da5efbb", "indicator--fe8ef9a7-848e-4b72-aac5-f111a1bfcb98", "indicator--b2ef1804-2aef-439f-be71-ee4aa3f8dbc1", "indicator--d6be71fc-e541-4c26-9029-fccb761c0c56", "indicator--bf1cee85-3d8f-4360-97f6-ba7919abcab7", "indicator--866f581b-f1d4-42db-8436-31d15419d6f1", "indicator--7d0a5b14-c599-4f97-9f21-da5d498dccc7", "indicator--a457f348-81a5-4ec9-8a70-8913e02d6a41", "indicator--f33131b8-332c-4d4c-859d-be658544b705", "indicator--b509b2a0-0271-43fe-a323-bf7790225f68", "indicator--cfd00d1c-4664-4d87-baf2-8f966817c871", "indicator--6155a4a0-9f05-4b10-9594-e2333d606a93", "indicator--87f9a92e-1390-403d-8c9e-97ab25702ef7", "indicator--ce8a8e8b-9521-4b69-8f6b-a5340a26f6ee", "indicator--13d1c24e-d45a-48a3-8f1c-64ac831c356b", "indicator--9b11b6f3-8cbe-4250-a8c1-c31bb1cf25b6", "indicator--84c7feaf-13c6-4215-a62d-24f1cc81e26c", "indicator--ed7b8900-4ae2-413b-bedb-e64a54c4c28c", "indicator--042ab3eb-330b-416d-a9a3-eddd86f2354a", "indicator--67295cb8-5a9d-46d6-8353-3ccf557cafda", "indicator--bb8ee678-a183-4b9d-84cd-d0fc3c910bdf", "indicator--6a65e346-2f7a-4968-807c-d3c889d83831", "indicator--e28e62be-1a2c-4b02-b88b-660798dea208", "indicator--9bc588e5-a570-4a8d-b201-681252337555", "indicator--7972939c-9d73-44d2-abe8-5acd4e8bf5bc", "indicator--d5097993-5e94-412b-a16a-00f17b4118ce", "indicator--6dd9e6c1-872c-4269-b622-7c1886cfc77b", "indicator--d38c39d3-b39a-4a11-8466-05bbeb0f9aed", "indicator--e825eb2f-289e-4359-ba1e-e6b746ea6add", "indicator--bf7a6d72-84b8-429a-a651-a674d1cf2721", "indicator--214a3e64-698c-4068-8d25-86f5aff7d1ac", "indicator--8e0f43eb-51fb-4ea8-a86f-e2235fe085ae", "indicator--1414c856-6373-4dfd-8407-b385e56e92e3", "indicator--c2689046-4188-4168-a613-acd458afa55f", "indicator--3e143442-3c2d-45b7-afff-f4b0c6b3e900", "indicator--44edcde9-b141-4c85-b476-9c98c2331190", "indicator--560a9d5e-ef95-4235-a062-b4d5c1968836", "indicator--c2f525db-50ce-4f66-994e-75123dbd71fb", "indicator--e6faec14-77ac-49cf-b87b-bb051dae1df7", "indicator--38c538c5-a2dd-477e-a04a-c43744d343ea", "indicator--24de476c-1adf-4457-b0ef-e38b2c78fc72", "indicator--63b9b3c5-d12d-4e65-8787-1625f445493a", "indicator--aae7d44e-1f9f-438c-a64b-46183d3f3f9b", "indicator--f31e9d33-2f62-42bf-ac6a-01975fdab60d", "indicator--d3b0eba2-5412-4889-a859-38b01c311a4d", "indicator--200e86b3-85f7-47f1-9f68-70eec993216a", "indicator--b15c6d7a-185b-46bd-8fa3-530791ab9b08", "indicator--bd10d84f-a55f-4765-84a1-f1b9e59297c2", "indicator--79145175-6e68-42ae-acbb-1532241f299b", "indicator--7ac9e8c2-adc1-441e-8675-84ff1d1a03c3", "indicator--4dc4e7c0-622d-4885-a8c4-005dc5c4ada7", "indicator--922f0df1-9129-4afe-9036-990a71ad685e", "indicator--dacc1c33-d240-4bfe-bc72-a64174015e5b", "indicator--22fb2ac2-ed8f-4b2c-93c2-7dd1989c3f1d", "indicator--42fb2e4c-72c6-42f5-b23d-ecef336a5e39", "indicator--0ae7bdd8-861c-4fbb-ba08-d0d80888e588", "indicator--6f1bfe63-d6a5-4b6e-8106-7f3bf8b8c4c8", "indicator--bfa4936f-7903-4db9-be26-c8b39bdb1f99", "indicator--cdbf0a47-7f1a-433b-a4ad-39c1557b180f", "indicator--109a6299-2d39-4979-b900-c2e9fd90ea8e", "indicator--10a1bf30-0729-4834-bc06-caacf169cc86", "indicator--163defae-fb1c-4411-85a7-e03b4acbd494", "indicator--80a09bda-e973-47be-bef2-416ee2782c4e", "indicator--0429a3b4-f1a7-480e-8b9f-bfae3dc370ef", "indicator--1ecbdb7f-e0ff-492a-94a5-ee3d6555da98", "indicator--5db2adb2-c272-4faa-bb1b-78f12147f8cc", "indicator--fdc14f10-5730-49f7-9e6f-df72115e3ec0", "indicator--8569b765-0574-4170-bbe3-bbb226dc15cf", "indicator--c722df07-41b6-49df-8332-1e0ff2b5c272", "indicator--011f7501-cccd-43f1-a6c9-a971ef468724", "indicator--071d40ab-c450-4b4c-b4a7-de533b80af6e", "indicator--ce38aacf-5fd8-4f7d-b6df-efbabed9b944", "indicator--18340c50-a64f-41da-a31e-732129474681", "indicator--54ace99c-aca8-4a2e-a172-05d1e9d97a57", "indicator--7802034f-6ce4-4e25-baf7-39a77bceb4f1", "indicator--a607b2fc-2977-4433-941d-42b2206ad181", "indicator--12eee339-9697-4525-a2f8-cd3aff0f156d", "indicator--2087e28c-e829-4435-acf7-0d80e5f8265b", "indicator--d922de0f-ec48-4993-bc71-b695d5902887", "indicator--291972ba-7ed8-4ac9-afa0-b04b597cf8e0", "indicator--8a1b0c79-d231-4b4b-883d-742548294fcd", "indicator--f6965787-3de2-4611-8d05-463ec1906b73", "indicator--35edd2fb-6c45-4848-ae2f-13dfb5e416b7", "indicator--8cfd613b-9e6b-48f2-853c-7f960e252a04", "indicator--d4c232bb-8492-4bdf-ade7-69a0593d7565", "indicator--70d8bbd5-6218-40e3-a883-070f14ec2bd1", "indicator--967dc1f0-7b5c-40fc-97c5-dba02ce5bfb7", "indicator--a011c22d-5f4d-4457-8cca-a4ee6c4fa29b", "indicator--4cf856a6-26c2-4a3d-8b41-662b04f9e46a", "indicator--3d4053a9-9c87-42ab-968a-fb4e757b83c0", "indicator--2342392a-16a3-4c7e-af17-653327264936", "indicator--2ffbbba9-3a56-4034-be44-ff4d9b13f81b", "indicator--c1c03e2c-92c9-432e-b8e6-18059e4b6457", "indicator--0f7be9a5-5e0a-41c2-9e92-cb766a02ea7f", "indicator--5f3346a4-f26c-44d9-844f-51c0087f2b01", "indicator--a7a10c08-3dac-43bc-b457-bb8e8160a3c9", "indicator--77cedc09-5a65-4ca5-8544-1125f1777605", "indicator--74a8adc8-4faa-4cf1-b002-f112e77136d1", "indicator--726c8209-48a3-478e-b310-22ef8d0fc9f6", "indicator--18976caf-9a3e-4d27-b51b-d0882ebb518e", "indicator--534518dc-9097-4ffe-8113-a017a09e2f79", "indicator--6a6f3b44-4bd7-4156-aebc-07e1bdcd1f60", "indicator--a204b132-3d4b-4131-bcdd-0dde59b7de24", "indicator--6843f95e-4366-4b5f-b837-59abae857f31", "indicator--6f3b9ff5-2728-427a-83d2-674725fc30ae", "indicator--1c00b32a-ff45-4fd8-b619-81c2f108eb50", "indicator--dbf7071e-7bfb-424b-8afb-9648950ec9d8", "indicator--c51f3cc2-ee9d-45d3-847b-c7a51362e00a", "indicator--0ed01ec4-933e-4889-8b4d-1a8145e3810e", "indicator--bc13972c-2154-4d4f-9c22-ebc4318d63e8", "indicator--c6ca394d-8bed-4996-b75e-80967d2ea95d", "indicator--2a48ed86-1006-48f0-9a93-bb5ab1f16264", "indicator--82dfdc36-a74b-4620-a745-d0322fb37b4a", "indicator--c5d44aea-7e13-448c-adeb-3c20622ca5b6", "indicator--3fc9df09-d782-454e-a00f-e5b6c81fe8e3", "indicator--11cf84a5-d5dd-4164-916a-3e68756da683", "indicator--23104266-0257-4f95-9ce4-b1c7ff178ecd", "indicator--d82e35e6-fed2-4aa6-a58b-aecf60eec521", "indicator--d4357447-7358-4184-bbd9-86cfc4fb1ea8", "indicator--522f7142-efe8-4ff5-806e-027fc3009a1a", "indicator--c926c452-1188-4639-9f9e-14c36a3c0f96", "indicator--f98f4e74-5806-4cfa-b7ab-74d7aa313988", "indicator--0636134d-3627-43c6-8c64-efe2d4e0b58c", "indicator--0f387865-5f5f-47ed-9999-6d855fb672f2", "indicator--91868baf-01f6-4f42-974d-8a561bfd57a5", "indicator--b4e333e8-6a0d-4451-b21c-836cd390ad78", "indicator--20b283b9-4ffb-4ba1-b5cd-38017fcfc288", "indicator--56cdcfad-31f1-414f-b8c1-ace700009a8d", "indicator--83ffe7c7-f59b-4dad-909b-76193bfcac4d", "indicator--34d2adaf-a623-4a0c-9b76-e48d7def0169", "indicator--2fe19212-e523-40c2-a243-062ef6b87967", "indicator--fb018d7a-7337-4862-9cf6-abd9e6550225", "indicator--b573d60a-9eaf-431f-a1e5-d3c149c96112", "indicator--13923b26-3c89-40c7-91a7-215b12a3cf45", "indicator--d84ad8dc-1755-4170-b1ec-77c69f4973a6", "indicator--ce61f6a8-6885-46b7-9d91-fe80281d48bd", "indicator--9e97efcc-469d-44ed-93ff-2218fd811b43", "indicator--8190e956-e53d-49f3-b259-fb23da1afcfb", "indicator--567611e5-7eaf-42ad-8831-02155d54e3fd", "indicator--fe1d3d05-3cd6-4f7e-9f8f-49a08385e75f", "indicator--774bc151-b5fe-481c-997a-712f1c46e60d", "indicator--54f909fa-76f9-4c31-9ff5-abe6aa13ecf6", "indicator--1c5a826b-b386-419a-bde1-fbf112e71207", "indicator--e4ee7d1b-4a38-4804-92e6-5fc47b493f66", "indicator--7c9f2cbc-1363-46c0-a2e6-f9814ea6c3f7", "indicator--f03fdfd5-3314-4355-b6e4-836b06da0356", "indicator--9b8f2f56-b413-48f1-a263-54a1f1b7ee10", "indicator--ed32df63-d196-4d6f-999a-2ac0f80443b7", "indicator--25eaf000-b262-48b0-98c5-dc7ebeca9cc9", "indicator--cc2f6ae1-70c2-4492-a27e-561155d26f4f", "indicator--02ab5cec-f043-4ddf-8eaa-bc9b24f7b094", "indicator--181066a1-c4bd-47ef-9455-2931b050a444", "indicator--d75cf469-c8ed-4a0b-9516-0a90eedf5f46", "indicator--118180fc-e5d2-464d-9acf-b1ddb703e153", "indicator--54cd3be9-9fcc-42eb-b071-0e00b984f44f", "indicator--e2454275-ef0e-4c88-8cfb-59bb1f008564", "indicator--c7dd7f7c-4546-4472-bfcb-8b069077589d", "indicator--d50b10f9-31dd-46d2-be76-5465b63b1521", "indicator--5524a6f9-ca02-4863-8d98-865ef44360b7", "indicator--aaaa2f32-2464-4bc5-af62-205520d6d050", "indicator--864c63eb-a429-43b0-98f0-2ed4a1fb2cd9", "indicator--97ad60da-40cd-4a7f-adb0-02bf4a8d2a28", "indicator--707aa1d0-4884-471b-96b7-95d206381a79", "indicator--fa1e0c20-c011-4271-bc03-6fb5522a257a", "indicator--a97f98e6-fd22-43a6-a58d-31395d9c2611", "indicator--e22c17b9-3517-4266-bb99-24e10052a593", "indicator--48f07727-0932-439a-b613-9043ca66557e", "indicator--dc528a76-b77c-4c7e-b8f1-ce3ea3082ae5", "indicator--a62d9f06-91b9-4cbc-8a05-c041754ca3f5", "indicator--6c4d58fa-ae15-42c2-9a72-ab412b6cfcf8", "indicator--c3ab7c61-b544-4243-9af2-dcd8ff5d7344", "indicator--b019180b-1152-4b79-8094-250ba90af41f", "indicator--fd5b6071-d511-43d5-bff6-1807addabe57", "indicator--958392d5-8798-4b6f-a96c-fafa4dd92858", "indicator--1f3e0f9f-4329-4a4d-bb62-5adfef6e00c7", "indicator--dfaec405-a85e-4a4f-9a21-64798060b2c9", "indicator--02eb355c-303d-469a-9e94-ca576e9f7dd7", "indicator--b94ed7ee-8db2-4080-a5cf-9e0284d71752", "indicator--53d72ba2-561a-4565-8b13-2660f732a586", "indicator--48f2a97c-cf10-42a3-b69c-bbcc25ccefc2", "indicator--14def68b-2e97-4063-b1b5-345eaeb340d3", "indicator--1ac13c7f-09db-4472-9f34-16faf275df76", "indicator--15484956-e8f0-4964-bcc0-8767c27870a0", "indicator--b919e963-c209-434f-bf0d-5dee14088fa3", "indicator--1fab8bbd-4f56-4030-b57c-46cc27370e70", "indicator--2c4f7192-c42e-4c06-a03a-07782d1ba130", "indicator--7f923a94-dd9e-4761-8a4d-5f652f114909", "indicator--ca68fba9-557a-4b29-ac7e-a23106585423", "indicator--69efd4cd-9068-461a-ab7a-379162ec976c", "indicator--09e1c7db-6dd2-4ac5-a660-eb18c2cc0500", "indicator--d00b3fd9-a3d7-4d69-8b43-97b70ec8194d", "indicator--15d8d367-4eb3-46dd-9450-506d8792564a", "indicator--f2fc9b53-d3c3-47b4-891a-be4a98be6de3", "indicator--9bae71df-6b8a-4c74-ab0f-d52e1bada62d", "indicator--4f2aebf6-97b0-407f-82dd-ecf8bc391ae9", "indicator--eb5aacab-1078-4654-b9bc-513486c3ab23", "indicator--b8556d3d-df1a-4d08-8a2c-3a590e81a516", "indicator--7aff0e36-72bb-4a4c-b4e0-7723290df7b3", "indicator--bffc9b33-c225-408d-bcf5-ebd5b0e004fe", "indicator--e0434c23-e7af-407c-a83c-b00def2e98bc", "indicator--ce49d3e4-a6e9-44a8-985a-152e7ae742f7", "indicator--e5d13ccf-fa29-417f-bc8e-50585ed32795", "indicator--20a22c13-8da4-42a8-8ec1-80632e95ec0b", "indicator--78deee39-f878-49cb-a9a3-0ff0baa473fc", "indicator--346380a6-8a58-4bd0-9e95-ba686d26aa32", "indicator--ef9694e6-1573-45ea-81d8-edf7f6f93e86", "indicator--d03e035e-46e3-4289-93b9-b66c781ce419", "indicator--d59c11c8-d389-4c28-ac2c-d26ea806687c", "indicator--33648bf1-b662-4b6c-96d2-b4b4b5694827", "indicator--5d2d4ff1-dc09-4bcf-845a-ffeb583941d9", "indicator--55f7d7f1-0fab-4355-8873-c4ac917a1e96", "indicator--e4faa2d4-963d-40d6-929c-e942303c5e8a", "indicator--56513102-d416-4572-a31d-48ae964e4b2f", "indicator--8eca13e3-089e-4b77-8827-4c1edbca993d", "indicator--09014904-a5e6-437d-94da-48052e9b925e", "indicator--4bbbbbee-c3fe-4d88-8cf5-2ee0dcc171d8", "indicator--bb92e486-ffec-4521-ab4b-1d9831a0a9db", "indicator--73d3cf9a-8ae4-4a6c-ac3a-efb7cc20ae15", "indicator--1a2511dd-03aa-479f-adbc-8b4ea5aed69a", "indicator--2fd9b99b-b475-40a5-aee6-bd51c9fa1090", "indicator--156672eb-3481-478d-b8f1-bddf4c0470be", "indicator--27fc243e-bddc-44e9-ac33-edfd1a24fb26", "indicator--0ebd494d-4c67-4658-8b0f-eabf7c2e76b6", "indicator--e4e2dff4-1007-411b-bd98-1f7ae747504d", "indicator--22e6800e-af12-409c-996a-98cb9c6b4c7c", "indicator--bc2dc57e-c322-4749-8fe6-036d7c306436", "indicator--03bf859a-cf2e-4e0d-bf48-4c9c536a9a19", "indicator--f96c026c-001a-4208-9b7a-7732d873d245", "indicator--e2cc7738-a9c8-499c-916d-e3927f4711fa", "indicator--6471c84c-8dc5-41ce-bb4a-cbccaf7dc15e", "indicator--7600646b-ba58-486d-a284-b51994dcaead", "indicator--bb485e2a-398b-4252-9efe-3209d025de28", "indicator--617ecd92-a94b-4a98-bd1e-7fff5ab0b444", "indicator--cb1e6266-16fe-4215-ab08-3cc9d1696bab", "indicator--4042a5c5-f41f-4a6b-b160-e9b01dbe9025", "indicator--71b2a106-5b24-4323-b6e6-ff7e7b45ea9c", "indicator--42864495-2c29-437b-a615-3d500b8bebe0", "indicator--93501e40-3b6c-4b3f-911e-b75899df9f34", "indicator--d0ef6fb7-b108-4722-8a8a-7c137fba4a25", "indicator--2d7fed12-9d49-49ec-b7ca-d0983e59a4a9", "indicator--4bd5b9e3-90ea-43e7-bd2c-76609af8bcd9", "indicator--02fef765-8027-4168-a380-768195d9b4fd", "indicator--a065a479-a5f2-40de-bdf0-8551e94f10a9", "indicator--9de0ab6a-b00e-435d-864e-81aee734d98c", "indicator--3a46f4de-ac91-4786-9723-6df5c08f8d12", "indicator--7c006d7c-6154-4753-93d4-171892e6914c", "indicator--11bb5330-9e63-4599-9c3a-4cfbf28de283", "indicator--5ad2b909-4432-42e7-914e-079f60c87a9d", "indicator--d0f49ca1-3da2-4813-a5cd-302ddfd35bae", "indicator--f49a9c67-3d53-4b90-938a-7775e9829842", "indicator--9906792c-baf1-4116-b284-a44a1aab757d", "indicator--54b60e13-458a-4a4d-a607-31d7d849b805", "indicator--806c9a73-7860-485e-a246-a53d334d0cd5", "indicator--b7f5731b-d196-43dc-8012-f0a21ea90755", "indicator--b3dc4990-531c-495b-bd79-acb7b5f31bf0", "indicator--9d3a4d46-1e16-4d0a-95e2-99683ba83625", "indicator--ccccf5e9-8389-453e-8abe-11540206b08a", "indicator--c8421ea1-cfb7-4e47-9ef5-3748809aafa5", "indicator--ac9d9eb0-5423-400e-9ecf-940e8e9f8125", "indicator--2caf5e80-1f77-4faa-93ef-b9f6a96046ac", "indicator--b466ec28-b12a-49ed-87f6-0f698f7a53d3", "indicator--c0734ca6-5495-4ed8-8289-c93ae06c519e", "indicator--62952be5-361e-44b8-8432-08b94e74422a", "indicator--adc28ba4-07f7-4a03-a194-90c7cff45ab8", "indicator--ef18d77b-956d-4135-8963-c890cc9e4498", "indicator--619944b9-f26b-44a7-be3e-5b495661ce8c", "indicator--76bafd4c-a2b6-46c1-bb67-63c530db1c2e", "indicator--d1df61d4-5bec-445d-b863-4e3e5b2a3cce", "indicator--a6e301f6-359f-4cd3-bfa6-a57d0c159af7", "indicator--adfb2d2c-12b8-4edd-9a61-b161b7fa19f0", "indicator--840af72c-ea58-45d8-bf6e-7245010ddc2d", "indicator--be15e264-60e6-47eb-b838-63291ab491dd", "indicator--3c8a53b7-bc59-4643-9f5d-0925e52425c6", "indicator--c083f4a9-bf5d-4450-9e1d-3311a2a87be3", "indicator--ba086b41-c102-45a5-b6ee-33b76bc4c40c", "indicator--fb85c7c7-d7bc-465c-852d-8625f8dc7df3", "indicator--76975693-ef02-4c11-86b6-356944b1a721", "indicator--80552726-1264-4590-b147-e2ba178602ee", "indicator--70f85363-65a6-4eae-bb5f-415792b9d141", "indicator--5a9ab93e-28ab-42c7-ad8e-7dfcec23f916", "indicator--e79e1d8f-a550-44cb-b0bb-86910070ad0b", "indicator--414d89f2-4882-4c3d-a2fe-012717119bf8", "indicator--fcb4c7ec-244b-4e86-9e9a-db6be2e90eb5", "indicator--ff9986c9-c0ab-4321-a23a-021e0e668fff", "indicator--27dead13-68cf-42ef-ba90-69746c68f98f", "indicator--40a32714-9ef2-4176-96d4-62b6d09777f8", "indicator--bc433ee6-13e9-496d-b599-9bd35728cd43", "indicator--9b2768eb-b536-4ad7-b019-02fa259f734e", "indicator--7214a4a4-87c2-41d0-a006-bdb24f08d4bf", "indicator--ed077217-7d07-4440-a9f1-dee210ab9981", "indicator--08342cce-1821-4b2a-b377-9f6fe34b7d99", "indicator--21dfe7d1-7cad-43df-b5c4-11320127792e", "indicator--5b1478b7-775e-4570-af97-6320247aab1f", "indicator--84546786-7583-4472-8c92-065a7f7435b5", "indicator--fa1a1c59-2c57-4fa9-8b78-441fb3ae6d59", "indicator--c1293212-1dfb-43ba-9be0-ac4410b2b401", "indicator--1506f90e-e448-47f9-a286-c087d075f9c8", "indicator--adfb0ec1-6482-4b43-9208-67f72f7b41ec", "indicator--9d21a023-a671-4ccd-b546-ff41ab246544", "indicator--8538a4c3-bc6b-4905-b034-7374b8416347", "indicator--36704085-291b-49e7-b307-1efb03d5f930", "indicator--a0f58a1c-7a51-4f1e-9d86-2db39721b270", "indicator--8cc87947-c134-4c69-a932-9ec4dc894d26", "indicator--29975358-8ed9-47ba-9447-bbecda79099d", "indicator--243c2c8e-4a05-4017-a4d1-f55a6cdcd26c", "indicator--dafd1e66-ba53-4636-8f83-f8abd753b1b4", "indicator--9c23781d-1ee6-4f7e-9ab4-e32a77b64f21", "indicator--c0938d07-264c-4e64-bd70-8cfe06d7f89f", "indicator--85be9d2a-fc0e-47ca-8732-57b6b3cc6aef", "indicator--ed3d5210-d678-4587-b7b6-cc6dc1ee52e7", "indicator--da1dc00f-985c-4b69-ab2e-0348cf363006", "indicator--79795828-558f-4239-9fdb-ab5a30ceb67c", "indicator--24ca58a5-057a-47e3-960e-468c8b6c757c", "indicator--833e27ee-db3b-441a-991a-012d39748c53", "indicator--e73d9673-6499-4b40-bf55-662cedec931d", "indicator--ddfc3a0a-0876-4c1a-92e7-dc5bbd05488d", "indicator--7107df92-be5c-4945-b9a5-29f48fa48aba", "indicator--d3f466ac-c725-40fb-811d-6df2dc4c7b2c", "indicator--dfc0c840-2f06-4f43-87d1-e1afcc0fc627", "indicator--7bd27466-bf96-43aa-830e-7833fa66d55f", "indicator--44ae7509-457b-4a06-901c-f497e5006107", "indicator--4afc9877-6ab7-4666-b8bf-fb7898eaa301", "indicator--a484450e-196c-4111-80f9-c62d8f2ebe27", "indicator--e5fe4c08-05f5-4966-b641-9eb89dbd5c02", "indicator--e66e40ae-e67b-47f7-9bc9-cd67c61a88c7", "indicator--99f292b7-6c33-477e-a7b4-d3fdbd33c556", "indicator--631946f8-221a-4043-b021-4aa8c0cb18d1", "indicator--5a164536-7d0b-4171-85ab-f95cab715726", "indicator--cad55670-cd15-4ede-8b3c-598bfc136456", "indicator--ba26113a-9d72-476e-8e93-5fadde790eec", "indicator--b1c31871-aea5-4d86-823f-f20388723912", "indicator--08536156-d935-4915-bb31-17697d279ea9", "indicator--bfca910f-ee57-4f9b-8650-9d9b2c4407b8", "indicator--9cdf7f80-177a-42e4-8a30-1ba2b1386827", "indicator--ab495244-0691-481b-8efa-3cab233cedf8", "indicator--fe28d0b9-7cda-4a0c-8402-daa36237ac8c", "indicator--94764a81-f88c-4e00-ba87-68b1b8e8bcfa", "indicator--69af7faf-e2a8-41e6-bc4a-f36729ec18ac", "indicator--40edc92b-a63b-48c2-a023-7b00a77ea192", "indicator--4489dd9c-5035-4447-937c-8beaf2028ec5", "indicator--638c8e41-c27a-4d0d-8438-6087f50f5586", "indicator--0594254d-dae4-49b9-8f50-c2d98727b99c", "indicator--25a1e4f2-7848-4152-bdf7-550a3793b93b", "indicator--5506bc55-75b9-4ea4-b8d8-181434aa08ce", "indicator--557ebfa1-709a-483c-af5f-ecc28ce4dc48", "indicator--3ea16527-22f5-4875-94da-233bf4667b74", "indicator--be0b14bd-71e2-4ffe-8ecb-b879a9521af6", "indicator--96f19e60-1655-4cd9-91e4-a27c05774d09", "indicator--3b9f1194-d4c3-421c-9ac9-54507af8484c", "indicator--3f3b6d1e-ac82-4323-8992-71291f2eb863", "indicator--4aa27d2e-9b87-4d5d-bd2d-eb4186c1404e", "indicator--3be7d38f-8a2a-442b-b233-442d7e26c119", "indicator--ccfcc3a2-2a39-4230-ae7d-e2da2de7ac53", "indicator--6fb06635-0781-4a2f-8c30-5ef794356b91", "indicator--92ef6b9c-8866-4548-8820-ec41e127a2ed", "indicator--b244a9cf-18a8-4cf6-87d9-5251fae7ced4", "indicator--06fbbd44-7c11-4f33-bcd0-e23a20cf097f", "indicator--b43db595-b4d3-481b-b23a-4c58011cca32", "indicator--fe8ae645-66a7-4d19-9360-14520ffcff14", "indicator--86c1e180-5b31-4379-ae4e-fac2713743da", "indicator--5defd759-6f12-45fa-9d01-06d74740d1f8", "indicator--7c394532-bbad-4c08-8bcb-d161d152f3d4", "indicator--c249f982-483b-44d6-9b35-459eb54fd9fb", "indicator--1c97983e-5bda-4931-9f03-239c5e4b2160", "indicator--ef447593-09e9-4935-8aa3-94ec008cd5a9", "indicator--76b5b4f7-40e1-4e0c-9915-477a231bfb80", "indicator--42321b26-23ea-48bf-afb8-de95f2b6fdab", "indicator--451fd904-2411-4318-8c2f-1b008f98e968", "indicator--eea2e711-bafe-4577-8f17-96015bfbb9a6", "indicator--a60198e9-f6b5-4cfa-a580-5e693ac50954", "indicator--b379a0a4-6b55-46fc-ba3b-ed19e9429c54", "indicator--e27df35d-8f0c-4182-97dc-45474ecd8969", "indicator--54f73a43-0c74-4501-873e-d559537f0400", "indicator--349a2e6e-efbc-48e9-9cdd-9d1318d3fdce", "indicator--981d32d6-d2c5-444b-97f6-9b3b6d9ed9eb", "indicator--f40ced45-a8f7-4828-ae73-08a89e8aff4c", "indicator--6ceb5899-22e0-441b-a2c5-34297f8c4f49", "indicator--76ebf3b0-08e0-41a6-a524-4b31a7c62985", "indicator--53aca963-9c62-4fad-83d1-89a08340ca18", "indicator--67502ec9-4031-44df-b0f8-298992bec6b5", "indicator--9c99f187-aaae-4ecb-b76c-bb3db74e721e", "indicator--4f77202b-7bf3-4a24-9225-da36c69da0e3", "indicator--c220c213-691f-4a23-86f0-1d87d5b05d0c", "indicator--9cf4768f-4009-4d83-bf70-f392e5373cff", "indicator--055ec8ca-8d36-46f3-9ad8-57e1555dfd75", "indicator--e88e5d0a-d3a2-455d-8ed8-180997a30040", "indicator--c3a97f82-d80a-4302-8caf-0a3b246e8846", "indicator--62390ce6-f04a-4285-82e3-4f8f70dce4a7", "indicator--ec22b3c2-d33e-46f8-8ac5-908a7e6c1dc5", "indicator--6ed5297f-09d4-4ada-94da-4febb5f3a59f", "indicator--d9a7fcd3-622f-4aeb-a7d8-4489727b1374", "indicator--e75f4195-80d4-4474-a28d-16f19abeb567", "indicator--33bbae25-8ddd-45e9-8337-a55a2191b7ed", "indicator--06d8378c-1a49-442f-8bae-bec4f63c21d1", "indicator--a0752615-aa56-4e94-9b66-a0a5d519b47a", "indicator--fd51af6f-d063-469e-a2f5-f0afbbeed82e", "indicator--945a0b6d-e9d9-4ee9-8acc-39498b753074", "indicator--3a53eb38-1004-4a52-abd2-57c132567eea", "indicator--57b072fc-955c-439f-ab09-55f99301b39b", "indicator--60715d00-b00d-4b7f-b811-a51e619f9d3d", "indicator--5e117349-2593-4eb7-8f82-05df7a2b6e40", "indicator--8ffd4673-5ff1-4b31-b919-d2fd0f75ae0f", "indicator--3b27ca8b-ae4d-482a-af5f-b8edf6709d5d", "indicator--313843f2-69b7-4a26-9c4c-d38f37e487fb", "indicator--53c24c3c-cae3-4a3a-b15b-3bcca346ae44", "indicator--192fe265-a608-4089-8a6d-5d9dca194120", "indicator--4ccb25da-dd22-456a-8e18-1d7c7adaaf80", "indicator--62d85ec4-3f64-4995-bf03-4553d9d9c547", "indicator--d13ae94a-6514-47f0-8ac8-d0950fac3ea3", "indicator--f2c8e01b-1b5e-4706-9428-fb537e2faa9d", "indicator--460d756f-57b0-41c9-8d00-e63a2cd4f498", "indicator--f2f9f2ae-be2f-407e-8e96-8ed0f4b6083b", "indicator--8b7ac6b0-33fb-4bcd-a200-91281ed96471", "indicator--5947e7da-23f7-40cd-b04c-df176d2778b3", "indicator--1eeb29fc-420c-4077-b3e8-8e25010c29fd", "indicator--c46b3d58-4d68-4e02-8f7e-912e154d16b6", "indicator--30448fa8-d234-4753-afb1-1a949df25458", "indicator--11c172d8-e3e3-4bc2-ac4c-df3e4cc0ca9a", "indicator--484e41b7-f69c-4580-841a-21510e54f08c", "indicator--d1efc0c8-e49c-4640-9048-e4328c79094d", "indicator--46e0e367-e959-4a91-a4ae-65977eb45d6f", "indicator--a6b92fb6-a6eb-4698-8392-54a888f4a922", "indicator--a1503a5f-4a82-4ee9-8bbb-87e80f226b63", "indicator--02ea684c-1165-4b0f-a24e-bd1a6d8dad39", "indicator--a3ba053f-64b2-4ace-a005-204b10bae627", "indicator--33994d39-8c94-4284-b48b-0e962c3200b8", "indicator--76807d20-3812-4c69-aa70-216395611c86", "indicator--a0cbb1e9-4a55-4fc2-87bf-a5082ce449e4", "indicator--8611d319-5b54-417f-b990-1b29dffc0eae", "indicator--07a239f1-5571-443b-bf5e-93145549767d", "indicator--1ef238d4-45b9-4d00-b2db-cd92fd12653f", "indicator--7a338574-d755-4ecb-b5e8-a34677077806", "indicator--5ef8dda1-e7d6-49be-8b08-69e6fa934368", "indicator--0a889665-5af5-440f-81c2-819a61bf9fa3", "indicator--d05207c4-bc2a-4ce3-a869-d12f3e5f2070", "indicator--5e45ef29-380d-4ad4-95e3-3aa89920f8c7", "indicator--74684990-f107-47ed-8752-aa3bf03d9064", "indicator--5e9f35d1-2658-41bf-b761-ee3f2d2ae20d", "indicator--b397112c-f41a-4684-bf9b-d1ad324d0a4d", "indicator--2b5ec13a-3c9c-4535-a234-9cc7d1e62c41", "indicator--fa1d4ed3-5a87-47e4-9534-b6f4db20d389", "indicator--3f30b3ff-615b-46ea-af94-c88a7e49f84b", "indicator--77e92af7-e1d5-47ab-a2e8-62f2762d206d", "indicator--9be4e001-0471-4775-b598-524c96d48338", "indicator--57f07e36-a70a-47b6-b53e-97e5c5b64cf8", "indicator--0fb9dba4-e1cb-4b60-a115-b72bae795071", "indicator--dc8c47f4-c486-4ffe-ad82-126b905f3460", "indicator--1904b6e3-a84f-4da0-a76c-f772cc0417da", "indicator--e71b54ee-348c-436b-8cdf-2f4bdf68ed47", "indicator--9615dee1-8d39-4150-84e6-b0e5515507d8", "indicator--9067ff88-19ed-4359-8e6d-b9bf4c9a7e58", "indicator--ad1311fc-3354-49aa-aef2-6992cebf6a4a", "indicator--a7645828-31bc-4c76-b744-7f36b4e113a6", "indicator--08be597b-be99-4917-85e2-caa29d66fa70", "indicator--d1b9b063-8cd8-4979-84cb-5f4427f263c6", "indicator--36b60f58-112c-42ec-be1a-e5719182e3a3", "indicator--bb8c5192-8ba6-4de1-b14b-f392b4e14757", "indicator--b9ba1138-2e35-4809-ba49-f678fa0c09b0", "indicator--a11b5c44-4c3c-4d82-888d-282247165e45", "indicator--ce74e9ef-803f-4dc7-aef3-ae62a83d9ba8", "indicator--a714d1ce-489d-4056-9683-111387dced30", "indicator--de95ea55-7922-4399-a657-f1981b3a0ddd", "indicator--af95a5aa-0168-4d1e-8a86-debdaac470ec", "indicator--e6328f3c-f507-4da9-95d0-cdcaa5d357b5", "indicator--cac17b45-c95c-41d7-b1e8-88d5ddb4a3b9", "indicator--8535af01-8aa1-4996-b581-7a30466919ca", "indicator--73d1d670-30c5-45f2-be35-6ce5db61ba9a", "indicator--d2f0df74-856e-4f94-98f6-49f544362627", "indicator--fac1bbc4-ad27-4a92-838b-0d446ff08dcf", "indicator--8d9905ee-30fb-4fbd-923e-8892c74ad6b8", "indicator--3afe5353-6f2d-49a3-9f4a-dc5974945544", "indicator--fedd84b4-2c6c-4d3c-9626-baf03e70db14", "indicator--2d38c18d-dda8-4981-a493-c644ce631b0f", "indicator--a8dae3d2-cc30-42e7-96b6-50e2bb34560f", "indicator--d137f1d3-60dc-4652-8f20-1302642bec6d", "indicator--a56665d4-3b00-4f28-a62b-0691fc8171b4", "indicator--e16a2d15-dd3c-4ef8-b067-ac3e5f5ac422", "indicator--fc9a3a31-39cc-4ff9-b719-1954e9b115c8", "indicator--e2182aa3-3376-4d72-ad58-a95fbf5bb877", "indicator--933d720a-c381-4114-870b-503616b1e2f8", "indicator--8a5148b5-2a79-49c1-a6b1-da376b4a8b38", "indicator--ddecd37b-5226-4f7f-8d83-2f01beeeb698", "indicator--ee6ce46a-88f0-4303-acce-664c583b6367", "indicator--814e1c61-1012-4dc6-ac35-b957307306a1", "indicator--0c6ee485-80d0-47c9-b287-1e028b9a139b", "indicator--ad80f518-06e9-445c-b862-9954f509c9ac", "indicator--c40df960-bb7a-4b3a-82f5-54f39cc6307c", "indicator--2ad7a569-f294-47bd-99b5-e59aeb93781e", "indicator--c2976296-b5e8-4d8e-acf1-80af37534eca", "indicator--b35af8c0-bcc8-4c2f-bf88-c82c0eee3d26", "indicator--a0580069-394b-4c98-b9ad-63b7e5a149e8", "indicator--5f65e400-8582-442c-a66a-2a772a2447e7", "indicator--4b13dc0c-b1a4-439c-b7a9-6fdf445a4ceb", "indicator--de29960a-db58-4fd2-af51-26e6fa08056c", "indicator--7762aefe-c57d-44c8-b285-cba314a6b811", "indicator--70aaf29c-d9bc-4a17-8bc3-fc484cd6ff47", "indicator--05c11cf0-1ed0-4fd3-8a88-3d24934c7d76", "indicator--e0c92ff0-7b52-4cd8-8abe-4bcea29dbe24", "indicator--8537c5e6-f0a4-4094-8ea3-7a400d79ae34", "indicator--b440598d-c788-49bd-bc4c-639c91ec93c0", "indicator--c48106a8-2f09-412f-9355-aa3ceb5ef03f", "indicator--255d1994-29a6-4dba-a3c6-99ee6745dca5", "indicator--89682ffb-7f5c-4760-a747-42e2d0b71594", "indicator--93710da0-4a62-4b10-acb4-6b2304fd3590", "indicator--ef22789b-6908-4216-b69f-51a5f7b35b60", "indicator--3be36b15-8f81-4a90-995a-27f7e3aec124", "indicator--d6df8e19-3027-4a24-bb15-d30f1839678d", "indicator--041f14d5-b7e0-471b-9ef7-431410f5373c", "indicator--cba20873-4503-4bef-8a5d-1b27abde5121", "indicator--f348354b-9ec5-4635-9a6e-174a97ce7fc8", "indicator--a1c2ef91-96db-4b9e-85a5-8d19819b6c0a", "indicator--0b0a5c7e-69d0-4e72-8337-6b4b42e3b859", "indicator--16ef39ae-c156-42b7-a499-df6ac124d517", "indicator--45ef5b13-4f3c-4deb-a3d5-6e0f6f733573", "indicator--c914c483-b7f2-48f7-88ae-89d58951e411", "indicator--559cf142-5436-424e-a833-96f9790afcac", "indicator--2414b718-82c9-43df-b1a1-3d487f32a410", "indicator--a07482c9-bdad-46bc-b045-0464d59fdffb", "indicator--662d87d1-af5d-48a9-bde4-5728e505b622", "indicator--b7007336-adcb-44d9-af9b-d0d88fa0b26f", "indicator--b32f437e-52af-47f0-a809-5b87dbe0efe5", "indicator--faf094a1-df32-40f4-8b07-e25ec69004b9", "indicator--24fc89d1-2893-46f6-bcd0-fd1d80af3434", "indicator--dd3bcc7a-cc3c-4bf8-8185-b4ec5ffb025a", "indicator--f92ea352-1665-4cbd-b10f-dfa1f99ab3ea", "indicator--5c1a6215-1c5e-4178-8e3d-700741c49534", "indicator--e7be770f-69f1-4292-9646-0e566a3c5534", "indicator--fdbcad5a-c55b-4ace-91a7-5dddb1d88cbc", "indicator--93064337-63db-4daa-9eeb-40cc588ae243", "indicator--03e47923-c0f0-4414-90e7-e7e0cf422912", "indicator--518b280b-8281-4180-b536-95f9fee64222", "indicator--fa8f80db-1504-4a6b-b98e-c91909ae95d4", "indicator--895ca974-b78d-4fa2-a1ec-692a01f6754a", "indicator--09d29540-0d1b-4052-bc14-65b61d8550cf", "indicator--52552ccd-6afe-4638-ae0c-2f74e323b77b", "indicator--3cf2c0a9-8d93-4680-90ba-b1e4a8d2e975", "indicator--81a19105-e269-41e9-b640-6ba2216be709", "indicator--dfb37dae-a4ca-4cea-926d-715489003394", "indicator--f63f2aa1-4d1b-4adb-b300-b07e71dc3779", "indicator--5fd545cd-b75e-4d31-9f0c-5f1d4e0a28dd", "indicator--7fb33e51-2fc7-4ecc-be1a-238c21e0f5f4", "indicator--b9809613-1476-4fd3-ba2e-1cb656988b27", "indicator--15d0a59a-1b9e-4eee-99e5-88f0ff5d1426", "indicator--7bf2297f-138d-4c60-8c3f-09726a5c682b", "indicator--0ecb8367-f0c6-4964-b4ed-4c43a3d4c773", "indicator--6e836316-3fcc-4bc2-aa1c-9c82df02716a", "indicator--74abef45-c38f-4c07-8a19-38b4d42ab208", "indicator--262f9570-0ea1-4ea3-ac79-96c9368078b2", "indicator--12489259-c87c-4edd-9761-c2b67d5e6904", "indicator--5e63a179-82b9-4b6b-b28a-6845017c0ce0", "indicator--492b1069-37bd-4674-9c24-d59857373db9", "indicator--10abb26c-4731-4d26-a3f0-c288214bca84", "indicator--20acb399-916a-49b0-9884-9567ebc41b8d", "indicator--ff189abb-8fc4-490c-955b-71b4e1ea6680", "indicator--ad28fbac-9533-4a20-8873-b566b2142b84", "indicator--fbfc4671-1074-4e63-828b-f456b794bc46", "indicator--7605a8ec-2001-400e-9eb3-22067638ec42", "indicator--37311174-b551-471b-8c1d-23d8ec9901e9", "indicator--963154f9-16f0-49b8-8aa6-7d3fea7dcae4", "indicator--f4fad59c-8ffe-4899-975a-60934fe3a582", "indicator--90787781-f304-4346-a109-e9943f4a5b00", "indicator--b225261d-d868-4e89-b497-ec62af6ae9ce", "indicator--2d15fe17-4ab2-4be7-9240-e0707d17829e", "indicator--c2cecc9c-6f14-4537-8610-df5d1a2d9f9c", "indicator--b23a150e-49fd-4a98-b612-43c55e220bbe", "indicator--56a23dff-bf80-4965-b309-11a689e8873b", "indicator--024296b7-6eaf-4a40-a963-5772cb5e249b", "indicator--06038854-3089-468d-b179-94c5c6f2f6e5", "indicator--8e00091a-d204-4106-8ec7-78da45182b63", "indicator--064b01f7-e5fd-4a8b-a1de-1ce253e98c17", "indicator--d9015683-4c9b-4cbd-bcc6-e3db77397856", "indicator--e8cf9244-c4df-442f-9e7e-034d98d10922", "indicator--5c710a43-e632-4001-896f-af1162d1ea06", "indicator--44736d42-f674-4690-b9e7-ff874ba21f3f", "indicator--8e00c0fc-5f39-4ee1-bfdc-e2294bcb1b0b", "indicator--2a32d540-4765-4f9c-8f25-c39db8f51ea1", "indicator--5d806844-82a9-4eb3-92a8-952f78e696c6", "indicator--b56073bc-42a0-4881-8516-a9a17c68aabd", "indicator--5e2e8045-ec4c-4402-944a-17401d28295d", "indicator--3d3d0c9c-9d58-4ccb-8533-835d0da232db", "indicator--323ff841-9e11-4f95-809e-7e473c2a29c9", "indicator--cce72aae-2df2-43ff-ad00-1827026d6bac", "indicator--ee8f734c-6483-4fdf-871a-7a52d35f85eb", "indicator--005b09f4-637c-4d51-a0b7-a74939153f24", "indicator--6b4cc089-48a6-4ea8-baca-bf06ee012783", "indicator--2d82a34a-a535-4700-899e-01efcbfc326a", "indicator--21e9ce86-a6d7-4560-9b2e-bff7b0716575", "indicator--760aa62a-1e57-4f8a-9792-936559e8413e", "indicator--1258867f-0de4-43b6-b17c-afc78f1d6d25", "indicator--8b980f4a-398f-42f5-9db2-2045d7eee90c", "indicator--c589e780-410e-4cce-80a1-4d98fef1048e", "indicator--e84250dd-ad28-4fce-a810-85977aaa4293", "indicator--e5f63910-4236-4d13-8483-5af5f4a1c919", "indicator--64c78cad-1371-4499-b6f1-9724d131d2cc", "indicator--fa0190d0-e954-410c-a220-26d8ac0704a2", "indicator--78616a7b-3ec5-406d-99c6-162e81c49e0e", "indicator--aa6d724d-8793-4a21-9e4b-67cf380fee17", "indicator--53fb6ed4-7e69-4d3a-9fc9-bfb93d2a6695", "indicator--0cc29a04-2889-4fda-9849-833e56c73ae0", "indicator--3cf553cc-8946-451b-8026-2a5060e36e1e", "indicator--4721774c-5063-4279-8ac2-7a39f68667ac", "indicator--a1c09ff3-5b3a-415a-86b7-a0f5b4e9b5ea", "indicator--4a47f3d5-b4a5-4b27-ab22-45a6a39f902c", "indicator--2e4b5478-1bc4-486c-b426-78e47e77467e", "indicator--27d63461-129e-4ea8-a388-ee242ea5bcc1", "indicator--d6044c14-7264-4ad1-a985-58cb66d3aa3e", "indicator--14a8da67-7810-410e-80cb-6a0fdc1171eb", "indicator--5750335c-9607-4922-8743-524d158740b6", "indicator--cb61ba32-b142-4ea4-9fa9-365d532ec740", "indicator--3b15989e-2a50-4b78-a44e-93cc762aa754", "indicator--d07d5f27-2c69-453b-b5cf-fa181b2c39ad", "indicator--53348d71-6a9e-4807-a4ff-23aadf649546", "indicator--4f616549-36a7-4a55-a5a6-26fc766d2840", "indicator--21ad7dbf-22c4-4210-9dcd-266fa5fb0154", "indicator--d71f0b93-de1b-41d1-a1a7-d3a7854551d5", "indicator--a855d69d-bcfa-4cd3-a426-991c47d6c677", "indicator--2d0b4a3f-92eb-40d1-a987-20506640f5c0", "indicator--38145d03-32da-459d-8e01-f5642b02b2ce", "indicator--ef06305e-3868-41da-8ec4-ddbbc3baee75", "indicator--91fbcfc4-63b6-4d4e-a4f0-0c9d9e49895e", "indicator--6feac278-7dae-4abe-a4cf-3211450e0538", "indicator--a418cb8a-ef96-4afb-94c4-c642e14efaa6", "indicator--87eb2168-75af-468f-988f-efa7a24f5148", "indicator--eadbf02e-b821-4111-ac8b-185ea3791bb5", "indicator--7923dea0-6204-4cb2-9744-74c31c6f7405", "indicator--b4107697-4d36-4b16-9f22-1ae9caf1b035", "indicator--cabe74b8-fca5-4915-9ecc-a0c4ae9cabc8", "indicator--d45b36f4-b1ee-435c-98dd-36fc980e32f1", "indicator--0e29ee44-0a37-4121-8ae3-e2c9eb081608", "indicator--165a59cb-f048-468f-b6a7-b4a6b2dd3479", "indicator--07f83926-9473-4629-a945-fd6eeb62cacc", "indicator--95a5c279-7a51-49df-ad1a-17700538d42c", "indicator--6e37c67a-ee09-45eb-85a6-39ff0fca6a60", "indicator--a9b273ce-5bcc-4559-810c-25beebc26856", "indicator--17920807-2e9c-4dc6-b981-3ddb883c874b", "indicator--54d2b794-fe2f-48e8-b391-2caf5577bc9b", "indicator--5706e341-6b6c-4f61-973d-eb9a5f2836f7", "indicator--d3a0e4fc-13cf-4d27-9202-9e88a5baea1d", "indicator--b90ea378-5a75-4d7d-96f5-c9bea05a5739", "indicator--a3e649ec-e0da-4b1f-aeea-c1ca48bc9ce9", "indicator--a95c3bcc-4ab8-4fa0-ace2-dd639a89d542", "indicator--ef13b251-1fc2-418a-8a0f-6e05b9fd33dc", "indicator--38b908ed-1c80-4230-8951-d2f95f965242", "indicator--4b5e5eae-e330-4706-b8ea-f65ccfb3b468", "indicator--8db0d648-7652-4919-8d63-b8d43f8d7a43", "indicator--67231574-564f-4192-b011-9fbbbf6df5a4", "indicator--66e44fb1-3260-43c3-a2b6-887f66a68544", "indicator--1cebb02e-cfdf-4256-a7c1-ed3026176307", "indicator--bf882836-27e7-4a5e-8b33-8639aa469a23", "indicator--1407a7fc-57a7-45f5-a386-2ed01a7a1133", "indicator--854cf1ad-8e26-4c37-8495-96c116f6bd9a", "indicator--daa4536b-90c6-48fb-a0e1-d699420c27e3", "indicator--092d7ddf-a9fb-41a5-bef8-eb818d408e90", "indicator--af679bc0-757a-45da-9e8e-69623da03a0f", "indicator--0e850d3f-328b-4cb2-b1ff-bcb22ad33da1", "indicator--575fd283-0d3a-4f8e-b6b1-6e1e404275c0", "indicator--e169f4fa-f843-4b90-9053-b5e8dcfb1251", "indicator--7f45d474-febf-42f4-8b44-207df33acb06", "indicator--571a8bad-50ac-4ccd-882f-745a4dc64955", "indicator--bac61a90-0f13-430e-8b09-5316145f8c38", "indicator--70cb3d1f-fab4-4169-9994-3e98b87b7bbe", "indicator--943f1ccf-a85e-4379-8782-8abb6d3cb924", "indicator--e45456c8-4f1b-499a-82cd-dda36f772cc6", "indicator--3eea7eaf-9043-4caa-9298-c54a50725e7a", "indicator--90eff6db-3f28-4792-a5c4-575618cb9ab0", "indicator--5d348429-59ba-4674-8a16-d02a05dabd8e", "indicator--fa8b0af3-ed5e-44c1-a8ba-8b7462d7aecc", "indicator--b8d98f27-9667-4c49-b7df-fc0721de20b0", "indicator--30c1a1bf-071e-4229-b6f7-f01f46af2680", "indicator--b8f85e81-861f-44be-af6b-ba0f73abe4d7", "indicator--d1c455db-4bb1-426b-8c22-7721df6978d4", "indicator--2f74ec07-5036-45d8-bce2-23288614f16f", "indicator--284ad7f5-4736-4714-9861-df3704cb01dd", "indicator--04828da4-469b-4976-92be-02db4ac6e11e", "indicator--682598b9-cf53-4f3a-a380-0e07d054f0c7", "indicator--08c52832-968d-44bf-aa86-21f744b4964c", "indicator--44c7ed8a-0ea7-4fa2-9095-acacd2d83581", "indicator--fa2dbb02-b4c7-4804-b634-47d1e7ecbefd", "indicator--b90f06e1-6314-4697-962b-0db6efa0279e", "indicator--e19fbdc3-617a-4cce-9bc6-f1b4cc2206b1", "indicator--a5ef0e21-fabd-4b1b-88bc-dc238dc80b83", "indicator--fef68c12-7d88-4fa8-894d-8fbb8399cc84", "indicator--e5573f5e-c70e-438c-9836-53bd00f54ce9", "indicator--80f19221-1324-45f1-8c28-af7b069fa32a", "indicator--b1568da4-9a7f-4825-a800-b708ccfdf26c", "indicator--ddaad98c-0782-4bff-b7aa-8e929eaf10f8", "indicator--1de412ab-5282-4e7e-bf34-47fc51bd29bc", "indicator--6de3f379-c90f-4d6d-8f87-bdd307b1b0e3", "indicator--ee709559-ba90-4b19-86ac-dcb13f767432", "indicator--23f99d78-b21e-4b76-ada8-01551d169b78", "indicator--d41d8d77-4184-4751-9864-f44b87b94f8f", "indicator--0fa1e6d6-3c91-4561-87a9-ed246d9105ea", "indicator--bae86a4f-5d67-4e45-b20f-b0b263510671", "indicator--b45c0567-4976-45e5-99d9-5f0e4be5f42c", "indicator--5de082fa-e06a-4596-9d5f-171e3e731fa8", "indicator--86f854ca-f089-47ad-94ad-ef9b88644ec9", "indicator--44c6633f-323f-4b15-a86a-d2f8ab1504a4", "indicator--ae5c6c66-4df2-422b-b07d-302385eba9f9", "indicator--f28fbda8-2a43-4266-b41e-b70fd16cc7a1", "indicator--72fa4b55-3bd9-46b6-aaa1-fb211e933ccb", "indicator--8706a0a4-e4b7-49fb-8e6a-2a344e2cbc78", "indicator--fd0b14e9-fb7e-42b4-8d65-37ec171bf71e", "indicator--4ba5d417-388c-4e84-909a-39b6efdcb889", "indicator--5341f225-e448-4141-9b0a-5d85dd77215c", "indicator--72fbf0e1-196e-427e-9fdf-d6196032b612", "indicator--ea48b6a0-84eb-49f5-a633-ca56207b78b2", "indicator--d57f119b-e0c4-4ebb-9770-af9bfb859ac5", "indicator--ac79b7ae-d3e4-45da-9a8d-e4582bce3ffc", "indicator--ed630f53-8c1a-4890-9360-a934df7eb3f9", "indicator--a3586d23-4a62-47f8-a303-7c6fb52f792e", "indicator--2ce5261a-b752-48ae-a250-e10143dd8160", "indicator--b2105dca-1fa6-4508-8c44-969e0b1527fb", "indicator--c0d2dd23-5c02-4caf-be73-1f7c83de5547", "indicator--4d99984f-fd1f-4363-9dd2-2a8f74fe4cb0", "indicator--9e3893a4-1e4b-42d3-8df0-03314670cfea", "indicator--7245772a-60b6-4be4-bae3-1525848c97d9", "indicator--c7e66dd3-ff2f-4d59-8601-116d4c77ad4e", "indicator--003a224d-ab69-4bba-9362-47ec215b73d9", "indicator--ea5dbbc6-3005-448e-a561-af578abfb549", "indicator--c8a72102-12e3-469e-9d68-01df6ccbdf0d", "indicator--3764581a-c81f-445c-908d-b4afca3ded25", "indicator--d705e6fb-4f97-47cc-ac06-1aa1ab977373", "indicator--4b55bfcd-abfa-4795-ae9c-d548b0e39549", "indicator--d6299bfe-969e-4e1b-bfec-e20a5fb7ff4a", "indicator--0b35005f-5ecc-49fb-9508-3d2a4893eae8", "indicator--08ee5b60-9994-4062-a72b-7cf89b1e3787", "indicator--8203f1b2-4a9b-49cc-8697-e883922e12fe", "indicator--671c6227-1b78-4ec4-9cb8-0647cae64c59", "indicator--b3be5e1e-199e-49b6-b924-93a1ce77573f", "indicator--b870221d-4b39-40a4-b0ae-c477e23a4f84", "indicator--76f7e8c1-1a9a-480a-8afe-84fdd73020d7", "indicator--13910b27-9472-4976-bbf3-c72b7775fe82", "indicator--cd93a92a-edb5-4ef2-843a-1762c3d61965", "indicator--60a7c992-571c-4908-a1b7-a368575cf2e8", "indicator--036e391a-b240-41db-ab06-c12034e8b379", "indicator--ba39f173-d3e6-4b43-b81f-fc20804eda69", "indicator--116d5806-cb17-42d6-bdb7-05c6a2c376eb", "indicator--c211d24f-d2c7-49f2-9c2e-d2a9d1cf4dd8", "indicator--a2d0abe4-e013-4cff-9a99-cd07d931d515", "indicator--ff1b52d7-a3be-4fe6-b627-e7125c8d1845", "indicator--36325484-71fc-4416-97d3-16ccc292668b", "indicator--9350d0cc-d535-4551-8a4f-f901ea7f0f58", "indicator--e2690648-aadb-426b-a73c-c85cd1667fa6", "indicator--a19a8566-3d4d-4f95-9b38-58ee3b7193d0", "indicator--51fb111c-0ab7-4878-8baa-a16ea69aeb96", "indicator--459c347b-a31d-4a2b-8718-dd2e2edc9552", "indicator--64cd8595-9dbd-4a75-aaaf-ad93d19876da", "indicator--9638e7d6-74b3-449f-9ff3-d25cc0cff584", "indicator--fe1b392e-a498-439d-aaa0-dfb6bbd0b80a", "indicator--bb12315a-8a44-4a00-8db0-ef02c97b38ed", "indicator--90477581-4d74-45f1-a21c-58052386e911", "indicator--2590f931-0e61-4454-938a-e64d7301a809", "indicator--1fae35f2-3a67-43dc-bcd5-cf8a59c762fc", "indicator--a5af6f04-d6ad-486f-8816-da7fcd20d35f", "indicator--e0b7823c-19ab-4fa6-a229-b8c0559e9164", "indicator--e3aff5dc-28c9-4c5d-a2d4-70dc18bb07ed", "indicator--8d695aa2-ed74-43e0-bb52-df0a76c3c466", "indicator--a41b9d12-fcef-41e5-93b4-8953d9dda087", "indicator--bca7bac7-433b-4c64-94c4-7d5e3728a7de", "indicator--d32c17f3-1274-4412-a72b-6c5f5479a191", "indicator--16c4aefe-f668-4cc4-807c-26eeb3a61ff1", "indicator--3250d7ac-08a2-448c-9df4-e8244d81b65f", "indicator--0c7e1500-ec73-489c-a643-0d88591f5cc6", "indicator--a268ebc0-9bb8-4082-9dad-6bca47d952ca", "indicator--826edf8d-8bf1-44ac-8101-8988d9b4af09", "indicator--c2b41de2-5259-4e13-873b-30e8e47d9906", "indicator--0a91dd6a-6bcd-4f0d-b7f0-ef5d0962155d", "indicator--e68ebacb-489a-4b59-a068-b4f4155341a1", "indicator--a4068eab-469c-4289-9910-ea4862296dd9", "indicator--32127967-53d1-462c-a5c7-facbb844db0b", "indicator--b86942fc-54b6-4388-9960-8abb908125fe", "indicator--5bb01a3d-6c42-4932-a8e9-7c8d2bfd2bb9", "indicator--36d8c9ea-28f7-4491-856b-7202709c4cfb", "indicator--80e676c7-1da1-448c-937b-736f7baa008e", "indicator--e755ee7e-25ba-4ed3-9e61-6310443b642f", "indicator--1177ac5c-fe98-4c8b-b864-d3e7f0233fad", "indicator--7511fae8-af11-4b23-8e11-cbbc71d4790e", "indicator--cc4d7f5d-a3b9-48bd-9d56-0ce3dabc37ad", "indicator--679f9aa3-b7f9-4a33-83d5-18e8e04df2de", "indicator--f65f2b5a-1278-4400-9367-90eba881f440", "indicator--8ce0d034-9299-4da7-b52e-52fb807d13be", "indicator--f6008f87-66c4-45ff-96ea-be837faddf32", "indicator--96289aaf-6207-44e6-987e-d3001e84b5c4", "indicator--49cb8339-144b-45e2-8052-1fa917f402f3", "indicator--670f3efb-dd46-4c3c-ac3c-140a4eeac17b", "indicator--18dceab5-cf66-4c0d-bab2-da012eba75ec", "indicator--5039e5ee-4cad-40a7-9032-84b1398403c1", "indicator--5499918e-0693-4291-aa07-0d9d32830629", "indicator--ad2eb5f7-50e2-4e9f-8dc2-d219fff934b2", "indicator--934398be-a58b-49c8-bc0e-6a7deb9f6a59", "indicator--f82ddc15-7d85-43b5-b4e4-2202bf80cc91", "indicator--de0b40b3-f4b0-40b6-ac9d-3883074920d2", "indicator--8d283d46-83f9-48aa-a984-751563c2768a", "indicator--e68489f3-de78-421a-b491-98a385b7e069", "indicator--aa0b4ad0-4e1e-4cad-a631-c622e18af66a", "indicator--2b17c2a9-cb69-4ef1-a99a-57367ba85c2e", "indicator--1ffaa18a-a216-43b0-8e8d-7d26d14accdf", "indicator--b08a0fd0-a136-4b0d-9592-3488ad373517", "indicator--9e65e92e-a469-46d2-846b-5ac8401180a7", "indicator--07063aa8-d50f-4082-9b42-fcb57648933e", "indicator--c3f28185-2e5c-44be-a153-ee894788a12b", "indicator--eea972a8-0017-4ba5-8787-ba22088a1a4a", "indicator--c250889e-ec4a-4e31-940e-d7c5b97b294d", "indicator--e91de70e-9943-4422-b3a1-cd4d5810df78", "indicator--afb1f730-b724-4170-a32a-7ba775c53c21", "indicator--bdb8a9c3-fc72-4400-b6e1-71a0bda81354", "indicator--e2e3e2a7-d738-4871-85fc-2b55bb68d12b", "indicator--5142b216-96d0-4aaa-962c-954db0a80497", "indicator--3d4c1981-b738-46ea-bffa-04164193c550", "indicator--e6c687f5-f1db-482c-bb45-daaedb51910d", "indicator--e926cae4-b106-4b80-ae9b-80b7c4491a80", "indicator--9d9bd115-44de-48e0-bb79-d1dfbc4d749c", "indicator--20e4be21-79fe-4adf-aed2-704e27fbf8ac", "indicator--19913f0f-617c-4ca5-bbe5-bf834906402c", "indicator--8799d17f-a28c-415a-9339-51940cb483ba", "indicator--4c5f227c-9067-4c60-a478-9598062603cb", "indicator--24a0a58e-e8a5-491d-83b9-203d6442ccc9", "indicator--0d2240c9-a7ab-4a0b-b741-e3f2683af491", "indicator--6e90ba88-9d26-42af-93e8-383b639a729b", "indicator--61e9c595-f574-4b93-bdba-94c5970b6769", "indicator--b7168ef2-4209-4f1e-8080-92b10df73b0c", "indicator--a36d21da-8c0f-4a8b-aac5-bd26b03e91bc", "indicator--f350c554-6d46-4b5f-aea1-a1fbedd13022", "indicator--cee93402-8c4a-448b-a9bf-1edc324ae3ed", "indicator--8951cd07-e856-4a2e-80df-86eefc7bdb4f", "indicator--ddcafb50-3d57-4fa1-a23f-d38a9851259d", "indicator--8fb22704-0a61-4a90-83f0-4e1ce16748d5", "indicator--21499eb9-02c6-4554-9778-e389ed5c0326", "indicator--20378a5b-12b4-4276-91f9-33046168304c", "indicator--50058833-488b-490d-b1b7-682e9c0d880b", "indicator--b777f802-500f-44b0-8dce-c044c0c28771", "indicator--e4932d21-89c4-46c9-a321-0db56dd1dfbf", "indicator--4e32aaa6-6278-427b-b49b-d9cc3597b8ec", "indicator--3bbed889-8971-4ec2-9c16-18877fe03f62", "indicator--f9e455ef-a6bf-416d-a545-daee4dc75a98", "indicator--dd0ee7b3-0278-4abc-afc7-753cfcbcab4c", "indicator--40a0af06-434a-4fe4-9853-b8c7e85d53a0", "indicator--8d34fd77-c2e3-417b-b107-686e23334850", "indicator--c3f862c6-4a3b-4c15-aece-65ed48d4d8db", "indicator--0d23c7b8-3af9-44d3-a9da-c148c837c8ac", "indicator--1b77254b-ab2c-4dc1-bcb6-87697e27c954", "indicator--8ebbbd2b-82dd-4069-93e3-427077460dd2", "indicator--4a087c94-af88-47fb-a2af-db178c798b8a", "indicator--557398e7-8bde-4827-859f-389eff6ba3aa", "indicator--9adcdd0f-0df2-4272-bedf-acbdf736b8d7", "indicator--65fd49e9-82d5-41e2-ab0b-3ea7665e3058", "indicator--b2d593fd-45e7-4e18-b704-b58b33552dcf", "indicator--854a89b4-9a80-47ce-9afe-b5463696dd3a", "indicator--6868e54d-95e4-4970-b44d-e2ae73084e6f", "indicator--12fdd6f3-5309-4718-acba-f2889aa26ad2", "indicator--f07a12f8-f327-44b2-88e2-9ce73b60c3e7", "indicator--42044b93-4bba-44c2-913e-dc6adad5ab1d", "indicator--ce064a57-8567-4741-a851-a9cc94f9d923", "indicator--fee9b7de-707b-4ed6-8604-c27650fe32b7", "indicator--0d0bcd32-4762-4865-b22d-d36bd051ff48", "indicator--ce01f870-0bbc-4979-9b4b-e2c0b3467ecc", "indicator--64fa2683-678a-405c-9f6f-f0142306d67f", "indicator--5900fcb3-dd0e-4cb4-9549-711d170c2637", "indicator--0b541c0d-b340-4c87-8706-9bbc8f3c91e4", "indicator--8bb284f5-254d-4894-977e-1e02ab3f84dd", "indicator--27b4bd42-d3ce-42a2-9960-d73f314e79d4", "indicator--bf1e5eb9-195c-44e4-8a06-83bd5080a322", "indicator--fa0a692f-83c9-4de2-9825-c67a2b12f99e", "indicator--701979e0-925d-48f2-954b-72c98baae163", "indicator--297c90fb-3efd-47de-9e09-b49ec6d20c6a", "indicator--30a1ab66-abe6-4672-ba53-6b27eacf594b", "indicator--72fe8db8-80fc-4fed-bba5-5cd3c78d04f8", "indicator--c9b540f7-af37-4249-a4c5-b4ca451e0c6b", "indicator--42dab2d6-222f-49f6-a744-0bdbae105549", "indicator--11f77cc2-ad24-46c3-aad0-fdf781bf283d", "indicator--04a10e83-6ec8-4030-be22-04abd4bcae5f", "indicator--639599d0-30f2-4976-b5a8-cc3113c013cd", "indicator--18b95394-805f-4a95-8181-684943ddf8e9", "indicator--169ee267-1682-4f8a-94c0-9f22db2ace63", "indicator--a6cbbb31-5110-4b99-8a45-7221e01323be", "indicator--7212fce2-cc3f-40cf-ac3d-011856a890aa", "indicator--b058dd1e-c527-4705-ac2c-6fc3fe4a18f4", "indicator--90fa26f8-439b-4880-bb1c-b745667ede71", "indicator--04d7f6fd-9448-4b64-9d09-cfa431622793", "indicator--89493726-ebc7-4673-a6b6-3ca449205ebd", "indicator--b40935e3-edf8-4129-bd1a-4e5bcf978667", "indicator--08668ba4-ae97-47d1-8d3b-2134037364a7", "indicator--dc221d40-b736-4720-85a7-6a11e2832d23", "indicator--edf71a10-b816-45c2-99e7-9e5d3675de91", "indicator--8a9699a1-183f-4bec-9e69-0ee9df38ceb1", "indicator--344f0ea4-a935-413b-af4a-f8369ef6a0b6", "indicator--8222b851-383d-4454-b035-be7ea0c119ba", "indicator--c0f7ce20-4647-4e97-ad09-3530da36440f", "indicator--db786f28-8b16-4092-a1f4-8711e54efdb1", "indicator--d97b38b0-a068-4209-ab98-8ea046dd15e2", "indicator--6a401c71-9658-489d-914e-d8735bbe8d50", "indicator--d157451e-4ecc-4187-9755-2a0a7b847c3f", "indicator--987e0c6e-1a6e-482a-953b-9162319d6c10", "indicator--554ef1cc-22cb-4a6b-a010-fe1e18ffa243", "indicator--7ab918f6-44dc-4fc2-8195-6c6a747a491a", "indicator--314a185d-a55c-4728-bbb7-cc8ffbaea8d5", "indicator--3a7c8bd6-e212-4170-89b5-84e5d2eea789", "indicator--c25b6fc4-c6f3-43c3-8e5d-78eb32c327d9", "indicator--c4a52c69-1673-4c47-b5c9-ea49a18b791e", "indicator--d0ff115d-54ee-483c-a608-3ee62c6b19c8", "indicator--6e9d266a-2d0e-4631-a20a-c811d8934c4c", "indicator--e2aa0059-fc35-4f96-904d-caa8bcb88618", "indicator--be38e8c3-194f-4116-a203-45165c13b775", "indicator--3c479e91-3b43-4483-98b0-0c2984624261", "indicator--5f20b132-131b-4033-b9f2-51577f3839a1", "indicator--94894585-22e6-4007-8ada-75ac242bf66d", "indicator--6a738b60-dcdb-42ae-8da3-62050c09cfef", "indicator--0efcf632-9340-4b1d-8dd3-e51c24e3932c", "indicator--9255c264-7ec6-4b6a-8a70-c4a961887ee3", "indicator--dbcd98b9-71bc-4192-9acd-9e6111019d3a", "indicator--1a55bf01-aa42-4f41-838a-b1f7adb67a6f", "indicator--2cb2ac42-d00a-4342-8752-b5db757f5e99", "indicator--5e637db9-2694-4550-972d-a2f1def96953", "indicator--9d4db6a7-f51f-4a2c-a886-6217b44c7ff5", "indicator--ddb4659f-3588-4e15-b379-79592b32429f", "indicator--7d026d62-b31a-412c-adef-bca80cba9c40", "indicator--f8854041-9249-4be7-b004-12407587c88f", "indicator--b272f892-eba9-4141-ac23-a98673215c13", "indicator--f8e44aee-8fe0-43f4-8996-dee54db41047", "indicator--b46da4c2-34ee-4b9e-9937-1f97054506c8", "indicator--e6d7d351-bc39-4f73-bdc1-bb8ba1c9e0fa", "indicator--efc0d1e7-6ab7-4079-9cad-b42cf34bca39", "indicator--e85d8e81-0b7d-40bd-97d0-6b13093b7b8f", "indicator--a5dccac1-1a9a-4928-a3f3-d007a6eb6973", "indicator--00797ead-1066-4412-8443-0dae94e5fbec", "indicator--745de6a9-2103-4d0e-ab84-7de76dc97d51", "indicator--8661f67f-e892-4551-8b35-4bf539bc7f1e", "indicator--294b56a5-0d68-4495-a6b6-405abf81eca6", "indicator--7e89c255-f1b7-469e-a64a-c46384fb87ab", "indicator--aa59bb42-e482-4fe6-855a-81fb2f1b5e32", "indicator--5d65acc5-7cae-4790-8cc1-5c88af3a36a7", "indicator--06c018dc-db42-4e71-9cb7-fb39b34f8f83", "indicator--2b9984c6-2a60-4396-90c9-d23c055f8a49", "indicator--d88b8481-aa7b-4d52-a75d-6019c7968cf6", "indicator--ea26aaca-8956-4554-ad28-d3aa41c6084c", "indicator--16da3a2a-8698-48c9-afcc-22984e161b83", "indicator--dbf48fc1-eace-4dee-bb96-3ce022c94294", "indicator--87f66598-39af-49ed-8c11-d7357a032eb0", "indicator--e161aad4-3f80-4037-83e0-f0adf1ddee7b", "indicator--f23bea18-1825-4b88-a9f3-90141f3dea74", "indicator--575bad08-a076-41cf-8d68-173774031032", "indicator--1f341d97-6eab-477c-9c35-02e2af39eb35", "indicator--6ed6ed9c-b19e-46d8-b530-4ea9006c2a60", "indicator--0a584a9d-5b62-432e-a28b-1d0a44c948ff", "indicator--eed8d861-3187-47a6-ae2f-2a2b20a6bc59", "indicator--4a30a0ad-bcb5-48a9-a65b-d99889d55296", "indicator--1e41b0f3-5423-4c1e-9c7a-301da07573ae", "indicator--161c6535-5d9e-4ef1-b05c-74c08fa39549", "indicator--b6b0a05c-479b-47e8-9a3f-15457d7a0987", "indicator--991a2e58-4e4c-4fbd-955b-a772e0240d87", "indicator--38f2e5da-e967-4c12-befb-0558f5a5e4ad", "indicator--913fdd91-f3eb-4618-88cf-6d94484dc304", "indicator--4fe3c478-5d55-45c7-b05d-d7b01f6746ba", "indicator--af3e78d2-650d-43f6-b32e-571004cb161f", "indicator--c95a4f87-1754-4a6b-af93-422e47c8abcd", "indicator--2ac7be04-564d-4ebb-9a9c-fd15d560c159", "indicator--43130af6-7eee-4eba-8303-c933656c82aa", "indicator--244734b2-2c96-4ddf-a408-5f86f87974a1", "indicator--9188b8a5-0fdd-44a4-a5da-5171da198f37", "indicator--99d6ba14-16c7-4dfa-bd24-6d90f800f566", "indicator--e0cf0b3c-e608-4471-bfe2-2555a170519c", "indicator--7c8baddc-8913-477f-8e11-7832f03cfcb1", "indicator--6a461dda-249a-4e55-8d61-469543ea6551", "indicator--074c5c31-2beb-4365-8001-0291b5e52f5d", "indicator--160cbee4-6fb8-43ca-9187-25c6f8a71c65", "indicator--c1a2d621-9f07-4291-81a3-4e79b1c005a0", "indicator--13a8d251-3cc7-4e69-a00a-3e55d031c42c", "indicator--4fc7dbc6-884a-4aeb-afcd-b3aedaca8cf9", "indicator--95688412-42d2-4c53-9b7e-12df244d0a41", "indicator--fac91b6d-de7b-4e48-88e7-c0e363a41985", "indicator--b2ec004c-2825-47b0-b198-c558bc764449", "indicator--98ff8e83-30ed-4eb2-9129-e06c8dee0e81", "indicator--91fa1d87-0574-4191-b690-9afff0ba9acc", "indicator--594415b5-2ce1-4bda-ab1b-24bb0481393a", "indicator--8ee52fd4-062e-4777-80fd-6e58bff20baa", "indicator--dfac8a9a-5ff9-4b7c-8c53-26c25e62bd0f", "indicator--dbc065a8-9b78-4292-8240-f7f2d84ea8d7", "indicator--de070f70-941a-41bc-8717-4107fa2f68fa", "indicator--08e69be2-af21-485a-aa3e-a9097b7df722", "indicator--1982e569-5819-4b0b-9309-d795b7204ea0", "indicator--4fe28f96-db27-4e30-975f-48fbe1a5562d", "indicator--f25f2c0f-260e-4c14-b964-bf973b86f08c", "indicator--b0dd355b-b3f9-4826-952b-3ee64d74f39a", "indicator--81bd1c7b-d0ed-4fa6-b77a-8e2f70af7c29", "indicator--47e5f30a-b22a-41fa-baa5-213ee7666b35", "indicator--1e1391fc-e586-4056-a1c4-3aaa38c22025", "indicator--0f8e1522-841b-475c-aa51-2a96421f9a1d", "indicator--0ca3d03e-80d8-4e11-9e74-6874c1ebdca9", "indicator--aad03c14-1288-4603-a812-2f3959cedbc6", "indicator--b575cfe5-1cbe-4c42-9a5d-9bcaaafc2b93", "indicator--b09efeec-afbb-4660-b10b-3933fb486bc6", "indicator--7b0fdae8-13dc-4318-af05-17c2374fc291", "indicator--2c1811c6-2436-4322-9d14-11939b89d547", "indicator--68ef8773-694e-4cd3-a61c-747cc75a7ba0", "indicator--015e32cf-3135-405f-ac7a-4b95dc3448a4", "indicator--222682a9-a79a-481c-b047-b73f5fd5db11", "indicator--bfeef63b-4c02-4477-8b8e-af6d11851ca8", "indicator--ce5c979a-2ea9-4aa7-ba70-9160fdfa797c", "indicator--333ad516-5dd5-4bc5-9126-5ef541c03f36", "indicator--37be6c95-1383-4398-befe-985968ab3e42", "indicator--be780036-c129-417b-8778-032932c31b60", "indicator--ad76bced-408c-4053-8bf8-b5b7b17bf1a3", "indicator--a7203fbf-35b0-4c7f-ae93-82438dd96de8", "indicator--9da3f935-1bce-46db-84b7-f22a6fd1ee31", "indicator--994f5528-e103-4411-b773-967d37149639", "indicator--945038cb-f485-4a83-97cb-e8a30e338d20", "indicator--b72abcbc-afa1-4707-afdc-91b37b73c1d8", "indicator--849d8cd9-ddca-45e1-8ab0-03fdad3a4be9", "indicator--3249c082-6774-478d-864c-340543877daa", "indicator--caf6a8d0-0b1c-498a-bbf8-91619ebf7ec1", "indicator--b7acd720-d986-43b3-bce6-683a7bd8ceb5", "indicator--1966e321-af1b-4b9c-ab34-f96904ec8f04", "indicator--923da41b-6948-4e2d-ba9f-7cf2b77ab781", "indicator--b48c3def-1976-4a60-9fd5-7bd0c56b19e7", "indicator--b9820c95-7b4f-4d12-b6d3-3c4a6cc91e52", "indicator--f273cb82-79a7-431a-b727-932208af7bae", "indicator--fb63c7d6-ea23-4f6e-b006-77411278a6fd", "indicator--530a4e9b-7848-4566-b9b4-ae6a7cfcc22a", "indicator--9fde4e0c-7c9f-406c-adda-5aedd61c697d", "indicator--a9857493-cb5d-4f5e-b4a2-bae1bffdca57", "indicator--8627c50e-f659-47d3-8ac4-444e5ca6ee9c", "indicator--45a862fc-7313-431a-92cd-70d27e8a8de2", "indicator--0d815ea0-0a71-4954-941d-f56d0b5d7c28", "indicator--27e778bb-2781-45cd-9e95-a2850a2b1917", "indicator--db3db57f-cdf1-4995-9844-8434f23a0a4f", "indicator--3ffff750-7575-4c8f-aa9b-cb77c63b9dfa", "indicator--98de3a2d-dc38-49e6-982b-c966e8d88b19", "indicator--17049bd8-bc7d-467c-a28b-36c9130e561a", "indicator--e850888e-b37f-44a5-9f88-aa5703564446", "indicator--633409b3-a124-414d-bcf6-c6268ed7ad8d", "indicator--ccc47354-64b5-401f-a513-a16b9a929828", "indicator--a13c7aab-a6f5-4a6a-bcdd-34965513d048", "indicator--5c93f890-551b-4a63-9f92-bd04125bdd45", "indicator--bfdec399-a35a-4f19-b167-5348a4cbb36e", "indicator--97ddd210-66e1-4098-92ff-36f2ee5a6890", "indicator--7fa7e450-ac2b-4a66-9037-8b87a4a0d6f1", "indicator--955bf5b4-fe0a-422c-93f1-d707f6bea780", "indicator--9f0ecec3-57c8-48ee-8d74-5248dbb7bc0d", "indicator--5f2da2ef-b482-4c6d-bb39-f554d83575f1", "indicator--9ea4bbaa-7153-44c2-8ff5-339852949059", "indicator--e23758da-48af-4dd9-9a17-646cc87ccbd1", "indicator--bcab8b66-a7c7-4a3d-a878-b34ca54ed12f", "indicator--54140cc6-5f1e-47ab-8786-049d997c102c", "indicator--a50d65fc-e0a1-423a-95af-516c04bfc977", "indicator--8fd95f0b-b47a-4d1c-b161-fc7063972149", "indicator--1ca940f5-d757-4f24-9d7a-141e42f24d2c", "indicator--27d1b95e-a73f-4878-8e40-55caaa98127c", "indicator--7a82e0e5-6f40-49cd-9ba4-ed1ecb0d1cd8", "indicator--d0d97d8d-375b-46b4-9d5f-74253422934c", "indicator--1c226a77-0f4f-46ea-81d2-a832abdf6fc1", "indicator--766de900-e04b-43a2-93b7-241a8a77616d", "indicator--11b29b2e-b391-43ae-8097-5f1d7c782ea0", "indicator--6868febe-2185-4a42-9cf5-48553170a846", "indicator--83fd3777-1e71-4157-92d8-daa4d1e90042", "indicator--d0817d71-8a3b-4e22-a13e-0eb9496f422b", "indicator--21bd1fa0-6bf7-434a-8eff-a575b34dbd14", "indicator--ab0606b5-7213-4a24-afe2-2e692b1d5bd8", "indicator--7a413cc5-dfe1-420f-8b45-76073d5be500", "indicator--47fbd192-5e22-4c92-86d3-bdab80e4db58", "indicator--a24275fe-dee5-4078-b8a7-7778b2fa3869", "indicator--eff6a766-c646-4a82-86d0-4b88b78353d8", "indicator--14c678fc-f850-4526-973e-571b9c276c32", "indicator--3befb936-20f0-40ed-a495-fb3ca8f1e395", "indicator--fcebd976-68bb-4b11-a559-ebdd2ffe341d", "indicator--ab74edb8-5b32-47c8-846b-03fc109cbe8e", "indicator--b8827658-2e0f-416d-954f-db8391595d53", "indicator--c6702c61-74e1-4842-a1c6-c9d1163de380", "indicator--8da0a114-7342-4b86-a1ee-f823a4ab1862", "indicator--afc64224-0b9b-4537-8b74-12c1817dddb7", "indicator--a43a9572-48bb-431e-911b-b27a6ef6c655", "indicator--53b18b1c-face-44d1-958d-3f7bee47fe56", "indicator--34bf2c55-2c76-4d60-814a-e3d1480629c1", "indicator--3692b132-9f87-4837-8546-ae6d50b1effd", "indicator--66ac4633-508b-4c6a-9f3c-31ba85e2744d", "indicator--31cd9cc9-51b7-4305-af7e-6f9fa23fd758", "indicator--a1bec776-4cf5-405d-b65c-50804df5755f", "indicator--210829e8-1876-4087-ba1d-42e1e115df54", "indicator--cf34745b-611e-4bde-b275-c82019db3caf", "indicator--24abd194-fc3b-48ca-8955-1b40814733da", "indicator--0c545a45-0f37-4d05-9456-a21ab2718aee", "indicator--e829314c-57c1-4aa1-a86c-ff80bcdf9090", "indicator--6ed5526a-2c49-4d9e-a6f1-17cb48da8b2d", "indicator--658d9a3b-fb93-4f87-a1c6-f21f8f8fa98f", "indicator--5e6199ef-5387-4ed3-a2a7-2770282156ba", "indicator--1f92eae0-a831-4e71-8c82-63ed80b6ad0c", "indicator--e67c3715-e70a-4cab-a7b4-f1bbb14a0cbb", "indicator--ab967ab9-0298-4376-9771-0d7196448c48", "indicator--7e8841c6-59e5-4955-af06-6780fcb9ed41", "indicator--77bac833-e221-4610-9071-0fe715819601", "indicator--8cde3374-6dc4-4c51-8366-2c3a20971dc6", "indicator--7aad15c4-6652-45f4-b6f3-66dfdd402947", "indicator--42eae85f-add8-4a7f-922b-b270226c2bb0", "indicator--cc8f9131-f265-4995-b43c-a619c2889ebc", "indicator--10e98b0f-054c-4caf-a00f-8cc98dc6ce95", "indicator--e8dada2f-bea2-4949-b640-9132168875d2", "indicator--ce5ed8d4-a52f-47f5-819c-b5306babfb3b", "indicator--78ba6a03-6d1e-4c4f-ab74-b353b6635a64", "indicator--6910e755-96ec-4669-b9b4-f61902108011", "indicator--c81c1783-76f2-4ce3-97f0-5e53b2b07d23", "indicator--203ac5c4-0efa-46ce-b86e-3ff3e2e983ca", "indicator--cf7ad892-9253-4c9f-91ad-7cab603d87bd", "indicator--3d4009e8-044e-448e-9f3d-ec3b87b8b89a", "indicator--953f53af-89cf-4506-aeba-e8cf530fb78b", "indicator--94918eca-71c3-441f-9f79-88922534b727", "indicator--c62d82cb-4185-4a28-9b90-123b3795f232", "indicator--09f31646-d588-4113-96a1-6aad4eb0ab6a", "indicator--3ecc5a17-418e-4a3c-8c7e-545f3c8ce971", "indicator--6b4c9075-56da-401b-8a4d-e2e19c56961f", "indicator--d8bb0820-de7d-4be5-9e04-8a869f0fe445", "indicator--fdb5641f-727c-4840-9a76-1ac59bd79599", "indicator--6168292a-e917-4bba-9150-fca9e29f0b97", "indicator--4f474a66-535d-482e-8a83-c280dc09070c", "indicator--5bd9ed2a-3b53-4baa-8546-6f198f2d5d10", "indicator--2eea4e55-2b21-44a9-9b90-36ceeee67080", "indicator--9f99938c-0d6e-49fa-bb51-cb31cdb38e8b", "indicator--bb589edb-45db-466e-87ab-e0e4622a5caa", "indicator--57b04f3b-3ab3-4e9c-9b7a-2bc8cc33959d", "indicator--060dc80c-0e11-40e0-b6d8-6245dbac09b7", "indicator--144c0728-3ece-46f4-b38b-c56953ae7143", "indicator--7c961b50-81d2-414a-a826-e9281f8954a8", "indicator--2b7a668a-1201-420e-9f37-ce32e8d7f494", "indicator--c8758db8-235f-4641-a571-ebf0c8d2dbce", "indicator--1aa29727-4a72-434c-9856-5c679480e939", "indicator--9629fcec-f6a2-45ce-af57-9d8f7a567084", "indicator--dc459817-27f7-4634-867b-038fe84b2cac", "indicator--4c96ce8e-96be-4834-bcc4-440a8f3376e9", "indicator--d7e3a283-cad6-4b53-8663-51a819c66477", "indicator--46c8daa6-c271-4777-80ea-ac1a60274279", "indicator--6bc61a18-55d8-46ee-8112-b8fc22d90ead", "indicator--ae6fff5c-9291-4257-aab6-4a2d646a4aa6", "indicator--b8d9558f-c146-4bc9-a91f-915e8e2cf84c", "indicator--f1c046ca-2924-4c14-b7cd-68de2677015b", "indicator--6338bbb2-bd4d-419c-93d4-4cbf7b5be0ce", "indicator--18e5e0ac-4082-49f6-bf28-73a218e903a3", "indicator--e7c18126-589d-410a-96a9-d301154975b4", "indicator--4581b1e6-f6ab-4b16-b016-3261b3161bda", "indicator--ef942b69-eee7-4535-8988-bb7ee0246e09", "indicator--97c77ecf-8dd0-419a-8bb6-7b9e47783607", "indicator--a5e03eee-3980-4964-8c5b-6ba9d753b3a4", "indicator--ef4bcaa1-7cac-44af-b8bb-cb0391c38b4d", "indicator--509f611f-9d48-4551-9334-5e6353431e82", "indicator--ed3dab6f-088a-40c4-8d37-33ec6c057ea7", "indicator--79f873ca-15fd-4cf2-8c74-d26a53231563", "indicator--ad50073b-97b9-4c52-b617-6e9657116d80", "indicator--675d4009-dd46-4267-9ad9-0bbd4342813c", "indicator--13267bad-2717-41a1-bdb0-e8b1537a0a69", "indicator--6b7a5a35-ace4-4b66-9d90-0ae76083c9a2", "indicator--a84bd916-f92e-4624-b07e-0a0ed3016e14", "indicator--4006e9d9-2f99-4f63-81ad-502be26dd10b", "indicator--755f8a56-b057-42a6-b9ae-0565b1cbcab6", "indicator--808050c3-ea68-48e7-a1d9-b7e83972b2bd", "indicator--98c4c3ad-4071-4153-96f6-b43b736e5e16", "indicator--2556eb4d-3dea-46d4-aa80-07bbacc3f03f", "indicator--4211b0c0-beb4-4e2e-917f-c448702f9b34", "indicator--c64f7628-75c8-4950-a2b0-05d0091d1556", "indicator--63d1bc4a-84f7-4493-b97f-6fd8d84e53d9", "indicator--4cb05005-36e1-4f74-a841-3171ca55f96d", "indicator--29131d34-7897-46ad-af7e-449bc59924e7", "indicator--eb57cc56-4d96-4046-9c34-9c35cb44b4bd", "indicator--19305b80-64f5-4539-b481-7384bdc9fe35", "indicator--2fa6d015-608a-49e1-b3ec-50776f32a0e0", "indicator--f1a44c17-c279-423d-8498-3bd63c762e4c", "indicator--9189669c-6bcd-473f-8cd9-9962ca6d175f", "indicator--49d1f9de-e5a2-4acb-9e14-ae38d85e4baa", "indicator--11a52a3e-591d-44d2-a5fc-433519147093", "indicator--60ff456f-1ef0-45a7-a763-9a4103e81cb4", "indicator--99c256c5-d9ee-4416-8474-1e863424c33e", "indicator--19838c22-432c-414b-ac9f-435ee20b2c0a", "indicator--1c4c4e28-c41b-426a-9e54-1f34db2d75d1", "indicator--63957123-1ea3-48a4-89bd-24f83d4f4427", "indicator--a7215aac-7765-47c2-84c8-66b59d93b897", "indicator--d2b76865-ece2-4967-a163-5b7c01934ea1", "indicator--5a73bc71-ddcd-4057-9fa4-2e97b0e7c1cc", "indicator--89948ff8-1b90-4200-bd06-fed3423562d5", "indicator--b033e26f-7918-4d9c-8482-ab203c732d58", "indicator--597a0cc6-5e5d-4c7c-a58a-a4bdcb5ca08e", "indicator--f7c96d2e-ceed-4fea-a300-dbd96d3143a0", "indicator--0234b142-4315-4b15-b7d6-b153e7dca16a", "indicator--14e6ecca-bc28-42d4-99ec-cedd3be8b01b", "indicator--c916e344-062b-4d3b-bfed-5cb3ec4102fa", "indicator--b58f2773-059f-47bd-853e-da252dddaf7b", "indicator--5d359221-6ff6-4810-9663-eca2e3912a5e", "indicator--104f372c-03a6-4414-82d8-f62bf31694e0", "indicator--b74c6785-582f-4c44-bec9-5453335db660", "indicator--3983c529-5fcf-4666-8e8e-e5562e5ce33d", "indicator--0f0dfe83-ff7b-42ca-af77-f4ae3a561655", "indicator--748404e5-497f-4f37-8d29-93a33cc89b05", "indicator--18b9d2cc-fc4c-4f90-b9cb-4d18541042c3", "indicator--668b377e-3edf-4692-a608-3e195d315c14", "indicator--e18a2838-d06a-4a8e-82d8-5b716208e336", "indicator--8d89c460-91c7-4a91-9ad3-49111d5cde6b", "indicator--f8a903b7-d903-4746-935f-1e02aef38299", "indicator--e74f1245-909a-4212-a2de-7ac066fe6eda", "indicator--9aabdd16-b4be-443c-9bcd-af871342b4f6", "indicator--107fabe0-7184-47b6-8e68-969b5c70abe4", "indicator--c1f7cbba-4012-44c4-a50e-edd2325c121a", "indicator--0db45aec-454e-4edd-8a78-b56cff170279", "indicator--b38a33e5-a097-405e-b30a-b569f4ac5d58", "indicator--c0aa6149-1383-4263-b5a1-2248b8206657", "indicator--e9ad84b5-e597-444f-b261-ec6a43812fab", "indicator--91cd06f5-93bc-4145-92db-fb159ef2fc90", "indicator--568881e4-1b1d-4f3c-9a10-65005c8040f9", "indicator--db9a0fe9-78dc-4a61-974e-f1cb165faf20", "indicator--8e143ac4-aed8-4b75-8a33-4f25ac34e331", "indicator--66dcfea2-f7bd-4474-b740-42392cc05bdc", "indicator--8dd52dc1-9b2d-49f0-8d46-92f2e3ac7be9", "indicator--b020c899-de42-4ca2-8e4a-30de0a8d306c", "indicator--b06c051d-37c9-4b7a-be67-1e67f29c0e8b", "indicator--b0a5a358-806f-4f72-98c6-186398d237c8", "indicator--97517ed7-fd9e-41ec-9df7-d15f54c2ec72", "indicator--5d8d61b7-a072-41ef-9f1b-a7e725af370a", "indicator--c4d08772-abf7-4909-aadf-2fa55e6d19b3", "indicator--21d29860-cc61-4bbd-b7e0-9408be5d39eb", "indicator--03138a59-f18f-43ff-8ce9-19ad26246d00", "indicator--3e4569fc-8baf-49e2-b605-202df3bbe11c", "indicator--c1deb480-38c6-44fe-b500-040c066e448c", "indicator--65744677-a576-4e17-a34c-47872eb82c18", "indicator--85bdeb9c-3b32-4380-8891-1ceef3d75694", "indicator--319461c1-6ae3-40cf-a476-d153b1294f5e", "indicator--30223458-e1e0-46e7-99a3-b7e29802690f", "indicator--99bbc358-792a-4c0e-810e-88cf0208ebe1", "indicator--8d3d9f9c-3529-486b-972e-2d6c698b7254", "indicator--4a1c2483-482c-4756-adb3-b9f4a87e2ad2", "indicator--b1ac28b4-ed7e-4cf8-be26-da9dd774bbae", "indicator--9f9c1c39-8be2-40a4-aad6-4dd945ccf711", "indicator--cb84b2f0-bf80-46e3-ba74-9cbc4b30db66", "indicator--fbea28f3-3c74-4f03-82dc-2799d6f9a494", "indicator--db120d08-931e-4f12-8495-fdffecbceee5", "indicator--64429933-b312-4c27-a860-7cf5b33caaf7", "indicator--ea03dfdc-711c-4f55-94c1-aa9473231132", "indicator--71ab5b2e-bc81-4565-b536-455225ff1a51", "indicator--ac042aa8-bad1-43a2-9c15-00d2fcb9af23", "indicator--74516245-4fb6-4353-8c97-965241207046", "indicator--e2ecd553-a8f5-4d0a-9cfe-385aade820f1", "indicator--a7b384b7-2e15-4fa1-ba0d-6f7c0c197fa6", "indicator--07532ccb-a0e3-48d4-a6a5-476f1f42d95e", "indicator--ac88649e-3d5c-46d3-a2f5-1be86347ce6b", "indicator--d67b50da-e0ee-47cf-bfaa-17c9c483a278", "indicator--a5d71c2b-c1e9-4484-b0c8-271e092f5f30", "indicator--0a98a6e6-8fd9-407f-a33b-dab862e28c57", "indicator--6d46be4b-d82c-4cb7-a5ac-44334553aa58", "indicator--9103b7bf-0361-412a-b912-522b9ac3d32a", "indicator--baa9a672-a78b-4260-be98-c1adf3813b40", "indicator--33ba9bf2-3c6c-490e-a703-f94a907a8209", "indicator--2bb79202-e7a9-4b92-8b21-c9a6101cfda1", "indicator--2631329b-7ac1-4676-8785-90eff6b6bf57", "indicator--87f79584-df7c-4559-9438-9a35fd656a89", "indicator--86b3f6f7-e5dc-4d43-ac77-f534a205aaf4", "indicator--ac47e765-bba1-474d-8a44-39aa1d34effb", "indicator--8e900f8b-fb5b-4be6-900a-95652a14a4d9", "indicator--247fc913-9210-4e0a-95d2-866a851a580a", "indicator--3c92a090-a693-4adb-845a-2a4f2eec7e9b", "indicator--53b551b8-a143-4c78-b396-053e2a49783a", "indicator--91e9ad46-0961-49a3-b7dc-6bb521f4178e", "indicator--a3b15754-eda7-411d-9ca1-9050bb1919fe", "indicator--74914023-f048-486a-9913-4252f8243b34", "indicator--5fde1ac7-e0da-4f02-9545-32af0ed09b7f", "indicator--729514ac-f346-4da3-9dda-6e63e33448e5", "indicator--9a581dd4-4cbd-420a-9007-935fdc833de5", "indicator--041ae8e7-f515-456e-b9c7-29ff5e64e658", "indicator--10a08958-e842-4ac4-84ab-d547e4c12992", "indicator--40c5ba27-7c28-4cf1-b6a2-0f6a4b3a5398", "indicator--ded2bb10-d6b9-4652-8b48-f16ac5467471", "indicator--00d3233e-b8ab-49cc-8461-d3d0b657c4e5", "indicator--2134700d-3aae-4f5a-a67f-b8a527977d0c", "indicator--2e142477-fa91-44f9-9d3c-c8dc0c3dd60f", "indicator--ad62d4df-9366-4310-bcf9-b3e709321f84", "indicator--212741e6-0175-4451-b2aa-a7faa4c0ba62", "indicator--4c0ac414-64ae-4266-a329-1203da8dda5e", "indicator--5f6f30aa-b94a-43f1-9fa9-32f8bf04e880", "indicator--e6173fce-0de8-4d6b-8c49-c04e07c9d39c", "indicator--c7cb6a69-c551-4b02-874a-e113fa004d51", "indicator--4e97af5f-9fbb-4891-859b-efba205f42f4", "indicator--573c59b6-db21-4e03-b205-c7d7d0a2c7a6", "indicator--60625a7c-5170-45e2-9b03-b92efdfea15a", "indicator--f107067f-db62-4ab9-a7d5-410263da8fd1", "indicator--09d9463e-51a9-409f-a233-8d24da1d799c", "indicator--b1646d4a-ed05-4d62-a65b-1a2a8b9b6a0f", "indicator--67e69553-b183-4137-b43c-0b464b668260", "indicator--66920efa-fb33-4b1f-8794-bac96d0b6caa", "indicator--3b4c2064-a627-46d7-9f60-eb54e9205613", "indicator--6031046d-f28c-4785-85d5-63785ad66531", "indicator--e9959d05-b941-4fc4-8077-e0de856c8b86", "indicator--31af38d0-4129-42b9-821e-8947ba7c90de", "indicator--90b81e52-81ae-4339-8013-1110839e4693", "indicator--a4965e29-2d39-4616-9726-5f7beb003f92", "indicator--aaff0eea-df62-4c61-92c7-f61b36092bff", "indicator--242b5cb6-8847-405d-9a80-7839cf180aa7", "indicator--e68d006a-13f8-4e8a-b67f-f61fb41d2d81", "indicator--dd33d420-3e7a-4cba-9eab-d81775bd42b6", "indicator--6ab85fd8-f2f5-489c-a60a-17920ebb13b0", "indicator--8ae94cfc-47c7-47c1-977c-0e0f6abb75ff", "indicator--70588aff-c788-4697-bfd7-d34f69682421", "indicator--38cdb59d-8e36-4874-a905-4e4b7e946375", "indicator--1fb70285-fa8f-4e5b-a726-725d3e885894", "indicator--878ba302-f127-42ce-9b36-ebdedfb1f1af", "indicator--73a38ae0-ffe0-4ae5-9746-06d1ecc6cb6b", "indicator--76678cb4-7566-4886-856e-99ea320bd44f", "indicator--ec0f61b3-2f4d-49be-931b-bf8efec5addd", "indicator--351c52e9-85fe-4f47-96b9-2630db58545c", "indicator--86dc4936-3391-49e8-8232-a546f2b64304", "indicator--faf2932a-434f-4c3e-89ac-79ae12f87f89", "indicator--263cde24-62a3-475f-b5fd-481929d667d9", "indicator--a71ba001-97e3-4597-8f13-ab0bb01667b5", "indicator--1e78fdde-bdcd-41e5-88d4-4adb2afb3eeb", "indicator--1f936280-361f-4081-80ae-8627daeacc65", "indicator--4a7ae639-d071-4a27-bf0f-24fb8db42f9a", "indicator--2495b8be-4f21-42db-9248-b4fe6e8c39c8", "indicator--7fc67ea5-013d-4fff-936d-626fa6370f1b", "indicator--a7a0127d-7ba3-4b7e-8820-bfd66731a225", "indicator--fe0b6ea8-bda2-4649-b033-30cc63a4abbc", "indicator--4d4f2b2b-bf7f-48c7-9126-afd79ac297b1", "indicator--6475e529-d902-4f78-904c-88201b243408", "indicator--e5231183-b60b-48b8-9328-ed196715dc17", "indicator--fc97d614-39e0-45ca-b7b9-8e23625006d4", "indicator--49be2b4e-c5a2-44ab-8e2d-afd6dc8878c6", "indicator--2966a1d0-22ca-4e63-b1b7-0c94b3094c03", "indicator--f9fd591d-27df-4734-b8c8-fdf55d99ce6c", "indicator--fbab5298-6614-4bb1-a78a-b566c0845c84", "indicator--9e79a3c2-6c8a-4542-ae18-e19ae5850663", "indicator--32dd1752-122c-4d28-b93e-c1bea0a886f7", "indicator--2f58680f-f617-4b31-9ba9-22785bed3528", "indicator--f2e5b54b-26fb-471b-85b4-96f86facba30", "indicator--c4187942-fc57-4241-a8c3-a5555566846a", "indicator--a78e09b2-8f65-48bf-bfca-2ab61bb9df37", "indicator--59a2f24a-4c42-4a82-aa29-0f822de4264c", "indicator--16f37dca-2d9f-4740-8e51-e81b491ac0ae", "indicator--8be25b3e-af0f-4e0d-a42a-0f249507fb7b", "indicator--ca9441f4-c92b-4ece-9c55-d7c57e0d4cef", "indicator--ba3c05be-a45b-4163-96cb-fafc8f57d467", "indicator--414e4b20-005d-496c-ba6b-2efc5fe17657", "indicator--a614cbf4-e776-4b64-bdcb-b33ec613f1f6", "indicator--e5e77e22-e543-4b51-856d-afd9784cc840", "indicator--6b877f6f-41c5-44d1-9d0b-91e422eb13f4", "indicator--9513e0e3-9eae-4c96-ac01-73bbdfccf55c", "indicator--e6074e52-e0a8-41d8-b9c0-c4c6b31c13f0", "indicator--b060445c-9014-4f48-8da0-0e0c0a51b0aa", "indicator--2b5b0fef-dc9b-4fc9-8c51-da61a7120cd4", "indicator--1f0a7036-4b45-45b9-85d5-eb3d507082bf", "indicator--ffe49f54-79b5-4c06-9f54-7556645b991e", "indicator--15f8cf0c-9963-44f2-aea8-e0535b995544", "indicator--e2f6f433-7d61-4eae-9958-657c3501d485", "indicator--fbb4f680-f354-436a-bba1-2e6d61c898b7", "indicator--c512410c-abbd-4c75-81d7-4c3bea4bfbbe", "indicator--dcf5b1b5-dcb6-4f82-b35c-c96eecc0bfa1", "indicator--7e6c4bdd-8a36-4cc4-a951-9453f7c50a6b", "indicator--8baf2b04-dc57-476e-9dc8-a677c9393b87", "indicator--3c89c809-2d1c-4efd-9f37-28d8986cd1f8", "indicator--40ffa0fb-d71b-4bd6-9466-78da22557859", "indicator--2629aa8a-10d8-458a-9f70-a72d4c622d5e", "indicator--ca0a6468-fdc1-44b8-89a1-144c0b640870", "indicator--178325bb-3253-4834-b2b4-fb33ce344f82", "indicator--d5f04876-2a53-431e-871f-e204f04a3627", "indicator--2950f978-9c08-4662-a89a-64a76f801956", "indicator--e5d6ae85-0380-4b93-8f95-ef4b677404d1", "indicator--39013261-c6fd-4e5e-aff3-0a5b43751c40", "indicator--29987044-7f12-4053-ab58-945b0c0ad7f2", "indicator--be57a676-46dc-439b-8d43-abdd6c58f106", "indicator--68eefbb0-3841-40b8-91b6-184686cda242", "indicator--a1659506-a1b5-4301-91a4-c96915641c21", "indicator--ef87e524-4786-47a8-bde3-f821ed726c86", "indicator--3a69e00d-8f5f-4592-bb37-562afbd7906c", "indicator--5a406cb2-cc3d-4500-9584-705485a55daa", "indicator--db773030-d3b1-4a68-8b58-68920e61850b", "indicator--23cae64d-35ca-4994-8e74-c6094b48ecb3", "indicator--f971c4c5-6283-4aad-872c-4d1fb8719c6d", "indicator--dc43c3f3-7228-4c71-8ce5-ec53446bafa9", "indicator--8d7b6f88-86ce-42fc-a651-0d68df3f4ab5", "indicator--346a3af8-af73-4f00-bc77-7025141c831d", "indicator--02354c4b-1657-44cb-a06a-6992e3c2844e", "indicator--b6f8b996-57a3-4652-bdc1-f5f8baf4784f", "indicator--4b442886-bd9b-4901-ba99-7d898e5268a3", "indicator--0d8bb198-9716-4925-b0e6-406fd5e96195", "indicator--747d58c2-4ff3-45c2-90c6-3ec00e415d31", "indicator--2aad8cf3-715e-4e67-95a8-336dbf92f8ba", "indicator--cf893325-8de6-4435-9e5d-3dd2af70258e", "indicator--ebfc633f-562a-468c-be5f-16416e18ec6b", "indicator--c929980c-d1aa-4784-8ce4-dd8279156cf2", "indicator--83afa87d-c168-49cf-86f2-c2c24f5e46ec", "indicator--0159ffbb-cf5c-47e9-9fa3-2c993b774c96", "indicator--faf21e0a-1ae3-49d8-bfba-5b0a58826261", "indicator--ad1810ae-c492-4509-b121-b4cb62757d66", "indicator--4f2938fe-4008-4dba-acb8-73b9ac2c99b2", "indicator--02cdbf07-399f-41a2-a71a-dc317b4d550e", "indicator--89c73b49-3b43-4780-9ddc-d695667d1847", "indicator--c6509a4c-bf54-4421-ba50-00f4f582589b", "indicator--f044c432-0fd3-4035-8bdd-62fb4a598268", "indicator--4af71107-af10-4cb8-8d8b-05080a477906", "indicator--604c1a0a-6c53-43b5-8cee-b39403f8b60a", "indicator--9ba908f0-53ff-4950-9e5d-5c69d53a5ef7", "indicator--f3c839b7-5024-4d65-86d3-1b770b839234", "indicator--04cbe945-1e64-4721-94e2-60b85aed0d23", "indicator--79164b00-f8b0-44e6-99f4-ece47c0ae1d9", "indicator--1f3f877a-f6ea-41d7-a2b4-544d97a02b6b", "indicator--6a92c079-55d5-48b6-bbe3-516da0fc3172", "indicator--e5a4d2c1-cb68-47f1-863b-b28bae182502", "indicator--93eda90c-6e00-4df5-8b7d-78bc4a00cc29", "indicator--e1227ac3-257b-48c5-88ec-e07ed877f9bc", "indicator--5d56700b-dc19-4449-9fc7-62fb02f09f86", "indicator--769d64c7-c206-420f-9396-988c75046cf6", "indicator--30e09be6-fe08-48ac-aaef-988d5fdaf482", "indicator--74d62115-2901-485f-9a66-d48fe01ac8fa", "indicator--865e82f1-daeb-4422-a2c2-78c16ab67515", "indicator--d7d45390-2133-4c20-b85d-14f3852ee17f", "indicator--5c4d4baf-d829-4d90-a2c8-810d8e2dbc58", "indicator--e0216c51-d27f-498e-96de-50385e2790a6", "indicator--d3ee46f7-b652-4da3-88fc-9bc7a31198e2", "indicator--826786fc-f057-4d39-ab5c-ffa39f5ce8ae", "indicator--2d0e8c27-f0b4-4fe3-84cc-9e9021a55f7a", "indicator--d845573a-e6a0-44cb-a326-3b82cc831ae3", "indicator--d267da21-8007-4ac8-b267-dac768b98e27", "indicator--7b19da5c-8ae6-409e-918f-e0477549099d", "indicator--83abee6d-c4ab-4732-903a-b252e9d7968d", "indicator--dc9eb5fa-821d-468e-8267-3d251329056e", "indicator--8752ec60-a456-4234-b66c-fb6b533e2616", "indicator--3f394cda-c4f2-4bd3-9e56-7cd60b4585c1", "indicator--ae5ddb43-46c6-469b-b2fe-cc267864ad8e", "indicator--5c910cf7-223e-4f2e-af0e-0b0043c9c4a3", "indicator--d9dd3d09-fd7a-409e-9419-d4526415d370", "indicator--9a6ef759-75c8-4076-ab5e-809016d0baf5", "indicator--acaf172d-6194-4eaa-8cbc-a9afa810a0e1", "indicator--29cfd270-5092-421b-b994-9357876e5bbb", "indicator--e5be655e-58c5-451b-9f3c-1be43a9f65ec", "indicator--0cb7dc96-25a4-415f-b85e-c4ae33d34a33", "indicator--18544049-7fb5-49fc-b4e2-c47da077ab5e", "indicator--6ac15451-9a37-4bd6-8b16-ded49d105ac9", "indicator--6e8a7944-7b2d-401a-bc97-56d2dc7d1141", "indicator--f58d968c-fd5d-4e7b-990a-b4cf6c92221e", "indicator--96b880c2-4553-48d2-9886-96797f7deecb", "indicator--aa7827c2-ecc8-495e-b544-252c1c8446d4", "indicator--57613ab9-cf94-442a-9ef7-dad2c25cf3bf", "indicator--ca54aa35-1972-48a6-ae45-334e503a5dfc", "indicator--327df584-97a6-4191-8f60-22694bcc0621", "indicator--5e843eb3-1762-4bb6-a775-2ceccb5cf899", "indicator--9216a26f-9233-4179-8d8b-431df4fae023", "indicator--567141bf-c0cd-418d-b7c7-3decf4fa4dbe", "indicator--f335af6a-77dd-4237-8c6d-e482d0c6d0c6", "indicator--701fdb20-0dfd-4aaf-9e44-5fa2f7b6f1b4", "indicator--af182175-c29f-4778-9347-fe40da8d4414", "indicator--a61a200d-3abc-4cb3-b86d-85ed38ed21c7", "indicator--101eec15-a768-4c1f-98a7-8e9d6f466f2f", "indicator--c12cf934-a801-4dd7-a670-59d6c1027da5", "indicator--3528747f-6298-4c36-9cc7-4e7caa29965c", "indicator--f9636b27-f74f-4ab1-abf2-729b81087c01", "indicator--4af49b74-08ad-4306-83f0-f363df0d9d1a", "indicator--76cfbdce-c44a-4d55-adbe-a226b2197674", "indicator--93007409-c5bf-4c97-987d-81e2242b3b5e", "indicator--3c22fd9a-feef-4840-9c6f-6b2c827e67c2", "indicator--807d7e71-e93c-4875-bb05-629e49ccf654", "indicator--67e810f4-d318-442e-a503-4b84e044835a", "indicator--7b512650-7649-4e97-a6b3-6e9e5b35be55", "indicator--2d193978-4dd8-4e42-8823-ceccd773ccc9", "indicator--2edd2039-5988-490a-a01c-34b717a887df", "indicator--f96ad2b7-9d12-4501-bd71-f65334f3f01c", "indicator--930b26e0-0faa-468f-9f6c-c93e35254cd9", "indicator--c23abb6f-b0c7-4733-afa0-09141bc33ef3", "indicator--5d956cd3-e05c-4eb4-afaa-6a7912bbf9bb", "indicator--564e637e-2bf1-4f8b-9073-721aabaa5972", "indicator--c6ffe082-eaa1-47c3-b91d-4541f06cd84d", "indicator--4c1cfaae-53ad-4b87-865a-a370d7c7e844", "indicator--873b8ccf-5709-4a44-b380-3a376e1670cf", "indicator--55f8f1fe-d688-4f4c-aa88-5f98af7d2f63", "indicator--4330f9be-d248-45b8-8123-d93b7c08ebc7", "indicator--d268b07e-bee1-4bdf-b806-d58fdfea9475", "indicator--68331c46-24f5-4bd4-82e6-7a54d2b41696", "indicator--210c9d52-67ff-45b7-b995-546461c76925", "indicator--4cfee896-3882-415e-bc28-1f9a6e3999bf", "indicator--ba1f82ec-9c88-42cd-9c6c-c817c34757c1", "indicator--69cab112-9d52-4a57-8914-0b1dae2d6d48", "indicator--a3f2556c-2593-43cb-bc7e-f3e30824c4aa", "indicator--93905183-12e8-453f-a3d8-2cb57358f5be", "indicator--1b8c213c-444c-4156-a5ca-1b41afcb1c88", "indicator--2498d8ef-63a0-44a4-a5bf-1aff2b07974e", "indicator--02b37fce-2c3b-421c-a7ad-ec17e661f08b", "indicator--33a2d178-09cd-4c44-ac81-b051c769ebc3", "indicator--023cf1d3-e1bd-4c37-ac77-0411d8e3a3e1", "indicator--fe253441-29a3-458b-a89a-3c552b928991", "indicator--30de9465-f5ea-4b59-8193-1cc79a53b2e6", "indicator--e45ff332-b3b6-43b1-83f5-61bf1d790099", "indicator--2f5e3ffe-74cd-4860-9144-9d8d5b1dc919", "indicator--927f8274-5a38-46b9-ad67-40b53b2d2f9d", "indicator--00832db9-c7ab-4ac1-99c3-b3e1d5cf7044", "indicator--bf5fe682-111f-4902-be1a-255322230380", "indicator--34e16da4-857d-4564-a0e4-740dbb5ff53d", "indicator--7d06e61b-9754-41d9-a10a-38ccc1f668d8", "indicator--80554685-9742-4d0b-9307-044cc826d2c9", "indicator--b5e1354a-9eca-4a83-b522-b82b6e0ec655", "indicator--707508c3-f732-44a6-8e0a-ef4b906d3bac", "indicator--030cf512-c358-4e9a-8413-8973c78d30b8", "indicator--d66e913f-5381-4906-af4f-57eed2c0062e", "indicator--b01c8d93-a853-4d07-ad8f-76165b7d0319", "indicator--14e2f380-eba4-40a9-848e-c53665cde8cb", "indicator--9eadc168-3e78-4c05-902b-35d347daa00d", "indicator--c49dc1a1-3fad-406b-8345-f6cb6011e877", "indicator--3dc22dab-37a4-4a50-ba7b-0a7a4fc35e16", "indicator--ceee8065-980d-4685-b61a-9866f53ce365", "indicator--e1d8d004-83b7-4def-84c5-49a1043c9a57", "indicator--a34a6b54-da38-4b33-991e-72668e3e6dd0", "indicator--5a2a0ca7-441a-4a86-b556-9062fcf491b4", "indicator--0cfe41f7-de99-4795-8c98-f76db233dd6f", "indicator--72c1ef23-b413-4e43-a135-451f9d3e1d70", "indicator--96735ede-3992-4a37-9eb1-086b4c486a14", "indicator--f43fe2c9-f101-4880-af49-fadd1c8b1d6f", "indicator--e0b89fa1-1a6c-4fdb-a2ea-85efd2b63b1c", "indicator--5368d074-d9e8-406a-b0df-20c1baffe650", "indicator--1f32a758-3940-4226-b3b5-51e124410da0", "indicator--9f5557c3-3243-4721-9037-801864f2f304", "indicator--b469367b-8c22-427c-9741-5bff1887d1cf", "indicator--ba973f2d-0a6d-48a7-8875-536915aa4fce", "indicator--33277402-ef3d-4b7e-a456-c709dff5e682", "indicator--60f1a472-16e9-47a2-b8ae-03e587c58e37", "indicator--74d67128-ac11-4bec-aaae-4b12a7623860", "indicator--fe3ccdeb-2971-45a9-a075-1cb4c4e1c8d0", "indicator--edb81c2e-4699-4632-aa29-c897fa940ba8", "indicator--bf5e896f-9e65-4ace-925a-4db5768f9abd", "indicator--f9424a3b-db8f-40fb-8216-6f2276bc5fd9", "indicator--f7f039e9-cb52-40b4-aa12-02a27c3faef2", "indicator--5832875c-f881-4311-a4f6-bc45ac82ba67", "indicator--11301517-9b7c-4ec6-9387-5310896a1ec7", "indicator--43cff1b4-f695-4a28-b673-1ad6c628120b", "indicator--4480acad-ae11-4f7b-8087-76ef8809b1ee", "indicator--9b3ced88-7cf8-4020-8041-c1230d77c144", "indicator--1600417e-9f40-4990-9f28-1cb47a55a615", "indicator--f574bb48-9ac6-4072-ab31-a6283976c0e4", "indicator--76ac3376-371d-494a-90d9-21d75d9bf194", "indicator--ae2a41c2-897d-4841-9ce5-0cedb6362b0a", "indicator--84b1dd47-39e8-4dfa-b145-8b2a532cc614", "indicator--03abc1c1-ba86-46f5-a9d8-0f282c8f4e06", "indicator--a15c09d6-6bbd-431a-bc4b-891088947149", "indicator--f5be4828-ab6e-4a4c-bba2-eb4288e3dd78", "indicator--c5aef97b-e0c2-401d-99d0-a7b6cd60d26e", "indicator--d309fe63-afd1-42ee-9651-21a5cd70b059", "indicator--db285755-87be-442d-8475-9fb673f89bb3", "indicator--fd4c0df7-8702-414c-bb35-e57dbb3f9629", "indicator--6f115266-b44c-4b02-9587-6831c4f7815b", "indicator--390e659b-14a4-4501-a2e8-1e6bfced62d3", "indicator--49e90a46-0ab0-444d-94b6-48d69de1a88e", "indicator--9418e924-33cb-4149-9c4d-80ef0f2e9b94", "indicator--14981a56-b2c1-4587-9be2-e4c745d62993", "indicator--9c6660ef-c750-40a4-b998-7a35732bf353", "indicator--e0beead2-9d1d-42f8-ad7b-0cd7c4698f71", "indicator--360f234b-6aa3-4d5c-8877-060321ca21cb", "indicator--c7403ff1-58fb-4499-853d-4fd473baf732", "indicator--314c1cd1-5f62-478f-b690-f435404def90", "indicator--e342a6ed-d836-4302-826e-9c81542f9d79", "indicator--ae8f54e3-8ca9-4142-9258-c889abb21ea9", "indicator--e9b80d9b-8203-46ea-bbdf-2b6f3f7edf9a", "indicator--9d43f831-a631-4b34-baa6-4d9fbdf36ab0", "indicator--00b868a4-cc53-40bd-8f61-b94cfa168dbd", "indicator--6b8566bd-e974-492d-b096-3eaf4295f783", "indicator--537fc317-94be-4b2e-bea7-3e1beaf5a30e", "indicator--b39b5fdb-290b-4788-873e-ac1e8815f852", "indicator--695ab191-bf0f-436c-b6af-13b3580b55dd", "indicator--1fafcdf3-ff60-4564-9e5e-aa3d42d95873", "indicator--bc2af69c-a41e-4399-8c65-89db655254ac", "indicator--cf9fe4b3-eaf4-4a3a-82cc-3253abdb6e45", "indicator--8a4144dc-7b9b-499d-84f6-596fc1e48eaf", "indicator--3ff268f6-d650-4601-886a-ea668256116b", "indicator--b59350dc-808f-4073-9c29-05e450f0a822", "indicator--35c69231-7871-4555-8e77-b20c3e9562e4", "indicator--51b09a8e-2aca-4bfd-b01a-4547e80112ca", "indicator--d329a261-9b3a-4b97-ae50-d61963001f65", "indicator--10f36bb9-a3c2-4089-b2b7-2353e9a0b5a9", "indicator--18769b46-485e-46f8-a445-393e1a379792", "indicator--bb426cee-9f8b-4be9-9eb0-0e520c767646", "indicator--a69869c0-77cf-4813-876d-d1a55719f3b8", "indicator--a15f41f5-4ef6-4648-b815-248c19073dc2", "indicator--4d45f03b-0fe5-4dc8-a76f-48744c7bc1bc", "indicator--b6d6c212-0dba-442e-9768-e23ff892cc07", "indicator--bff73b29-888a-4f0e-9fd2-8871ea0914ab", "indicator--e7830b75-7213-4759-8d94-3c49434e0358", "indicator--842f1199-79d9-45de-9e05-bf2bbe50ab78", "indicator--1fcbba35-b977-4e92-a1ee-f0b403acb9ef", "indicator--1b346bfe-20b9-484b-9a03-ebdc9ff8cce0", "indicator--c8ebd130-0367-4934-ba1f-7cd91ca912ed", "indicator--a8c03b9c-284a-40b9-a51c-2aab04d9b9b9", "indicator--e7b3b790-703a-441b-b93e-d49b1a371667", "indicator--39b6609d-86f9-449e-9ba4-cee2ca95c5a6", "indicator--7146db14-2e9a-43fb-aec1-19493d1b1caa", "indicator--77e4f1e4-bef1-448a-9641-ad4008b445b6", "indicator--e1d291f1-d0ef-40a3-8285-b99103436c58", "indicator--4031cfd3-3edc-4549-8b7c-8a53a593b2f3", "indicator--4aedfc31-4839-466e-a295-17b3d38a5228", "indicator--c788e159-2ac3-4cb0-9d36-adada7730885", "indicator--1a3d74d0-8708-44fa-ac6c-9fd5fc5c5481", "indicator--5bbb8c9c-757c-4874-a08c-685be93e5428", "indicator--45b40897-5adf-4ad6-b47b-c5eb5ee37132", "indicator--fd7143fe-007e-4ece-a2fc-62946a9c5335", "indicator--cdc1a7d4-2c3b-4aef-9561-460c19cb3806", "indicator--3fdb3814-5d13-46cf-b20d-636526e84448", "indicator--c5af5702-8bf0-4808-a369-e1db391cfff5", "indicator--0980e7b3-4587-4fb3-86fe-644b67ad1985", "indicator--4a95e7c4-2c6e-4f06-928e-196ee7e2f89a", "indicator--d744fe25-103c-45f5-9afc-b3b0459057c4", "indicator--813ca483-4a4c-44b2-a78c-41e00159cbd7", "indicator--a2c0539d-ea0b-40e3-a387-b2882035d7ed", "indicator--8ff0d6aa-8444-407d-9f31-7eaf08193a9d", "indicator--12901e36-66f3-4d22-b0f5-27862abb16b2", "indicator--678b0728-cb34-4196-8c20-9b55c09452d2", "indicator--f760b888-2224-4053-a625-9ee3340c64d4", "indicator--8a365697-f099-4a18-beda-a115ed424a36", "indicator--501de234-3b60-4206-b7b4-61c58661541f", "indicator--d97bd670-2462-4f3f-93fb-0f115ea7dac1", "indicator--f7907e28-3bba-44b9-a4d9-abd10c4c46b5", "indicator--f0c299d4-4cee-4fb5-93f9-17e425dc1e36", "indicator--e3cc8bdf-0b8c-4a0d-a1dc-7c89436d7e5b", "indicator--ed55a0a6-8b8d-4936-a378-e910777d3f5e", "indicator--bbe5b759-5827-4790-8a95-2f47da24b3cc", "indicator--813811a3-060c-48c9-8341-65385ceb39f0", "indicator--d191d626-5bdf-406c-a8c9-7b507e852a59", "indicator--d3987de9-25f6-491f-8226-deb21e2eadb1", "indicator--a1b9a454-a5b9-4aee-a4d4-bd3cdfd5f8e0", "indicator--eef5ee69-ae36-45ce-8a5e-bbb1c8550e80", "indicator--eb37759b-a443-4fe5-9012-b44985117de5", "indicator--5160129d-991d-471c-b33e-cc14b3f36d8f", "indicator--f887317e-f1e0-43f9-919e-2a4e57c051d5", "indicator--488e38f2-9138-4a02-9ffe-84db3563a037", "indicator--6903a480-4393-479c-8c1e-940a91f03560", "indicator--4d08cff5-d131-4645-9f4f-07db217d3955", "indicator--704a6b2d-5803-4ef4-8704-a5ef1783b522", "indicator--68963d00-bc29-43ff-82c1-484365991978", "indicator--ef58f465-588a-46d1-8e68-ef3df2896c42", "indicator--64a8e56b-ca5f-404e-9422-45dcfb3597d8", "indicator--479c394b-b643-4791-b4d8-2f36d44c8e41", "indicator--c93c1147-fc69-4c92-a96b-85d09cdcc283", "indicator--0ccf6df0-6e46-42e0-8a63-9ebdda1afd61", "indicator--6825da2c-0e79-46dd-80b5-ac28755c156c", "indicator--33ce78f1-72a2-44c9-b6dd-2e5fd58792a2", "indicator--62a9358f-3d80-4b72-a506-a80d20579695", "indicator--a5821929-312e-4ae2-8f2f-e939913d2bb4", "indicator--f488a578-fc07-47d5-99f0-df498f64dd85", "indicator--91416fa7-98a6-417a-b67f-7285e516ed7c", "indicator--71677a73-49ba-42c0-b3eb-9bbaf61d1987", "indicator--9a8a3a27-2044-4989-bc10-8837edb5bd19", "indicator--983c2360-a6ec-4ba0-b456-27c72ff0b92e", "indicator--a6d8bac8-eda6-4813-939f-38e42c3b1e2b", "indicator--0c0e5196-cd53-4d5d-b34e-b094619c89a8", "indicator--e60a499b-ff26-4a75-b40a-fee842ea2383", "indicator--2360d159-63c8-49a9-9bfd-1df485e3a795", "indicator--893367a5-4ad5-4b8a-8d81-a3e20f8a6511", "indicator--db6eb2b0-e848-46d7-8f7c-c4e044f68415", "indicator--3d806f36-93f0-44d5-af42-c35d4d3300ad", "indicator--e1f75184-e668-43ef-a7aa-a9c3e99307eb", "indicator--373b35fc-e3fd-4de3-b363-a428191029a7", "indicator--ae6b95b4-c8f8-4335-ba0b-060b76a914bf", "indicator--9df87bba-ed21-45e8-b028-749381f7d850", "indicator--3b172889-33af-47ad-b0d3-906dcc87fa68", "indicator--efd1d2d0-1877-464f-9336-5ac0f0da09d0", "indicator--00cdf518-f67e-43a8-8d67-2f47d5f013c1", "indicator--a2d55b71-9d91-4f21-8dd6-7ea7bc297668", "indicator--43afaed9-63ef-4751-8482-828d6c4202ac", "indicator--78945510-11ce-472d-816f-c677322c5cb6", "indicator--f45c924a-9b7b-4f27-8a26-f392f34ff5ae", "indicator--daf5f42a-64be-4888-b38d-ba3b439ba646", "indicator--04ee5e5f-5709-4e08-bf0a-b14927414ecf", "indicator--fde0d60d-9f42-4685-b676-5f8f5846d069", "indicator--b7efb918-c2c9-42a8-b882-c8c2e2f02d70", "indicator--68048065-a93e-44d0-b263-36dd34f37b4e", "indicator--1ad17a0c-c47f-446d-9abe-2141931075c5", "indicator--a534d72c-b42e-4b0a-b14c-772030bd9780", "indicator--74bb9c47-cfe0-46f7-8163-aac38b25cb03", "indicator--ae9b593b-d07b-44bf-9ddb-fb846664ce3e", "indicator--d899c4c8-5aca-4dc8-9fd1-61703708d1de", "indicator--84c21f86-b7de-4bc6-8f0a-233375db2bb8", "indicator--3aa1d8cb-78ef-4001-bd16-f38568ed91fa", "indicator--596ad901-4427-48af-9cac-91202495689b", "indicator--6df61ff5-50ac-4fa3-b571-32752c3fea51", "indicator--39aaf050-1418-410f-bf60-56b898c58fe6", "indicator--1fd9e397-c6d1-4a29-bea9-eb7c1ea5c103", "indicator--67c3b57b-4704-4fd1-89d1-465e9ccb3013", "indicator--94d167e1-8c34-4e79-9beb-35e816c2e16d", "indicator--97e2c12b-0a7a-4c4d-8966-d86558854f95", "indicator--f5aaf53b-b412-4806-8d62-6d5b09b174a0", "indicator--7c967ec0-4aac-4936-b6fe-35f3e433633b", "indicator--b9d90bb7-b66d-4acf-9f55-a3d95c572389", "indicator--584fc37b-a7f5-4860-81be-64e4ffd5e38b", "indicator--5606c370-5442-4f75-8362-ceb0fb940d45", "indicator--1d595dde-b077-431a-b961-0ae30284ed1a", "indicator--7022c309-7efb-4d14-b88d-ef9592151af3", "indicator--77a4bcfe-0324-4845-b361-ef729b39351f", "indicator--9b4fb51b-2377-41a8-8392-a3c4a408d3e9", "indicator--0ada0829-fb89-41ee-913e-adbd4cfef420", "indicator--7b14f8f5-56cc-4d86-a983-48c6f2fa7d34", "indicator--88e72929-8c86-49ac-82b8-f74cb2f8a55b", "indicator--d65ee9f8-2d4f-435e-95a1-217242875f9d", "indicator--c92de750-9360-45f4-8bcf-c94fad0d7335", "indicator--bc84bc27-efc7-4473-b9cf-bce34fae8293", "indicator--da4d66a2-9137-4e31-aaa9-bf1798a242f5", "indicator--cec6ed28-eb76-4d39-8c66-21ca0090e522", "indicator--bbf2438c-f3f6-4426-88d2-a2061c7d7147", "indicator--5da9c551-a4d4-4555-bcea-52ef5800d157", "indicator--d41d51eb-5a02-4729-bbff-024960c59b5a", "indicator--4ae35587-843f-4f49-897c-05cf2fb481be", "indicator--739ec999-80a2-4b01-9f01-02a9565e2a56", "indicator--f2620d46-337e-4dae-969a-9297088f50bd", "indicator--6a9f5826-48f4-4114-a6d4-6730ada83077", "indicator--b8951d3a-0f35-4e97-8460-2c2b48570807", "indicator--9d810942-00f0-4420-a059-bfd8828d55ee", "indicator--18f65e10-1948-48cc-a175-c251e0707ec4", "indicator--273bde96-0caf-4275-a0c2-95e0e4e0c037", "indicator--c994ff9f-4d6c-41da-b4db-7a864def93b6", "indicator--a162b63f-e771-43fb-a814-99714a3c751c", "indicator--35fab9c1-777f-44cd-a8a4-252e343de76d", "indicator--bbe2a511-bddc-4f6a-9e56-fef02144a4fa", "indicator--87e89908-7d33-4229-8a39-bf39af403f6f", "indicator--f60919dc-906b-4108-937d-faab1752475e", "indicator--64859493-a91c-4d92-b115-e40eb1a49406", "indicator--e323ecb3-dd1b-4d0d-ac0b-6c716ac0439a", "indicator--71a7c2e5-1ef6-4da4-8bec-e88b9a9ec2d0", "indicator--1cba7e2e-0b97-454f-a69e-fbfd1d4455be", "indicator--491877f9-36d2-4ec1-96c6-0348abe2c855", "indicator--a5935fea-bbab-4ffc-8cd8-2fc193774688", "indicator--59a3f4a7-7177-4ab9-a6a9-323255f87b3d", "indicator--de55351c-bd5f-498e-b0ee-5fae98ea481d", "indicator--217e1c69-4d9f-485f-950a-e617a5c33539", "indicator--fd536386-3b94-44fb-b3d6-2c17c073c317", "indicator--f609fc47-748f-475c-9e6c-461f967ed4ad", "indicator--28099ce2-9f76-46a5-8367-967e0c4fd407", "indicator--19fe0c9c-7cb7-47a7-9bf4-e4047c9db5fb", "indicator--13033248-f7c4-45e2-8e24-3d6fa4cdeea3", "indicator--7be202ae-274b-4d0c-8484-5f3ed418166b", "indicator--5f51c48d-5203-449c-ab96-5bbc4e43d6ad", "indicator--455ed163-130a-4a30-887a-7a99fdc5d779", "indicator--c9d93131-9f1e-479c-9e33-6733c007a370", "indicator--28fff7e2-1335-42fe-b3fa-5a962e964470", "indicator--65ddacc5-07f3-4b73-9f9d-ab246799bde6", "indicator--492a714b-57fc-4cc5-b504-ba3712933769", "indicator--e1cc504a-538f-4649-9e15-782366328a95", "indicator--aa9b1b16-a45e-4e87-8032-bab54dee6bae", "indicator--15863596-e703-4c90-a8d1-f9cd7900c7fc", "indicator--d8f1e3bc-ade7-4ca4-8a6e-0a4d17125616", "indicator--6cfce75c-ba8f-4c63-8a92-618731ab50f0", "indicator--73c1d5e4-5902-4913-9088-152fe9c9dd44", "indicator--1891f52f-7306-4ff1-b440-2e4ce87d41b3", "indicator--7e5f1ded-b9ef-4730-8994-898382857cc8", "indicator--e471b244-dd82-444d-9abe-47737fdc3dc1", "indicator--e4c0399d-bece-420b-8905-767a68d92ef8", "indicator--c6d4028c-5094-4df7-b353-7a5d32609135", "indicator--7a0273b7-3fe6-4167-8e37-4bd832703099", "indicator--848e83e7-0017-4f04-9188-7ba1e1d33d19", "indicator--316b49b5-5679-45b6-8a70-b59901e4fc02", "indicator--3c2939d2-67f5-49b3-8f7c-6a3c3b0416d2", "indicator--c849309f-bad5-4eee-9695-c12504bec4cb", "indicator--1bc42baf-cc77-47fa-8305-28e8c8a400b7", "indicator--d1e4f269-7804-4e69-abbd-ac05487d7a7d", "indicator--0310986f-f8fc-489e-8cff-00a498d32277", "indicator--9b1bb965-b408-4faf-987d-81d84505a6c1", "indicator--c6ef8334-a28f-478e-b8b9-43604543ad43", "indicator--486dcf33-a33d-42c1-bf5b-c66928b971be", "indicator--242838b6-c5b8-4cdb-a265-65e1a5658486", "indicator--acc3482e-6557-4040-b1d0-1c026db2ec5c", "indicator--863b0fba-fae3-4fcc-ba94-105c4ff87efc", "indicator--3a58dd4a-7807-4a8a-ad75-7646534ce496", "indicator--72f40c7a-0e56-40d1-bfb0-584a6c9200bb", "indicator--b72a6746-0fec-4383-b1f2-5c8d04bdba56", "indicator--19626e8e-b631-40f6-9dec-072d7f86caba", "indicator--2ced43b5-803b-44e8-af4a-f52379beb9f8", "indicator--980a9446-1aa4-460c-9e2d-ce6be72eb4a8", "indicator--3c5d48a7-3172-4c24-b87f-aa1e381f3df5", "indicator--77224fab-095f-4602-86fd-355b4be213db", "indicator--90b7ee1e-bd3b-43b8-a086-157db7aaa6d5", "indicator--aa78045e-9b84-4dab-af46-0675388b83a8", "indicator--c8b62fa6-7fe4-4a2c-ae8d-707ec2367fd2", "indicator--f1bbe1b3-d6ea-4b75-816f-f68371868cf8", "indicator--25d1678b-1b6b-4465-896b-18ba7320dc4a", "indicator--11028f9c-99df-47e8-b84c-0728634d7abd", "indicator--2aac3e04-698c-4c47-b9cd-5a21dc1b38b5", "indicator--f1149b8a-f70e-4530-9448-11ed2f8e7d92", "indicator--d5197a36-f0b5-4ca9-8d1c-62e900e4bfda", "indicator--57b17b78-7292-42d9-8166-447a7d623546", "indicator--23adf21a-dc28-4d4c-be3a-59592eb3122a", "indicator--e93b611b-632e-4cf8-ba01-8ae2c5d0a7d7", "indicator--448f2254-a91b-4d67-a2d5-da84275c9e02", "indicator--a2a3076c-d024-4c14-9bef-f58a22f676ed", "indicator--7b797af5-ce3b-49f6-9b4d-485427e2342c", "indicator--ffcd88c5-a452-4e78-91a4-7a9f50b0c179", "indicator--82f7abca-9f89-427d-afa6-136df1b478af", "indicator--9c557ae9-470e-4435-96bf-90af8c7f476a", "indicator--21821d35-c76d-417f-bda5-c85848378a51", "indicator--6ee4ec94-f633-4d9e-b5e2-293bdc281010", "indicator--0b3c6240-954e-442f-9000-eb5fb62232c4", "indicator--db324964-0261-40d5-8b21-25bdad32db64", "indicator--18fd3d55-e91a-4d92-b04c-9e23063158da", "indicator--e2665906-de80-48bc-8b7a-1b600767e134", "indicator--baf43dd8-eec8-4c27-b08e-eda5a3aa568a", "indicator--669b28a5-802a-4f3d-a24e-ed5ddf84639e", "indicator--5cb87005-6d5e-450a-a027-1d0a186fc226", "indicator--38e0cf5e-6fd5-48f6-add5-e26edea1cc01", "indicator--54628dae-4313-4ee9-bbdb-c719667b4c57", "indicator--46bfd862-67bb-4b29-9443-1361f18c2c6c", "indicator--c51e79ff-1965-48c7-9b9a-b8747ec215de", "indicator--d15d2e92-26b6-4b4f-863d-4879a614ece5", "indicator--3ac6fe05-efe0-4557-b3f5-2898023a7242", "indicator--de0eb5aa-5ccd-47f3-a097-0da47cff5bdb", "indicator--b14a5261-d56c-4801-9a33-4e39b2b20d4f", "indicator--3cfce4af-4056-466f-b4ca-03ff4b1b99c5", "indicator--b21daa58-394b-4e09-9f3c-c41f8cd3c33d", "indicator--f3999028-32eb-40ad-8ced-465fcfdf2c60", "indicator--fd5f3cce-7690-47ca-be7a-466d2149c5a9", "indicator--f38c2c6a-7afe-44a4-9266-78b4d2827a09", "indicator--a6c30af4-3f2d-4596-876a-6d926c9d5297", "indicator--d1d32185-2ba9-4ca5-8c75-d552b11811bd", "indicator--18b505ba-2678-4222-8517-69c88f9033a2", "indicator--8a85653d-93bb-4e08-bf68-3bb7c8cdf109", "indicator--728bcfa1-5ff9-4b5c-ad7d-34cd48474d69", "indicator--795f0685-8e9c-4cd6-b551-db280882be21", "indicator--72bfb186-67bb-4e10-bc7d-384ef27746f4", "indicator--6a868802-30a4-4cbe-86ce-5bb0a4599471", "indicator--b2b0a5b1-ee80-453a-a7ea-9f4f9d03d5f5", "indicator--633df143-acc4-4e91-9d73-5d02c87fcc02", "indicator--97472b60-4fa7-4206-81bc-ef640323e8ca", "indicator--4730956d-7728-448d-b8fd-d69c2618cb5c", "indicator--93f53f71-f521-4d4d-935d-927b099f09e6", "indicator--4bc6009b-edfc-47b6-96d8-53f1678adfc9", "indicator--a2082dac-019a-46d3-9737-584f4a52142c", "indicator--a9848865-3cfd-4373-b8db-dfa677f9582d", "indicator--55ca52aa-b412-4898-90d0-f1702de77bd6", "indicator--b0f79404-4d75-49a9-a5f3-d86b43c8a42e", "indicator--092e0702-578b-4504-b39d-8479fdd329d9", "indicator--089e3d97-c13e-4ef8-8ae3-46b337c40ebb", "indicator--b9e59b6b-7173-43ac-85ea-5cf74a326cf4", "indicator--cac1beb6-eae7-4da9-9eea-e15e3fff5648", "indicator--d27d5cd4-2b97-4c2a-865c-d3f5bb7eb9d4", "indicator--aa661531-2835-425f-8da3-4a8f92cf9b98", "indicator--a2f96990-8f79-46f2-a428-344adfc74ebc", "indicator--8d79adcf-5c23-4f88-9abe-721c32617966", "indicator--a8ed82fd-054a-4a35-9a93-3ef2928a5995", "indicator--b6061459-abf0-4e9b-83df-35f0acc57bbf", "indicator--02dbc8a7-8ab1-47e3-8645-0949c22e6f0e", "indicator--842c16de-55c7-4a56-a0a4-16a475787098", "indicator--119f4fd9-047d-4b1b-a5f5-5f7c398796be", "indicator--fcca90b2-d8cd-46b4-a660-b3c286e75f26", "indicator--ad21a898-9807-4942-b1fc-c996930f0334", "indicator--7e4cffae-c178-4bcc-ac31-4dcc83d359ac", "indicator--5ff6db20-1558-4ff6-b1df-a12be5bf0e84", "indicator--f7564c0f-a97f-40e7-8661-7006919a689c", "indicator--9f53d74b-367f-461e-90cc-7c8cf9820195", "indicator--e7aa4bad-9b89-4eac-9d52-ce65782dd7b7", "indicator--3dc08813-047f-4e87-b0f2-1f36ba75940d", "indicator--7112d611-7fb5-4341-91f7-4a9d53e08144", "indicator--09ef9369-45ea-4680-8a03-5141a3079d91", "indicator--2cbfb287-2c38-459c-b0b2-49b7923f5357", "indicator--f504515a-d6a1-49d2-bfff-084bc32aa1bf", "indicator--14b72333-bf1e-4915-91dc-3424cd8fe1b7", "indicator--99e5f453-1095-42fd-9ab1-f4ab4fbaa3e3", "indicator--dabb96bc-e5ba-406f-9b55-eec9f314c9b0", "indicator--9b063b91-7322-4f5e-8eff-7cb1cedfb98a", "indicator--d1bc504b-0618-4f4d-ba5e-a48b2e177783", "indicator--74c87569-a078-412e-a4d7-3ff59a4b0256", "indicator--b0248872-159e-4f62-a822-36cd7bc1a027", "indicator--73a2db75-ff0c-4e01-bfab-c7e759087f63", "indicator--544417d9-30ca-4193-91e8-c9b8bfbceb35", "indicator--09e2aea2-5abf-46bf-8b02-76abe70f28fb", "indicator--977c3442-f559-4610-b3fa-1041f86c1490", "indicator--9ecaeab3-7b2a-4234-986e-678433665e4e", "indicator--1b178a7b-398c-4c32-822c-21922be70d8e", "indicator--e7a7057b-fb0c-429f-9e27-ea3566a4f49d", "indicator--dfc7914e-c37c-431a-8e9d-144ac041ac70", "indicator--ed89ff5b-cff6-4461-ad29-4ea38e0559a3", "indicator--da5a8e0d-9dc0-4552-b681-8299dc780975", "indicator--110a4c2b-d7af-4a46-b561-c0e565c02b46", "indicator--5930ba45-9afa-4ad9-b5ef-b8724c49e0f7", "indicator--d55f3a66-31f0-45ab-bfc4-6a0b50ec2b89", "indicator--bf6d32aa-50e7-4f95-88ff-c6c3d4e45dcb", "indicator--3be6f99b-5c64-4c4b-b4f6-dd2fed3bc02b", "indicator--c38d02fe-5bc6-4897-bef5-cd4c1025e4b1", "indicator--3b4b90d0-8c36-4062-bfe8-8bde2cb9e121", "indicator--c2c5891d-b375-4140-8cc5-d8da0bf5b30c", "indicator--fd727b49-f3a3-4078-8f39-efe1cca566e4", "indicator--ddc01463-a868-4701-84ee-3e798aa2db38", "indicator--e495b9c8-8fe1-4971-9eea-2420d91e5bb7", "indicator--140b60af-4deb-4e91-8905-fdc7ed4a0730", "indicator--6c18604c-7126-4f26-b4f6-8fe15725883a", "indicator--60c862d5-0988-4291-8723-70de46e69e9e", "indicator--65167829-94c0-47e5-81c4-cfff593b7081", "indicator--95b888b7-bf9c-469e-9569-bd5c8aaa03cb", "indicator--fcce812d-8984-406b-b6a3-db7000bf2e50", "indicator--f4b0d3a8-8264-4faf-91a3-039d642cea9c", "indicator--3ff94f05-0ee6-45ce-9614-a0bb9e2859e9", "indicator--97cd1ac7-544b-43b6-a55b-deeb73f15750", "indicator--3c0d30fd-e949-4fe1-92e5-19687113f766", "indicator--e86052b7-5d9a-411a-9b10-7814b3614b0b", "indicator--ea502c5a-58b7-439b-a051-b72d1f65d6b1", "indicator--40ae951c-70d8-4d01-81b4-a3e61e7b4728", "indicator--c491f306-1a4f-4ee1-9a50-e901db2665b2", "indicator--676506a3-9b08-4885-aed2-4dc87e52e5ad", "indicator--ce59eabf-ebf9-4a51-a9cb-ee751719747c", "indicator--ce7aab1d-3e79-4dee-b31c-a77a904a489e", "indicator--10e610ee-226b-4362-bd85-88ff57999c74", "indicator--495a83ff-25af-46d3-ac21-9fb26463464e", "indicator--ec8a1c51-13c8-46e9-b182-5789407f229c", "indicator--1b9d9baa-5f2f-4d3b-a763-3e90b5a7d19c", "indicator--fae4fcc8-d240-47e7-a5ff-f5f7697f3b2d", "indicator--5b1fdca7-c83c-40ee-832b-8d2aae029eda", "indicator--acc2a606-7b10-40c9-8be9-8ab576a8d448", "indicator--3761019e-57b7-4d56-8c26-ebf0211bf6ef", "indicator--0fdbf9c6-6f14-4cb6-9908-1828f44efa36", "indicator--17bd98fa-7383-43d1-92a4-547fc6e56bb0", "indicator--db0dfcac-a458-428c-9c9c-c59e0c61a5c6", "indicator--e866749e-b58a-4644-b7f1-34ccd700be8f", "indicator--ce102640-1d3f-4218-8c7c-09e955aefac7", "indicator--92c32e2d-2526-45ae-bd5c-51bd1d3507aa", "indicator--dfd1a96b-2548-44cd-b11b-443212382563", "indicator--a77ffc04-e7d3-47f8-b569-9145d23bbe94", "indicator--9c842023-8552-4f7d-bca8-95d99c068ecb", "indicator--4329f12b-87c7-44f9-aae8-66bf40a8b01c", "indicator--d2848599-5fdb-47a6-b2db-fdde2ee1dee7", "indicator--4fdb5758-0ba4-49c2-94c9-42f9b15ded00", "indicator--1465fbcc-c486-4854-9ebc-9e7241dd489f", "indicator--e8f041f4-a682-4553-a82e-639725b66e31", "indicator--a6d5c2d6-14c9-495d-b128-2a7b914c5add", "indicator--5f5f317f-17e3-4749-bdb6-bff2c14992c0", "indicator--3e092d65-2953-4f2c-9656-a520fb72d93c", "indicator--d49e7b44-271f-4ff3-8e56-2679c9140f20", "indicator--4f69c4fd-7db5-45fa-b82a-9e57288f1789", "indicator--d974cb7c-42cb-4cb7-9807-9eeb43029ca1", "indicator--1ff71f2c-5979-4c58-8648-c4595ffec274", "indicator--74e4b42b-ff8c-4b65-aee1-a92ea0becbbf", "indicator--a029329e-24b0-43ca-965d-656f35b616ac", "indicator--e4cd5d5c-bfd2-4948-988b-3c514613724b", "indicator--7b942100-a119-47eb-9d07-8e4034da1ba0", "indicator--c31d639d-3298-4445-abe5-a00013f1dc9e", "indicator--5b26ed9e-b06d-486a-8936-c8f3f5203139", "indicator--c931a257-e078-4f34-b286-182879606aa6", "indicator--d2c3219a-b50d-4f89-baa5-27b7b6ff2ed6", "indicator--e453d509-2424-4522-b8b0-49eca07eeb67", "indicator--0b1ee60c-1c23-46b5-9cef-07d1b8c732b4", "indicator--2dd23c61-3e86-4cdd-85d1-2f238274b8c1", "indicator--381197c8-9051-4532-9205-db7fa694a597", "indicator--e1256d60-0dd2-40a9-8283-d1e7621bf873", "indicator--1ba75d91-e0fc-481d-a01f-44290ed51041", "indicator--03452abe-3c7f-4936-9464-37aa56ca1913", "indicator--9878e21b-87f3-4b91-bde0-9b949076d86a", "indicator--1486719a-577b-48b6-bb01-c3e5fcedfcd1", "indicator--63f01474-7586-48b6-9910-d103c8a00e3b", "indicator--0d8f035a-c51c-4e25-823e-5c3373241c0f", "indicator--a20cf377-3574-4467-9a9a-c65eda378819", "indicator--c1dc17f4-390c-4ade-b46d-c1734cf60e71", "indicator--3d5002f4-b1b5-4588-845e-cdf9e6734e81", "indicator--2289859d-fb68-45ad-835e-12cbe2662aa4", "indicator--4816c777-aabb-4c3a-b661-70fa355ec291", "indicator--24300977-3af7-438d-97b7-e2a0b3a7f98a", "indicator--9d260c4e-be8a-483e-9fe1-ac58249ef5b0", "indicator--95ec6832-45b4-4052-9a7b-3ae672a4d9dc", "indicator--10daf552-e5c3-4c21-96ed-6c371c23261e", "indicator--0db91094-361c-462e-af7f-8b0bf4663241", "indicator--eb18da26-e2e2-4878-b687-89ecbbf69424", "indicator--c75670c1-535d-40e5-b3ad-9fa131680c99", "indicator--f2da00fb-3a8f-431f-9c33-9cfff291dbc3", "indicator--78dc06ab-fd62-4868-a00d-0bdeb192cad3", "indicator--7d5c8295-1694-4a16-b69a-a3795245d123", "indicator--23e42c75-a773-4b8e-bf2c-6da07bc5286e", "indicator--c5eca80d-b09d-4afc-8a51-44582194048a", "indicator--fb9cd551-fda0-4ca0-883c-33acf353d8ba", "indicator--459a27a7-e9ed-476a-bb86-5ca59239eb5c", "indicator--2ea771e1-8a07-4106-b91a-7c990ed3fc8d", "indicator--d7d86def-a4f9-43f3-be2a-995b439f2c30", "indicator--7533450a-f3c5-49d2-b1e0-ef4767f16c20", "indicator--127b681d-aa2f-48bf-b77b-b0259514c4d9", "indicator--ec34a934-027c-4277-8331-bbbc02097c40", "indicator--649041d1-af57-4067-89ee-eeb5d1725fad", "indicator--18e876ef-56a8-40e8-a80b-caecb8a0516f", "indicator--92a937d1-7d86-4faf-9fed-936ee40f243a", "indicator--3538dfd2-4fc6-4bf1-bde4-08199d964eab", "indicator--1344ed91-650a-4923-ae12-aeff8bcd9fbb", "indicator--8151a388-e5cc-470d-8f8d-e6ed5a45b5a6", "indicator--585a903e-4372-46b2-b247-457feae45e6c", "indicator--03ecbe97-e221-4647-8b45-08bb72eff2cb", "indicator--d0a54f51-8e7b-4f3f-a6e8-66153d9528f1", "indicator--8de97169-19dc-49fe-aa6a-c20342d1ebb2", "indicator--7f3caa19-c2cb-4352-b2b5-c9ed0deca097", "indicator--55d6fcc8-7b09-49fd-a6cf-3ce555def260", "indicator--a8697f87-4970-477f-a70b-d383c3200a6e", "indicator--030cf547-28e9-45d9-8f56-a275af4906fa", "indicator--e914c7b2-521e-40fc-bdce-c0259a72d0d2", "indicator--bfdc6437-6ea1-43e6-a18e-1087b63ef700", "indicator--f574d692-a1da-43cf-84c5-344abd5eb328", "indicator--35c8b801-ef43-4c63-8284-6b6d12f25bce", "indicator--4c688de3-211b-46c7-b15f-09147a623e22", "indicator--5ea59b29-d687-4be9-bcf8-5a3cab259be3", "indicator--661a3cdc-40ed-4a0c-b488-b8cc1a8a25c8", "indicator--969268a4-8b12-4c57-aee3-811e930581df", "indicator--44b353f4-871f-47ca-ac09-9b747eeb34b0", "indicator--9e411fbc-fd00-4291-a117-4c475e75d0c5", "indicator--f29b33a2-ca05-4377-91d6-cb9a5cc19130", "indicator--5711acf8-fb1b-4f97-8147-8ff6a4827080", "indicator--d98361d9-3eda-472e-a5f5-aa5d84087b96", "indicator--7a2d4482-5141-44bb-955c-6d7c3c59f44b", "indicator--af22a5e3-bca4-4673-9812-5bd4d1791328", "indicator--e3e8c086-2837-4eec-81d7-7a31b8c8127a", "indicator--a5170690-3f1a-47ad-8cb3-18468ad02c2c", "indicator--c0894fb4-b880-4aef-b3a5-294724f7b851", "indicator--bc9a9425-6c89-458a-a468-99a4361d3d42", "indicator--ac67ac32-16d1-4497-bd83-e5a33da91662", "indicator--8888ddd3-ca4a-4d75-a1b5-5a131f6ae47f", "indicator--2c413654-87fe-4fc6-bcbb-f8acd3d5058a", "indicator--cb6cfa66-0958-4406-acfc-6d83a68349a1", "indicator--fb1de1a2-bb37-48f9-b4fc-8d71300bd4c5", "indicator--d9131c57-5686-4eb8-91ad-5990596ab6ed", "indicator--8dcd2847-7ae5-422d-924e-1dd5da472b69", "indicator--b3587758-2843-4f56-bcb9-0b47728fd741", "indicator--ff0f727d-8184-48df-8d4a-9a6ef89e134e", "indicator--aa9faadc-1ded-47fe-8c07-c102a0be7ddf", "indicator--94e97070-7768-435f-b439-37c58c1564ea", "indicator--b35d241a-f9eb-463a-b6c1-716eb3bc7471", "indicator--d70c447b-e420-4308-847a-04125c485350", "indicator--4df8d95c-65d2-4d7f-aedb-cfc8f1bd7c9a", "indicator--5cf2e5c7-0a0a-4264-9c68-eb5cc364d16d", "indicator--941cd733-0a09-4b0d-81dd-bf132d6dc66f", "indicator--274eeecd-857c-4f72-957f-e711dda46f51", "indicator--472aa061-a940-4a70-911d-46069b55706f", "indicator--3ed07cca-291a-492f-8ca6-af467d726711", "indicator--9b97666b-0264-4f82-9416-a5eecdfe2177", "indicator--5e06242c-0a90-4f1a-a4f3-38803da22e3b", "indicator--9901aa44-90a9-452a-900a-b2ca60dc52e2", "indicator--33a198e0-1fd5-43de-805a-8b33746b06f2", "indicator--eabc0b70-46ff-40fe-be94-b1ac8d28c7cf", "indicator--2e66c979-efc4-4f5c-8765-b3ffb1d8e55a", "indicator--9aa87faa-ac69-4fc2-b765-37c86a908e44", "indicator--827cc233-107b-4a38-83a9-feb1ebb0d1d0", "indicator--8a7fe96a-f798-4ff3-87b0-4a0b4c0eb06b", "indicator--230ef21d-0a97-4d37-82ad-f86e03c3bb68", "indicator--c3d1ff1d-a60f-44cd-abfd-98f80c86e535", "indicator--f5c5f55e-32c4-4c14-a8ff-30ed2abd5824", "indicator--4069e8af-ecc3-4c21-85c3-77eae15d5b2e", "indicator--c917bf5e-e554-449d-814d-9e8376389445", "indicator--733739b0-ce11-4265-b34a-be32643768b4", "indicator--94083b9b-01f6-45c0-aefa-922a03d790ed", "indicator--ad982fb0-efd7-4f91-bc28-f8ebf85b6051", "indicator--3880a3fe-43bb-4c5e-97f9-01acb20d7f6a", "indicator--e369a45e-17a9-485e-8e61-5ab82270ddc1", "indicator--0f96e8ba-2967-4352-a865-e80fc2b9e1b0", "indicator--662c0fbf-7f39-482a-a4f5-b424902b6b50", "indicator--8a967c49-2481-4755-95bc-53241d6ba00c", "indicator--564ca862-441c-43a8-819e-deead0de9df3", "indicator--f9db7233-6e29-4d61-ac3f-88403c4079b0", "indicator--c90c30ab-e3a9-42a2-ace9-f15a49110765", "indicator--6b8af4ab-8298-4bb9-af19-35449e8a4025", "indicator--58115acb-f7ec-444a-846e-58a427f85385", "indicator--c09e7de4-e7bd-4960-b9df-27dde25b9e23", "indicator--a7326f9b-5af0-40d7-ad3e-278c0b1a35fe", "indicator--fd2c2c0f-d6a7-4566-9e4a-9eb37c64efd2", "indicator--92ad6ceb-2c0c-43cb-adec-31aef0953a95", "indicator--43741342-ae3d-43a0-a725-733b807b9889", "indicator--1cfac06d-41ac-4d54-bd1f-6c85f8038d5b", "indicator--02d98015-282a-4288-ab97-80c6cd649f14", "indicator--1c951f78-4d2c-4162-914d-e07598f9e954", "indicator--0422d07d-b221-40ea-9474-4ee8ea5b6c2d", "indicator--89250b31-6b06-482e-9bae-e211864fbda4", "indicator--0e76c580-b21d-47b4-a5f8-0f9299fe579b", "indicator--c06f7dbc-a001-427e-b98d-b47a7e7fd3d5", "indicator--2aab92f2-7cfb-4f74-98d8-346e68094338", "indicator--690f6927-20bf-4add-9211-fc05685af1cb", "indicator--a9f735f6-9a63-4818-989d-ff2272af754c", "indicator--f3155282-2b8e-4c3e-bc0f-83616d4a7eb3", "indicator--ccc6e02e-74a6-44f1-a0f9-828e76494c96", "indicator--60bc3df5-d70a-428f-b2cb-e8a46586a916", "indicator--cb389581-6e43-4acd-b399-ae14b5ccc641", "indicator--c06bd808-6dea-444b-9b2a-9937f9c525fd", "indicator--b3c0aa59-95a7-4fea-9301-46301c9f53f8", "indicator--80d5b2c1-936a-45b0-9dcc-027a51d9ba41", "indicator--233f472d-beaa-428c-a42a-42ddb7ae16f2", "indicator--d0836f7a-2677-4c00-b028-4aef356b7f8f", "indicator--2610eee7-a63c-4574-92c3-23368786703c", "indicator--5bd6c6a5-b295-4a17-b9a9-317943ce46f3", "indicator--af4bd3e5-0aa1-4b40-8c48-40aacf7e6462", "indicator--fe411784-f374-43f6-af7c-760445f498ad", "indicator--8f3db3da-11f4-4280-8761-6e0c5e80b78f", "indicator--bf282922-3c63-4d88-baa5-daa01d97de75", "indicator--478f9912-f5ea-4cb6-a47e-f7e34f645247", "indicator--1e76835f-6582-4665-af7c-bc0bb10e2f47", "indicator--dafa1ef9-1271-4aa8-9c8a-b1cdde97fca6", "indicator--c4cd7cd2-e032-4c56-bfcf-d847fa9a8ff6", "indicator--b11943aa-45a6-4c4a-8f79-dd608c6711d2", "indicator--171ead1a-f374-48e3-b53e-0a8a3c5d3bae", "indicator--37576f62-1263-4aac-b312-a5c68ae74ac5", "indicator--f660fd4d-1dde-42f2-8dd0-f81e947ce0cb", "indicator--1bd9561d-e30d-4639-a005-bd1e13eca2ca", "indicator--61763186-943b-4357-b9e7-cb1ba89b340a", "indicator--2f651535-7f87-4d83-b21f-0b3617d23c46", "indicator--ed88dc7f-f773-4eea-9ffa-6dd9d492ad25", "indicator--356f1f2a-b441-4b09-ad4e-8a914e3b08e2", "indicator--7db53bc0-7090-4418-8c6e-4d28220e9997", "indicator--66bcb52e-c437-47d9-9ec9-c3523c50dd46", "indicator--1d0dc596-ad45-4e93-b80e-536a5292454d", "indicator--6df800ca-d91f-4bd9-957e-3254afee23d9", "indicator--e2b1f58d-e448-4339-aae9-ff7b7ba38365", "indicator--5e624d4d-35fe-438c-a111-8207e3d72c07", "indicator--66840794-0b2b-4bae-ba48-69dde2f6e361", "indicator--39f4e24c-cc8d-4f0f-adb5-07efca7ff39e", "indicator--6ac9c3e9-9d15-4b25-b315-ae5bd466f6c2", "indicator--bce1ba53-2728-4aa0-96ca-de591a665567", "indicator--ec8d1af3-fcee-4802-816d-15040b116043", "indicator--24adc8c0-bee6-42b4-aaf8-44f22c1a1f3e", "indicator--fb470d42-eccc-4b85-80b6-8eff10a5619e", "indicator--d41ff6d7-3ba5-464b-b3f1-0093c261a86e", "indicator--75492521-29ce-4f1d-ac79-00d0eb72a2f8", "indicator--80e059af-3bd5-4ccd-9f66-aa3d55a92a36", "indicator--19beeb34-3ff4-4fb8-bdbc-51dbdc667f08", "indicator--1336efcf-829c-4736-ad39-55e5b6347ca7", "indicator--54768b6d-6441-4da1-bbcd-59cd437e3749", "indicator--e22b2827-9067-45ab-989e-f4986cdc4cba", "indicator--ab200796-4176-48b0-838c-fc6833fac278", "indicator--86e58642-4321-4860-a70d-a641db90b1be", "indicator--fc0825bf-5cb5-42fe-b2ef-22506869bf7a", "indicator--438d2e8b-595a-4193-a32a-81a86a4976fa", "indicator--f64921b8-020d-4663-918a-ec141304c863", "indicator--1195ce8c-f2b7-4cc3-836a-fa4db84c4e8d", "indicator--c2afb5c5-1817-43ce-999b-b913459c732a", "indicator--cdca7f8e-ab42-43a8-a0a3-b8dafe47a276", "indicator--1b60368c-0605-464c-81d9-d428c4538164", "indicator--0e692c88-059e-43b8-a45c-78c69541caad", "indicator--427d36d8-9702-494d-b91e-223ad5b852ae", "indicator--fa2f5434-6499-4fe3-8a83-2a00e4607cad", "indicator--b87496fb-5fe7-48ec-8684-9c280655dc3f", "indicator--04b4d279-7e8c-4571-936f-2f034f05b0f4", "indicator--1bd26cae-ab84-44ea-9fa2-324946cba1e6", "indicator--525f9ad1-f9c1-439b-847d-3086fd446347", "indicator--cdd09288-d47e-4da6-8a46-53ef92881f65", "indicator--81ecf394-b985-4484-8b0c-6fb037a72435", "indicator--924acb20-4a8d-4d0a-a80a-9c882651036c", "indicator--efcc3c60-7857-4c4d-a8da-6a1fd627c619", "indicator--45a96cc6-829e-43ca-bd8a-8fc48ecb72ff", "indicator--c59163e5-31cb-4019-84e0-2e2da00f247e", "indicator--066c0eb1-0787-4b05-ade6-8fdab4ccc0b5", "indicator--637f869a-ae46-4789-a1ef-14ce65a36f18", "indicator--64816eee-b00e-47de-aacd-cb7ff6da06dd", "indicator--73fa071a-1296-475f-8992-c759f1ba2655", "indicator--28398bfb-a2c9-4019-806a-14a7b64b26b2", "indicator--918c7116-fb0c-4b27-9a1d-679650daeb23", "indicator--556f831c-081d-493a-b4e3-e13ebfa0fe6c", "indicator--2b490af6-9c33-404d-ada7-9510919c7a82", "indicator--43f8f971-5bd9-44d1-a1fa-3ca1ed217f86", "indicator--70dfa750-fe24-4f46-88c5-3c1d65b9f9df", "indicator--edf181d3-9e77-4256-8504-f060b7069086", "indicator--35c139ad-7eee-4096-9cac-5e0bc29b0eb3", "indicator--dba2caf7-0118-411a-85ea-637167730532", "indicator--96eb194a-6eb6-4161-8721-00113f410cd5", "indicator--a004dd24-3ae4-4760-85c9-8321d06a1b7b", "indicator--36445a5c-c289-477c-8ca1-0b3b11aca6c5", "indicator--b52a4c01-3463-433e-8b75-ec37fc6db81a", "indicator--9ac7955e-f771-464a-8e10-6ea97f40a9f8", "indicator--b4e8d241-bde3-454f-b75e-c97f4314dd03", "indicator--7700f19c-3257-4796-9b01-5713a7449330", "indicator--b75704a2-3284-4d58-84b2-100cc2358fba", "indicator--48ddcccc-d0be-4667-9e82-9de3e5ca8ebc", "indicator--3977aa9d-0a68-4eb2-a738-eb60c085df69", "indicator--363e43e9-bb9b-4ba0-9d40-6c281dd53475", "indicator--105cc083-b797-42ec-bfc0-ffb598f8255a", "indicator--54eae058-cdc2-49f3-a684-d5ecd23e25e3", "indicator--99cffb2f-e754-4d0c-9352-5443c4620289", "indicator--e7fc57ff-94d7-42cc-94eb-169a6f7b2fbc", "indicator--6acc33e7-2f4c-46ca-948d-da9d2148c036", "indicator--5a05c7c8-e9c6-47f8-b69a-883541c17735", "indicator--6243e0b9-b7d9-4620-bf3c-056d9282c77a", "indicator--6fdc023b-b813-4255-ba7b-f25471ffd35e", "indicator--b9814048-4302-4b5d-866c-a3832ffa8cd1", "indicator--ca66d363-86c6-4739-bf99-d4dc0c154942", "indicator--d4c803f4-ea27-47df-8fc8-a1d38234d6b2", "indicator--a8cf5c96-5dc1-4ace-8ae4-d4df8164a1ec", "indicator--e69ee9c4-2a65-4da4-b43b-f6e9ae8054af", "indicator--6e6a9c29-87a2-4517-a910-6c1b11ac5fb1", "indicator--f8e500b5-8e33-44f9-a35e-ba44044762f7", "indicator--d2383c62-f463-4a4f-9a7b-d839f659f0fc", "indicator--a13ef235-5f72-4f51-a859-90544ceb7da8", "indicator--6f7b322d-3e05-4716-86b9-ee0e7e67a875", "indicator--43a15170-365b-4b37-a6ad-62c62fa02197", "indicator--4b589feb-b328-4903-bea5-e275cb69fcdf", "indicator--c688ac89-8f64-401c-b996-dbbff12584ee", "indicator--8b19139d-cf24-4320-8db1-425beaee2f12", "indicator--1c341cdb-2ef2-4560-9e59-7cc6c2a65cef", "indicator--33e6925d-135c-4f99-9f92-96987eb0d1b7", "indicator--9fab301d-66e5-4da6-98b7-d8010a36921b", "indicator--956681b2-f64b-485b-9bd3-b9e4d699e6f4", "indicator--e7d86b5f-50d8-4d5d-b21e-97e26e58cc7a", "indicator--875bfb1e-50e0-456e-a224-ce223f0bc884", "indicator--aebe0334-a890-4058-a7a6-c51072a53704", "indicator--773c1a18-20d0-4e03-b37d-94ec6921c830", "indicator--0f79206d-6330-4562-9bcc-2dadf1bfec0d", "indicator--39f6c4fc-246c-463c-bde4-7cc5af9179b2", "indicator--a4a27abd-c629-4d7c-8ed6-6490615877aa", "indicator--ea2e046c-c9dc-4118-9bb6-ba3d567c7515", "indicator--8a122806-7280-4859-aa91-46841be94b58", "indicator--480b997a-16de-4fe5-a9ad-f7cbbfa8d211", "indicator--5abfcb5c-c981-40b5-afa0-768bdb2dcc2d", "indicator--97efd8c5-f21f-4189-9eb6-f6403281e226", "indicator--0c27bbd0-4210-4fc6-a946-95ca92b0cfc3", "indicator--bc89fec2-dee8-46e4-8bdc-4da8309714c4", "indicator--7d182c08-9aaf-4b36-ba6d-52b5141f8c40", "indicator--c05a19df-5d01-4042-8e0f-301504c940e7", "indicator--9066ba68-b781-4cc0-b3bb-623904c25cde", "indicator--40daa900-f3bf-455f-abd1-bafc834a5052", "indicator--b7a0467e-51bb-4015-850d-2c5a92f66d4e", "indicator--a8e8f6a7-cb29-4cff-8ace-5ef9184789a7", "indicator--91a27c41-e988-4dac-9938-3d40de2831e1", "indicator--4d05c86f-a598-49bb-be4e-e253ba1036e8", "indicator--fe338d57-e029-443b-9edc-acb8dd96f988", "indicator--18cbfea5-1439-40d5-af73-61c5f93703a4", "indicator--5cafe401-4ccc-4c0b-8386-eba919bf3e9e", "indicator--c11fdf62-4e09-4400-8887-3a15e3ee2368", "indicator--2e0aac97-dc9a-4437-99f1-665bd00475c0", "indicator--bf2e00c6-9fdb-4793-8300-f8b652a3f952", "indicator--7db877fa-a1c5-40fb-b5e1-09ce03af93a3", "indicator--65bae6fe-cb2e-42ae-b9c8-873dd6c2b887", "indicator--e3f7edbc-d79b-47e2-ac3d-5287c6597280", "indicator--d44f5b73-f9a8-48c0-a0c4-8c4adaaa7d72", "indicator--7fb7b457-793d-42a6-a33f-6dfd81c4ec2f", "indicator--70e442aa-e67f-4a40-8b28-aa3bd9af08d1", "indicator--bfb7206c-c49f-4ff8-a017-5acbcd2e2399", "indicator--0f0857ee-a863-45a1-8d9b-c0e6cbaa77e9", "indicator--fe604ac9-c5c9-4ce3-9ef4-44f4cb72c286", "indicator--e14b6b7b-d812-4f77-a1d3-07ac6d8c3b9f", "indicator--e3a90741-6b22-491c-b88f-e3ef9094f239", "indicator--4ae4a3f2-b2d0-487b-a9fb-c2e5efcdd941", "indicator--21074011-ee56-4f79-ad38-ffaf4a202448", "indicator--d59b1f2e-7bf5-42ec-8550-d960d0dcf5ac", "indicator--0b7804dc-ac7b-427e-91f0-f7e958603c56", "indicator--d989854d-3781-4db1-acb7-d20f2f4f87ce", "indicator--366d4d20-070e-456a-a52d-ee945dcebf02", "indicator--c270597f-96b6-4f05-a8f2-92bf2cd5facd", "indicator--3598e0ad-7b33-4197-906d-995e9d41016a", "indicator--de1c7824-ffe2-4886-8d99-d551a7a81edd", "indicator--d6953b7e-ef6f-4ffd-8a52-7a1bbe7a53d1", "indicator--58c854c2-d864-4d0c-a12f-798d778ac865", "indicator--1fc40c5c-428d-4439-80a9-42442748dd42", "indicator--cd7c239a-0d4c-4eb8-8911-3dcdbf08a3fa", "indicator--827bc28e-cb1a-481f-ada0-a5f0ac5d5f7c", "indicator--68060501-fedb-4f48-bb3e-757e06088128", "indicator--11d8a0de-6a2d-4dff-b5ff-1fc5475d976a", "indicator--31e9db6f-5599-4101-8f0e-900ff22ef44a", "indicator--2268df4b-6586-472c-98fa-7ceff7bc13e7", "indicator--941720a2-9eb3-42e2-8c36-5fdeadad73e7", "indicator--55a4d066-95e7-45e5-8613-2d026b5c215a", "indicator--c913eb72-b987-427c-ac49-9a1577168b7b", "indicator--f58e1b12-6e57-4eb7-8435-0bd60318748c", "indicator--614867a2-38a5-4f88-8cdb-60d847a4e650", "indicator--b338c187-a71b-4455-8949-1bcf269d4508", "indicator--91df6cd0-be00-44f0-af83-e6b34d173fb1", "indicator--b693be3a-5b67-4846-9094-34eb59426f18", "indicator--9da1799a-b06b-488f-9a93-98d05fde3bef", "indicator--f1ca42f9-b6d3-490a-adc2-bfae095ff43a", "indicator--e0eac88e-2720-4086-9ae2-960a7e420b7a", "indicator--f3217f4f-c47c-429d-bee9-21b5f7a1074c", "indicator--a6a50631-4a3f-4e60-8562-a7e184faa4bd", "indicator--fb58c679-4eba-4e0d-a5b9-36a41baefa09", "indicator--b6f799e1-c2af-4562-9af2-2d88c406a8a8", "indicator--ac6769bf-d2bb-422a-97e3-dc80f547a082", "indicator--6d419d4e-be94-4498-b1b5-2f45a5fd8586", "indicator--e497c7a1-ccfe-4827-8c1a-57ddeebe8eff", "indicator--944ec33f-86c7-4ba4-95ff-da1cded3d939", "indicator--469d57aa-6091-49a7-bece-c98bdad7fc5a", "indicator--b8ab4884-7c78-4584-b369-96f5c4213d78", "indicator--75007cc3-a711-482c-b806-2848a44542d9", "indicator--4b5e4451-f5a4-447a-b1f9-166a56d56c26", "indicator--fd5af8ff-0f36-40b6-aeaa-dbbd796f64b3", "indicator--62b40d9f-f113-434a-88dd-d2325d169172", "indicator--f5bd7d7f-46c1-428d-b775-8649408ce5de", "indicator--d7d0ca73-35c4-485b-bc50-d9d40b5737aa", "indicator--3c1aa38c-c146-4b8e-9502-8b0a9f2f270c", "indicator--d8cfe9f2-6ff6-47c3-a2a7-79a84b3d354e", "indicator--3a431478-eff6-4bd4-a02c-797d2d43aab5", "indicator--5c52231e-0aae-4a7c-81d6-bf8e6dfb45f2", "indicator--499ee05c-870b-471d-8544-939c2279a558", "indicator--af1ae233-a3b4-49ae-948c-eef5d6b2ccb4", "indicator--391fb2c6-1f50-43de-a87c-ad7d4c0e74d6", "indicator--a64d63da-e75a-410b-912a-b62a687cc2ea", "indicator--091f6e39-fccf-423e-b1bb-3ca5e2b168fa", "indicator--e8cc50cb-4c35-422d-aced-fd8dc1c51918", "indicator--c0814e70-3609-4615-b262-4dddbd88df2d", "indicator--b6bf8775-7ed9-46b2-a381-5879105d229b", "indicator--a8bcb04e-bd1c-434d-a15b-5c5807df943c", "indicator--62520430-f46d-4eb5-90e4-5232cb0dac70", "indicator--86078214-79fd-4c38-b783-d380a39b3072", "indicator--9e46a3e3-90ac-4940-aa5d-a92f1a12bdda", "indicator--04135ce5-8148-4d11-a8c8-84e90e2cf049", "indicator--3da79180-d885-4312-8dcc-338df1787011", "indicator--c1c015c9-a73d-4064-8a89-e2e4547bd7e6", "indicator--09d0aeb7-445b-41f3-a433-f76c01d56e3f", "indicator--e54909cb-ad59-4e7a-bcfa-29d086b898ef", "indicator--77272e36-f603-4268-b216-411d10755ff4", "indicator--80216b20-28c1-4944-a551-dacad5ea902b", "indicator--9abc72a0-f8aa-43b3-8b1d-c9683f0a2989", "indicator--06401b9a-1d9f-4fda-9d7b-399d75b642a0", "indicator--f7dff029-165d-407e-826d-43bd6af0b627", "indicator--763a552c-371b-48c8-b9f8-75aa1b93e5f4", "indicator--aa843754-9b11-4dce-9267-633d2d4f0025", "indicator--e03f7c2b-275d-4867-9b97-94bf78f42d7d", "indicator--6a7343df-1d23-4bd4-ab06-a2cd63dbc940", "indicator--f03fdf69-2a9b-41df-b399-48d54bb29046", "indicator--e9a070e5-254d-4c57-b7d2-323410c5db44", "indicator--d6b6ce6e-3f31-48bd-a275-d058ef013d7d", "indicator--1e1fd71f-b6a4-487b-9134-079b7b632400", "indicator--2dc6001b-e74d-4235-bb02-530d58bea25d", "indicator--2c689b16-e103-4ded-9c16-213684616383", "indicator--b9ec5c28-758b-4620-a07f-c30078f5dfcd", "indicator--33f7a903-45c4-44cd-8216-738095a33a60", "indicator--327d73df-06de-4730-9fbd-db1bdb5d582b", "indicator--ca184310-548f-4921-9fd6-a5123cf118b4", "indicator--268e2503-d4a6-493f-b76b-4cc50daa0360", "indicator--28842f44-91d3-4df6-850a-0df0383872e5", "indicator--05ab5993-e515-49c6-bd21-b68f3a0b3240", "indicator--02d023dd-4830-499f-8800-7ac62c93befd", "indicator--a020059e-5c67-4664-b130-53060e983451", "indicator--2d12a7c3-a4a7-483e-b7df-919f1dc6c965", "indicator--e8172eb1-26bc-4876-bd93-c6170d508491", "indicator--d37f2074-0bad-4817-8b28-3b9252ff9fac", "indicator--da065c95-1968-48cb-abb7-2c33b9c160b6", "indicator--13e80109-ff62-4f42-909f-ae72282210ff", "indicator--ecbf97fb-eb65-4a28-9e6f-ea4714449171", "indicator--1f53c17e-0e3f-460d-bdf4-a091bcb8b3cc", "indicator--c64b0c66-8e39-4025-9498-a10c699c197c", "indicator--0482c7ce-b962-40d9-90cb-4dbf59dd7dbd", "indicator--92380fcd-f605-4f90-81e4-5b6007f4b0bc", "indicator--31a433a7-d91f-4b37-85d2-ac5f4afbbca6", "indicator--13192d00-9e37-4a71-863d-3102350c2d2b", "indicator--5efecaf6-7fe7-47e3-b097-3290ca47c7a7", "indicator--cf0ad19a-6b1d-418e-a352-af24dda64376", "indicator--eb0b7096-759b-49ad-9ee2-0aa391c0b3c8", "indicator--c10aad7c-abb0-4c6c-a159-b0cf78c5983f", "indicator--29d5a963-4c91-4167-b96c-9655ce2813fe", "indicator--a89a074b-8e47-4d69-af2c-a0779888fc74", "indicator--29237a81-143e-4dbc-b92b-0e34f4822c5f", "indicator--c887ee16-bac2-4791-8689-2aea820793e4", "indicator--a4667014-db42-47c6-b199-d3f61d9d21ed", "indicator--a465e756-5362-4333-8c03-3cdeb74a9dda", "indicator--73f4d238-ae7d-4781-b530-f5de8cd35cc7", "indicator--d7346fe1-fe2d-42e0-95ea-88d2871c6c33", "indicator--47872c51-0184-467d-b2cf-ae59b925fe31", "indicator--72f23d42-a104-49c4-97eb-350c79a383de", "indicator--0f8cafb4-7d3e-4a0f-a77e-3e390aa14c1a", "indicator--c54a6a15-96c2-4eca-8205-8af394aba06e", "indicator--c3606293-ed98-4f28-9c76-bf29b6961b40", "indicator--9cf5f60f-23e4-4f12-8601-784e9f792e3a", "indicator--01f79b70-5ee7-4ac3-96d2-71c002e3c858", "indicator--a1692b28-8788-4472-bce7-c8304e2bca63", "indicator--0693ced4-d9e0-45c2-8ace-f0af8a0d2cf9", "indicator--9546dd7b-15c8-4364-9b8c-8998cba4ca03", "indicator--b1f88f2a-c172-4c88-a3b5-f0b72fb965b8", "indicator--7fb81578-5e62-418f-bf1c-1e599460c269", "indicator--605255c2-4637-4a7e-b2e7-bebd36284955", "indicator--ab778052-046e-4ecb-8d52-7ae6208b4fc3", "indicator--a61b973b-4c59-4be5-9d35-2861e7c9c1d7", "indicator--5540edaa-20c3-4191-9cfb-937746efb588", "indicator--fdc4d87c-c58f-4968-8dd2-9668cf5e8d72", "indicator--80f9bae1-b22a-4eb1-9bf4-3764d50b057f", "indicator--8f3656de-fe01-46df-8b6d-1a5c111be55d", "indicator--d4dab01a-08c9-4f4d-b76e-fe1a2260c08f", "indicator--0a9f88bb-3260-4855-aaa8-4da2db396c1b", "indicator--aeabff84-50b3-4d64-a0cd-16f08bf56405", "indicator--deb603ea-6355-4f1a-a210-bd1eda8ec8a9", "indicator--1c715bc9-2aa3-47e0-ab19-cf5427d8db81", "indicator--3602fa8e-c1a6-4541-823d-1115e69f6f24", "indicator--04733f39-35bd-4ab1-ab14-6665d0006b84", "indicator--93231f7e-4c93-42e8-9065-12743f3fa476", "indicator--ba50559d-f372-410c-8303-ed35027da033", "indicator--f0a29a96-d51c-4a83-915e-5da0229bddde", "indicator--8dd0fcde-8293-4760-9c0f-10cf8e3fb40e", "indicator--7cd1d533-c9e3-4dac-a123-74fd55a3205d", "indicator--2204c612-39ee-4002-bcc2-193856cd80fb", "indicator--10dffe60-23e6-4f22-9b98-ee018bcffd17", "indicator--873c7b09-a90c-4bd8-a80b-8b9a05d32f3d", "indicator--069c3dda-97b0-4115-b75a-e10fdf3c42ed", "indicator--a83860f2-a816-4403-9c7e-726d01e43fb6", "indicator--a74f42b6-f35b-483b-bb25-e7eb589d83a9", "indicator--40109837-2cda-4abd-a747-406d34231a25", "indicator--17b9e907-1cf4-41ef-8926-9d78dc969789", "indicator--7f89f36a-0fa8-4077-bff0-e94af9229974", "indicator--39d7d2cf-8c7b-4872-859e-50a38baff0de", "indicator--b2e3d82a-58fe-4d40-84c6-730db4bbd2d0", "indicator--bcf7caec-743e-4a46-8af9-35fa174da812", "indicator--8f66274e-aa0d-4a3d-b47f-5ec3f62ab45c", "indicator--72ea06d0-2122-4e8e-b061-7dd5cb3bc0ed", "indicator--62be9e8f-e1da-4c78-b2a4-c0f31fdf4f0f", "indicator--f93f76a5-e114-44b0-835d-b79ab52cfd7e", "indicator--10be852b-d435-473d-bc20-8a1388ab7495", "indicator--13385d6e-4753-4ad8-ae82-a2a908712dba", "indicator--e57124cc-5ba0-495f-ac12-b760c7f9e9bb", "indicator--04ad869d-af5b-4d2e-81a4-1deda7661bcb", "indicator--d9d0af92-21da-47a6-98a9-245164ebb63d", "indicator--2c9862a6-6f41-46dc-a638-245fb5380662", "indicator--b411ef61-f751-49aa-bdc4-108c78c1b5f9", "indicator--6bb0fb90-a453-47b9-8c96-04bd7c3db5e0", "indicator--c03cadd9-6610-404f-9b7b-b2727e2a22cf", "indicator--237dcea9-0dd5-4410-a63e-99390504c80f", "indicator--521ed1c8-29f2-4f77-80e1-b49d3aebd5d2", "indicator--23442caa-a11a-475d-abe8-94f5403176ea", "indicator--ec524e1d-e61b-47a2-abd1-ea48f8edb628", "indicator--1a8340bf-d219-4db2-9e1d-a246185e3b4f", "indicator--3b0829d2-25ba-46ec-8cb2-e42a46328f32", "indicator--0572c578-2bae-411e-aecb-a7d1b905b1e2", "indicator--9665c9c1-5a69-4245-a57b-ba952793eca5", "indicator--a1dfe815-b0b7-4964-974e-5beae03fb5d3", "indicator--6ac53844-bb9d-43ed-9059-864655392794", "indicator--59815205-ac8e-4118-8b5d-14e286ab4b81", "indicator--e8bd2306-7363-467b-9d2b-c3269a96e806", "indicator--76fbde46-93b8-4e43-9745-26d8f05815f8", "indicator--7125f8da-7c97-4616-a847-8080b507196d", "indicator--e043893a-881e-4f35-996d-8ff0a58b04ae", "indicator--41dd8c9f-1ff3-41fa-859a-3d87414b0176", "indicator--226147e2-78d6-43bb-8c5f-f563bc68e7be", "indicator--310b6402-e0a8-4a1c-b34b-9d1de187b45d", "indicator--dfdce371-9384-412e-8e9f-d61c0b2fc50a", "indicator--3a1b9611-df16-4e3b-b349-fe8ebe0e2772", "indicator--a7163d41-4d37-493a-9ed5-b72744000485", "indicator--74242b4a-d987-42d4-8adb-f3839e582f82", "indicator--e19142ac-0632-4fd3-bb64-dd2ef29179e5", "indicator--d2e65c1a-f027-4b0f-86fd-af5153520602", "indicator--78e2bb48-0002-466e-99bf-17f3d8e249cb", "indicator--1ace5160-db21-491b-8972-3d2e046c2678", "indicator--4deca97a-0e9e-4304-bb14-4976090b4e9c", "indicator--877222cf-c403-4268-b4ff-93d01af48b0f", "indicator--97987269-8eba-407e-b255-66c7c44a9d1a", "indicator--c99ed785-b93a-4b9e-8ac5-b151b101a1c8", "indicator--8c872b01-70e6-496b-8db6-1ee560b90cfb", "indicator--17564991-e6a5-4833-a82b-419273e57344", "indicator--2106e627-a678-4ca9-802f-a37b266cbe80", "indicator--b5916969-69eb-46f3-bc87-2d234d99093b", "indicator--8f3ff370-8473-453a-9461-620f2f76ecc2", "indicator--373c09d7-85ad-434f-aa8b-b259d7ccd65a", "indicator--fbd0b658-bab0-41d7-8f5c-dd09c3602494", "indicator--43ec1a66-5b93-4602-8724-dea44264053c", "indicator--d9dfca7f-9eba-4d21-8efd-2690dd56a03e", "indicator--cab05d55-766a-42db-b1f1-321e4c3ed31b", "indicator--6980fdf5-5010-4461-818a-74760b796e2a", "indicator--8d8227df-4205-47c1-b264-dd4eb11fc13f", "indicator--a6db5d11-22a3-4217-b6db-34c2d5e6f679", "indicator--08d52d63-da71-47b1-abc6-97f0bdcaf283", "indicator--8266b364-742e-4f8c-982c-461208eb226c", "indicator--9443849c-81ff-4cca-8071-ec47496ac401", "indicator--5b97ffc9-b076-4378-bc4b-be649d7c782a", "indicator--cc5d011f-0c61-42b8-bb8c-ce3059f042af", "indicator--37142a09-e79e-42a4-a61a-36cc85f4969f", "indicator--b8862dee-3a9e-4003-bfe0-f61cf27c2f25", "indicator--cd9a1c68-38f5-400a-86e7-b8183a176bbe", "indicator--f1bf6b62-7328-4c02-8489-67ed7bbb9605", "indicator--b652c68b-a42f-4172-83ce-97d73bd23b86", "indicator--55d1d940-12d2-476f-98fa-c9809c60152e", "indicator--21a7bd1b-ffec-4050-9e4e-af70406bd3fd", "indicator--9cc6393c-6c1d-4cbb-be9a-56673443d0e2", "indicator--da93d871-4308-4109-bf4f-30ed98c2299f", "indicator--d9740665-9499-47f6-bb47-308c39ebdb41", "indicator--af3550d6-e78b-413e-a5f2-59dc925d5ef2", "indicator--c63940b3-a83f-4e3e-ad74-598a262cfeeb", "indicator--86ac1cf7-fe70-48d4-bbd5-ac4f2598b071", "indicator--73470c04-c5b1-4cf3-9c35-d64be59dfaf9", "indicator--934fe85b-35fd-4faf-892c-a1a131ade0dd", "indicator--12278dd6-9ca9-466a-bf97-8bc460e9f626", "indicator--517b8e7f-705d-4b8a-aacf-3d05152c86a3", "indicator--4efe8d91-1075-4fae-b0b5-683e093c19f1", "indicator--4a3fdb1e-ea5c-4fab-a61c-335f2732b108", "indicator--157c1886-6d7d-4d5c-b21c-94e33f114c7d", "indicator--c7149545-4dcc-4b82-ab7c-0a48f1d2bf6b", "indicator--d757fedf-347f-4ea8-89b2-c1c04d3c39cd", "indicator--968cd380-dd88-4f4e-a593-702dddf44c58", "indicator--12a24daa-b8e5-4f0b-823d-0b0920883f54", "indicator--92ee6485-4917-42d2-85f9-5e52d6208000", "indicator--4f89f977-503a-4682-8f51-c925d753932c", "indicator--f8ce233f-150d-4289-8ec3-e87031553dca", "indicator--6c33efbc-5a6c-4cf3-aab9-435982589042", "indicator--25e53326-9b72-4b8d-a7c7-20c4cc38f438", "indicator--0466e9cb-3238-4fbf-9eba-75e45ddebd4a", "indicator--7831e0c2-24a0-4aa9-baf7-4c4563dafba4", "indicator--59ea818d-646d-494b-929a-76ba2c92fbc6", "indicator--2e08aa1f-2cbd-43af-98c2-71eb3d96add8", "indicator--ca1fb0e7-9baa-45ab-bfc0-f93f24cde4f3", "indicator--0b9d18b5-bb17-4fb3-afd8-fde32a11666e", "indicator--8247cd8e-582a-4b36-9cf5-44a4472ceedc", "indicator--05fdcd88-2b7e-4185-99a6-2af5f84810d4", "indicator--0f013450-3593-416a-b5e1-ebddf71d8f82", "indicator--3e7d88e5-f989-456c-aaa2-62d94ece2765", "indicator--1f2f3324-c6fd-491c-8323-5d673dc7000d", "indicator--c4f56167-9971-44cc-841e-d5e240ced8cb", "indicator--6f52ab1c-cbf5-481c-a369-65240c10550d", "indicator--0ee44fc2-d117-4570-a8ba-bc5640c452a8", "indicator--63564807-7bfd-4f1a-b5b9-fa1eb3a99af9", "indicator--68cb10ab-1af6-4ac8-b8f4-427818f31197", "indicator--ad74fb32-2d1a-4499-a3d1-dc8a03995fc7", "indicator--2f7bcf02-6973-43ca-b036-e1c305023fa1", "indicator--cbc92601-3825-451f-b84a-c755f22f0300", "indicator--f151dff8-69bb-4952-825f-d3e99c458280", "indicator--8df70af1-df4a-481f-9955-effedf982a12", "indicator--dc8a5173-1b0b-42e1-a80c-f888587be2e4", "indicator--f0705e6e-3aa8-4cbd-b513-b51e8ab36e3c", "indicator--ec7f3cc1-521b-427f-ba52-3d5043d5c06d", "indicator--af570cfc-f67c-4897-a6dd-bf54b8c27047", "indicator--66deba07-5b68-401e-8155-913bd753283c", "indicator--3e9dc2bf-b96d-4e3f-a95b-26ab0ce8386f", "indicator--260b3ea4-e585-4190-8203-8b8136a00ee9", "indicator--2c7cf564-c9f4-4180-a601-1174dbf89445", "indicator--dc55c80b-56c5-477f-abf0-2cdfdee374c9", "indicator--8cc3f658-d338-4e30-a7ee-0e19f299aeff", "indicator--ad260525-3e1f-4015-9ba9-99a310ddd794", "indicator--8d0f00d6-e047-44e3-8874-22088a3f5134", "indicator--844a20d7-0913-454e-9ea4-614f28aa1d2d", "indicator--eb3333bd-26f3-4e72-8e28-03147cafa8b5", "indicator--9bb4d159-06d2-43f4-9bcf-a6c214277a5d", "indicator--8d2ea366-92e9-483a-8062-e58a9151e72a", "indicator--7e876d6f-0bf1-4b9f-bbe4-a5b7f7898969", "indicator--cc6e90be-491d-4ad2-95b0-bc36839d4fbc", "indicator--f937b50b-245b-4c5e-8fa9-95e93bf09922", "indicator--d046b830-9985-4b7f-8a3e-99ee303c38b2", "indicator--28c80237-01f7-4123-af12-c3f78cb326bc", "indicator--01ad5dbc-80c0-49ea-ba58-54c8b069880c", "indicator--c7cce201-3e8e-4115-82c9-fe8649fbe7b7", "indicator--b1673c74-35c1-4dc3-a1e6-8640239e91db", "indicator--e71fa421-ce5d-4852-bcc4-012a0c2ddb12", "indicator--546b6242-89d6-427e-870f-f8527a89fd15", "indicator--6996ab18-48e6-4d07-9ebd-6cd42baf8622", "indicator--f20fbaf5-6046-46be-8f84-b66654c3edf4", "indicator--dca2f608-b53d-4cf0-8c02-0874fdff6365", "indicator--7075a084-3e42-440f-8029-977b5ed97cdb", "indicator--abe3fcf2-e321-43a3-8ed4-82f9d4f7e8f6", "indicator--bdbc3445-630f-429d-a3b9-580eb0bd566f", "indicator--50c27469-7718-4779-bc7e-1240c57c2e12", "indicator--8da007e5-5f3d-4fad-8a54-9221a7bf4524", "indicator--78ba9540-cca3-49ba-8d5b-f7299520d4d7", "indicator--e7a4136c-e054-4592-beac-f46fd1ff10fc", "indicator--51b68cc5-8f78-4db8-a842-241ed5924edd", "indicator--6e7f7fb5-9c11-4be4-adea-a5b70bf859a8", "indicator--23211dd0-26d4-458a-be58-d8e8616bd0ff", "indicator--c6c354fe-ffaa-4492-a0f9-25be34920c83", "indicator--0354e104-1b5f-41b0-910f-909bfa067bec", "indicator--a6f445a6-33ad-4175-b388-4d1f95d0bd36", "indicator--1347ad25-a61b-41d4-a9f9-1659ae16eb6a", "indicator--6de99d6c-a389-4fc6-b563-2b88a6e91bf1", "indicator--86d3832d-6a73-4fa0-9b29-f74b603c3759", "indicator--8a1e3ea5-a7f7-43ce-8a66-ab841de3021c", "indicator--07fc3fa4-ded2-44c1-a459-b6568240adba", "indicator--7fd07708-c828-49f0-a8b7-83aa99ff76e7", "indicator--bf7cafb6-c498-465a-b901-22ffdb3154e5", "indicator--42c44032-041b-4148-9706-b4f0ae10fcff", "indicator--b2e71aee-4f70-4f8c-88cb-300fd2f534fe", "indicator--a8b88028-2dfc-4c70-ac8e-59503d8be91b", "indicator--6225f44b-3d4b-4793-8091-48c968b3da7d", "indicator--cef705aa-dc48-4341-bf91-e2fa7256ea0b", "indicator--8d836c15-e6ab-454f-804b-a2a2596b7666", "indicator--52d0ac16-e4e3-4081-8962-f3a68cfa29ec", "indicator--5a51829a-d922-467b-bcfc-b8279fdd2a88", "indicator--02649547-99db-48cf-b797-1036050b7f3a", "indicator--e2e58522-898a-4438-aa82-7c03b69a4334", "indicator--b794cd82-8445-413f-b827-890c8db8ca7e", "indicator--3ba3c81a-9487-408f-8e69-f2e6274e1cf5", "indicator--0b85b90f-f25d-4276-8f8f-5b293ef6aca2", "indicator--8221d745-2ba1-43c5-9b78-620145a32df1", "indicator--899b7df4-e46d-4592-8c9e-54c2daaca284", "indicator--a3ac7200-04d3-4fe0-85d4-c6e97cbddf2c", "indicator--7639746f-34ff-4d12-8a7b-a7beaf181d35", "indicator--ab5b2847-7774-4e27-a9b7-77edabd731e2", "indicator--c4e2dffb-49ce-40ef-be8a-cc8780107fcb", "indicator--605622dd-b487-4420-82df-0be3b49143eb", "indicator--3a0e4954-1083-4fc6-9f12-1e6d9a7282dd", "indicator--aaecc689-5039-44f8-ae85-363cf65a322d", "indicator--a6033f8f-671c-491e-9441-0eccc59079b1", "indicator--e68a29aa-ec1e-4f07-bb1b-cab1a485f35c", "indicator--d02a5757-3b5f-4d6c-9fed-ea11fa959c13", "indicator--36b6d4cc-9f39-4724-8564-6a4b82e12c25", "indicator--30b1e615-5e00-46c2-9ff5-74a9d6f1f4a0", "indicator--01f4f3d4-b835-4555-9e9d-4dac1b179139", "indicator--56323de9-5c15-4469-9b6d-4ff473bcadf5", "indicator--71b79079-9bd9-4d66-8e55-9af534f4b3f2", "indicator--880eb4da-5b08-4e00-9599-9ab02517c11c", "indicator--bb1cadd1-acdb-44ef-8f7b-0ed284679f66", "indicator--d45d0df9-a7b9-4176-a456-b850c887ce78", "indicator--57019f06-09ac-49b2-9010-3abb73060392", "indicator--5671c8c1-7826-4b3c-a019-2a9fcacee777", "indicator--cbcfc199-bc13-42b9-9eb3-934ea5242d9a", "indicator--42329333-88f0-4a32-84ff-d285a4876801", "indicator--b581ab09-97e7-439f-b663-f2b61bf53b0f", "indicator--1cdc4370-34d5-45ad-83fc-bab2ba7ddb9f", "indicator--b7edaab2-264c-4816-b2de-20e38a1c5c7c", "indicator--6738a850-b9d5-4c5b-8879-76e7e33f0210", "indicator--c18d1b5a-2e0b-4be0-9a65-a5e6012a9ca4", "indicator--d7cd1f9e-383c-4863-a1b4-3ac63b15e93d", "indicator--3b41be65-0ce9-4da5-937d-5a93be237350", "indicator--eb8f4150-ed9c-4b9b-8dcb-c4cafd241100", "indicator--34a276ed-be7f-4f90-b520-fa3fc17b24f2", "indicator--830f766f-97c8-4be2-ba6d-02276aad3e4c", "indicator--ac8f1623-d279-49d9-a4c8-da40fb0ccd79", "indicator--44311fbe-4325-4d85-b48b-b10705a27160", "indicator--28fdcafc-e9ef-485e-9567-6c010ccb8a67", "indicator--d8d72e18-83dc-468c-a847-0368c5162a1b", "indicator--e1c4b638-37f6-45dd-9202-51b844acfa8d", "indicator--18a393aa-46cc-4dc4-b0f2-ae0e63a41103", "indicator--e850ac63-093f-4633-9623-311e1e85041b", "indicator--6318ff7b-236d-4659-b5ea-ae1ecde7bb16", "indicator--81ffb2a8-41d9-4065-802b-4ae926495b9b", "indicator--a1677e3a-1f4a-4d4a-8d86-29c2ec9ccf5f", "indicator--e0e0ec5e-5f29-43f2-a91f-f45c0eea2c17", "indicator--474e9e81-8369-42e9-a16a-360baeb29475", "indicator--00b52209-e18a-4a4d-b0bc-71453e00bb33", "indicator--97082b13-e6a8-4587-b310-edd89052848d", "indicator--be942b2a-1e35-4c28-ae57-8966b0d0ff90", "indicator--1eee6363-dd6b-4ac5-9c3f-46c8bd339083", "indicator--443a6e93-48d2-409b-9eaa-4bed809574b7", "indicator--7f0f4eea-3837-4b65-a226-f7f070b1a89f", "indicator--90230a7b-e15a-4013-80bf-63967dfd4e65", "indicator--4ec3085e-b0e0-4012-ba9c-d5c0e5a01010", "indicator--93df3d78-6665-44d0-b3a3-81c7dfa987c4", "indicator--7beaf797-a8d2-4a04-b1aa-9ef9afdf9aa9", "indicator--8f627cf1-3237-4e4d-9173-4c8694a1424a", "indicator--86289041-f371-4e20-a5de-3dab7b53aaf5", "indicator--947d9734-f77a-47c1-a55f-79b08c1ca23f", "indicator--cf8fd806-70df-4319-8de6-621d9d148614", "indicator--1aeaaf9d-5a30-4591-a85f-c29538180885", "indicator--2fd8dc7c-a199-4ec5-a4e9-e40717712e02", "indicator--e46e7e09-b347-432b-bd1d-d6c5b4490732", "indicator--c6045698-ca63-4a61-b1e1-0e26360d626d", "indicator--5681b4d2-24ff-4cc7-94c2-ef2c6f972d61", "indicator--c92a3f61-41ac-48c5-a026-491521cea3c6", "indicator--f1dac903-b41a-4795-a5ae-98cb14c71f8f", "indicator--6daf978a-5c75-45ed-af39-e97d122c1f11", "indicator--fe158494-a585-4ba0-8f3c-ae7f1af98366", "indicator--ef3ca517-c1f4-4f55-820f-1ebaefc0908b", "indicator--e64e5cb0-d6d1-44ab-b315-ae72522748b2", "indicator--d1919780-0c08-41eb-a478-94976e55446e", "indicator--eb4e5745-4654-4a8d-99c6-c235d3ef9ace", "indicator--eaafd4c9-395f-4768-bba9-341d64e0f0cd", "indicator--eda31cce-6a33-4dc3-8117-b8a27369d256", "indicator--6e5b35a1-cebb-44e0-beb1-fedc437f8564", "indicator--116187ec-cdc3-4631-98fe-38c4593c7c11", "indicator--3efe39eb-682b-406f-909b-441c2afb4a87", "indicator--d9028b16-15de-4a74-93af-c08d48eeee43", "indicator--a3ca7d04-480a-41bf-b960-659a77befb5a", "indicator--ac618dd9-da5d-4840-a73f-a6775d5096e2", "indicator--83a38596-a823-464b-98bf-ba63ed673909", "indicator--380fd1bc-f6e7-4dfb-9011-e81e69f40b8b", "indicator--46868f7d-2b39-4263-924b-6e7c38f189ad", "indicator--38997a81-8372-4f17-ad4b-867cc25fedd9", "indicator--c6f6a806-aad8-4c65-9286-ce8df494d770", "indicator--16d1de1b-7a53-4d0a-bf5d-46a550c7e331", "indicator--c32c8fe6-c3f1-4cf3-9a1d-c0005d9ec7b4", "indicator--5851480c-b54d-460b-aca4-1c36a66337c3", "indicator--68c19011-5a9a-418b-97a5-f95b40831f3c", "indicator--9ce50448-de6a-4ec5-b4a5-41fff573f411", "indicator--d87a8ced-ed45-4bfc-a4a1-900945203d25", "indicator--26a6cee1-a927-4358-a0cb-931be8afe34f", "indicator--6318c5d9-9f10-4bc9-9bf0-959ae962ba5b", "indicator--04e5a52d-7480-47ec-b09c-6bbcfda65ef4", "indicator--cf11391a-8ded-4724-b138-1fbfed17c1b7", "indicator--673db28f-34f5-43d2-ae15-29aadce9db16", "indicator--9f7ad251-2aec-4ac3-98ef-2cb204248d1d", "indicator--28195b13-bb77-4f32-b376-6da6b6454d25", "indicator--8122c730-6d5e-451c-a152-24173bcc7892", "indicator--e63e8c7c-82b6-410a-9123-46e773912361", "indicator--b0006033-cf08-4b02-b105-4a6914777702", "indicator--9475c407-90ae-432b-86a1-19e10be7d38f", "indicator--1f2ad6de-9918-41da-9b13-e6a9c2e21773", "indicator--5ea23552-a8f8-47bb-acfc-02702ccd6e3e", "indicator--d9648d38-5137-4d31-bcd4-4977c2b3716b", "indicator--a6a830b7-3089-441e-b64b-883befe664c6", "indicator--6e9b5272-1f76-41b1-a984-b0f6a3d75ff7", "indicator--768eb67e-c8bb-42e8-b5ba-1c4293a54674", "indicator--06816afc-18df-4f6d-b9f2-954a2091e422", "indicator--a791f513-cbbe-45e1-9289-658906388029", "indicator--229eac28-d88f-4e31-ad32-284e6de07c2f", "indicator--f6e6edc8-984f-4e03-91de-e35d44bd9226", "indicator--79070812-a155-4304-b30d-86a9bd41711b", "indicator--c60e4d2c-f4cb-41a0-a269-3e4ccaf4263c", "indicator--431a1eac-1707-44cf-9fa2-cf286b861cee", "indicator--59632327-a190-47ca-8f5f-de1453a81dd1", "indicator--c8de5fc2-95c6-49e5-b097-bab9e2d0b180", "indicator--cc7588aa-36cc-4455-a579-d64cc6dbbfd0", "indicator--02d142cc-6980-4787-8f9c-b995d13c66fb", "indicator--aedb990c-1ed0-4913-bc69-04df09d8c195", "indicator--89013bdd-fcf3-437b-a1f1-2804b83c193e", "indicator--7e5e7f83-3d95-447d-9e40-51fc1b71fc6e", "indicator--d9f089ca-210f-4ff7-bfe1-4f4b51f5f8d5", "indicator--56c302dc-4f38-4b5b-8799-d24bb3296215", "indicator--05bcdee3-c0f3-4413-b524-1ce65eb2c963", "indicator--93abd9ec-ecfb-4cb3-8600-894c2f65d146", "indicator--baa3932d-32ac-4b09-a2ea-eb6e311f93fc", "indicator--2376734f-fcde-4939-a5fd-1601d3e91c84", "indicator--5ce1d273-0587-40e1-87dd-1eccee6e04dd", "indicator--1e7175af-6fe3-4011-852b-498c7af2d5c6", "indicator--65e58ecb-83c5-404e-8f0c-2c8579272630", "indicator--956aa7ad-b22a-4454-af1c-1aa82b9fd0a1", "indicator--42e5851f-2987-4a22-9cfc-599089ea66dd", "indicator--b55a8220-5103-4a75-8813-b5dc8050d61f", "indicator--d199bb47-71f5-4218-a41c-a8ca22c13839", "indicator--7b43b5d7-dbe3-4292-bbc5-ab33267aa1c0", "indicator--a34cdd2d-9dcb-474f-a8e5-7707456680ba", "indicator--20359782-7eb4-452d-8b8f-69dac7082a0b", "indicator--73eb177e-ad9b-4e8a-80a2-89d74f1dab95", "indicator--5784118f-013f-4d94-9e1f-a44f57a582c0", "indicator--78e1aac8-22c8-4acd-b505-d4afe091ad2e", "indicator--181a491b-536d-42e7-8d27-f6cdffc5e580", "indicator--079ba3b5-64f9-4cb3-b729-e32c9e079fdc", "indicator--153abf46-3b9c-4d74-acc5-82f04a14d11c", "indicator--61b86fc0-f445-49f2-ac65-79a2c1caad6a", "indicator--4f247ba4-653f-4167-b69c-d9a655abeb63", "indicator--c2ba6d41-17dc-42d5-b562-943d5f50263d", "indicator--1860d6b2-9c5c-4719-a346-5503f52c85b1", "indicator--4e6e4ac7-2e96-4b23-a567-c1161c1c3b81", "indicator--2607532a-432b-43bc-9d62-30dc240405be", "indicator--a0b2f28c-0ba3-439a-82a0-dfdc9803d88a", "indicator--b6b6a5f1-19ec-423c-9a7e-541e5c47f474", "indicator--c7d636c4-4d90-4571-b9de-709ed5125c9f", "indicator--3dfa5799-bfa6-4a89-a49d-711bf860faf6", "indicator--caaa0ccd-2864-4005-9a2b-1c8b9087902e", "indicator--cf2b4039-0b10-4f5e-bb95-6cba14ece0be", "indicator--313133ba-c915-4f7a-b11b-c5055f0ec1c3", "indicator--1c2b134c-3d02-41ab-b36b-e08c7fe48234", "indicator--5c1817ef-b676-4175-9a46-516d65ee729e", "indicator--2d3a5536-8e47-4881-b047-a54a1f061d50", "indicator--0c54a30e-5fee-4af9-b78c-57cdd310d717", "indicator--99e39673-4271-4035-af64-8a71d982f639", "indicator--ef9232c9-d978-49a9-8c79-a4dc40b7f7d7", "indicator--6c2b1045-d196-4532-aa50-a0feda95d8dd", "indicator--3b2a555f-af58-4b3d-b205-52edede91b87", "indicator--7d50e405-1e64-474b-93f2-e3628780922e", "indicator--232f9efd-fa1f-4f7a-b2e1-f08e24ef1889", "indicator--a4b67335-3d30-4799-a77f-dbf66c1a02b4", "indicator--6c7a8b59-f95f-4d54-a985-af748bad8145", "indicator--8a9a97eb-8827-49a3-83db-4f95c18b3d7f", "indicator--b7716548-5ae3-4c51-af2d-3d8566ded629", "indicator--9cf8da9c-aa9d-4383-a26c-378f7b49f224", "indicator--007b23dd-c7af-4275-a07c-5bc3fcc383ac", "indicator--5a22de3a-cf9f-4582-9794-78542c1a158d", "indicator--86d146a8-ddcf-45fd-ba1a-bfb9c0e824cf", "indicator--f6ba9768-9ea4-4a97-a265-64293804bf0b", "indicator--e59521f7-8d58-4765-aefb-31019df30b40", "indicator--a6f5ff58-2356-4da5-82b2-7b4875ecbe6d", "indicator--dcd0f2bc-5b90-4bb9-9e33-bdee7888081d", "indicator--1f6d8bcd-c80e-48e4-af50-131c06213abe", "indicator--88f3c056-6b74-4a52-b459-1fbd4b5f8067", "indicator--fe853576-4ed1-4624-b4e1-9df9c2f58a83", "indicator--8160ccae-d92e-4d55-813b-cbc3cf8de6b0", "indicator--a8c6b798-f3ac-4f94-ad3c-701dbcbaeeeb", "indicator--1d22bf3e-d138-4adf-be4b-eaa60ab3ba7b", "indicator--3a818297-5786-43c0-be1e-142fdfe875c7", "indicator--6792d296-d8bf-4b69-a3f1-b6666a74d2f3", "indicator--8479ef08-d0c4-448e-a733-df21893eb8f6", "indicator--a0fb6929-6c07-4634-9c1c-120de69fef72", "indicator--a799837e-64f8-4781-9a88-eac44c834c20", "indicator--c8ba644e-8ba2-44fc-ad21-4056a1711af2", "indicator--64f0a469-f816-470b-970c-537ab4c639a8", "indicator--9ecabe27-9281-4f4b-9e50-5479d8ab00f8", "indicator--484e4880-636a-48a5-9a3f-082ff3a69f9b", "indicator--a430e07b-8458-4432-a579-22906ef7b634", "indicator--1362adb8-0b95-4768-8efd-cd9ee11062e5", "indicator--ec20eef3-6178-497b-8dfb-9f421dfa6606", "indicator--6ff16f4a-610e-4d1b-a043-bc4655c411da", "indicator--a09f265b-a6c5-4225-a9d4-0a18fe5bf6fe", "indicator--c1d6118a-dccd-4932-9d90-2866890de01b", "indicator--be401f56-841f-4197-b278-16bee5415a72", "indicator--89dd7ceb-dcbe-4fa3-a2d6-0c2aa7ec3d77", "indicator--fb0f2ab8-7bf2-443c-9728-7c67de9e2368", "indicator--8a0e8a1b-023c-4c65-a2d9-5a195507c78a", "indicator--3c7f8c48-6192-414b-8e06-a1708dd5be65", "indicator--204d02fc-2fe6-40a6-9bc6-90c5b56ecf14", "indicator--e249f5e4-623d-435f-86e5-786e351d9f78", "indicator--ee93641a-35fb-4f0a-9aba-0048bba0f2f0", "indicator--b01d4fbd-1f26-495d-8a1c-30cd455f8b85", "indicator--e92f2239-8b65-4552-9e3d-d8181fde6b1e", "indicator--562bf7a1-5d2c-44c5-b06a-caedeea46fe9", "indicator--72c43345-927a-4253-8063-f4fd067736b2", "indicator--39e25191-326d-4f90-8061-ff3b1a9c81c5", "indicator--830b9dae-a769-46b8-91fd-a05e6303fa0a", "indicator--9c55b922-8959-44da-9b12-50035621455f", "indicator--16c7d461-074f-4c8a-867c-a3819f8cade8", "indicator--6f785bb2-ba46-4c0e-b6b4-d729958dca6a", "indicator--8459e7b4-1600-47c0-92a9-11195da2efc7", "indicator--c852366d-ffee-457a-bab3-e5b2e646d116", "indicator--1c5eaddd-92eb-4420-8d24-b8be524e29c6", "indicator--45cee5a9-b426-4407-8a27-7555a5a591c7", "indicator--706adad5-94c8-468c-abe5-e7b1253d99f8", "indicator--9f594456-a7ef-4d85-8209-cab1c17c1cbe", "indicator--9f296374-91d9-4f57-ba25-1097d73b8076", "indicator--d416729c-ca92-4d40-bf49-5e02398e54c6", "indicator--cf83874e-84b4-409a-bfe7-8ba06c09c8e6", "indicator--4d747c15-1325-4345-bfb7-e9d77a3a9c55", "indicator--589b3e59-08e4-4146-8618-33cce1c1143d", "indicator--bb44e1b3-8a09-489f-abba-c8aa11ef4801", "indicator--6453a601-1432-4daf-bb72-7a4a5d1ec06b", "indicator--e99328a7-95f6-4518-ae07-13a9021f3db5", "indicator--07b373bb-775e-41ce-a4d6-6dab4e92641a", "indicator--092c7d13-b61e-4b64-9962-994a7cdff63d", "indicator--79e2211a-f757-4499-b046-b9136aa8c144", "indicator--7ab768ec-a333-4821-aa7c-50fff9a77d2c", "indicator--36eb0613-fc7c-4f39-8340-50ce0f9fa0cd", "indicator--d3d82e97-19f2-4847-818b-be5e8b9395f0", "indicator--4f8fb4bb-37fe-43b2-9126-192ac24f7470", "indicator--7634b780-7d50-4e76-9091-9690ddb32f5d", "indicator--e5f742c0-00a7-4f99-99a8-b402ec417a19", "indicator--153d7956-8843-4c5f-a9c3-0a8111ce4b33", "indicator--45d3cfde-8157-49c7-b703-a67d5973b54b", "indicator--54834e45-09ac-4703-8812-f99de3482618", "indicator--fdc508d6-60db-4d94-8beb-ade5848529b9", "indicator--d68a66b5-ac18-4a98-b561-18dcf337e530", "indicator--68730b2d-0861-462d-8aa9-77d2843f4e6e", "indicator--c5c98bfa-5ea3-4a54-bafe-198ae7fbd52b", "indicator--bade380b-87cd-45be-b99c-42214240e76e", "indicator--50249124-dec9-4a75-9b7f-f126579934e9", "indicator--8eea50af-f369-42b9-a517-d77c3c268367", "indicator--1bd54873-58fb-4d00-bf0a-ee30c2864fd8", "indicator--760b79a5-78cd-4565-8cc7-9da004ae8ffd", "indicator--bdedff56-481f-4ae9-b2ce-7987f842f356", "indicator--f44d1a55-e065-43fc-acd9-dc73a96bfb0c", "indicator--d7a448f8-7013-4874-924a-827cbafa3bc2", "indicator--42d1e1d6-2994-4a91-a885-4f76148b6d98", "indicator--d02cbd22-10cd-466f-bdcf-aa1017c4fd30", "indicator--008e88b1-95c6-4628-8693-5617564267c1", "indicator--27ecd021-5547-42a7-b2eb-e647a315fe88", "indicator--3e20fafd-6bbd-40fb-85d4-94a16a4c52f2", "indicator--696d0157-b018-4ab4-a83b-5623c8ecc140", "indicator--97d81766-fd42-43c6-a8e1-4968ae28dca0", "indicator--b5a2ab36-37fe-4e0d-8ee7-f101fc07b5e1", "indicator--2656a6f2-5517-4bad-85af-62b53dcc51d2", "indicator--f37e9528-9e21-494b-865a-92c79fd01007", "indicator--9f78dd34-f8fb-4f7f-92a6-d34da64f393d", "indicator--e9410aeb-168e-4f9a-9417-adb3c2c55206", "indicator--85f6d5cf-b87e-4405-a5e6-a20f8b4813ff", "indicator--85d06a8b-9c87-4606-ab64-be19c40f77a6", "indicator--39a22255-906f-4a1b-af33-e816bc11a168", "indicator--154f6241-2c2d-41bf-b73f-1fb9e13220c1", "indicator--0c60415a-6247-435b-912d-99094ae5268a", "indicator--31cc492e-a125-433f-9f98-72282080129f", "indicator--f47c62ce-3390-4058-9510-7eae5bbd039b", "indicator--0ee87d9e-dff4-4262-bb45-e80f7f84af7c", "indicator--6ee6c806-eedc-4ebb-847c-f0d6ad13ad31", "indicator--70c6fcce-5699-4dab-abf1-909ea05607d8", "indicator--2b60f1c4-8048-41e8-8e85-0b3770f93a5b", "indicator--2a4a0703-9733-43a0-8593-f3ba77ac32ca", "indicator--90d50582-3b6a-48cc-a59d-14b841c63d0d", "indicator--d99fce17-7980-4d95-9874-ea138a3fbd8e", "indicator--cc87a5d5-7a46-4dd3-9432-355bf351ef9c", "indicator--753e8639-48ec-4ebd-b311-cc0ee77d4a52", "indicator--5bfe36d3-6e68-445c-a8cf-ddf3cf5ad09a", "indicator--cd5415f1-9024-4595-b1d0-1b9686a8f76c", "indicator--27898dc1-6884-4f55-a8e6-e2770d843110", "indicator--2e6ca9dd-11e1-45f2-a97c-2fd44a081799", "indicator--917ab156-75b1-4b7d-8f0c-1445b350f34d", "indicator--d74d17ec-a6f0-4e2a-9284-ccd8162ef179", "indicator--de9e3d1c-5a84-4131-8d78-56e4f987e4ab", "indicator--5e99bb6a-7608-4ad1-ba0d-20ac1b88ec0e", "indicator--1142b9f4-6858-43f8-a93c-155b6ecd9d2f", "indicator--5cc78359-0546-44f8-af20-415183d150d1", "indicator--49fdc82a-4722-4ca9-8d49-5deb0a47f74a", "indicator--7aa4385a-9196-4669-80a7-bf96879e1b4f", "indicator--3a878b5e-ae4c-4a14-9777-827526e65536", "indicator--a1511ca3-da17-4ddc-b469-79c7f3ac0b03", "indicator--8549d67a-f731-4945-903f-575c0d1361ad", "indicator--1de01abb-1736-431b-9805-ca5efbb563b9", "indicator--f8c9019f-f942-4aa8-8e9d-34b5a9f0a72a", "indicator--d87c55c6-8cea-46e0-92d8-4bd39da9ef33", "indicator--3f670d0e-e00d-4f7b-9fda-8248c7e5d09b", "indicator--f645fd6e-6afd-44bc-ae27-62a2aef2b55f", "indicator--aff46851-c2dc-4f74-ae37-461eb0189350", "indicator--541ca9ef-728c-4dcb-8e8c-586429a027e3", "indicator--fd5246d0-0ed4-477b-a042-4a6e341f4bb5", "indicator--45aac769-743a-4fb0-a907-51849b5891a8", "indicator--52006cc9-90e3-4138-877f-2b29f16b7205", "indicator--c3eb5f50-5245-4b60-9380-b6e371e4cfbf", "indicator--27a9f4c8-9df1-48a0-be9f-ae967b2a03b2", "indicator--b8cf004b-d816-4fbb-a7c9-f51c5627eb6e", "indicator--b0051a1e-2b48-4852-b2b0-c0383da5d43b", "indicator--6a5af48a-bffa-489c-b0cc-a4f69ab673ff", "indicator--68b30f64-da62-49b8-b673-21333490fca1", "indicator--2541a245-9fd3-4c64-868c-c8aa1eba99e9", "indicator--5553b34f-c8b6-4248-bdea-98d9bc4f8a94", "indicator--9a6de909-7d38-4b84-a017-9c2885a236d3", "indicator--6caadf9a-194b-4e11-936f-7327bfc7c089", "indicator--dfc00254-f662-437e-a63c-b02dcce1336a", "indicator--16513429-d4d1-4cf5-8fcb-4ca2923968b3", "indicator--dd0d2b51-8415-46ad-82bc-450103c8729f", "indicator--ddb4b938-426e-4b6b-9bd8-1ba3b660dfde", "indicator--a7f6fd69-a330-4abb-a673-841d15b18c10", "indicator--d1b2381e-602d-4cdc-932f-c138cafc917f", "indicator--1dc5650c-0034-4db6-9c98-75c76a51db05", "indicator--265c2203-4398-475c-b959-3616752793b6", "indicator--f2f1c282-8fbe-40ec-ad37-2577df58dfaf", "indicator--61a7d2fc-7b7b-4ae6-962d-652c1b4c44ed", "indicator--2a8a5627-889b-4bf8-8d17-f13f57605ffd", "indicator--5942f134-2c8c-4adf-828e-14dc9a4922d7", "indicator--c710ae7e-ead1-49bd-9bd5-fffaf1bd75e6", "indicator--c8f237cd-58c8-44db-abe3-3e99dbdff918", "indicator--eb010222-14fd-4d2b-86fb-53d17d3edc4b", "indicator--0993cdd3-6655-47e9-868b-eb6fc103d65a", "indicator--989386d1-8200-4bc7-ace7-3e0a38af5853", "indicator--7c7d6817-f6a8-4021-b342-17f44374cac9", "indicator--db232edc-b6d8-4dc3-aa4f-ef882b8e9a34", "indicator--1c65a9be-2c35-4a74-b3a1-e2dbdb5032a8", "indicator--a52eb750-7ae5-473b-80a6-159bda6099df", "indicator--a610a580-f9c7-4858-9cb2-82125cff685b", "indicator--875d8121-df68-4529-8ab2-80fc6daef48f", "indicator--05b2d6e7-615e-4852-bd26-01f821fb0565", "indicator--00b5a5e8-26f7-4ada-adb4-a4d46f888c0b", "indicator--e364cf62-0888-43d2-bfe3-5d38769d93d9", "indicator--eef6e1a7-c14e-4ad4-8c15-c91bab8ab058", "indicator--26ac4752-70d9-44c6-aa6d-deb3a617e95b", "indicator--4660aeb7-337e-4e6d-80b5-07bd0391e881", "indicator--c983a1cc-7fff-4335-964d-9fe245a081e4", "indicator--c831f176-20f0-4e67-b261-add77f3567fe", "indicator--85838e83-6d57-436c-8129-63a5353efa69", "indicator--6325efc9-5bd8-4a6b-970a-8b6e7f58e60c", "indicator--c1767874-3b86-4f30-a516-88481f007a0b", "indicator--9ad77c50-58b0-445a-a487-b2c25c6b6c58", "indicator--25466f26-9200-4af4-98aa-55825e84fdc3", "indicator--77922e45-0bb6-4560-80b1-6ea38948434f", "indicator--16419ac1-b904-47b1-ae60-5192ec5a2ee8", "indicator--0378d365-37f2-44b3-aa00-dbb3f45867fe", "indicator--671e0290-cee1-4a2c-b253-3dccc138cb7e", "indicator--d7dc1c94-2a2e-46f4-91f4-42bcf90ca1d6", "indicator--71c91272-241e-47f8-a6e6-32fe2a0a7cf1", "indicator--1b758877-e28b-4eb9-b658-efdb6550e912", "indicator--6370dec5-edfc-45d3-b151-b1eb5d75e25d", "indicator--56dc36f8-3b60-4b79-8856-6d9e4d8bcd88", "indicator--a3912721-b80b-4091-ba35-5fd2b9364900", "indicator--c16cef52-d5c0-404e-8784-9211a8cd0bcb", "indicator--6df42062-2c87-4e27-bb78-d13a6628793f", "indicator--1fb65603-448c-4762-af9c-bba91bf1ee9e", "indicator--c98f8b7a-d97b-419f-8353-7a3097c3e61b", "indicator--a3ed0abd-60cc-4c64-8d5f-80e22052ba97", "indicator--23771b4c-a0c2-4d7f-b990-0e5ce7f0b9af", "indicator--0071a6db-3815-499e-bb30-d916babbfcd3", "indicator--734af897-e891-4835-ac50-f62a3639048f", "indicator--e82730cd-6da4-4f17-a5eb-15c68b42244f", "indicator--57b0a854-9f14-4a5a-b38f-769ff13395bf", "indicator--2695e699-081f-4e74-81f7-bcd50d034023", "indicator--25de9b71-c17d-461d-a178-9030904962b6", "indicator--252ac272-41fc-4c91-84fa-925c3c58b7e3", "indicator--d90b8f37-a935-4a87-a5bd-fec0b199da0f", "indicator--1b9ec25e-12f5-4d92-b183-5aa6c628f827", "indicator--f1dd2603-99e0-4066-aa3d-300184dcf296", "indicator--c359db94-c091-43eb-b967-0f4208be7993", "indicator--b7ce6d50-1de2-4f0b-b83a-22cbe9418e11", "indicator--41e25d01-2e8a-429f-9734-b513e33463c5", "indicator--336b4f13-7159-491e-afb5-3605e62bcdd9", "indicator--c9badfd8-5ec3-4a14-ae56-3f352879163d", "indicator--9021bf3f-7367-4234-be7e-64e485a4b1fa", "indicator--a206d344-e07b-435c-b21e-340193598d68", "indicator--a4ec988e-96b1-4e86-b7df-e7a345a34666", "indicator--ab316d70-b1aa-4f86-b9ed-cccdf2e71f28", "indicator--078d9777-313e-4be9-8e04-d7a68633a6f8", "indicator--21e9c9e1-26fd-443e-a74d-d4faafd84d33", "indicator--80be45c2-36b5-4b64-8a27-c6238f06d04f", "indicator--42963c99-2276-46ce-9549-0ecb7b3e4438", "indicator--b08058c6-9e74-4458-9333-d6c463da76b3", "indicator--22844413-45b1-40a3-9347-927951c12a74", "indicator--cbc547f4-ff44-44d6-99f7-01aa5a6f6986", "indicator--dcf4a367-cb17-4b89-bd76-e123032d0390", "indicator--2ba5d61e-41dd-411f-8405-8777a83e90be", "indicator--baa1b5c9-da88-4d25-869c-b96491470e2b", "indicator--2ab773ad-450c-434f-b4df-28b24f59acf5", "indicator--4e3fb9ae-f0da-4918-8a01-482703cb5a97", "indicator--2b056eb5-4351-405e-b043-672bf9da3d1d", "indicator--1784655a-922a-477f-b08b-5a6b69d0ab9b", "indicator--7430dbc6-a511-4486-ae8e-3395c1d7b6f6", "indicator--8ec0c7b0-d790-4825-a2da-f62c62250c94", "indicator--bd966b0c-8cca-4f1e-be77-66acd90e70e5", "indicator--ee0ee1cd-aab9-4cac-a51f-eef1a8075460", "indicator--e7d3a03b-1cd0-4980-8c9d-f9c189ff2528", "indicator--c6796dca-7448-44d2-ba36-08680ea6c17a", "indicator--9df9e215-ad15-4a55-9f2f-44fca150bf0d", "indicator--9f18b182-990b-4cf7-8db0-c5c402a9e520", "indicator--2275d8a0-e65c-4ce1-bf4f-095c2ded4114", "indicator--0c4c5a46-4ad7-4c71-a88a-02b55d9b13e9", "indicator--cad401c4-19a2-404b-b915-cf3c0b2adbd5", "indicator--aff2b87d-772f-42cc-8e15-a5e3d53745be", "indicator--4344cc40-13be-4138-9bca-a5e48d87035c", "indicator--9b705997-b032-4d2f-a825-2b6e304134de", "indicator--d08f67e1-72a0-4eaa-847c-744797c5cb55", "indicator--a64b9254-eb9c-4ac0-8e0f-ded8e90bed7b", "indicator--e30d41b9-42a9-488f-aff6-6c53f0f420a2", "indicator--1e1df0aa-d9bb-4b4b-8e5c-ec41cdb5feb5", "indicator--38224da0-0bc3-4a6e-a7d6-38c8c63ba905", "indicator--6d2e4cca-be26-48d9-a8a2-c1bc9f310a13", "indicator--c2737cbb-ca00-4413-baf2-7553cb4689b2", "indicator--ae117e72-589a-4a98-a57a-ef4c39738c9d", "indicator--ec6a5f03-9649-4eba-bfa7-653342d7235f", "indicator--f62e1aab-6957-4879-b12a-2964502d5641", "indicator--51b24ec5-504b-44e4-a301-a03725bff41a", "indicator--5260fad9-6d51-4c0c-85cc-c2c5e8839d8f", "indicator--36b40b68-77e4-46dd-81e3-37878c2d0246", "indicator--f5981195-d95d-47e9-beff-05defb13d554", "indicator--5ac86564-edba-4990-970f-0404b881e3b2", "indicator--f98ce2fa-fc14-4785-adf0-7e0263a12786", "indicator--0200d511-319d-43ce-b89d-aa75f13d998a", "indicator--70446913-fd69-433c-9134-11a0c01b2779", "indicator--4fc1cb28-675d-44c4-98c5-13aa562a9c53", "indicator--0cf72edc-2fd7-43ff-b788-a96bf98bb231", "indicator--bbb5cc2b-7034-4a43-bbbe-604393f743c6", "indicator--d84fb9ca-d623-4111-8360-0a32d3937bed", "indicator--3aee650d-3515-4d7e-8a9c-b4bdb1035b8f", "indicator--9850b4e9-bcb0-48f4-8385-e34faccf4a4f", "indicator--dd72a997-b2d8-4d96-99d1-24a959fa0ed3", "indicator--8592d465-0c86-4191-8d16-6cf94d3418f2", "indicator--f5d2d03b-9ba2-459b-b36c-fc34aa739fae", "indicator--17f7c318-e0c1-4ef9-a707-92c5d5cf3274", "indicator--a62549bd-50e9-4ee8-b983-605f8d47a414", "indicator--ff32e447-cf0f-453a-b11b-17cf24ab5753", "indicator--2e877448-77c0-4307-85f7-203726e80d1f", "indicator--ade041cc-0bf2-41fd-ba0f-24d102e887bc", "indicator--7625f28f-8f56-4baa-ba3f-5bd5317ade8a", "indicator--c4fe7d70-3d71-4ab4-89ab-d67beb7fdd3d", "indicator--c3ef85d0-7b1e-48e7-8063-abde88d55e6c", "indicator--abdc286e-fca6-4a34-8a47-16535d1bf360", "indicator--7a6edce5-c5e8-4f9a-ba9f-6af990d67648", "indicator--8bb21754-8bdc-44c6-bfbf-1b08d75a13ac", "indicator--f1607924-c7e9-4ec8-8422-0eeaa09c5e11", "indicator--6a1c2fde-a479-4a18-b7f2-94052a33d523", "indicator--dc130592-fe37-4c4a-b023-87e0def0882c", "indicator--e5c07fb8-7aba-475c-8666-5bd20d5bb27d", "indicator--02b8975f-ffb9-4b57-b902-3d6e90f25859", "indicator--b47f5bbe-b5ab-46ec-89e4-4896743159c7", "indicator--763c3ecc-593f-413d-8fcb-ca6d5e223d72", "indicator--710fd228-a3b2-43e8-bab4-c95c6790d8c8", "indicator--11cf0643-fa5b-4217-bf53-d9cf00a538ce", "indicator--0746773d-e665-4c77-81d2-47c43fcc8c87", "indicator--06a52efc-4e32-47bb-8121-be16f51a7feb", "indicator--4c9f4e71-2275-4fd5-add8-a8ff089ef611", "indicator--87546da0-a8cd-4628-be1d-036df15af6d3", "indicator--30f58478-0e55-42a0-86b9-54c1f94dc38b", "indicator--06255344-afb1-4494-8f92-321e56ccdb58", "indicator--50f4a6e6-47cf-4730-8e35-d007fbe23b11", "indicator--3c6edbe1-a56b-4cef-aae4-d8ace5cc158d", "indicator--e703d568-ae9e-4b1b-998c-de15268517bc", "indicator--e39272bb-e30e-4e9b-875d-0d6677a254f2", "indicator--d6ac1942-2326-4845-a46d-cc478805c36f", "indicator--2f240100-e024-455f-bafa-97bd77c8e806", "indicator--f75dbaa9-36e4-448e-a710-288d940090a3", "indicator--f7d3a9eb-580f-4df8-a5a9-493548e8dca7", "indicator--7b6376ca-a852-44b0-af8a-cc264a8b2d63", "indicator--8f3fc076-d213-4bb8-a233-53fea066e83d", "indicator--d8e9b551-e843-45f3-9032-4d2b25b24af6", "indicator--2d5960f9-d8ca-4b28-9606-48c1eb8d5383", "indicator--3344f0e7-8a8a-4b03-9096-b738716db616", "indicator--c2f9bfd0-0795-4671-badb-b31482c7702c", "indicator--f7ac0911-fe69-4ceb-982d-55b753130e21", "indicator--4d1443a0-f668-452a-b4dd-25e7d146fb88", "indicator--4ea7623b-48fc-477c-874b-4a64045cf85b", "indicator--f41ecb5b-fd4b-45bf-baa5-5cef61670324", "indicator--3b35f263-8e81-418f-8075-816d071e4ffc", "indicator--b5d6e070-e30b-431a-9cd7-c37b3fc2d0ca", "indicator--f68c65e9-a58a-4ab3-9e7f-cfd5e9431775", "indicator--3235b4f2-a46c-40f1-b44b-f34ebf0d0aad", "indicator--b02ea530-5ce5-40ca-9f9f-39c915568777", "indicator--d241a112-b45a-431e-8fe0-127ff216b8d5", "indicator--c62099af-d810-4e3b-944e-4f64a4e80fd9", "indicator--04a5fde0-6c68-47cb-8158-22570b53817e", "indicator--6a8e11dc-bf0a-4648-87be-3523727f2176", "indicator--ec849be3-c584-4c1b-bc46-c7a85ca93517", "indicator--1aa73674-2a88-43d0-8444-29c246e702c9", "indicator--f8b365bb-be4a-472f-ae67-5d9ad68f66c2", "indicator--95b36b34-efa3-404e-b21a-3d85a1313ffd", "indicator--a2df773f-bfff-409c-bb5e-cdf01a9f7194", "indicator--9810bc47-f00f-4d0f-a2c1-d10193a73921", "indicator--d9145c64-ca32-4496-b8bc-6d36e3ac311b", "indicator--bc1a2681-d141-40dc-8c27-0f7d80ff9e4b", "indicator--11a25957-24b6-4ea0-a105-fac2c2aa6c8a", "indicator--cc9cf840-7914-4cc0-a01b-46017a3b2dd1", "indicator--ec529442-f1b7-48c2-9d4c-a7965d31fda4", "indicator--716a5c6c-4802-4951-bbee-868d4ad88a35", "indicator--184928a7-ac54-499f-96c1-ad3dd19211ad", "indicator--13c2101a-eeee-473a-847a-92c6e6f9eae5", "indicator--a2a7e8c1-81e4-4627-8b64-2e4e7a2e06ce", "indicator--03dbd382-86fa-40cc-8440-b25abeb3b4ab", "indicator--3941f509-15b7-4a33-825d-1cec90d40bc5", "indicator--ec6eb7e9-6f3c-4217-8590-b3d8a4f36150", "indicator--007bf06f-822e-4763-ac5e-29bbce04be6b", "indicator--5b2025d4-c351-40ee-bb17-60642cfd2c57", "indicator--6beaf6ff-0a93-4352-b56e-6abe72efc433", "indicator--28c01734-3be0-4ad6-b6d9-b5b201e599ad", "indicator--89a3c030-e31e-479a-aec1-c39646989dbe", "indicator--f71d97ff-0faa-4961-b5a7-ee45789e94f5", "indicator--2e2d4588-c586-44dd-a0e0-604770d50842", "indicator--aef37c30-0d7d-4bf6-8d68-b1f91516c412", "indicator--7c07bbb2-153d-4ed1-9142-2899a265fda4", "indicator--6b4dea7e-17cc-4da5-9b60-8483c5e38dc2", "indicator--b7c2a185-9f85-423a-9ddd-187eec7e8bb2", "indicator--caaa0910-b280-44ef-9815-dfcd9a03367e", "indicator--0e18d617-9198-4814-9d49-e0a5f60fc7d7", "indicator--3e24320d-2d94-465f-847e-a878c1528a88", "indicator--01ae4039-bffa-4a57-9779-c5c4f6d77a4b", "indicator--eea0cd94-3df8-4385-8698-4315d439b868", "indicator--c3a6d47a-95bd-47cd-9b0d-6b00f516a275", "indicator--f0712f9a-ec9e-499e-a4a5-614cf8de010e", "indicator--7e13cbbb-566c-426f-a5a0-0f74a807877f", "indicator--2003b641-1747-47f3-8d12-fb313ecdacf8", "indicator--2bfce413-b254-421c-a409-c25c54f379fe", "indicator--dd58332f-0c04-4d70-8f9c-cba6f1919026", "indicator--e372830c-6e4e-48e7-a290-ae19f9b529b1", "indicator--ae89e60c-39d1-4d2d-929f-01052c84e723", "indicator--2e72864a-7959-4603-b4d6-fc4ce47f51d2", "indicator--e2615f86-b173-46a1-ad78-b4fe8cb22c92", "indicator--5c8bc37d-2ac7-4570-8bed-abae32544681", "indicator--75c01628-4808-4774-8726-b3ee87ec6868", "indicator--7cf6bb60-e96b-4bb5-9b12-cd8545cdbfae", "indicator--a506ff8d-837b-4dc1-bf8d-10d3d6e12091", "indicator--4fb1d51a-b78f-467c-83b0-6435db461f76", "indicator--c9a7e859-34f5-47dc-91d3-f79b8eb9e1d9", "indicator--9a021538-45d5-44ed-8754-2d17303a8ab6", "indicator--0716e329-ea6c-4549-a19d-b6d9ef5a45e7", "indicator--f389d80d-c8e8-45b2-b31f-410a032ee8d2", "indicator--0d3cbded-ebf8-4101-aa71-ebf360090481", "indicator--b0c65ed5-3fab-4b40-a12f-c02873fcbb7c", "indicator--1fd48bfa-52a7-4f1a-babf-2c7a49a07ef0", "indicator--f9f033c7-0e2a-48f4-b2e5-d417b70806c9", "indicator--13d9b2ba-0ced-4cc9-ab2b-73dcf30b0a9e", "indicator--da78e006-d0a2-4c78-8e82-53b971080272", "indicator--b1b70e46-d882-42b3-963c-b4b5ac48089a", "indicator--f20f4c90-1feb-490a-969a-7d841e5e77a1", "indicator--a77a08cd-05d8-433e-88ef-925a97dad872", "indicator--210d2ec9-9594-40a5-bc90-cbfa3159c0bc", "indicator--c5a7a2c6-70c1-4859-bb66-532b7a2218b0", "indicator--b16b6102-41da-415b-9041-d933cd97f323", "indicator--d448c07c-e3a2-48ef-9d04-37adc44c1e4f", "indicator--d2e89c49-b7cb-4e3d-8c97-3a5977694976", "indicator--33db245f-4a36-4610-993d-867657b24920", "indicator--83ca3890-518d-46af-8609-92fe7c8181ae", "indicator--c50055e7-8ba1-433a-9afe-951e3696618a", "indicator--1202f497-c1a6-4ba9-b59f-d4b760923970", "indicator--e0524315-f09e-47eb-89ab-684d0d33a646", "indicator--0800a78a-182e-48b4-8562-2920fc95b66f", "indicator--c1a98761-d647-4bf0-bbbd-83057f9c7d3b", "indicator--c5b599a8-c3a4-484e-b74d-e35cc41f68c2", "indicator--435a0ca1-6aa7-4cd8-ad31-735383f21c38", "indicator--4bad06da-622f-4915-9d92-a77654f2689a", "indicator--fbaa029f-d087-4523-826b-796f80e096f3", "indicator--39719fc1-ae61-4fa0-8313-a30bc2ead745", "indicator--4f2e3b42-d125-48c0-9e1a-a981a17acb64", "indicator--1771191c-9411-4a91-b34b-f852b37ae9ea", "indicator--09a189c2-0f96-49ca-8b3b-36980311457c", "indicator--7880c8f2-b70d-4215-a0b0-cc7c09f98c4b", "indicator--03dc2b67-ea14-42f7-a3e1-bdd09c4f239b", "indicator--c3956b44-0d9f-40ce-8903-10a8bfe20af0", "indicator--3b00801f-bd30-4c5d-8983-19abe24556c4", "indicator--c58fd090-e002-4a14-9a74-407ff6469f3b", "indicator--8f381938-732a-4ff1-a446-e1ebecfb9904", "indicator--d9bff035-31fb-4551-b3c3-9657e66019d3", "indicator--d78d315b-bcff-4384-a78e-56377463894b", "indicator--63382bf8-f1a2-463a-a4c5-cc8550b962a1", "indicator--775a24bc-8f6d-4ff8-8080-90168737377d", "indicator--294d0c95-370c-4d99-8802-87dffdb873de", "indicator--d4e9643c-eb31-41f8-8481-76d9d30b93dc", "indicator--c7b57314-d207-46c4-8803-c1640fade781", "indicator--64d2b110-f954-4536-b450-b030eee22c92", "indicator--5374c8a7-3a47-4cde-8a72-2de436c257d8", "indicator--8eaf8b40-7f2b-42db-9cbd-2cecbe6f4319", "indicator--982a2536-d185-4ee8-a933-6f43909a0d88", "indicator--c11bd89c-5be9-4f3a-8fc3-e641e83b0e72", "indicator--e430eae3-8549-4277-85b1-f1319a94bb09", "indicator--f054a9f4-4973-4e52-bc79-c6e2c4b92c15", "indicator--e14612e8-328d-4d4d-ba16-661bc8a259e5", "indicator--675fd6bd-3bfe-4f9f-a81b-3972ce5b2506", "indicator--5d6e67fb-d99f-481b-9460-d02a80e5032c", "indicator--df98c3b6-b2f5-4672-befd-5911ab959845", "indicator--9fd824ca-1c07-412a-9325-2e48f69bd3e5", "indicator--c38cd170-d376-4ea3-988e-aa63a64df658", "indicator--8edbd95d-4b40-4332-a150-75c05f2bba13", "indicator--b43cf83a-5f6f-468d-bc04-d5314483e4aa", "indicator--eb4a60fa-182f-4b5a-bd24-4425171775d5", "indicator--f5e9dc96-6ec4-4d53-9a32-c79730c6a3b6", "indicator--73538d93-af36-4139-bd24-abe54d03f2a2", "indicator--624f53d8-353d-433c-84e2-21a08e8efd00", "indicator--ee6dc72f-dbf2-445d-b784-35f6df39e69e", "indicator--d4a9d46a-4957-4ecc-b1eb-4a570d755410", "indicator--2444a765-4f7e-4f3c-a9df-d6326277ee50", "indicator--12695abc-dcde-4784-9336-2d50196a47f1", "indicator--7ea69f84-c0a6-4ce4-8b0d-bb7796691621", "indicator--0b350b0a-7ce6-4bdf-89b3-84330b755afe", "indicator--0dc8ff88-a275-4e69-b513-fa1adfe77978", "indicator--bddfc6ed-ab02-472d-989f-7cdb948464bd", "indicator--f6b5f109-24dd-4376-8a89-3971e41f7c2a", "indicator--5aa52300-2aa9-40fb-bda8-d131b01584a4", "indicator--d63ca70c-fb86-4893-a2a5-d9ec180201b0", "indicator--67e4d716-4c8d-4a22-9952-ec3c0f284c49", "indicator--310ec5c5-c4d1-4bbf-8216-215b0171499f", "indicator--a036259d-bfee-4ce1-815e-d2e49a95ab42", "indicator--f9fcd51e-5fdf-4632-a031-f82f74cd8d75", "indicator--1b41ab30-27cc-4505-ac18-614a3c30a7e1", "indicator--030500c7-dc20-42e7-879f-b93cda0fc766", "indicator--613b3ee6-ea17-45b5-9433-930bf6eac6e6", "indicator--4b261880-1aaf-4458-bfea-1b421df0d748", "indicator--43946bab-abc8-4864-8db3-5fe834904d1f", "indicator--82a81bc7-702b-4456-855e-cca7d083cfc0", "indicator--70d3dc83-0f06-40b4-8050-59c61529e5f1", "indicator--33627f25-b2b9-4bce-947f-fb7332838990", "indicator--2e44d27f-c068-471d-bc0f-20a2864f8d01", "indicator--5718a3b5-5064-44b2-bca0-c0ed8546ce7b", "indicator--acba297d-f501-46d8-a916-dfaa11cbb586", "indicator--bd73162d-24b6-4eeb-ab6b-4c64edaa7e40", "indicator--17ef7cec-aa69-496d-8d4b-68f861562660", "indicator--dabbf474-3881-42d2-8b44-1815bae22a82", "indicator--d9aa6b55-d657-4d49-9f13-384ecad39787", "indicator--8653c30a-3084-4422-8053-86793e24abe3", "indicator--622262d7-e271-4374-a56f-28896704905a", "indicator--d22f177b-81f2-44c9-9831-2cf0803ccf62", "indicator--1979887d-d361-4743-817a-70fa0eec6ce0", "indicator--f51f6450-b79b-4791-8d8a-12f329ae3873", "indicator--829fb003-d304-4d4a-8b90-488b9d897b14", "indicator--9d6eacb4-443d-4db3-b352-bce6e1b0e2d2", "indicator--7c938c83-ef6f-42df-aa8b-8d994f7ae732", "indicator--fa81cbb2-9cb9-4bdc-8f17-8b1b51d5ed8f", "indicator--6d02dd84-8539-4439-8f96-e04aff683715", "indicator--9a9fb2d8-8665-4803-b4bb-cbdf7e8e37de", "indicator--8528e5ce-ae11-4f16-a4b7-1e083a5bfba3", "indicator--5af13d93-a984-4f28-b23e-234a55eaa8b4", "indicator--61d0429d-1cc7-4ca0-b2cb-62924bcf0bc4", "indicator--53ced23b-2354-4ce7-b1c8-cdeee848df44", "indicator--87261f6a-3215-4329-8234-04954c79df2a", "indicator--8bd7ca02-92be-4de7-acad-dc5b03a07ab8", "indicator--ee97fb9d-5bcd-49aa-b784-30627c72c05b", "indicator--b1a6d14d-ef3b-4f67-9b33-1a72f44b926d", "indicator--437a5536-24a9-4c59-93f6-f0898bdfdad6", "indicator--a83e4471-a591-4a4b-86ad-c26b99ae6fdf", "indicator--4d246bd7-2668-47f1-a739-6c1a7f1fd1d8", "indicator--230b1b8b-a7b3-4421-af87-b18a9b662545", "indicator--bcc0d955-d357-49d2-83d6-846c104b74ec", "indicator--48f48ef3-9480-4235-aaed-6936cd2cf0eb", "indicator--ec4cd9f5-db6e-4031-b505-1e5ade7e816b", "indicator--8fd22401-b554-4212-88cc-d4703d0811be", "indicator--6f1eaeb2-d071-4ef1-b176-fbf880abd07c", "indicator--6265aa7a-0c05-4764-8ae5-d4b5b06d9322", "indicator--78b6d555-d6ae-4569-abf1-21fc9357bc90", "indicator--b5325f59-97b0-4ad2-b922-b80e28be1000", "indicator--32993d37-8457-4360-9f4f-91082045991e", "indicator--3aaca178-9dc9-4375-bd95-6b265df62018", "indicator--48dac1a4-1cf1-42ec-9945-6b464c90695a", "indicator--8f93d9ea-9dfb-4fcc-92d3-3b5a74d125b8", "indicator--05d5350b-040b-4aac-8ad2-e9f13c80bd12", "indicator--32d78679-46f8-485b-90bb-b49abd0aef83", "indicator--baede8bb-7b7c-4f1f-9f10-f8147cbf600d", "indicator--ea72349a-4f7e-4e58-b97f-d8681d1d5e96", "indicator--55632348-5a92-437d-8c70-1d2d139983de", "indicator--d74468ec-9d53-46a7-bca5-899a9d90576a", "indicator--4a2c1784-daa0-4a0a-8673-e8239646eaaf", "indicator--f3853824-a73d-4834-bfe1-019654c2ad7e", "indicator--0dc2bdc8-7e33-4c95-b59c-95b0d37c9f6b", "indicator--e6617b83-07f5-4450-ad5a-cddc756a9e1a", "indicator--74ede954-2de4-484b-83b5-df6d3783acdd", "indicator--aa8365d4-6c2c-4afe-b31e-ab10e7c65b67", "indicator--505ddaae-a68d-4e15-9a29-549ed875449a", "indicator--989f6f49-0612-4468-ae03-62c33965b46f", "indicator--35c47a69-f6fa-4c68-94bd-ad1695b959cb", "indicator--5b139800-fb15-4497-9a02-9072797111f7", "indicator--e0f7eeaa-9aae-44f8-a4b7-f04297af7142", "indicator--9a6ef4ec-f32c-4a6e-b486-8897f295c42d", "indicator--6b170a49-dc2e-44eb-a477-bb7a981583f3", "indicator--c18c9ade-96a5-4be8-a3e9-955d7b53b870", "indicator--bf58dd9a-0a75-49d4-a5a1-6dcd2258fcac", "indicator--165f9b41-feb8-4550-b7ff-85790e7247e7", "indicator--bff50fca-e8cc-4aa0-9e04-c3cfc71a5a05", "indicator--8e717251-b288-4795-a134-63be757fa153", "indicator--5ca133d0-590b-4618-94de-43a4987cb47b", "indicator--3ee0346d-6901-41f7-8d0c-2a3019bc935b", "indicator--3aefd0eb-7a90-492c-b9e7-7e438ed229b1", "indicator--204becac-eae7-4164-adc7-95a709928c75", "indicator--918a69ed-d651-4311-9bb3-26c3417506bd", "indicator--bdfa98e8-d0e3-4bd7-af6e-4ba9a0344728", "indicator--c1c9b34a-2a2f-4de7-a327-680003230670", "indicator--2320f24f-879c-4801-a29f-a7ee7eea7302", "indicator--74fed43f-034a-487c-8230-83d294c53a60", "indicator--a6f3fbe5-e300-4ab6-871d-ce501b0e410d", "indicator--fd5da5cc-8b4a-40f3-9aa0-468b74124232", "indicator--ff1cceb0-6ac1-4ef2-ac01-02ba0b464923", "indicator--17af0fa0-5e33-448f-b938-ea58b70ccdc7", "indicator--00f7d04f-8dcf-4344-aee4-e36af7371b95", "indicator--b8e84a39-8a95-42c7-bb4a-0eb80f8666f3", "indicator--21c87653-1407-4e91-b2a1-609b39058c0e", "indicator--1e76fc29-44b2-484a-bb85-eac054838eff", "indicator--984d1703-16c4-402a-98c3-1cf66482c232", "indicator--84b63246-67bd-4f12-a139-8fa192b88a1b", "indicator--02bc5330-8011-4a0c-96be-4912f9610110", "indicator--b9790a4a-c3ca-47c5-ba0b-1db7b3c180f9", "indicator--022cf27f-98aa-4195-8a45-c3a20948faec", "indicator--4475b0ca-1719-4104-b68f-174892a786bc", "indicator--71ce59b7-16ff-4f86-a2c8-a6905f6ecae8", "indicator--6dc1f1ec-47f9-4d99-a077-863089ceff50", "indicator--f2cf2371-cf5f-405f-94ce-637b8b0800c0", "indicator--9bd4f60d-c933-4861-824b-adefecb45257", "indicator--ea12a94c-874b-4098-aad6-2ae25bdf9cc5", "indicator--c8e87f9f-ac15-4f24-831e-556635cb0954", "indicator--27d3361b-13da-4ed0-824a-7d660304c79d", "indicator--bdf032ac-b000-4a68-91c6-aa31bf235077", "indicator--872f6bd2-2740-4bb4-9766-d79cc4bda8a4", "indicator--a4dbf93a-af0b-4471-9358-23004bbc76cf", "indicator--7bd8f426-7957-44d7-a284-bb7574f302e0", "indicator--f2014f84-9b27-476a-a7bb-2c679b9c63da", "indicator--0b645c69-6b8f-40ac-b421-bdf291454b76", "indicator--a488535b-ed7f-45e8-bf87-8294dcbe24d5", "indicator--eced03ec-624f-4757-95d4-071d6ac596d6", "indicator--d1cff4b2-10eb-40d5-8941-a11a9b4b4a5a", "indicator--cebcce1a-f374-44fe-bbf5-3c20e77b7a05", "indicator--8f7fa811-b5aa-4aab-ade6-8b4de23ec181", "indicator--4d34dfc3-721b-4c09-b74e-74b4595246d5", "indicator--8d074a36-0ba3-4496-83c3-e3a5974a0c56", "indicator--490cfabb-beaf-48ed-b5a4-1f2e255a7d80", "indicator--ee97a300-60d0-4215-8fbf-33706bc69e6f", "indicator--a68d12b8-b7d7-4b42-a63e-dc0563400834", "indicator--75a38b00-ff02-4d2f-b6f4-1f28f39e831d", "indicator--87dd5d9a-f8d2-46c6-875a-e2d76d131e58", "indicator--7791f569-86bf-4d2d-b4da-ddcb612ed4eb", "indicator--8f3d942c-7aca-410a-87be-eebf5025839d", "indicator--044b0c57-105b-4b9f-a06c-4e598b3b0610", "indicator--e23850c0-51a4-4b15-bc02-12bf36205f89", "indicator--2c242f59-c7fe-4dab-baac-f8b2dfde6b96", "indicator--552f53d0-306e-4890-8846-1e429cce9dd5", "indicator--e1b03875-465c-484f-be2c-5d68104c8d7a", "indicator--1a3cacf1-7184-4b5b-8646-e740c64e2869", "indicator--4e2a2f2f-eb4d-47b8-bd66-0029196a8563", "indicator--8fd65c80-f33c-421a-ad1c-79ab4e4824b4", "indicator--d0d52877-23a8-439a-bedd-318e8b12efe3", "indicator--83ed7dfe-dd7f-44d5-94d9-03dbad79506d", "indicator--cd3c0f75-49ed-4983-8caa-5e7bd8fd7b73", "indicator--5d6bfb9f-6741-4089-bf1a-24f6bc95d788", "indicator--24ab3033-0ab8-452c-8f57-37817314f2a2", "indicator--9fcd1e4a-aca0-4581-8d0a-f255436494dc", "indicator--74a30769-37e0-4325-bdbe-b1ac217accc1", "indicator--03156a79-6d2e-48e5-8d17-fe800e17d0b8", "indicator--fa471e3d-29d2-468b-ac54-c27be3e7094b", "indicator--8168c913-86b8-4620-8107-f80d758610f9", "indicator--d1331887-d2bb-4f0a-9dc2-0b19ab02cad8", "indicator--6449a94a-2cda-4b1c-a8a7-7ee6f7daf1e1", "indicator--d4eb2de2-2174-4419-8e08-ef2d35b45dad", "indicator--064363f6-3504-43f5-bab8-69b2cd915973", "indicator--44b9a2cc-c5a1-4e2d-92f8-e523bfccb05d", "indicator--1f5d8998-9dff-4ceb-a6ab-0c316083778e", "indicator--f41fe364-7d27-480e-a788-05e2fa50d9bf", "indicator--1791e22d-c420-42f7-84d9-a8bffa5b82ac", "indicator--569436cc-4bf4-40a2-921f-f77b5e25f7d2", "indicator--4477659d-bb99-4dde-9c2f-be4bbd7d00e1", "indicator--e3d82b88-a1df-4f0e-a0a5-21f172f2ab53", "indicator--c86876e8-c8ac-447e-b33a-e2a631271fa0", "indicator--fc0c1856-249a-471e-8960-9a0cfbfca849", "indicator--f1c4a7dc-d950-4d9e-9444-0ac2db6d44ad", "indicator--5f79e2f2-93b9-441e-8368-7dcd7e2766a0", "indicator--10caaed8-5992-407d-9530-bdc6c05795f1", "indicator--67d1d767-c8ba-4df9-92cb-4f30f09d5fdf", "indicator--606daf1b-cfcf-4137-90e2-9bebfbc0b8bd", "indicator--bf4a94b7-54f2-44a4-8001-97eceacf64c9", "indicator--91edeaff-379e-451b-82f3-35f3f1bbd2e0", "indicator--f5cb46cd-17b8-4a13-8d64-f05e9f3c377c", "indicator--28d94971-419e-441a-875b-a7baedc7cc5a", "indicator--35449001-0d9e-49ba-8874-2874ae7e5cc3", "indicator--971da28b-ca47-47da-b6cb-8f1bc2d0e5df", "indicator--ef901b57-122a-47bc-a20f-f82c57be4194", "indicator--ab5b76a7-7a52-4f89-a3cb-439e6f7eef8a", "indicator--476859c6-c5f0-4ff7-a901-8bb3093a59c1", "indicator--165c3be7-e535-46e8-872f-6d770083746c", "indicator--c035ce56-bf12-4f6f-a60d-2b129945fb8a", "indicator--28e90525-af86-4898-96a5-0a076221b818", "indicator--49481b45-6bd1-465b-be6b-0455bdd98937", "indicator--e22f722f-3536-4db9-9637-cfb9c93285dc", "indicator--5c4e16f6-829b-4371-9acd-f069029f3783", "indicator--3f506845-145b-4da0-a2f4-407426c7b25e", "indicator--285ce48c-84a3-47ae-92f0-dfdc5ebf76c4", "indicator--c0b0a54f-4b86-4603-8780-8007acc182e0", "indicator--df138472-05c5-422f-85a0-0c5f67992bd5", "indicator--9296501c-4a1f-4cf1-b48b-42bddbb30b32", "indicator--8fde55ee-77d1-4a4b-a311-0f0a4615036d", "indicator--efd693ed-8d20-4fe0-8f14-35de7c84ab31", "indicator--f4cb442d-c466-4e70-b465-1697581b289c", "indicator--40a42a10-9229-496b-8883-139e3e631ce0", "indicator--19247db7-02c8-4f87-9fad-2fe8f2d7eeb9", "indicator--136c21f9-73c9-439b-a5b8-83406dc9fafb", "indicator--9e76e7a9-6d20-478b-87c6-9cad1e58974b", "indicator--4992b2db-230b-4cd6-b6a9-c707873fae34", "indicator--769a703b-d141-482b-bdfa-7c8ce57f7ff6", "indicator--1dad8ba7-dd00-43da-bc12-ddafa5ca4f8d", "indicator--c66818d6-7c30-4b1e-9f7e-0e0575cfd1e7", "indicator--b2533407-a54a-4210-a38f-a6908000a614", "indicator--50c938d9-7383-4f7d-9fd3-eb9b7ca4545f", "indicator--f5348826-0d5f-4d68-8fc7-bb9ed860f942", "indicator--89253797-f864-4d7d-a1c6-9c3603e44f28", "indicator--6dc41ae5-80b7-43fd-b308-31cab2bcfd3b", "indicator--7dc1126c-8d1a-4554-97a6-27e4465b12f5", "indicator--8b17bd87-c56a-4a89-b318-d35b11c0fb91", "indicator--256343a7-bc96-4ad6-ac30-feed67126e3b", "indicator--b96c54da-82bf-4e26-bc86-047c48f1a6fe", "indicator--5b3f4204-c18b-4a84-b8fe-c166fc538f30", "indicator--7a404598-f02f-46de-b3cb-2169bc9729f2", "indicator--f7b40841-d8ee-4370-b10d-86cd8db89f2f", "indicator--dedc3bd5-f046-441a-89ae-4230650af7ed", "indicator--f4052a28-87e7-459c-a3e3-3b47d9860ed4", "indicator--5d1528ca-47ff-42e7-a5bb-2d85b934e7e4", "indicator--ef6bb3e7-85b8-40da-9494-4bb2c29aa9b4", "indicator--ccad5456-01ce-441a-b61b-5c2c60c1fbda", "indicator--82236e81-1f30-4e70-814a-4b316cf8e460", "indicator--5903fcf8-5a67-498d-9b25-a1f322ff820d", "indicator--62bef243-2675-48c4-af10-7db51a70c6bb", "indicator--eb57902a-46a6-4c82-ba31-7c6af2d68449", "indicator--b0837ec0-d301-4ca6-819a-43e8c9af90da", "indicator--eedfba60-2004-4ddc-97cf-dcc214cd4a1f", "indicator--a27b3abb-5351-4748-87f4-bdb537791b04", "indicator--787ae905-3a28-4f3c-9d99-5ebf129d238d", "indicator--46dbad4f-c3ac-4b6a-a186-c5c3cd1388fb", "indicator--6b078562-50e5-4c3d-897c-941d0a6c5789", "indicator--3c08dfdb-a679-48a5-9ee5-36c1dcd5642a", "indicator--eb636749-441d-43ec-b7f6-328404cd5305", "indicator--cc9f8a09-4b09-4a96-9665-3ae55badeb2a", "indicator--c2f685e0-888a-422b-ad05-4f4b5e134c28", "indicator--82e2871d-b48f-498e-8e67-59b3b44b9f1c", "indicator--4bc8e0b6-1cea-4d60-a74f-6896e22c81a6", "indicator--b3020184-5d91-4cb3-bd6f-3e9890bd16e7", "indicator--516ce569-8081-425d-86d8-24c43d172949", "indicator--324e118a-7601-46cc-aa43-e47e906ee99b", "indicator--a2592117-b1fd-4c27-869d-abe52430200c", "indicator--f22a3eb2-716e-489f-a1c6-91b3373efb86", "indicator--5b981723-8f52-4c63-8210-1bdaba164a8c", "indicator--593180da-def0-4195-8879-78c3ebbdbef7", "indicator--013fc537-e839-4cc0-87e9-f8f8c9fa7b59", "indicator--97f68cb8-cf27-4d6f-a14b-31209b2d415d", "indicator--454ae465-f56d-41f9-8c23-cfb7a36146b2", "indicator--917c5da0-f4a4-4c4f-ac32-c7cc1645446a", "indicator--ac81b2ac-129d-4d27-9d43-7d38c74492b3", "indicator--66081053-2cc3-47e2-87ce-435ff35d7e7a", "indicator--5b723279-c48a-44d1-8acc-f9cb3be63b6c", "indicator--87d6d625-dbf0-4b4e-938c-a2043121e5f6", "indicator--73e2fcf8-4c68-4ff6-bd5c-89d1acf1244a", "indicator--2f162771-150c-4e20-b61a-071f8311ec2c", "indicator--a3f43294-9688-48af-88ce-105cc09ed9a4", "indicator--6cfa5448-7ea5-4ebf-a227-2e7d12e9e67f", "indicator--d93ad94d-2865-46b8-bbe0-2440b9db77f5", "indicator--1629f430-98eb-46f3-8cb3-adcffca3bbbf", "indicator--1bf37e4e-19e6-4916-9a4b-3f9f6495b58c", "indicator--8f0d24df-45af-4ac2-b5f1-68691f3899d8", "indicator--d5029678-2d59-4d0e-a49f-8e5c41a60780", "indicator--4be127a2-3e38-430f-97f5-a8ef814e677f", "indicator--17ec439c-65b1-4fcf-9d32-7ed75e050ade", "indicator--cb5be47b-8822-46fd-bc7b-2f9c8d634b3a", "indicator--105b820d-f5ba-45c9-a451-a9cd2a3f497d", "indicator--8a047986-c64a-4b5c-b6f7-543e94133f2d", "indicator--fb3ff0ec-74e8-4090-a138-74f023941735", "indicator--49f73c92-6ccd-4f9a-afcd-7c244209912c", "indicator--ed16c685-0f9c-460c-a4e7-bcad5404af4a", "indicator--9b5a7f94-ba52-4b29-9a5a-2496eb9cbf85", "indicator--85ffb923-a2c0-4929-9ef0-920dbce735c2", "indicator--4a2683b3-42f6-494f-a0c5-877df92b361f", "indicator--db14ba97-9468-4431-a90d-68089d980673", "indicator--f111e939-1b83-47f6-b0b8-5ec88ff879cf", "indicator--e893d71c-d8e5-4dc2-a6c7-1a2d4ccf9da0", "indicator--4eb1ada3-9f37-4776-aac1-36d09259c635", "indicator--33c84154-d58c-4dc9-9cc4-1535e002279f", "indicator--9d0e251b-d73b-4776-9144-886ca3173562", "indicator--9c1e56d9-dd4f-4cd8-92db-0b7269c3712b", "indicator--c49e3ce4-cd83-4969-afd0-68b7b1ec8239", "indicator--c42afc5b-784e-4320-8df4-d60ca6b3c2ee", "indicator--45858fc2-a069-4ffe-ab38-397bf70294a1", "indicator--802edb7e-9fe6-4837-9c47-281c25de9d27", "indicator--c8c42610-4e4a-438f-8032-28b3656054b4", "indicator--7b5c39dc-2619-4cd7-819f-a07b18d77c81", "indicator--e3035b14-a12d-4b1d-afa6-02ce5d2f739a", "indicator--f97b1def-9a0b-48e5-8014-532fa1119a09", "indicator--d50a82ce-69d8-4c1b-9d6c-78a7cd9c86d2", "indicator--9db5567e-13cf-4328-b986-626eb8ee718b", "indicator--d6706975-94d8-478d-ad02-504f6bbc0a47", "indicator--ca7573b9-63b2-4321-bdc7-109ef7a3db7c", "indicator--4f474117-d604-473b-8b6f-880e03b71bee", "indicator--1b9e34d0-808b-4069-8e8b-e11ed676c87c", "indicator--f7a6b906-f32e-41c6-bdcd-9cd81680adc9", "indicator--2f4bb052-5343-4f58-ac46-6bc0d377d304", "indicator--5ac8fb30-dd6e-4e38-b88b-290bb87f8a21", "indicator--d0b1dad3-3ef8-437e-a9a5-788df1e90c36", "indicator--fd308744-6c0e-4dc3-9071-e6d42b7c0a68", "indicator--a1e71e37-b22d-4094-b7e2-e7c0ce657d6b", "indicator--7b871bc3-daed-4a4b-a133-4976e9b2a78d", "indicator--9f7d3208-41c4-450f-a35b-91e02c73b75b", "indicator--864dc525-8c66-4aef-983d-7fc606ac7a61", "indicator--d8fb5e16-2db7-4e9b-9825-73c50167bd94", "indicator--3f1c1e73-4271-4ef4-81f8-080b11afb106", "indicator--bc97ff8c-6937-486c-9165-b514d46c095b", "indicator--b78c511d-57d4-43f4-a024-a907f7cc0ab9", "indicator--5f096cba-0e4c-4eae-9c84-f7eb9c35b0f1", "indicator--bbcc6782-e8d4-416c-a1f7-d0230fd538b6", "indicator--64243a6c-1d24-4b81-adae-ea059d49e08b", "indicator--17899155-35d9-4d57-851c-bfc608df086d", "indicator--a423df9e-e258-44cf-9edb-a277d13405eb", "indicator--17ee86fb-7d1e-4c7e-b31f-2fd8fd01c2bc", "indicator--cccac452-db54-4249-96a8-9fe90ea5209c", "indicator--e72965a9-44be-4aeb-b93f-2e8dd8da00e7", "indicator--3c984691-c7bc-4059-aaa8-be5b93d7cfe0", "indicator--49045cf3-61a5-4c27-9a7a-5660a239f4b0", "indicator--9502ebb6-8222-4dbe-997f-e53cfbddbead", "indicator--f97c0206-a12f-4869-b24d-e800edbd0b5b", "indicator--077f28f3-3780-42b9-a787-785bd32399c5", "indicator--3f115e25-2ac0-4147-bea2-26802517006f", "indicator--3c7439e8-af1a-43bd-bff5-89d3c81208d4", "indicator--99594128-c775-40b1-a240-6ff4584debd1", "indicator--5b5fb6f5-224e-49d6-84ca-52ad7f70ab52", "indicator--32ef5a35-47e5-42fd-a010-40e491f6a0be", "indicator--8878eb1c-241a-4671-a489-d3519fad97c8", "indicator--4ddd1705-d92b-4e89-a6b6-dff89bd07e65", "indicator--ec1c914d-c28f-4556-a812-8d68b8dcb2b2", "indicator--23564c51-09e0-48ce-8bc5-c07a790a0230", "indicator--88bcd5cc-b30d-49df-b8fd-a882f55c65da", "indicator--0973cbde-5327-4921-a648-a75a0283f24f", "indicator--2c5b65b0-c2e1-4956-91d9-19ca6de0fc4f", "indicator--96a32f9c-ed6e-47d5-9548-6c197c06b7f5", "indicator--3bd06738-5173-4311-a80f-66c1fadfe314", "indicator--76f496ff-02f7-4dc6-a8e2-f11a74db6c8a", "indicator--af87f95c-e8c0-4cb1-9129-cbcb902f67a2", "indicator--9a0e69d3-2fdb-45c6-b9e0-777e4d3fa3bc", "indicator--33d31581-3136-43d0-9a76-4528b1591b6f", "indicator--2917f25c-15b4-4f0d-ace9-2d231c5758e8", "indicator--c205fa8e-415c-43d2-87b6-e1641477e554", "indicator--141f1e6c-ceee-40aa-839e-8d0efce67e60", "indicator--dc0186fa-f9ce-498c-9969-2e6fe67804be", "indicator--a1deab4b-59d7-4a86-973c-b326965f15c6", "indicator--8ad0cc93-079d-4b63-81f2-2b1c263efe12", "indicator--d7720ebf-7ead-4d3f-a9ce-c52bc78c4272", "indicator--006f3e52-f419-46af-9174-db1ec8063dc4", "indicator--0c2f589a-9fcd-4ada-bfa0-2a569971b3bf", "indicator--37767f2d-48d8-40c4-a6a0-d7f17c659191", "indicator--52c7c542-cfa0-479b-ae42-5bb495ae4e57", "indicator--28e0ee71-47ed-4e0a-af65-2ef782d2d3aa", "indicator--2a665e5b-874e-4213-a2b1-0334931523b1", "indicator--582d2955-be16-4ee7-b5b9-a44636717055", "indicator--6ee8b5f9-f710-4499-b8e7-9cde810a2363", "indicator--d1a77e26-591a-4135-8f8e-95fa30fb2303", "indicator--4a60982f-50ed-4f26-a14f-5d8ce93e6e90", "indicator--934d6b57-08af-4d4f-ace0-2a3a9118e04c", "indicator--da51c68c-0a70-4130-88e4-7049a9a422bb", "indicator--8641a3f5-21ed-4ce0-a4dc-96a6d2646288", "indicator--d1761b99-9799-4684-95fe-aaf1ffe484d3", "indicator--d8c832bc-66c2-4831-afaf-3a1ff1149387", "indicator--fdafb71e-e145-408b-b629-e10c1f1ff686", "indicator--2e840eb5-735c-49b0-8287-fe6960d482d1", "indicator--f17389e4-b7ee-4b7c-8a86-a2a3cfd63e26", "indicator--bc8ce4fb-d020-4b79-b232-81281ee99a68", "indicator--01cfb968-8796-4a62-af8f-1ac2141c8595", "indicator--ffa4fcb3-7970-4b95-96f4-bc1d7e389504", "indicator--3af741bc-ee3b-463b-b767-3b772e00b936", "indicator--c1377208-b2ef-40d8-8bf1-94f54b05e5af", "indicator--c7066f57-fb9d-4c4f-b638-52d56a238087", "indicator--3e5bfaa1-a027-44b9-813e-b031d0ae5add", "indicator--2d2a1ebb-dcc1-4e94-be57-9819a82ae6d3", "indicator--802a12ac-ff57-4bbf-aa50-19adfea0c2e5", "indicator--c7aad779-1fb7-4ae6-859c-94dc416803bc", "indicator--590ce9db-1d71-4cac-a8de-5167fceb7181", "indicator--1a828d22-3cf2-4386-9fed-cbbfd0dc6d7f", "indicator--e72efce6-fd6f-435f-bcf7-da80ad084c43", "indicator--4707a7c9-c0af-4b94-a4ad-c0e1a5e46e30", "indicator--fcd30a33-582f-4c95-8f16-cf0223450257", "indicator--c2099997-1119-4aa4-9da3-8880507c7797", "indicator--8f0f2bd0-c4e6-43d7-87d0-7dff74e7d092", "indicator--42c98355-fd04-41cd-8e97-45e9eb46552a", "indicator--8f6071c9-7e3f-468a-86e3-9174f6a2b6eb", "indicator--ab97f2f8-2778-4b26-840f-8d32826a1c59", "indicator--610ee34a-d3b4-42bc-8af4-bf2a43c23df5", "indicator--01fe730b-6e6b-4621-8d1a-b5d0fd537017", "indicator--2660d0c3-f307-4d28-b2b5-e25c2b66d919", "indicator--6be8ef19-3318-47a2-8db0-5f446960d1ad", "indicator--cb907abb-6b6f-4f1c-90a2-4c64c1519d65", "indicator--10c737b2-dd4e-47c1-9433-cf899a54bed1", "indicator--03f8c572-2898-4eb7-9a10-d546092f2fdf", "indicator--f6e4a614-3b29-4bd7-a09e-053b2d927237", "indicator--094f228c-88e7-4bd1-a6a1-ba66ea08350e", "indicator--ec22bb70-ff89-4b7a-ac2a-204c05440fc9", "indicator--25f0ca76-0d56-486a-ad7d-13cf1359db10", "indicator--3373f4fd-9856-42b9-929b-e78faa74c5e8", "indicator--e39e6c57-9cc4-4a88-a32c-2eaa964b4276", "indicator--84e7794c-d939-49ab-9e3c-63ce50965fb6", "indicator--a76dfaf7-0b75-4690-8a7b-3b1244900522", "indicator--29fe28b1-ad73-46d5-baad-a6f4416295c2", "indicator--0a1ad645-42ce-4920-9271-182df4ccc360", "indicator--7be48211-11c0-4aa0-b5d5-151a20785af5", "indicator--4fc37187-83f8-4b40-a21e-c820598220be", "indicator--c858791d-f531-4441-9085-e1d20d8ee91e", "indicator--9fe8cca4-e93b-418d-9ccb-807aed38c180", "indicator--06e8613a-8e09-4556-aa1e-eca189559054", "indicator--76cc421d-6438-4249-b047-c73016f779e2", "indicator--84f9e402-7100-4d77-a174-826acade3dcc", "indicator--496f1fa2-acee-46b6-96d4-828493a6fd68", "indicator--4aa0a2a1-add8-4c95-979a-92455bfe85ed", "indicator--50a44459-6b32-4fa3-b2d5-0c75e54c2a1b", "indicator--f2bbd88e-92e9-423f-9c85-139638130196", "indicator--9d8b5441-1379-43c6-9c98-c053b219ac17", "indicator--aff660f4-7ec8-44c8-9b17-0aec019a45a7", "indicator--6fca9909-277b-4343-bcb4-4d37d0492f1f", "indicator--f7d64aa4-b922-42c5-9ef9-d9204f61933a", "indicator--de94478d-50f8-46bf-904f-ec7bfb454cc5", "indicator--c9babead-0a38-4b52-941a-569f9816da75", "indicator--0db17a04-82a4-4f1c-af0b-77eed120022f", "indicator--9ec2554a-68c5-486f-a33a-ba0a048a29c1", "indicator--d1bc2ed0-87f3-4cf2-9cf3-22e5595beeaf", "indicator--621bae67-f93b-4ab5-8255-7e02a2e55f19", "indicator--31bcbdec-438b-4c84-b0ab-3c5a083217dc", "indicator--6e22ebd9-8127-44b1-9bea-fe6dd1e84a77", "indicator--27e0b781-22e1-45a2-850b-5237b97dbf93", "indicator--6455958e-ab2d-4216-b4bb-b3de623888b4", "indicator--aefa50fe-0480-4eec-9a1a-bc9f62dc1812", "indicator--6a7ed645-5806-4652-9de5-6a8ebe7a7d14", "indicator--830db814-7d6c-4c4b-a64f-fe74d7439524", "indicator--10685d78-5efe-49e0-9178-6d8c3966e9e8", "indicator--29836311-ed3c-4071-93b4-215aeda0d43c", "indicator--5604bf83-fea3-4965-b2f8-17cdaf70f94b", "indicator--41fb8b09-ed02-4606-a405-b4cd111aaf9b", "indicator--cc0be1db-496d-45d2-b033-f8f28f24b425", "indicator--50720427-2202-40db-a500-315771941a9a", "indicator--8ce9575d-7da0-4d64-9f42-1f83e9992633", "indicator--67d4d53a-ff0a-49d0-b67b-f18f1faed53c", "indicator--a46b995e-1cd9-49b0-8e0c-8b6a975d978c", "indicator--738d63cb-5b66-4b57-aedd-b6e350d5f253", "indicator--de1be7a2-88fd-489f-a456-6105fc47263c", "indicator--670a572e-16a9-4e99-93df-1f2b8215a749", "indicator--f872a462-dab0-4476-a475-ffdcb406a166", "indicator--371e6afd-35c0-480d-a51d-e35564fbbcdb", "indicator--a292de98-04c6-4250-9616-948531816d7f", "indicator--ab2c2984-ee5d-4540-9c77-8dbe5e64bb8b", "indicator--38eb019a-719c-4137-9799-c74e0021eadd", "indicator--947a5c47-c226-4989-addf-1597360ebead", "indicator--1197e879-3033-490a-857c-2184f8b26346", "indicator--c4b22ee4-9976-4793-9176-10c4b719798a", "indicator--506e8975-1b89-4f8a-beec-db812f56700c", "indicator--336b422d-0eeb-45f1-95e3-da8c52fac474", "indicator--6f478932-ab50-4a05-8634-ca983720c6c0", "indicator--30c730f0-e148-4bbc-a17c-1692f62fb4d2", "indicator--5d802f7f-bfde-47a7-aec8-e5e8e26ca7a9", "indicator--c4346ab8-3b3b-4c95-b11c-d479128f6735", "indicator--dec79224-f904-47e4-bcd2-01f0ddbe233c", "indicator--42174a00-d6e0-4e93-bab6-b268032255d8", "indicator--279a8cfa-b853-4c21-bc84-34bd68993e76", "indicator--8858a76b-daf3-49a1-941a-87b7b27df205", "indicator--abf000eb-5b58-4bb8-af53-ef0f09d38d23", "indicator--60a8be5e-8eca-4b64-b08f-59a38e3a516b", "indicator--e91f8f92-3942-4cce-98db-744ed7b2a4e9", "indicator--8b4941f8-9d11-4cd2-b78b-ab8b2c3ce09f", "indicator--db30ceab-111a-45fb-a037-97e3084dd0c2", "indicator--53768337-14ef-4038-871d-57b6ed8c4c4a", "indicator--11491229-49d1-4e91-9173-54f023f790ea", "indicator--945ac44f-c90b-4bea-940e-bf2f8939d0a5", "indicator--c82b33b6-2f1d-4616-afdb-e71234da8bbb", "indicator--87142024-886a-4c70-851f-f0f2a2fd26e2", "indicator--1cc590fd-4f50-416f-a107-49d61c3dc82c", "indicator--8ade599e-cdd0-4c2a-aaa0-0bb0e35cb106", "indicator--b4f69f1c-07fc-4ee9-bb8a-e94c822b41df", "indicator--532e68a7-8d5b-4ca1-9620-c2e8fa30d674", "indicator--04c26278-4cb8-4773-b4db-2dd48a791ee2", "indicator--c91ac68f-8839-4526-8204-4824f4fbe2b8", "indicator--6b310576-7f0d-4024-8ae5-1ea04582573b", "indicator--484f4310-cb87-44ae-93c5-738116078311", "indicator--97cf8ff6-2292-45af-9076-6455682eece0", "indicator--897288db-afb9-4a10-8aa1-4b63ad5dbfc8", "indicator--87d414f4-a007-42e6-a45e-b5cab8e1f4a3", "indicator--c44010a6-f2e8-431c-9e73-9af2ed5353f4", "indicator--bb43b535-b9ef-4494-83bb-e3a548372f2c", "indicator--44522547-a307-4373-aee7-642060546ed7", "indicator--095d148d-e3a4-48ae-b45a-047d5f4ffa1e", "indicator--c960743f-89af-427f-a46a-43fb264f7535", "indicator--7fe00e23-4bb6-495a-b0d3-39a0987453ca", "indicator--a18782f2-960c-4f18-835e-9d612a700b5d", "indicator--0e930828-b6ac-42bd-8de1-fef8523f1b5e", "indicator--31ed0ec0-ecb2-4563-9e74-247c9de85652", "indicator--f14863f8-2829-410a-ad2f-fe86f333665c", "indicator--947a2e30-f63f-46a5-ad23-0a7e1f31e295", "indicator--7e034ea5-9ae5-42a3-a3e5-191c636e14e5", "indicator--2a504169-a78b-4f71-a448-2304b738903d", "indicator--ece51596-0de5-4a72-b1f9-9d51a4486ef6", "indicator--2c0ae5d3-15ce-4e78-ba32-895abdbef90b", "indicator--f3b47a87-3972-4f24-b248-2a0a56245909", "indicator--9116b177-9f47-4aa9-95c6-118e35381222", "indicator--593fa358-ad5a-467c-b0d0-fb19e472a19e", "indicator--38c8bd7c-a2e1-43db-8ad1-53e6d8b71f0d", "indicator--624ab2be-7b48-480f-9016-527bc9cbff4b", "indicator--68d772a4-e915-4bb3-845c-c8bb531d21e3", "indicator--ca7cbcab-486b-47a9-8a74-33b313379ffa", "indicator--8b2eb993-813f-41a0-a55b-590750f90fd7", "indicator--eb8e82d8-7950-4d8c-a0c3-a07cc09e60d7", "indicator--e281fb00-8778-4b26-b5ae-4310ba371ea8", "indicator--a3cfce82-858f-4ab9-9de3-1b8bbdbfeb0d", "indicator--95a86926-fdc1-42db-919a-90299cbd7c8a", "indicator--9bf26d77-8518-46a1-969d-3a4c4d377420", "indicator--e8b4fe06-7e45-4d4d-b3f7-4ec85b4f15ac", "indicator--73a8d11c-60f8-4a5e-a598-8a0b44c439cc", "indicator--2590d963-4146-4cd9-8a44-98214a80ce56", "indicator--c9454277-f85c-46eb-9af2-956e6e945e57", "indicator--fb5b4df7-52b8-42d3-accb-597a03169c06", "indicator--3e483244-9fa1-4bd5-9bf1-2f829afed6bd", "indicator--404c3aeb-dd43-4c47-b331-7589bda1ef75", "indicator--bf0786a2-56fe-42be-ad50-89dfdf6edd49", "indicator--4d5f5184-1ae6-4b70-81f7-75a3234dfe08", "indicator--bc771a5c-a8f6-4cef-aa35-3978c4d519c3", "indicator--ac201e6e-618a-424d-be03-d262d5994297", "indicator--2be7376d-6d62-4e60-9fc8-c4109ccf3ab5", "indicator--b2b174e2-b3ba-4f0e-bdda-a20f321b54ff", "indicator--8c6fe8a8-82d0-4847-a49e-c1018a4b21cf", "indicator--46de3d3d-cba9-4858-87bd-07cc7e76c6eb", "indicator--b75acd49-ba77-47d7-a345-40b848b305ed", "indicator--6c1c32ad-4af8-4e9b-b301-c16cb96b39fe", "indicator--637b29bf-2086-45c4-a5ac-4697b6520f54", "indicator--1c1b8b80-18d2-4b94-9589-c4bba78ea772", "indicator--7892ef51-5ed7-41ea-81c2-5f8b23f9aaa0", "indicator--bed1c751-ae95-4fb8-a965-12defbadc60a", "indicator--726f34b2-d983-4766-9bc9-30d02182f205", "indicator--684a9871-64c6-456d-baec-f66664f87083", "indicator--add1cc7b-f9ff-45a3-9908-f3ffe074b3b3", "indicator--d409567d-e73a-410d-b3fc-6daedc2b6a79", "indicator--6574b044-65f6-4327-be89-73fc7485d9fd", "indicator--80ad2931-1b3d-4dc6-886a-76c21b9ec809", "indicator--bd59aa0b-faaa-4a19-a533-9cc3ae53a21f", "indicator--bb2b8dbc-b60e-4e9c-8635-63537188af97", "indicator--8a8d2e85-89af-460c-90e6-a5a055b9e460", "indicator--f67f0bec-3cc5-4950-83b5-d46907531c4f", "indicator--eb15e70a-3831-48ef-85b1-7eaa79811f36", "indicator--7a44e886-246c-4d0c-af80-16e5db7c38ea", "indicator--ff8a37c8-ebbd-4f3d-bbe4-d4b7d22a68d4", "indicator--f255bd4a-d59d-459e-aac0-f99a4f75eef0", "indicator--333fdf10-686b-4d95-be29-1ee2284d4d73", "indicator--907d464b-3908-4f1e-baea-390f930d5c8a", "indicator--973f20c5-0fed-4dd0-9a75-0c6caa48a8c4", "indicator--34e672f9-ef62-4b59-b490-f4f9ae874e03", "indicator--37e40c5d-b5b3-4481-a767-13be77524a40", "indicator--5c3861cf-3122-40b7-99fc-20a96d204b1c", "indicator--975690d9-d2d1-4198-81fa-e5cf25cfae0a", "indicator--f9fb1905-f472-4a7b-8316-f3e497b768ec", "indicator--53ff4051-7c12-4350-bdc3-db9cb4cc46c0", "indicator--f4cdde1a-9245-42f5-9aed-e3d3f431a299", "indicator--78ab8bef-6480-43cd-be3e-a2fe08cb2eb3", "indicator--87962e62-7b28-41a6-947e-74e84935e251", "indicator--0318d467-37e4-40e8-8752-2b264e4d4c3c", "indicator--08f493ea-f621-450f-9e95-51b68e154143", "indicator--d2782aad-a840-4a2a-809d-fc5534eac4bc", "indicator--deb9da9e-a7ca-432a-949f-3de3d1059817", "indicator--d21b8e1e-91a6-4c1d-b27f-63683884529d", "indicator--689288ff-ed82-43fa-8fe0-6d726ccdf11c", "indicator--f1906346-a86b-4c2e-80d6-f663fb799752", "indicator--11a51996-48e8-4dcf-9c13-b2aa33a2488b", "indicator--4dad0668-e154-4744-9069-1a9d615090f7", "indicator--76266268-dc87-4795-8074-bc5d7026d8c8", "indicator--ab12fbdd-1944-4a23-af22-78f527c5ac06", "indicator--a873b75a-8014-404f-ae4f-c278f619cb15", "indicator--32b614d7-05f2-41dc-ab30-989e0b8caa59", "indicator--1433dd3a-e4f7-4d90-9187-95f64db68793", "indicator--7ad24dff-271b-4af6-ab71-54a79d576076", "indicator--88d4b914-e2d8-437a-9854-45b47394a271", "indicator--4f95c5e6-a37b-42f0-a728-5924b35dc378", "indicator--f738ff2e-817b-4521-a096-9d3c65c300c5", "indicator--58dec4ea-076f-432a-aa4d-6fd06f05816a", "indicator--c5da631c-bb8e-4854-b51a-a9f763a2d21a", "indicator--ed833949-6862-4886-8797-2c76a524a11c", "indicator--553d3634-4041-49c4-91d3-27b5ce4cffbc", "indicator--2fc64981-e495-4807-8c9c-e1853fb6071a", "indicator--d00e9327-3807-4a89-943e-a432341259c4", "indicator--0427b411-a6e4-4a2a-8e1e-44f82cc86a89", "indicator--ffbf836f-7135-480b-bb3f-4e234a3d3187", "indicator--d59f0527-a5d9-4909-a35b-129189cb1eae", "indicator--c7927a18-45da-4343-9544-d537e23c028d", "indicator--51df657a-e326-4067-ae7a-e4dceff47998", "indicator--fe5df78f-9bc6-4a80-9d0d-8d4dca87f583", "indicator--a9c39e62-f898-4f8d-a4b2-1125499d1db3", "indicator--8787041b-5bb7-4808-8848-b276d01ed754", "indicator--3c67a82d-dad8-42ae-85df-9191da045bd2", "indicator--4ed99393-9c40-4a90-9128-4e1eb9c44bda", "indicator--c18b7ca4-9a99-494b-b805-441b5e8bc89f", "indicator--95b9e286-d695-4937-99ab-c670f3134d25", "indicator--2af0ff54-ded6-478c-a963-e2e0a438a5b4", "indicator--36e9f9a0-3c60-4aa8-8c09-3d4a23c5e906", "indicator--7e3867b5-7423-4ecc-a5bd-2127d2a80a90", "indicator--6d90df7f-6691-48ff-a315-0b1bbae72dc2", "indicator--bc50391c-433a-4000-bf27-9d16e1708167", "indicator--9f466864-c0eb-4a73-a0ac-0efc3ef51398", "indicator--fcc20892-80f4-460a-ad66-026291c4e57c", "indicator--db51a341-3602-4ea7-9c77-57778071515b", "indicator--73814ea9-9d70-41b7-9e11-2b7c916458d5", "indicator--6ec76ede-8146-4984-94e0-9012922e98c9", "indicator--1d0139bd-1f75-4d03-9d3f-fc87139996ff", "indicator--247b36bc-80e7-4e43-a345-e2f79fa4d350", "indicator--965d0665-b353-41c9-bf0c-92aadbcf4551", "indicator--86e3d852-a4b5-458b-a1f7-ac7e067860ef", "indicator--b05b8cb9-3237-42dc-89c6-171ec746e60a", "indicator--7eda196d-cfaa-4c1e-a471-6ee93f90315e", "indicator--339b8b79-6897-4844-830c-fd504bfff804", "indicator--2e5c0e6a-29d1-4dcd-b75a-0847ea23d056", "indicator--36bd9d62-2267-47fd-b04a-bd33dcd3e7e8", "indicator--6f46a525-f9cc-4d94-9736-822e70fd27a3", "indicator--d154090e-1505-4430-8a3f-d1746d0e3723", "indicator--5e5fd937-1210-41fc-8e28-17a1664d1bfa", "indicator--d8000fc0-f95b-4a1e-b56e-f2b5539bd6f3", "indicator--47ff0b4b-d45a-4dab-95e4-2bd581de2a10", "indicator--390c3ef5-1149-45d8-9b70-c805a3e59a6a", "indicator--55d134ec-29c6-456e-9c6e-1e2e2092c973", "indicator--14280da5-af52-4310-812f-f21bf833a37d", "indicator--6d6500d8-ac59-4e5b-8347-a89d73aa4207", "indicator--0d366b7a-bfb2-400d-bfce-3bd47468fa91", "indicator--3c33a144-0d9c-41c5-bbd3-a6f500e3da38", "indicator--060c60e4-c0b6-4caf-8555-35cb95d15a06", "indicator--c561f09d-e0ff-407d-8abb-5a3e5ee32d19", "indicator--1441a2b1-604c-4110-8e39-518db54fdad6", "indicator--ca09a5b0-bda6-402f-a42d-0c966e191ee7", "indicator--bc38fb3e-0166-4ff6-9d2f-cbbc3890d9c0", "indicator--e2f9ed94-2849-45e6-b180-f6644ac67b41", "indicator--30375228-9550-4094-9940-cb40ff398073", "indicator--23f8c27c-b457-4382-96f7-7fe0ca7512b3", "indicator--be8ab2c6-61a6-4080-a738-6e9a0120ee4e", "indicator--5872632e-3a81-4602-ad59-cfb4857ed1dd", "indicator--08a419f5-78e7-4438-a3e3-94be2bb5f7a5", "indicator--cb2d547c-c273-4b9c-949e-188124b8c458", "indicator--d710c51e-9b8b-47dc-bb5b-e38198ca253c", "indicator--41d7d9d9-345c-4d23-8e5a-9a939b4e2562", "indicator--3fa9c2ce-03a7-4923-91e1-e98bf3e90f26", "indicator--9faeedc0-8bfa-4c3c-a356-eb50a6e2e64d", "indicator--1e4d2b4f-3258-450e-becd-b5b20d177627", "indicator--92ef78c3-114a-42ab-9a94-b1674c314d59", "indicator--9091b7e1-56b9-4c8d-848f-f6d54ac2fd38", "indicator--057bb201-6372-4c46-be14-c0954db862ab", "indicator--c5a3434a-2a03-42a6-b730-9caf95d51e4b", "indicator--2f55cec2-8d73-47e9-8b55-ad2be167f8ac", "indicator--d03b2541-aec0-42ad-a4e2-992d7df0ca12", "indicator--c2e43aec-717b-45bb-b842-3db647168b60", "indicator--f03749b8-44ca-48ee-9da8-11de9dff2c01", "indicator--28190eb1-d976-4573-af24-d23342ff30cd", "indicator--4fefd13e-1dc5-4918-88bc-cc8c70f7f16b", "indicator--b69113f7-019d-4fe4-ae2d-7800a796cb0a", "indicator--2180edc1-1e8e-4b20-8be3-3e487b427223", "indicator--211f36a6-32a1-4f1a-9d43-4091426f138e", "indicator--15f37f52-7292-4867-8b09-daeae1ae0d68", "indicator--49245de9-c716-439f-91ac-5ee2108ff127", "indicator--7ff35ac6-0713-4d1c-af13-b35baca37d1f", "indicator--af3015bc-5ce6-4707-8c63-744d573fe69c", "indicator--7dc3e3e3-ddae-45bf-96c2-277884c76679", "indicator--63e2b9d1-d92f-49f4-ae3a-a38bfc9e0466", "indicator--1e99b97d-2953-4552-9440-c458ec096c4f", "indicator--0f6f5519-af94-47cb-a532-35124d5ab36e", "indicator--5abe782a-84c4-4bb1-8754-7d8f4279a825", "indicator--06876833-d9dc-4e3c-8bc2-51c588a13ff0", "indicator--5613d490-7c45-4ea7-8bcc-78376cb0ea69", "indicator--1efdd808-def9-4477-9d66-f5db7b6a420b", "indicator--fd2a1019-64d3-4320-94ef-c726299fb714", "indicator--0bdeed4e-5c8a-469d-ad32-dab04d19b20e", "indicator--134754cb-250e-47b2-a215-5950a7272562", "indicator--b5fc5c15-efba-4371-93ee-03141da5413b", "indicator--6be33cb0-08de-4283-852f-f2e85e3b30e9", "indicator--276e940d-2aaa-48a7-ba36-3039235ebbf5", "indicator--2032d608-b136-4b6e-8500-8cf96bab9353", "indicator--d81adcba-e871-4e4d-8c00-bb5a378150f6", "indicator--bc14b167-2101-4e37-80a8-c6b72752ca37", "indicator--376d9459-dc3b-4af7-803b-ecd03701d715", "indicator--6896c356-f3ca-4a1f-a793-a4297d54bc77", "indicator--a9e0807c-01fe-4b13-96ae-e68f80221abe", "indicator--ea652bc9-2283-46a0-ad60-3d6fe83c0495", "indicator--07d2dcc5-b42c-4abd-9dbd-bd60ffbd8b79", "indicator--f5c9f36a-9ed8-497f-9d80-af401e30ef9e", "indicator--65a65a1d-88d1-4151-a571-d0d89ebdc0b9", "indicator--983c3cb1-f3f7-46c4-9dcb-bcfdd7e8a931", "indicator--b5fa8af0-8f2c-469e-a94a-d76d619102d4", "indicator--9ba0b187-f311-42c7-b66c-a4520bc8f2f6", "indicator--4864842d-5aae-4279-987a-083accc310d0", "indicator--9186269f-3c7f-4897-bf30-ce1028d8a727", "indicator--dddb5aed-de1e-4268-bcb0-89cef0fa0ebd", "indicator--68bac1a7-5ced-4269-b97b-1ea1579f88a2", "indicator--5c4d24f5-c7c3-4b7d-8191-9da2c4766881", "indicator--587ad6f1-1b45-4908-b3d5-f6af51874bbf", "indicator--27c0199b-0c4f-42c2-9215-53326cf1ae5a", "indicator--58f640a9-2a29-4182-be82-c43f105aef37", "indicator--14a26061-3768-40a6-a140-0f136dc6f9c3", "indicator--07600b1d-2b42-457f-bf8f-e3510add00bb", "indicator--d9f8aad7-b247-4bdc-a58a-279f10868b29", "indicator--769cc44f-efbb-4f85-9e03-a2dc04295088", "indicator--206fa3e4-7bb5-4fdd-85de-3f00b0a4c3c6", "indicator--922afadc-0ac0-4706-a024-c0e2b8538dc5", "indicator--53e254f5-f0bc-4453-aa19-068cf913077e", "indicator--a15a691b-5bee-414e-b612-6cf30260cb94", "indicator--5fc70e2d-f6fd-45b1-85de-32dae219baad", "indicator--389d8d5b-96fb-4247-94e4-ec208a8ee304", "indicator--eeababc3-52a5-4179-ac49-49b76e267a65", "indicator--b713c957-46ec-430d-a06d-67cf193e4865", "indicator--2e35111c-b9bc-4013-a5f5-31cd90b78c56", "indicator--9ed9c3a1-ee50-4b0b-8b53-5cb217354d74", "indicator--b00edaf0-5928-4566-8b3b-b4434ac17dc8", "indicator--6122be38-7f15-43dc-914d-50604ed1840c", "indicator--56a02700-3649-49a4-ae19-140233996373", "indicator--79eb6ebd-2ae0-4ad0-a4c3-f05c63b9fa96", "indicator--3f5636cb-8ffb-456b-aa55-30fbb0f9559f", "indicator--52e1561e-ad03-4637-a6ec-106c7a523d98", "indicator--bf5fa1cd-7045-4e38-aab8-a17a0b688810", "indicator--6667e267-4ee9-41a5-991d-26f2ed08402e", "indicator--029b26fa-7bcd-47ac-92da-932780bd5b1e", "indicator--a7c4e244-e189-440f-9f2e-b79d85a77963", "indicator--18d1db88-6e24-4615-a136-8ba091f04428", "indicator--7c1d3c8f-8c4c-4148-86bb-f354d7e34f60", "indicator--7dcdea51-5814-43cb-a413-b870131fe6cd", "indicator--be57e04b-dea3-4842-a2aa-9899df7a2c77", "indicator--0044cc87-61f2-447c-8f35-7ba8154b86ed", "indicator--e30cf143-26c6-443e-962a-8df223f3664f", "indicator--e4a78c36-3a3c-4699-a18e-61c47f286c2a", "indicator--284979fd-2c0e-4c4c-9dd9-9fbb453f88b8", "indicator--75ca76b5-8d47-4934-84b8-322dfd8bfdf1", "indicator--c73b6314-56d0-435f-a64e-d72d1f4c3ea8", "indicator--0d46cb2f-227f-4437-a90e-43fbcc316cd7", "indicator--02cdc510-6ac8-42d5-afaf-be498313aa5f", "indicator--2178c89d-fc08-411b-990b-1f5af8142aa1", "indicator--b5eb2415-5161-4cfe-8177-439e0042a90d", "indicator--90d4a18d-94f6-47db-ad9c-9a6868c47b2a", "indicator--c60eec24-ab64-4146-a068-8e6246d53d79", "indicator--3329b93e-579c-4f59-bfd5-e3c098dac1a9", "indicator--84c75e72-4054-4dae-a2ec-3b717f271780", "indicator--8d35cd8f-fd77-4155-97d2-44c76697238f", "indicator--69d31af9-2069-4c63-8a3b-6636c9bb2c45", "indicator--3528d4a2-4930-4c3d-aba7-07bd12266c84", "indicator--3a54fcbc-2ac3-4f6c-bbbe-c08acef653ce", "indicator--a4e25ed9-b569-492e-aa5e-d589e6c9bf8e", "indicator--36d553c2-433c-4ad8-90c4-66a9182e7459", "indicator--c61ea71e-e6a2-4e29-bb3a-a7a07f5632f5", "indicator--dcb00431-6476-47fd-9c11-d7a232535fd7", "indicator--b20e615d-c12b-44a4-b257-df13d396bff8", "indicator--3f7b477b-31fe-4f76-a331-85bca7a4715f", "indicator--59138f4f-7da7-4c5e-980e-8698871189cc", "indicator--55667e74-ab74-4742-ad8d-a451a210d17e", "indicator--65c0b1f3-a28c-43d8-9ea2-f867192721e6", "indicator--89d7d0da-c39c-42cb-98d2-4b95d2a74c61", "indicator--f33a4af7-8314-46e7-8286-cc34ca56523f", "indicator--1a6c27bd-c2db-43e0-8fc9-c4e98d56a92b", "indicator--95d29ae8-25a1-4016-ade9-fa85696c8fb8", "indicator--86231332-07cd-474d-8fbe-67f6e3dd49e3", "indicator--6d6a7901-8a2f-492c-a464-0f7e935376b9", "indicator--89786fd0-af99-4820-a402-895bf3797145", "indicator--b6ceffc1-2081-4e6f-908c-3b98f4ae778a", "indicator--829e71ee-2cf0-472c-8c43-09af307a57de", "indicator--f770bfc7-7e9e-4cf1-bddf-512e84f26280", "indicator--17a52f04-f9e1-4aa3-a8ce-cf26873f363e", "indicator--bdb6b039-ead2-4f91-a415-9bc6f1957fce", "indicator--dbd81917-03fe-4de1-8144-17e6945f0ddd", "indicator--1ff43730-f4e2-4160-b374-b6f6319eb805", "indicator--a5926491-2588-4b99-9208-8b5264ecd62e", "indicator--4607230f-3d17-4c6b-a57d-a5b924a3f6be", "indicator--66609c3a-09b7-423e-877c-773b7434ad60", "indicator--3886516e-e8e5-4563-9009-94e4fee4776d", "indicator--8fa0fff6-1b4b-4481-86d7-6ec47bbb21b7", "indicator--c179c0f8-1ed0-4cac-87fc-86e67638cd3e", "indicator--8252c1a2-ae4a-4f5d-a14a-47d763558eac", "indicator--1372b371-6bc6-4d38-aeeb-a8c7b573b793", "indicator--f01f6da7-e666-4a4b-a1b0-579d02f382e1", "indicator--a8e9fae7-320e-441e-b164-66a3ed4e57e9", "indicator--85235ef4-3e0f-4765-b597-dbb93f92f86b", "indicator--52a583d5-0293-425b-af5e-9de407856e73", "indicator--b4887ac4-76a0-4dca-8fa4-7234253daece", "indicator--ebbb26de-ef8a-4af6-9708-b5349d9659c6", "indicator--0c9909e3-2140-4a1d-a738-643246f8d965", "indicator--e8a061fb-b887-4592-a2b9-96e028d53821", "indicator--101021f8-4329-4f73-8b64-9be53b13d650", "indicator--c18df3c0-ceb9-4a75-b53b-c27b98eae037", "indicator--2b5cc500-1f69-4d16-b2c3-98cf73600c1a", "indicator--5cd4526f-40f1-4adf-bbd8-3c2d7f1b195a", "indicator--f5846dab-8dbb-47c4-b3c2-7838775ebc25", "indicator--8514ed97-4dbd-4ad7-a816-9f6cbbc286ba", "indicator--cb26acbf-790d-44b6-b736-e878ff8a1d1b", "indicator--c869b1fb-d3eb-4cfa-bb97-3124598fb3c9", "indicator--75fd3881-c5bf-4c1b-b21f-dbcf061bee45", "indicator--5d0534d5-c1b6-4476-be31-fe3202a61f57", "indicator--9cc3e234-0f66-44b3-a953-b2aff51bf22f", "indicator--c4f1d84b-e7d0-4d70-bfad-64821e5e98cc", "indicator--78c34489-ca04-45b9-9ef7-20976f2ecf41", "indicator--0c5e787b-f545-4755-afe6-f23530467f97", "indicator--6b5eca1e-7010-40df-aa94-e9d4ee00ed9e", "indicator--540f3a95-019c-4fb7-a18f-5e649baa35ee", "indicator--11870dd0-eb8b-4000-89fd-53991df222f0", "indicator--d22c3bfe-2979-4dfc-b419-7d2ced5c6ee0", "indicator--3b0cf53a-c640-4dad-8e17-68f793a679cf", "indicator--338e757f-a8b8-419b-b6b0-9cd889ab8fc7", "indicator--52273804-85f7-48ac-bcfc-39ca1e0e85f4", "indicator--d79fa17a-23b9-4bde-a090-ba5339a79da8", "indicator--14be69e2-c93c-478f-aa49-032784b29d6e", "indicator--5087fe82-0225-452e-a37b-612fe67a4944", "indicator--b39a6c7c-8724-434a-ab11-4192a77b07ca", "indicator--487f97e6-efa3-470f-9e12-d0ce9dd04334", "indicator--24867565-e6cb-4de5-98e5-177c3dc595b4", "indicator--43fc870b-843a-4a5d-9f16-cd14f4074d71", "indicator--85979c61-0410-4019-ab72-385f779843be", "indicator--274ba297-b978-4116-8425-98ecb67f3b0f", "indicator--f6ec0093-3e45-4ea7-a219-4b06bd70bf40", "indicator--c207ea2e-dfb0-4ee5-a56f-f17387ba3e9c", "indicator--4e651566-ed96-4596-b6e7-6fd0b8051a69", "indicator--e0c87a0f-9e16-4fdd-bba3-4f437bb092df", "indicator--5a51fe45-cf3f-4c5f-b8e3-388bda0ec379", "indicator--7afb2a6c-7964-40a7-ba62-c9319a9c70a3", "indicator--c22e141c-5166-460e-9252-614847c97799", "indicator--1e103302-c862-46b9-b4d9-e0c0ad4ee69f", "indicator--2e4e384b-1e7f-499b-a716-837d383b4a23", "indicator--ddc5a9db-7496-4fdf-85fd-bb24ba3f7f20", "indicator--a9a9215f-9e15-439f-8dbc-0e71e8cb9f60", "indicator--520bae19-3ab9-4dd8-ba9a-21860b05a19e", "indicator--63ed74b5-0283-4cff-b81e-51e636b01182", "indicator--bb03dd53-69d3-4e68-9046-04b744dca1b6", "indicator--14b3dd6e-a191-49cf-81eb-0f5b2158f165", "indicator--85dec35a-9cdf-40a5-b400-bc39e3ae15ce", "indicator--71f234b4-ea84-4e39-9a17-a3b5b481a5bc", "indicator--57efa232-fbab-4752-8ae4-d725d025de98", "indicator--fd06cfc3-fd07-4df1-91f9-31a2d018d55b", "indicator--7d9b2072-cc8d-4c85-898f-ba04ba9b726a", "indicator--91205825-1999-4d4a-b81e-9e8c5a36107e", "indicator--fb2a6478-8924-4a8f-8a87-8d47f367b3d4", "indicator--21800cb0-11bf-421e-98ca-45cb6c71d222", "indicator--0915ffa0-ed4e-4c38-8b26-d258045f5481", "indicator--e60b4fb3-0f88-4281-9c7e-34bd2df9dccd", "indicator--bc6c3c12-572e-4689-b3f8-5ea26f3ef63f", "indicator--6d472787-be3c-444b-987f-0d2428d23911", "indicator--14a882ad-b5b4-44a8-95f0-82be27a776ac", "indicator--8441edda-d616-46d2-be61-c8d61093ab7c", "indicator--91bb3101-16da-41d5-a3fd-f2e399666952", "indicator--b1d5d30c-93d0-497c-b7cc-4edbe7374577", "indicator--9a3f4b72-328d-4475-b60f-5db0034aa130", "indicator--46a96eb1-8124-4dfe-b86f-8acd3fd3399f", "indicator--9e8e3d74-9623-4b45-889f-3e1fdf685d38", "indicator--3f46c299-e065-4e57-a4db-ca5ebc56abb5", "indicator--f02db289-9ae5-4287-9e22-57e25872082c", "indicator--208658a0-6a92-4783-9d01-666e62ec3c95", "indicator--955dbb99-d5ae-4c9a-befa-7715de691f9a", "indicator--2694791c-229b-492c-8785-96c288958761", "indicator--60d40b79-7d8b-4e2f-9ccd-b1f0ed1704a6", "indicator--f8036c2f-1796-4428-b6fa-9672108934c9", "indicator--fcac7c72-9dc4-4620-8864-0944ba1006ee", "indicator--1eee96fd-8d30-44c0-885b-f2fa6336bd96", "indicator--446f17a2-add3-49bc-9ef9-348e0af65c97", "indicator--6e59c997-2b38-4ab9-a95c-209495285091", "indicator--c87fe660-aa95-447a-ae09-7aa17f8ee77c", "indicator--7d67c9a2-e76e-4755-a5a4-824d789ecdbb", "indicator--2828bac5-36ed-4471-843b-5a417b685d8a", "indicator--afe2025d-71ce-4afc-8181-917c394418fa", "indicator--fd358708-500e-4c20-8ce9-43baa30cfcd3", "indicator--54492637-4aeb-4438-a900-6793e2633ead", "indicator--c9113a9b-a8f2-4de9-8edb-8662c4da21d3", "indicator--7fdd1f37-0c3b-430e-8866-f442c7303929", "indicator--62ef8e7e-2664-4fee-9573-4ce2a2dd6131", "indicator--edc8e059-b648-4f32-803b-466ad7f1330b", "indicator--42b8c107-3a03-4c1a-a25c-4367a199593d", "indicator--235be31a-40c5-4242-ad27-2bb69e1ec394", "indicator--355a586f-01f9-46c1-884d-705be1a1bf8a", "indicator--a1e188bc-f074-4b7b-834d-568c91090ad9", "indicator--c0da78c7-37be-4995-b9d4-a04ccdb1abe6", "indicator--c813ea07-468f-4933-a86b-0979553de52b", "indicator--8c5d1ccd-9dfa-4611-84a5-2aa1d922cce0", "indicator--bcc10c90-2866-46b6-96ee-d2b9b9bfdb16", "indicator--ba50e539-8a02-48ff-97d6-6e32acfc07d1", "indicator--555803c1-2c24-4feb-936a-4e99057161ae", "indicator--a08465c9-fcce-4708-a5f3-031edc7ab691", "indicator--9dd6cebf-0d47-48ff-af08-d3d75d865fa0", "indicator--b4c9565a-6e02-41f9-9f75-36e9e1b5bbc0", "indicator--f5a30aad-96d6-4450-9842-7ec1bcfd2e86", "indicator--55c86ba9-88a5-492f-94de-1e545d40eebc", "indicator--809f880e-b01d-4be6-9ac2-5012e08cb83e", "indicator--5a07c9c5-427d-4eea-abfa-83e23603efef", "indicator--375290e6-8cd2-4f72-af22-6c7238def9f6", "indicator--4cc9b8a6-9f9d-4db2-bbc7-6a4e4b703c27", "indicator--3b34c20b-ae5d-4a7e-8ba1-8278774fc7a0", "indicator--e86608dc-c5e2-44cd-b19c-6431abf3f67b", "indicator--3e842377-abf2-4bfe-b422-35cde0901444", "indicator--7459feec-9153-4971-bd2e-dd9d21bb4073", "indicator--c7e9b8f3-358f-4004-bf4a-8b4fb87cf6ae", "indicator--2d3b4f09-bdd1-4081-9309-0e598942b68b", "indicator--333c8193-9812-41f3-af91-fe1e9a510bc3", "indicator--721324f2-acb5-4c2c-a107-789387bb54ae", "indicator--1b3ea059-348c-4382-aec9-966c3836f3c5", "indicator--8a877007-40c8-4c38-b199-151bb6d74a00", "indicator--e8be45b4-3603-484f-b6b2-227cee9d8798", "indicator--f3aaf0c3-3c81-49d3-be53-59be811001d9", "indicator--2fcc5768-8a5e-4fae-9bac-d1d3bd20540e", "indicator--43a1a219-7a7b-44b8-80a4-50b28067e2af", "indicator--1913447e-ce73-40ed-8ede-dceadf204d0d", "indicator--f542c083-1927-4e2c-a726-afb693fde994", "indicator--5c756c83-36cc-4630-92ee-cd58d9be2667", "indicator--270c0d2d-ae28-4ad9-a0c2-1114d15e9669", "indicator--716a4c07-cf56-437c-a891-cc59a85e24d3", "indicator--711dbb6a-8703-4eed-a7c0-59c6cffdebe2", "indicator--fdcf748f-ceef-4b57-91f4-eae0a65935ed", "indicator--371a8cee-03fe-41d8-9b66-09976a12ac3b", "indicator--6108f3f9-063c-4739-8026-d22a6630c55f", "indicator--f7b6b249-9dc7-4f04-ae80-3cbe64ee010a", "indicator--fc27259a-a105-4dc2-84dc-602d44f8741b", "indicator--977d3bcb-9dce-48d0-84ae-bea19f2a9064", "indicator--d615ce86-ec3a-4764-b3b4-c25a7e73c97b", "indicator--fb8b1d2b-8688-4ba9-9dda-47ede4e8736d", "indicator--db673317-9e89-48f4-a560-73d543600875", "indicator--f57a055b-d51e-40a6-9e05-e4225a738a55", "indicator--829559b7-1cb0-433b-ac1c-b976e5a7970b", "indicator--49c518ae-d920-47db-ae7f-43ddb3972b4a", "indicator--e3dd202a-0f22-4187-a573-30bc54a345a1", "indicator--b1d395cc-05cf-4d46-ad46-37b06aedf598", "indicator--cbcea3aa-63dd-4b20-902a-018ee86485e9", "indicator--e2a6166a-9878-464d-a765-85360f6ade32", "indicator--4edc7f5e-188d-42eb-8d85-4cbed68f56cd", "indicator--db1c75e7-1a7f-43d7-a05c-c1366aff5330", "indicator--c24497bc-ecad-4bb5-8913-65d03d319f1d", "indicator--c6f384c1-6c9c-4443-9fd1-e1994732205d", "indicator--43a35d8e-a09d-4964-9176-d3333a9e5320", "indicator--023ef964-054a-414d-907c-87fc16344dc9", "indicator--3f280228-79b6-4185-895a-962fceab9105", "indicator--25e4af17-1351-4d88-b7fc-6f9ccd67efb0", "indicator--cf1ef83c-7414-4d1f-96f3-a306797a1cb7", "indicator--99a16dff-9782-425f-833c-0a81ec0a688b", "indicator--058198a5-daba-4daa-9d8a-87c39e1703cf", "indicator--a8743062-463b-4c46-a938-5af136261ca4", "indicator--e28dd2f3-de03-4b6d-b3ef-351fb53d4e3e", "indicator--ba08839f-51b4-4d70-858e-9a2393e7e76b", "indicator--2a7373d6-bf89-4be8-ac62-2666710eb873", "indicator--ebcb3c5d-5c8c-4522-9c1c-110a2b0b712c", "indicator--55238318-6053-481b-ad51-8f9208b3a50f", "indicator--344422c5-d310-404f-bfd8-602f82c39640", "indicator--f2c9e1e2-fc0f-4e43-bf47-630ccc594dc6", "indicator--c9b12aad-cabc-478d-9b64-d17d50a5291c", "indicator--7edaa090-bc21-4b08-a4f4-c1926fd3e043", "indicator--1cb5a6ca-c8f1-436c-8986-87474041bb65", "indicator--c33cbd45-f59e-4a6b-9f3f-ef3cf3e80eaa", "indicator--f68dcaaf-65d3-4aa5-b03f-bafaa2f96a38", "indicator--d15ed3e1-8b14-46df-8640-009ead40e27c", "indicator--acf7ae0d-cb0a-4a0d-9d21-180d9615a239", "indicator--1740035e-362a-4bf5-8460-93927de4447c", "indicator--098db617-a9d6-4bf7-b077-fba41b57dc37", "indicator--66064ed7-2c66-4007-ba87-e96c7d58b945", "indicator--15f2fdd0-c90a-4fcd-98f0-c27d976fc573", "indicator--a006a94a-3f37-42dc-80ed-4741b013f9aa", "indicator--0d4b2bc1-e733-4988-bedb-6fd4b0ab826d", "indicator--bd1adcd0-903b-4c2c-a1cf-0799b89fe9f6", "indicator--ea15bd4f-0a29-4f64-a38d-c759c641cb57", "indicator--138507fc-db1a-4b14-84ad-8afa566c011f", "indicator--5aee6cb3-b2c9-4a20-9e02-a3e6d25aa4c5", "indicator--31ac000d-a385-40d3-9850-a63c018f48e7", "indicator--7455dfb6-2759-4ac8-93e4-5bb5df840443", "indicator--5bb9633b-1a04-4483-8436-8bcfc04230d8", "indicator--d1d1f48b-9c50-46b9-852c-c22552b4d484", "indicator--fd26aed5-a375-43a1-8605-2e2f2f93777d", "indicator--9992aaef-b748-4f5c-a8da-0ba5f801b2c1", "indicator--fe9ef40b-a26b-4e5e-87b5-f82336310da3", "indicator--699d370d-5b4c-4155-b9f0-2e854f431db1", "indicator--c198f900-db21-4bd0-af8d-064c137f59fd", "indicator--8ff439ec-db50-4389-9824-9ae001db45a0", "indicator--38e15e2e-7b96-4400-a5eb-8cfaca49126b", "indicator--930e1301-7171-4412-bb41-5b0868058d19", "indicator--7e0a2eee-13e2-4363-9f74-5a189e1c63ca", "indicator--caa4f4b5-1438-4b03-ac55-be0b8a7d2cea", "indicator--1a0a7070-d5ae-49c7-9f37-cfa366ac3d55", "indicator--f57103c8-eb97-41e2-8434-764b89d53aa8", "indicator--93d93225-93ea-48bf-8786-0cfe230f2636", "indicator--0dbbc518-2971-4224-913e-c4b7216a41e1", "indicator--fc43e1b3-709b-49de-bd12-8eacb53795fd", "indicator--086e9473-2fc6-44e4-8ff1-29575e6880f6", "indicator--94ba145c-9db9-4424-b61f-85294c17c720", "indicator--fa6cc0de-c044-4b1c-831a-51df4eefc3e4", "indicator--5c5d04a6-e9c0-43ce-9c93-51bdd7520ea3", "indicator--84168138-b789-44b6-8a2a-0d4dd6461917", "indicator--f0c42eab-3e99-4b88-9f17-5ea4f7cea143", "indicator--d601a174-ca33-4cce-8214-744c1c873bf5", "indicator--17b41abe-3db3-449a-8de8-dad83f7b4f59", "indicator--0abc3c14-87c2-435f-9e89-0a2fe36d3438", "indicator--627dd189-93ee-4a9e-be5f-13063bd21bc2", "indicator--d08b3e8f-c972-4c1d-a96c-2d78f641faa0", "indicator--40c00a7f-106c-4ae2-af00-64557bced99f", "indicator--bace31f2-c0bb-46ee-9732-da01d8b3a1f4", "indicator--7e2da1e5-71ac-4796-a745-cd29a466d1d3", "indicator--98ddd180-0054-4fd8-aa31-9383de1fbbfa", "indicator--d8b0b222-726c-40c8-9d19-589f973d29e4", "indicator--9f579b44-e9ce-4434-898e-052f61e8e4f2", "indicator--7d646ef2-704e-4461-88d5-49719bca735a", "indicator--d8531907-0466-4623-8eca-2ba6170c1dd2", "indicator--c229dae6-2b3c-4c2d-8869-3990d61d20e8", "indicator--71123405-1ea4-4c31-b74f-4db7a345b6e7", "indicator--209a68c8-d721-475a-9b88-3ac380cf9fc5", "indicator--b391e41c-076c-474f-ac5b-9f7ac0a8592c", "indicator--3f4fa9e4-50cb-4de4-8f41-b0a85340ce1f", "indicator--828f4b18-edc3-4058-beed-d3f9d5000fd1", "indicator--6841b8e2-de51-47ff-a765-ed1bb7a19dcb", "indicator--56f714c8-868c-4310-911a-598876d4ccee", "indicator--79bbf09e-57d9-4b9b-aede-05647c64d103", "indicator--f1cf838a-0eed-42ea-be8e-71a2ef09222e", "indicator--84e1fecb-54e7-4ff0-b422-e808c67eec15", "indicator--97fa46b1-3275-47c5-9aa3-051fe51bdea8", "indicator--d0f57f1f-303b-4900-96d0-be510d620326", "indicator--881b360d-402d-4c90-8ad2-59bc0e89a147", "indicator--059f6fe3-510c-4829-9a37-833c58bd047d", "indicator--33224da8-4731-4518-bbd3-64c2653af630", "indicator--e20cf8c3-a99c-458d-8755-297ae16cfd26", "indicator--fc6f7093-7482-4656-8013-934538fa679d", "indicator--e1ddf3ec-962b-4b4a-90e3-6554afe0d343", "indicator--66162d64-d0f0-4ce8-9cd0-49b02d840812", "indicator--8ed1250b-7034-466d-a682-c0dc331b7eea", "indicator--90aa4042-9231-447f-bd69-f014741774eb", "indicator--e8dfe4c1-640f-4350-9ff2-cdf75f505513", "indicator--91377b1b-d3cf-4e3f-8cba-861c2a304626", "indicator--1ba7b104-05b5-4b39-bcf5-4f549519c14f", "indicator--621e5a91-bb95-4929-846c-74aa4728b9bf", "indicator--8475ef5b-11a9-4279-81c4-ba4b54e5ea2d", "indicator--c5a0b12d-d28e-4aca-80dd-58f986462006", "indicator--647ed3fd-a26a-425b-8d8d-739042449bf5", "indicator--93f5a023-1d7f-4e2a-9701-fb6e8eae1412", "indicator--7835123f-e7e2-4534-8754-6f6fa24b8587", "indicator--51548f5c-a7ef-4ed5-897a-2fe7a407df0d", "indicator--94294cc9-8038-4968-8ecc-a86eaa175e97", "indicator--cc87b5c7-b4d0-403c-a73f-f201b8cc5545", "indicator--9d420758-1e13-4fac-8cc8-923ad07e1082", "indicator--c664dae0-3d85-4eb9-b1ef-b08906bbd41b", "indicator--9d0445d4-b504-4a29-a12a-30f192b8d3ae", "indicator--49d34b30-adf0-41d5-941b-ddd49b47a513", "indicator--1e8e0768-51fc-4608-8839-475893ee4a3b", "indicator--7a960aa5-3509-4512-a6ca-446c29962701", "indicator--59dbd5e0-212d-41a6-afae-2fc6d14835fa", "indicator--9b9ee9c0-9a94-4607-8d1a-927c27f8f28c", "indicator--ce57ca13-71bc-44f1-9607-4b22f8758b4d", "indicator--ed202c2d-51c3-40a7-8b61-9c68cf999804", "indicator--9ecdf6c2-d372-471d-9717-83706d836210", "indicator--18b0d235-d82f-4a9b-9d31-f57bcce37f34", "relationship--d9b6dd98-e109-4a1b-b95e-ff4a0410d9cd", "indicator--590ab5e7-c0fb-411a-8f4b-e092e9937c99", "indicator--e12a75fd-758d-46bd-8b0c-799400b7af1a", "indicator--b713f92e-95c6-47f5-909b-d99f31a82bde", "indicator--fa739c61-806d-4745-b393-233b4c4fedd9", "indicator--a6340cc1-81cd-4c4b-ae96-f645ce127308", "indicator--c5616ea6-afe6-4b0b-a3e0-44d363f21270", "indicator--953cbb82-585d-4841-b873-0c39872f820a", "indicator--f1fb9555-aacd-4b2b-bc4d-0d4a3a43dbf9", "indicator--43e3ac33-1ca5-40ed-99ac-d753e3f3909d", "indicator--a032ac42-bff6-427c-bc23-05f6cb73b4c0", "indicator--e889c13d-0b08-4631-a3e5-7be29fc65a2f", "indicator--967bcefd-d175-451d-8da9-fbd6346bfb50", "indicator--11ac69d6-82a8-480d-a0b1-c02985e4a7a3", "indicator--a86029fc-859d-4482-a41e-86c84ebe9cf9", "indicator--cca84014-dc49-4b6a-bfa9-829ae0010ebb", "indicator--21d9dd6f-d8ab-4080-8bb2-77e6f3599ca9", "indicator--811aeaef-385b-46ee-b920-ed4f12ef0e7e", "indicator--d2c1545a-9210-4e4c-a6ff-cb080db4c31b", "indicator--0e2e4ce3-1b3d-42bf-84e5-606f1612220c", "indicator--e7c65f2b-dc3a-4602-b895-bff473d72cb5", "indicator--3bd21495-d86c-4539-a7af-b49dee7063b0", "indicator--e824c67f-1195-4289-a413-3e1e4fb0247f", "indicator--8681a939-a034-4ea4-b011-f8d73044b2e4", "indicator--7b33106a-bc0b-4eb3-8c04-dd6aa7b361a6", "indicator--a4e8c766-777f-4e6e-80de-fcc436d10d7d", "indicator--13078075-b878-40cf-8859-9e7b7392aea9", "indicator--09565e97-7d34-4f46-9a9b-b76a1633cb03", "indicator--6b55a199-7aab-4e49-aafe-56abc2659317", "indicator--b8308091-fca4-45f1-8a65-4ac13df86403", "indicator--608aff62-1901-4afd-b920-779cff3a875f", "indicator--598d309c-f9e2-4e8b-a2de-be2ccb0d54ae", "indicator--e66d9f03-3478-4278-8a0d-b67b2a0f3ff6", "indicator--118222ae-3eed-4fab-bd35-2a53930bbca4", "indicator--a64712ba-0117-4622-9f8b-b391f68fbfb8", "indicator--c0b03108-2d86-4ac9-b6a8-2b6b4c5c6100", "indicator--7cdcdb25-87d1-41c3-9c3c-d9ca0082f80d", "indicator--7dccbb11-97e3-4612-81fc-8dc04941a7bd", "indicator--39874f53-3b80-4bd3-9aa0-bfbdb0f6f8db", "indicator--3e26de6f-88a1-4323-b632-e3615d78782e", "indicator--903e21b7-06f8-4a09-baac-be54537b9f08", "indicator--30b3ac6c-4cb4-4b18-a0d7-1b76961bcc8f", "indicator--67c9ee7b-8d24-43fa-9d91-0fe72b7c1187", "indicator--8f35eb1a-d03e-4038-a66b-f37953b22940", "indicator--d9d130d7-5ca9-4c21-8339-f0fea4eb9083", "indicator--a0873008-cbb1-49fd-9f7e-0dca538b16f3", "indicator--60f04284-771c-4119-8dbe-47783311c64f", "indicator--d5db103b-4429-492e-a334-4bfab8606ed2", "indicator--4d6e850d-f1d7-453f-a0b4-30a8400f199f", "indicator--275f0878-ceff-4328-9050-3d9f1904cafd", "indicator--edb05d48-589a-4b12-9001-ba4132dee21e", "indicator--ec5f40d1-cf4f-4de7-8231-d4ce45a1e8a2", "indicator--588a6688-f4b9-4a0f-8387-244d7643c960", "indicator--5499b105-c10b-42a8-9e1d-e330dc7b9869", "indicator--6e0fe734-d60d-4c7e-bcb0-dfbee7443a33", "indicator--9df07447-5f0f-4b7f-a07b-d2e58c73d711", "indicator--2ea1ef45-3af9-44a8-a7f8-6dfb15a1ef67", "indicator--c3c4358f-65e7-4c73-bd7d-f90a8b5be1f0", "indicator--61f02432-2a0c-4661-a0fb-4c79588c535d", "indicator--9db13018-66fd-41d2-867d-cc7ec13066c2", "indicator--bbfbb570-5bd8-4835-828e-e4c169642f06", "indicator--2cad2fe4-c486-4efc-979f-ac59095562e8", "indicator--03eaf81f-cf96-4a86-8ac5-02f2fedb5b9b", "indicator--61b5d44e-90dc-4880-abf7-dc05962f1198", "indicator--4adf3a13-67f7-4e49-a8db-b8b8568e7cb4", "indicator--c842a828-43bc-4bb3-b2b7-59a7dd0ebda1", "indicator--82c9fc0a-8f8a-4866-b922-e0b399fda00e", "indicator--fe5ec787-0946-4b52-b744-a48e2f20aad7", "indicator--84e21f12-bcdb-4135-9511-ff3065dd01e4", "indicator--72a313f1-7830-425f-b8e2-7218accbd808", "indicator--099bcf14-ce0b-46bf-b13a-bfa6660d5d36", "indicator--6375efbd-c6a4-48ef-a5ab-44afd96e233a", "indicator--3347bb5c-c4c5-46a7-a90d-1fb8564aa13f", "indicator--897b4ec7-b596-4f8d-b3a7-3e6fdc0439bc", "indicator--d457f7b2-62db-4abe-aa95-1e9cb561830a", "indicator--64f07350-19af-48ea-8506-9a0984e524cb", "indicator--3e327d0d-99cf-46ff-a52c-a5128013da08", "indicator--ff057df9-b43d-4f81-9d00-6bdbc0966bd8", "indicator--9963ec1a-033c-44df-a8c4-6d235470aeb3", "indicator--95d885d4-bcfd-47d6-94d8-d36e9c190275", "indicator--e050b3d6-f940-4adc-9324-67146d634c74", "indicator--f1bb0abc-8814-4075-833b-5f00aee01345", "indicator--58b5d96a-67a9-4916-bc38-343f26f7d6e6", "indicator--b3540416-33a6-43d5-bf90-51f7c85b7b32", "indicator--7549f55c-0c48-4a63-a2d8-3cae1caf8287", "indicator--00d4e945-6430-4a2e-9411-d2a3341a5479", "indicator--1246750b-d3d4-451d-ae07-3103ecdef011", "indicator--6b26c3ec-275a-4823-839a-4b36da7360ae", "indicator--e7b08810-3718-4af1-aa03-2df39dd77cc3", "indicator--af0e7065-f904-488a-b89e-978fa36dc60b", "indicator--f679dd54-7b22-4a0d-ba39-cc18ab1d512f", "indicator--08bf2d28-5d47-40ee-be03-6498e9a7d9d8", "indicator--019c7977-32e5-43b7-8158-f65afb5cd845", "indicator--3e5570e7-0c34-4c45-a9ef-3942f9d2a2d6", "indicator--dba6f197-7ae0-4fde-b12a-1b6b31907a1c", "indicator--03e1f756-bc45-48aa-95ca-b3f3c53a1d43", "indicator--17812192-be2e-43cc-aeab-e513e74c8014", "indicator--a47850c7-0563-4590-978e-32e9b5825ce6", "indicator--6b2702c3-ee2e-4fca-9002-d3c7f204de61", "indicator--5f6d9847-b938-43cc-a373-c46a1a2c12c0", "indicator--8405c4ec-59c2-4609-9bf1-5bc2f0f7fe60", "indicator--be0616c8-1dd6-458d-944a-822fa0767a67", "indicator--79eaaad8-c8f6-4c3a-82b1-638d5b0c7a37", "indicator--2fe5d2e5-8bac-4617-b446-0ca4d614eedd", "indicator--fb064817-737a-4062-8dd7-e4f2ba402b20", "indicator--971ffe78-d4c2-46da-a1ed-2fb03dae952b", "indicator--9d2ebdae-7497-4918-9c9c-c53e8bbe6579", "indicator--b4782973-d221-448b-8499-1c7ba81c705a", "indicator--af4dafa8-360e-4006-926f-10b95af6e9a3", "indicator--7c9e9b2c-44b6-4574-b227-5ceac09c860c", "indicator--b7dc8ddb-066f-4937-9ef0-0110e6c66a2c", "indicator--7c17ea6b-46b7-4b0b-aa39-9923d32c878e", "indicator--4238d61d-5f6c-4992-bb9e-e1e2b2722719", "indicator--343e9c2a-6ba4-43fc-a201-135f4e7309a1", "indicator--645061de-9441-42e4-93b7-e0a3f12683d6", "indicator--ecaa547b-692d-4bff-ad4f-1c431db5794f", "indicator--ee36e6f4-c572-4711-9ca5-5d5b8f1ceffc", "indicator--028e1cc9-7424-49ee-a3db-c8920a5eac98", "indicator--2613da51-c5c4-4376-bbb9-966d0636a1a8", "indicator--b3304d83-aa4e-40ab-b76b-71ba9260df84", "indicator--2cd78654-8de5-4c7b-b453-8a8a21c45271", "indicator--d436712c-90ac-4370-a1da-e910827c9c82", "indicator--4bb18cf8-49de-489e-930f-59f307a7ced8", "indicator--d0e64bbe-1733-4813-a4c5-97a93d194291", "indicator--4a79f2dc-466a-4252-aad5-6cae29f8b9be", "indicator--78da18a3-1a10-4df8-9b37-c0a6892b4e52", "indicator--242cac35-0705-4b96-80af-585cb2b6202a", "indicator--3cdaa6f2-e3d1-4df3-8048-ce00670310e9", "indicator--6fd202e4-8b4b-4729-a1d7-5d2bb4b14b19", "indicator--ee4e834e-a70d-4bf8-ad44-e9d9664fa643", "indicator--92ad9058-bfc3-4e79-bc7f-38eeb6ddce79", "indicator--e2d57e82-da89-4004-9de2-539983fe2818", "indicator--652fbb7f-0db5-4870-b084-3f74c5cba1a1", "indicator--3cae1814-dc0c-4976-aa76-9597c79a2e32", "indicator--990d41e1-a708-4129-8c90-d32f2c0faf55", "indicator--b6e51b3c-fbde-42d5-bd4d-01e0836d04c0", "indicator--a79c36a8-2841-4e20-9574-e70f21f1bfdd", "indicator--2ede7040-2dd7-490c-b6c9-ebf7be9d4d75", "indicator--c60ffe65-9f03-4d12-91dd-64691aac4bc1", "indicator--b0178979-95e6-47cc-9d4c-ea5151637cec", "indicator--30546c0c-79d2-4b11-8d60-129e1b147c11", "indicator--3e59f393-099a-435a-9db8-50ae85dcdd5a", "indicator--e83fa3e4-cfbd-4a69-af31-830a5e8c2e82", "indicator--432fed07-6199-4936-9c0b-d12e514f095e", "indicator--858d6634-5524-42be-9c75-f223d07b6b52", "indicator--7155c439-955d-45d1-9c05-786443229ec7", "indicator--fe9c6c68-bb92-4197-9bdc-83d3fd0ecf67", "indicator--8748a93e-5fa1-4e0a-a0a9-323571df25ed", "indicator--a841580c-d4dd-4b25-8eed-c0f0795bad49", "indicator--f4373d54-8672-4bd5-ae09-5128884a61f4", "indicator--4f30f0f7-375e-43fe-b259-6924dfaef664", "indicator--ef3b3d29-e227-4063-883b-bb6155cbf72d", "indicator--9a378a0f-5614-4872-88c7-e5708b9328f8", "indicator--2bfbc91e-f944-4e3e-a6a5-53f9cf7a2d7d", "indicator--70807ed2-bcd3-48d8-a050-0ac43bd1abb3", "indicator--6e0bdf76-37a2-4831-b4b6-b6b699d3130c", "indicator--0bc810d8-fdb9-46de-a051-c5723f6f3963", "indicator--970388e4-45ed-443a-9e27-b47fa4a6b30f", "indicator--c27bb9d3-2fda-4863-89a0-9ba2013d606c", "indicator--c3380539-8cd7-4d52-bc3c-2fb577bb0bb9", "indicator--06113abb-ec23-4ddd-97f3-262e57463554", "indicator--6e210078-238d-44db-9b12-d3608a82758b", "indicator--ec4c837a-2549-4c99-9bec-fb9e5fc6661f", "indicator--1ed7a1a2-35a5-40f0-ab79-3feb0d9668c6", "indicator--a0601236-5fd9-45b8-98b4-a1886d40304e", "indicator--2f3bf617-a81a-4287-ad1c-7d0badd5b1b9", "indicator--41918698-9806-41b8-9b43-9768eec4ccc9", "indicator--92cdee46-59a7-434e-bfa2-ac8c1977446e", "indicator--1b924f05-79ca-4f41-9fd7-76a01b6a88e9", "indicator--c3360567-6de1-40f1-bd22-51bbd93418ec", "indicator--f1e1b006-fdfa-4d83-9b86-8d52286f4dd4", "indicator--7b71cefc-4622-4c0a-8fbe-208543137edf", "indicator--57971f07-f3ac-48c8-b320-d5e7170f1138", "indicator--41b24300-335b-4a4a-942b-9f9add89c786", "indicator--3db4bcb9-a42f-4205-94ab-4279280cb945", "indicator--e143f19a-d670-458a-a5fe-86b487a9c87c", "indicator--7b8e7386-3788-4350-a00c-bc646f4225ac", "indicator--6324851d-912e-42c8-90d0-9db7f4fe5b47", "indicator--7ff39157-6147-41c7-a9df-2fa9ebfb1fdb", "indicator--b4673c55-664f-4a77-bef7-adc7617572f2", "indicator--061a7b6a-3940-4a96-bc26-afb753451fca", "indicator--b2c48471-4d7f-4b04-8dfa-18c34ff29599", "indicator--a6af3adb-09e9-422d-abd7-98f621b4e579", "indicator--cfca8438-8cf2-4b08-b259-2d693720e68f", "indicator--b82f345a-b99f-4e04-87ac-ad5ebcfa30db", "indicator--024cc858-d89d-4648-9079-bbb82db0d40d", "indicator--6642e027-4ea3-47b9-82eb-6f06224d26c8", "indicator--9d1fae0a-d260-45d7-8a46-7beb541bfef6", "indicator--1496a0c7-3691-4568-bd44-4192d8f89c9a", "indicator--ec3d4ddc-11c5-4f60-a449-7374047700a5", "indicator--a86d576f-2454-4cd2-9a88-15c4e683ea59", "indicator--70f74ad4-52d2-4950-9da9-d4f5d772f3e2", "indicator--f1a1fcb4-ec71-453f-82fe-ba6eeef045c6", "indicator--e6952bdf-ce02-4e13-92d2-17d9d24b0aba", "indicator--5df2cfbb-6f65-4a19-95c0-d9febcb66568", "indicator--4d97edf8-2b47-4cc9-8e13-1861f3987474", "indicator--3904d718-ad0c-4cd5-8032-f87783f180ef", "indicator--30dec51e-0c82-4130-bb43-8bd4a9754e3d", "indicator--b6b3627e-79b1-4c4d-8c9b-aa18f8d304f6", "indicator--2da04e75-dbe5-49ec-bf8a-3d8006255a21", "indicator--446aef0c-301e-4f5d-b7b2-c800ac83bed7", "indicator--752588d4-794d-48d9-ab75-d007b9d7595f", "indicator--2530a19a-af5a-4a47-8ff4-277b21485f44", "indicator--47d1ea2f-25b7-4784-8083-a731f747c816", "indicator--7d16c7a2-f253-479f-9127-c671348e5983", "indicator--d4ee2155-15e6-4b27-bda9-9c7c6f067f40", "indicator--130d6acf-20d9-449b-9361-76e2faf4a9ab", "indicator--411be9ec-9ac2-401e-9632-e1b6c76f6cc7", "indicator--b9065f53-129e-45b6-8325-714361de7b0a", "indicator--7fc3e8a1-6ecc-4ee6-a180-764bb74fdbec", "indicator--394be3f1-501a-4a08-a0a6-07e373401072", "indicator--7c4482e9-bbeb-48e0-86bb-3e2d8722b8ee", "indicator--344945fb-e90a-4cc5-ab26-fb7d0bdecc10", "indicator--87a4c051-353a-4989-aed8-a2f1ce36df07", "indicator--d39c2053-15a8-4d44-96f6-e6c3ea40af99", "indicator--eb3560b0-e99a-4e24-8f70-3c21064904d5", "indicator--2deac80b-7346-430a-b8e3-0b3b50883faa", "indicator--95442655-f91d-47a4-90ec-140c527a27e8", "indicator--6f1f4905-fb0b-4e72-9208-eba043d51796", "indicator--cc9a7b75-5a68-4f0c-bd75-eac3d9aa7281", "indicator--1bcacdac-5b90-4978-aaa7-9261e0010cca", "indicator--e66ef084-4369-42c8-b943-830f54ba3767", "indicator--1d53f918-39cb-4462-aef5-0b2f3dece395", "indicator--45e18f0b-b9ee-47fe-ab18-c34d46b1bfbd", "indicator--5e4c83a6-2d5d-4d9a-8558-5080fb84dcaa", "indicator--dbadedab-6f68-416a-8539-51e036ef11dc", "indicator--f2ad07bb-08c0-4a6a-8212-ff9a15addb56", "indicator--3d0f0ddc-83be-4836-bd28-f6426995c102", "indicator--f556d9db-62b2-474b-b797-891a9dd2f44a", "indicator--a36855de-1f2b-47c8-850a-d6ea98b9bd37", "indicator--e9a4842d-ffeb-46c8-b9c9-19ce11637788", "indicator--68c7db4f-1e86-4ef3-a321-a71d037736c2", "indicator--c90ef6c2-4748-4fe0-ba2c-6b80643c400d", "indicator--64128d15-566c-421d-9fdd-e88d380f121e", "indicator--61896c13-d12b-4d03-9c44-308efe37a5af", "indicator--1edb4fe5-7776-4e5b-b324-b111cb2bc284", "indicator--ad0f8dc6-9115-43dd-afd4-3c77289b5458", "indicator--8ed8b982-2734-4810-a64c-e425d9c9e919", "indicator--1414b8b6-bb50-4306-a34f-dd04e0da5a81", "indicator--09813d92-8795-45bc-9841-3620816dd890", "indicator--d3cee2e1-1911-41d8-bc6d-faac11466ddc", "indicator--f2eca9f8-83c6-42e0-beb5-c7a79fe87a70", "indicator--5abdcf62-3714-4c80-ab8d-cc47f90284d2", "indicator--9650c986-0787-4028-929d-3fbf39288ed2", "indicator--71225c59-55ce-41b3-9b63-deef03a5727c", "indicator--e19c4bc8-5e39-4663-8253-e2117106f1ee", "indicator--c156a50f-1af1-4c81-9586-5baa40704a00", "indicator--04b6a256-6c4c-45c4-bdc1-8f63d19ae723", "indicator--066a89f6-f38e-4c8b-b413-3d1fcde8f3b5", "indicator--a3a572fa-8927-4c25-98a9-f94f9effdd7e", "indicator--6633ba85-1e90-4a8e-b845-8cc2d8051c4e", "indicator--8fdc14c4-534c-4bed-ac56-e80621b88bed", "indicator--facb3b35-59f2-49da-abe4-dfba85ffa7c2", "indicator--442cbcc5-c146-4a5e-92eb-ba3e170552ac", "indicator--19a70e15-57fc-427f-b5f6-a0edfd10f278", "indicator--8b9c174a-3def-472f-8899-0047a9558129", "indicator--537ab66d-e416-4b32-bb10-f177bb6f6d22", "indicator--58d9c6a5-1ec0-427a-abc6-b777b81eb489", "indicator--9c8abbde-2f6d-4b23-b89d-ef8644921c1c", "indicator--38b2fd8a-c720-453c-b3a5-edac52114eb5", "indicator--666bad34-eeaf-41b7-a50a-e0c58e4147ac", "indicator--c3757ab1-cac5-435d-bd63-0802b4a75173", "indicator--c3d0bff6-7c0d-46e7-8898-9b89b67dd11e", "indicator--9c5b4234-c6e6-47fb-a799-5b908babc8b9", "indicator--82c482ca-57a9-4680-bafa-fa431f548370", "indicator--c3566447-bedd-44e1-b432-2fbb2d68a10a", "indicator--e7b7b6bd-0778-4199-95b6-318ef6435b4b", "indicator--45ce5ef7-85e1-4e00-b251-2858b262a5ca", "indicator--3d24c6cf-821e-4f5b-8a06-be7071ceb87a", "indicator--160dc313-ea54-4e5a-93bb-6893deb79e53", "indicator--0ed7cfc2-40d0-4853-8735-53b0a1a7dfb8", "indicator--b116082c-fabd-420d-85e0-e566bfcb1284", "indicator--8670d491-e16d-4ff5-a2b2-6fb264c11061", "indicator--2d7099e3-34bc-4c5b-bd72-f683eed25003", "indicator--1175d5f4-642a-4047-ad76-e356bd59dd56", "indicator--a0405c47-6440-4706-8c57-ae3e58ff3c43", "indicator--6218bde6-feb7-4d3e-b062-65c238b56b97", "indicator--421f059a-e04d-45d4-872d-bbd7a07399f8", "indicator--17bad6e6-3013-4b14-a705-f4e0d5c0dc3c", "indicator--ea94a05f-dd57-46a6-a901-f24b2ac599c9", "indicator--e24484eb-49af-484c-90dc-9b4e62300a1b", "indicator--c0fa9339-e69b-42fd-b7da-c6ee251b775b", "indicator--3ab589ab-f291-40fa-b137-1f8dda988468", "indicator--2892f22f-aa08-440d-b8b2-937910eb0546", "indicator--bf05dc4a-7ed1-4415-a5ca-a3c68ba724e3", "indicator--6813d773-e7f8-4cdc-b3b5-3920f751be2e", "indicator--744390e7-599a-4702-b394-09272da0ae00", "indicator--4001f913-afb8-432a-83e8-aa211b7a4c0f", "indicator--4f8ff3c8-318a-40f6-8645-be3a925f0e03", "indicator--227b7a8f-9ee0-41e9-a3e9-30bfb9349bde", "indicator--3ea35fab-1b58-401c-8177-5c9ba1e90fee", "indicator--691f02fc-7683-4673-b005-6de4c933e9d1", "indicator--88081670-3cab-4c88-a59c-189de7eac4e3", "indicator--c33cfa01-eb96-4b5d-8366-9224ad93cddf", "indicator--9c4fce0f-f93e-4bd2-aab1-15a6644640af", "indicator--6fc440ed-f26f-4676-a8da-1124fd24fbc2", "indicator--a816e76f-0132-49b9-85dd-60288e85315e", "indicator--b8e30c40-2137-401b-824f-2e3b0f1e351d", "indicator--4a859147-75aa-4f56-bff7-f3ecbf8d4b28", "indicator--d8613ae8-f1b4-4179-8cc1-23d04c2ac53a", "indicator--f1afbf01-2db9-49eb-8f06-747829bd952f", "indicator--61284942-e0e4-4e7f-a4cd-58d27cbe0451", "indicator--cd50a012-a0c5-49a7-8c21-0685591354c5", "indicator--1f954058-75ce-4849-aad0-eca80d7407c1", "indicator--25fdd3f3-c36c-472a-93db-504599e4131b", "indicator--c6f47edc-a27d-4a30-9cf8-796e6bffa1cd", "indicator--c488bba1-4cf2-4b7a-a024-eb34937d404b", "indicator--2b1ee8c1-f37d-445e-b7e8-f8c0415d2585", "indicator--824f78a0-ef37-4c23-9107-7dde8be8e6e3", "indicator--db9b9012-cfbd-4760-a1b0-0085b9cfb55d", "indicator--6c0c3392-0a21-4e25-9f4e-3c9f29ab004a", "indicator--f0579008-05ce-4b0a-901d-c1a79e0ecd9d", "indicator--c53864a2-3e14-4ba2-ad78-4e65af4e503e", "indicator--32c89c28-c3b8-4473-b6f4-b1dffe76af0a", "indicator--52ae7222-c52e-4ff4-8265-daae84dcaa2c", "indicator--5403c809-8bce-4e57-afb6-4d38f97b1744", "indicator--9747512c-2e90-4d1b-a3d9-e2c16385c9cf", "indicator--b81fc282-64c0-4830-89c1-dd3516f86c9d", "indicator--0f5b485e-efa7-48cd-9bc5-e665b6bfb1f9", "indicator--31c54753-374f-41df-99fd-2ab49a7d7c09", "indicator--6f05adb0-d6eb-44e7-b0c8-e04463e463f6", "indicator--6187c941-34ea-46e1-9856-30735d6fb7ff", "indicator--175135e1-2d48-4063-b65a-0fdf3528e1be", "indicator--28b3fadb-3f58-4b88-928d-36fc2aa8256e", "indicator--8d30280c-8547-4e96-acae-4f04ce0dc7fc", "indicator--7369158c-acca-4dba-b377-bcdd173ce629", "indicator--323b1f7b-330c-4fd3-8d41-0f11a4e3fed8", "indicator--4d169188-52cd-4922-a8a3-99cceae750c9", "indicator--f3220c03-96e3-44ae-beb6-b45ff7a61ea1", "indicator--d283f88e-168b-4a0f-9473-aa7ea7828081", "indicator--304365c2-4988-46be-8edd-8fe931da084e", "indicator--7cb23775-df07-4862-b124-5be2c289dd7c", "indicator--8a776d32-9b51-4649-a344-9f29a6dc1cfd", "indicator--1f6c7f1d-2f2b-4b11-861e-7cc9f1bfb506", "indicator--851e6e01-a517-4f17-91c1-5041848799a4", "indicator--8c0bbf37-64e9-4b14-a78b-f5f48065fd87", "indicator--f538be7c-f9af-4d3d-b12b-6ee550a58b20", "indicator--724dffa4-5dfd-4447-ad8b-78fc3e8c1304", "indicator--320c5dec-d5fb-4c2a-8b65-fc4c34828f60", "indicator--2780d7e3-d2b8-4000-b8f1-1836964fa87c", "indicator--c8ef992c-7dc4-426c-95f0-93a1b0dc2665", "indicator--4cfaf99a-f0f3-45de-b6e9-ff538b069450", "indicator--d580bc0e-4ef6-48eb-a56b-3116824d9577", "indicator--78da1387-1c61-4e63-880e-93b131c54378", "indicator--f3b5e7e8-1cb9-445d-878d-ee1a21f9c20a", "indicator--a151f2ea-55db-41dd-8de5-0ec0ef1a914d", "indicator--4cbe253b-9f45-402b-8cb8-17923ff99859", "indicator--b0dc036d-d00f-44a5-a6da-6445237ad296", "indicator--a5e63485-2901-4d31-bd6f-8ce3d18c84ef", "indicator--f37a0f94-5c89-4ab6-b085-2993c6c96ab5", "indicator--810de0ba-1d1a-4492-aca4-db6ef6b39de0", "indicator--ac4133dc-1b3e-4739-8563-d299b8a0c11c", "indicator--a64d55bc-5dd8-4bc2-8f2a-6696bd3d34e1", "indicator--04268afc-d8f1-4326-8163-5cb5a7478c47", "indicator--00d25999-b8a4-44e9-b0bc-9a79b305a0bb", "indicator--827e308f-6f05-42c8-94f7-e39a3989a965", "indicator--62a05622-a7a1-4659-9a71-9371b92d96bb", "indicator--1549f9ec-26b9-4a0d-8e0c-cea071ffd6d7", "indicator--91d7b488-19e9-4835-ae2b-cf1786f52d0a", "indicator--412f9e04-f737-453e-9982-6106a7c29f70", "indicator--0b28d2ad-2ef2-4e99-8d4c-452875a6a480", "indicator--a216c9ed-0dcc-4706-8489-fd384e6d9468", "indicator--a6fd6bb0-5016-404e-a959-3040f2ba6db1", "indicator--31adb491-e5c1-494e-b2cf-33f81d423b79", "indicator--f479beac-f7a2-4685-9f1e-7656c7016a30", "indicator--c4676de6-400d-44d0-a352-69c19cc297ee", "indicator--b3a7595a-f09c-4695-af8b-b4a94aa75cc5", "indicator--8bb9e86d-c707-41a1-be43-932159a19e00", "indicator--1a6e6af4-95e8-47bc-9142-52bbb701450a", "indicator--4302dee0-00d5-4b5c-a23a-06f117ad9f2d", "indicator--64a2696c-51eb-46a2-bd75-2a67c6773f3d", "indicator--4846a5ab-9058-4aaa-b562-9984e1f4f841", "indicator--63c06f51-f550-4dce-befe-3a887bdb594b", "indicator--8b1f077c-5fda-474f-9d55-93938e994ef3", "indicator--8988b603-59f0-4c15-aa6d-a234856cddfd", "indicator--ab5d419d-8687-4db6-a797-86e2a062401d", "indicator--1aa85ecc-e48f-4993-b26d-1a75cef560ad", "indicator--81057f9c-8bc3-4f49-863a-3063ca6d5f47", "indicator--2bdad5df-120f-4a30-b2bc-6e0cf2a92fe5", "indicator--5ebf2dd1-3e1b-45aa-aec4-2c5d8f939d7d", "indicator--f7a2b788-7993-42f2-9940-eee7cb773ea9", "indicator--10b0390f-cd24-4e80-bec0-b6b96763f521", "indicator--cf4675d9-7fe3-4e6f-b8a6-993dfa031e09", "indicator--84b646e6-953c-4872-90eb-b5c467fc96fa", "indicator--b118a437-6967-4f78-b822-dd13a89a9d33", "indicator--447b17bf-b87c-4b60-a710-4ef98ab84644", "indicator--5a2f7e34-e43e-495b-a5c8-e3d9cde4af41", "indicator--112481ff-75f7-42da-9a08-ff531ab57d5b", "indicator--3d31203c-d6b4-4647-8814-262c0c19cdfa", "indicator--6d664ec2-5bda-4bc2-9021-da6deece8d81", "indicator--9a8c75ac-84c5-4f86-8cc2-49f40f1d83d2", "indicator--505c75e9-af05-4245-893c-012eb973561b", "indicator--208ba507-e70c-43f2-b0c1-793ded0f8a7e", "indicator--2a5808db-731b-471c-a828-d59ede42c5e0", "indicator--cc879373-52da-4ce6-80b4-560e61581e2b", "indicator--0a76e8e9-a64d-4907-9500-1251b0631ef4", "indicator--5ba80249-2ac5-4619-bf4c-7fefe77f70f1", "indicator--152a1c0a-8e91-4a42-89e2-1561d6bd1cee", "indicator--7dfc4eae-e284-473f-aa03-95c5284d11a5", "indicator--41ee0605-1d69-4157-b87b-e9d656f0663a", "indicator--6789d7e3-215d-4d3a-a6d3-1aec8f23ada4", "indicator--539e41d7-50c8-4495-a272-f938d391247b", "indicator--dba04af2-51de-45ab-8768-5f15d3cb9d84", "indicator--02beea16-acd3-44be-9f73-2cfe3f9e036b", "indicator--83bb83e0-b631-450e-9494-b81464c7ab0a", "indicator--1a3ccbdb-c684-42bb-8d20-88297c87ff4e", "indicator--bcc170da-51e7-49ca-b259-409a603d9651", "indicator--414a88a3-7d90-413d-95d3-f49e614dffce", "indicator--0731cdc3-1d7c-49e7-88fc-743fd68dd377", "indicator--727cfdf4-b66b-4c2a-87d6-5e5800131749", "indicator--c54bbde3-e4ef-4852-9be8-926d50dd2244", "indicator--c6d06f61-0f7c-465d-a231-601e2d75b089", "indicator--362bbd08-bfaf-4463-b6b5-54db31a26d2d", "indicator--1df4dcfc-ff25-45f9-8368-01acf94f7321", "indicator--84c30633-19b8-4152-bfac-858fcd4c9c9a", "indicator--82a4f965-afa9-49f8-ac16-d9b4faabea27", "indicator--2cff01ee-3d43-46da-8914-978fe6d76507", "indicator--8fbcc291-34cb-423c-99e3-bbbdc4eacd7c", "indicator--5e8e1439-85e9-4c69-9b00-5b4055be7639", "indicator--72d0cc23-9985-480b-85a9-98bb5f005b0b", "indicator--e229a7de-ae71-4f12-9505-5bdb1bccc2c8", "indicator--5fa51424-b546-4dd5-a293-6f8d7b6c9708", "indicator--2d3e0855-d3d4-405e-8c84-e7535f12f82d", "indicator--c4cde250-ad31-4d65-ae64-c559d8ee1829", "indicator--65f3d743-ed95-450a-872d-6f5be088d114", "indicator--31ff3f31-9537-4ee9-9cc9-3b35e551f81c", "indicator--4c22d3c3-2e07-4312-96a1-e600d0664aa2", "indicator--f5c445bd-5deb-4474-acbd-3c650a28abaf", "indicator--302c63a5-0e24-436a-ad2a-340193c973b1", "indicator--425a9299-2dda-44a1-8cb5-dc22a24c886e", "indicator--6b45646f-a679-488a-b0c7-0eea8284d4ae", "indicator--67393c16-8e8b-4c6b-93e5-62a00263ee50", "indicator--038b7b13-b874-42a2-a580-d8bc14ff3752", "indicator--2b4e59d8-b6f9-4fe3-9af1-9ffd67724fc1", "indicator--e91e0e50-1838-40f3-800c-8923741c6659", "indicator--5e0bcd29-5c30-4a70-9cdd-95849fca3213", "indicator--c59e72f0-9575-4157-9c06-ea4e16f4ad6f", "indicator--f1c1bceb-4f27-4189-8259-a807971e5155", "indicator--95ddf93d-af3c-43a1-b588-09410b7f5735", "indicator--8c53efd2-dc7b-415a-8fe2-32a61ec6303b", "indicator--d8969716-2bbc-4a9a-9804-513d90202d6f", "indicator--b6194413-fbe7-47fe-bde0-8e6767fffcd5", "indicator--cf6fb39e-8003-4b3a-9cd0-ae51a2704850", "indicator--ab85f31a-2377-4de1-9ba8-3c83fc0dbdf5", "indicator--8f7b8c68-b6ae-4f86-9d1c-02f344cc9d38", "indicator--47c837a1-3399-4cfa-855c-d2829b8e49f3", "indicator--3bc56ad1-6bc5-4e55-988e-64b29dbfc9bc", "indicator--fbf1e8b1-f0b4-47b3-ad79-a07283f0f4d0", "indicator--705f241b-1c7e-4552-9dbe-b5299ab98473", "indicator--3717afa5-3ebc-4cbb-a074-0f3d31c3ab2b", "indicator--4c0e42c5-b32d-4608-93af-9526dc07c19c", "indicator--00eea18a-387e-443c-9960-ce5497b3f261", "indicator--3ca646b8-4129-4bec-8901-5acfe8c636a9", "indicator--7fe25423-5ea3-474c-b7cf-ef2a81ed2978", "indicator--63a283d4-3f42-4e5e-aea1-b0a5d43a37e3", "indicator--3a2e53cc-f1cd-4609-985e-09fd66cfeb0e", "indicator--06d2d647-2863-4aba-8635-c044594bb905", "indicator--8d8a3da5-5664-42d1-a06a-7a71c34037b7", "indicator--becc06ea-95a7-4834-8713-b5d57399e718", "indicator--c077a6ee-0d51-466b-a08e-6579ab6e3bee", "indicator--42eb225b-59a3-4442-aec8-3b69aae1ae46", "indicator--580d1231-9231-4bec-9ed2-4cc699bad908", "indicator--205bc2ae-bcf1-4556-b985-1fce093ae04f", "indicator--db65f9b9-49ef-40c3-a03c-f0ed576da39b", "indicator--68a88024-c9d2-4c61-a51b-0111247fcf04", "indicator--0256a35e-f7ed-4bde-ac37-c5abbd27f427", "indicator--911be4be-0771-4cd7-ac1f-c85eff44aaad", "indicator--5d7754a5-5b5b-48f4-aa75-d191c333c62c", "indicator--f73724e1-6294-4919-9a13-bcdef5f675b4", "indicator--a29023f0-00d5-49b1-9f03-03cf4514ef51", "indicator--d20027c6-d521-475d-9026-9fedd3b0b100", "indicator--6e140453-2757-4e4a-a5fc-59b1cfaaf3e0", "indicator--4b6727d4-a830-4a7e-94f4-8e313cb0d6be", "indicator--2e0decf7-21c5-4141-a667-6a5845b4ee08", "indicator--19bbf9a3-8abb-4840-8344-ef45cd46be76", "indicator--c6bc8cbf-1c7b-432d-a044-71ccd433ed23", "indicator--9690ea40-8111-4c52-a624-3f3dd67b659a", "indicator--13412840-c511-4aab-b433-088396cf0b8c", "indicator--1394ea09-1d6f-4c28-bdb4-6e4a37eab7c3", "indicator--0657a02f-9cff-4307-ae5f-488150d2fdd4", "indicator--cfd70e67-0af9-4e40-955c-270b91f43f87", "indicator--bb318074-538c-4b81-960f-d326f6de221d", "indicator--41ce10aa-3293-4595-9866-9ecd0dbf8319", "indicator--274b6f46-4ee4-45da-a5fa-4a6908ad2b60", "indicator--1d042511-afd2-48e3-b517-17a5e0682e2e", "indicator--7f19d63e-9fae-48d4-a402-c65c88315d57", "indicator--5132ff06-cf0f-49e9-8d1f-4dca8f92da04", "indicator--317f5040-44d6-49a3-bb9f-e72f5c4a88c1", "indicator--3e6342dc-3ee2-4415-b3de-4e9dd36b66b1", "indicator--cfe22788-acb3-4917-9e70-38850469beac", "indicator--9785ec7f-3290-4ec3-9a31-d45d942d301c", "indicator--4015fafb-9660-4495-8837-3ceecfa75471", "indicator--c31cb51b-df53-4950-b1ce-106d589abd4a", "indicator--02cb4812-d72b-4223-aede-f1ee1f50f81c", "indicator--b5f934f5-0b2a-4ef3-875b-9a788a255b1f", "indicator--9d2065fd-2b32-41ce-bd14-8fc8b001be82", "indicator--6978dec1-1a79-4556-8d24-0d5d9b56b4e0", "indicator--619a9a6d-459f-4791-bd54-22a301684b39", "indicator--5aa45385-679a-4683-8f4f-5bd985b075ce", "indicator--a3e85f3a-9b94-42e7-94d1-1f1e5f588ee7", "indicator--da7bfa44-e3e5-44aa-bbe1-f4f06d1ae21b", "indicator--c1125b94-352b-4ec6-85df-55c14452e62d", "indicator--a6ddc50b-9e60-48e3-a208-bb5a22eff87f", "indicator--7dd7483e-f4eb-4535-91fe-a5143ea34eb7", "indicator--5a6d32ae-74ee-4a0d-a6bf-cbf0d1c0ebd6", "indicator--0806ba31-65be-4755-9472-d994ba20d2d2", "indicator--90e910d4-154c-490a-8022-0a69f260a7c0", "indicator--1e117c22-700f-4b63-94d3-d2b7e95594cd", "indicator--3eed9db3-4d69-4e09-bb69-875218c10edc", "indicator--f3f4347f-fe5f-42e5-ac61-c1729e4e94c2", "indicator--df27a28d-f739-4141-8e4d-b8a3b9184933", "indicator--d8999ffb-46dd-47db-9202-9fb8fa886e29", "indicator--7a75d2f8-bb08-4f1f-bef9-cf4f0686fc48", "indicator--2dcf9843-1a8a-48f9-8252-b4ee22cee943", "indicator--7899907f-0a1f-477e-86c8-4e8fa5f86535", "indicator--00cf09c6-cb9f-4f92-9e49-fc7d64c2e29a", "indicator--26755175-f162-42ed-a7ce-6c90753834b4", "indicator--c94e0aab-21e6-44a8-b558-c6ef75201430", "indicator--3db4f626-3ae5-4fe4-a502-19d0f0011db1", "indicator--aad728b2-f476-42a1-9625-41b2dcd13c3b", "indicator--814bbcf9-4be4-4627-9820-35ebd10edacd", "indicator--6f1d022d-c7a4-4d8f-abaa-6d3b9489b798", "indicator--752e2176-c3ed-4dd1-b93b-501d056e15de", "indicator--f511dd69-80eb-4613-bd7d-e8b0f9367b13", "indicator--7164b661-8cc4-4470-84d7-f3bca7cbb9e5", "indicator--39f0e3a1-4290-4df3-9817-1d7eb7e72d14", "indicator--8b972a3f-5449-4225-8a75-6fdfa901da62", "indicator--55301591-da5a-4cb7-a0f9-5631fd209ab6", "indicator--d07e7531-bb39-4a94-b6f0-a9127d29e62b", "indicator--77492c17-d5c3-49df-94ab-26209dd3eea1", "indicator--d70c9140-46ef-466c-8c76-a57dd0dc1091", "indicator--cc360bb5-ec86-4499-9fb9-9ee91041ef8a", "indicator--b2604bba-f159-447c-a162-7fb8d7c9a8ff", "indicator--32fd4070-e657-43b9-9a2e-dd065df2334f", "indicator--c0438068-5bb6-4a5b-82c3-18734a864a98", "indicator--14d4b994-c141-444d-9fbe-ee655586c899", "indicator--32ea28a7-df82-4cf7-9036-533c12ef63e6", "indicator--9fdff733-d025-4aae-aa17-d79c4bfc3460", "indicator--5e03498e-58df-43cd-94ee-36776573b349", "indicator--0c1feeae-0de9-444e-935f-0af8beb9b99d", "indicator--16b16fdd-7814-4579-9134-116f19f69b1f", "indicator--94dcfdb8-1085-415b-a63c-f1dc4c643876", "indicator--5ee26564-3e27-42a9-b67b-d8a7847441b1", "indicator--21862e84-db3d-4425-805f-2673113b2ac4", "indicator--9c381c34-64b8-49fc-a9e8-a2b0e7e60020", "indicator--44f3c15d-696e-4621-a65e-b0153e605845", "indicator--b530b518-1cc9-426b-a77e-7ee3763abce6", "indicator--bc086f55-c502-41c8-9791-cdece9c39b97", "indicator--63720cf9-34ad-4a6d-ac2b-5ead4baca6df", "indicator--a009ee40-86be-4950-8222-3120993b8a8a", "indicator--953c5d12-9b5e-40fe-af0f-bf1a5e88b03d", "indicator--050a14ba-085f-4c17-aef9-a9c6a7bd3188", "indicator--af08ebce-07c4-4b60-9408-d9c5bcd53562", "indicator--2ad79975-bcbf-49e1-aff9-a592cecbd889", "indicator--03f23ef9-4d72-4c45-ae23-ed010c9010b5", "indicator--0ad15433-5e4a-49db-b025-e771186e0719", "indicator--c1eab75f-2a65-4425-9fdf-f158d76e3273", "indicator--6c362b3b-516d-47a0-a504-0ddc0def5d4d", "indicator--ad8f7cee-5e92-4bd4-83b3-779e9f97257d", "indicator--6e88557c-de40-4a7a-999c-2413eb1d75ee", "indicator--26bff496-0519-4103-bf48-56ca07ceb1e0", "indicator--0915dd6c-53a5-476f-910c-9048d1f9c541", "indicator--4123cb2f-bdf2-445b-8952-dbd528d0aac4", "indicator--a8d22a2e-f1b4-47db-b401-0b8082db1c96", "indicator--26a9238f-1a8e-4a55-9c97-379cc5096618", "indicator--168a72e6-af29-4874-8a9b-127628b4d001", "indicator--eb138693-0ef7-424e-bbbc-dd484bed3822", "indicator--50e80d7b-5267-4c22-95ae-ab2e4664f505", "indicator--35ab2226-fe2d-4486-858b-2ab7fa80095b", "indicator--174106a3-dae7-4773-bc69-af48c3adb804", "indicator--24aeca32-92ea-4387-8178-0f4cf3bfbaf3", "indicator--a7cd5c67-7bf0-4fde-8f73-74311e953514", "indicator--fadcf2f5-fbda-47ab-9259-f5579aac9a32", "indicator--af29d974-29f5-4a37-a3b9-c513aa767b98", "indicator--070ff830-25d1-4337-8566-a9a57db3130d", "indicator--a2fcaa57-3e33-49a8-a690-fddca9003eb2", "indicator--0b048d6f-7677-43d2-9f4b-03b529abba3a", "indicator--721944bc-0c9f-4054-8f5a-6b4afc3f1cfc", "indicator--3a7dad56-f0fc-43b7-8390-4f90993658f9", "indicator--b6c609be-56e8-4c02-8c7d-ce4ea7251f1b", "indicator--ecf4e19d-b208-4483-aa6c-11141cbf536f", "indicator--6d7a3e28-1203-4cf6-819f-a535197f2906", "indicator--08ed735f-e2d6-42b1-98a1-c3305a1a2e4e", "indicator--3a00ef3f-2b7f-4807-8d2d-7bac999279bb", "indicator--f3912f15-11e8-4126-9da9-9ea23ff46654", "indicator--2f06120b-8e22-4ab0-b983-b01796b29ed9", "indicator--af7c70c2-ceb3-4b68-a343-79a06d57bee1", "indicator--58968172-c97d-4fc2-8213-8f00f3d4cf53", "indicator--029e117e-32a8-4a74-9954-6f4252b5f84e", "indicator--2750f599-5414-4eb2-9b7c-bae9ba102c97", "indicator--af49d5f5-4f07-4001-8164-3557e962545e", "indicator--a6a14b53-5ad0-4053-a0c5-0c32a1c11c5a", "indicator--4e3ecfc9-574a-4228-9a16-3449618c1f85", "indicator--2c897b5d-62e6-404a-af48-6620e1b76868", "indicator--97d99973-0e78-4b74-830c-a00a89d606a2", "indicator--cfaa2150-6dc2-44b6-a5b9-d3ffc9554cba", "indicator--e0615c66-11fb-469a-b67b-f72a6e554c1b", "indicator--a2f9eca9-82e1-4527-ade5-2879bf6705b6", "indicator--168174a5-7cbd-4242-b9ba-0cb86d905c0c", "indicator--42e4ad83-e0b0-4c5b-b7e5-d6e57cb1fd9b", "indicator--8696ffdb-1c88-44af-8ce6-1fcbc316d2f9", "indicator--a44f97d4-34d2-400a-bc98-7863af6c7341", "indicator--fafd1c52-76f3-4ab3-a717-8f9132ba0dbe", "indicator--2d3af914-1ce2-4985-be6f-bb58ba5377be", "indicator--460d1e96-9a1f-4eb8-9837-9dae6f3024e3", "indicator--7b09cd8d-8a5e-4a3c-a3e4-3bf0fab65eb8", "indicator--4bad738f-1ac3-41a5-b815-eb9a40d9f16c", "indicator--a4769ad4-7214-4ec8-81dd-913974435812", "indicator--6bf696be-181b-4e51-a0ba-177a652d9e6a", "indicator--45714af0-415e-4c93-810a-b5bdf0ae5b25", "indicator--a84f6779-f365-4825-bec4-a534579e26ac", "indicator--0bfdac21-3f17-49a1-976b-aa7e9ec76324", "indicator--7ed01205-4600-4900-a34d-f7c1212e9180", "indicator--373d08a7-355d-4178-99f1-40c16cb22ece", "indicator--656f4cab-60b3-41ea-a050-b42020574abf", "indicator--e50fa7a6-4d2a-4741-be27-7bec703b3545", "indicator--60204225-e4b0-46f8-a659-a34e71e2683a", "indicator--84433d13-8052-48d7-972c-649a0ffe9d81", "indicator--466233a4-f6cd-4815-bb0e-a72a1176c1f7", "indicator--4242e297-1876-4be1-af34-33a95c698eb9", "indicator--9a7ca869-06ae-4d21-91e7-28c95ba98294", "indicator--325468b6-d9bf-40e2-8834-2e05b982bc53", "indicator--4f516069-a71b-40a2-83ac-d40415ca7797", "indicator--4bed3d28-e80c-4567-ab99-08063881c494", "indicator--98d2eeed-2baa-483c-9d34-7fc08b914ea9", "indicator--cac3ae40-72ac-4c22-a254-de0b8bf94ccc", "indicator--8ea212dd-cb91-4d14-b856-fa16eada79f6", "indicator--e447d814-c14c-44bf-827d-6baeafc1d4dd", "indicator--c4d7b5ea-9b86-44ac-a99c-6bfb0483962d", "indicator--425b7180-1351-4ce1-9424-994626f9acd2", "indicator--1f5c3e78-c328-4afe-95cc-527088cd9326", "indicator--32360386-0de3-4b41-900b-af81d5c7924e", "indicator--2c378c16-7a6a-4070-9ead-0ed7dec5a9bf", "indicator--6c62083d-6270-424a-98b4-2f467097eb7f", "indicator--88174363-dd4c-4344-949e-3e5eb3f07c82", "indicator--08d7ed54-6e23-41ea-85e6-e76ceda066e2", "indicator--64c50457-6e7d-4da1-bdf7-008d7a3b4312", "indicator--2c276347-194d-4767-bc81-403188608e0d", "indicator--75dc0353-a87a-457c-b18e-43fcb70afdf5", "indicator--e59b26e3-0ab4-4ef9-ae87-2fb40ab93149", "indicator--fe628ca4-f59b-40e5-a1c9-e1c814be2d7e", "indicator--0fcb2e94-88c1-4085-bef5-b575f990cba7", "indicator--93bbc418-e6a3-4bab-acdc-bc2be5b94401", "indicator--29e50464-0f39-45e5-a730-744631930fbf", "indicator--33f49d2e-d63a-4c45-b08e-ac3054a2106b", "indicator--d03a0414-ef83-4a29-92eb-5d91fbfa08b2", "indicator--5c27e885-5367-4a98-b0b0-f17806146fe6", "indicator--562c9f72-93dd-4b4d-a406-db17567cf9aa", "indicator--fab6b3c0-9ac6-4304-9286-4562e0b304d4", "indicator--c78d5430-178a-432d-ae47-9436e81024e8", "indicator--895db0ae-fbdb-4d47-b72c-353539e5799c", "indicator--82602737-6272-48a8-8077-de8dc3ae80e0", "indicator--34f57ead-9622-4d42-b7de-f05e3718c05c", "indicator--a4c4a8e1-a958-4cac-87ef-8ead36880876", "indicator--845795b9-a3b4-495f-84d5-5b5e9fc22eca", "indicator--3b7227a1-c932-49e1-8ea0-b15925f3a1af", "indicator--7194bbc6-4fd6-4b78-80fe-450d0853bed2", "indicator--a3fd437c-569e-4899-b916-adbaa10400e3", "indicator--7dede728-7998-4032-8390-b6ef7881a692", "indicator--cdf9eaa3-e5f8-4a8d-8600-7b7a7a826a57", "indicator--9e0c6c45-2329-4f66-8bcb-8ddb7f3a982c", "indicator--377b94b3-bfec-46f7-92ef-ad88e6ec3626", "indicator--8e61c4fd-9555-486b-93ca-e6075081fb14", "indicator--62210cf7-35ef-4e82-9afe-eee48faac617", "indicator--b30fe22b-6d11-494f-a896-c579f6d2970f", "indicator--d70d4714-8214-445e-bb2b-4329a9cc3a67", "indicator--7279e5f5-408b-4df9-83f6-6d1c47f61c67", "indicator--b7e08402-ee89-4a37-b27c-b71f37d3c5ac", "indicator--43b52d02-f4a5-4dcc-93c3-5a3f47b133a7", "indicator--1a1f1ba8-b994-43df-81f0-a140273379f2", "indicator--708be3ca-2fde-4927-b369-68e9f5afdc78", "indicator--359a9f45-e4e1-4a2c-a269-3962b46297d7", "indicator--39a63f67-af1b-47f6-bdfe-84ca220ba365", "indicator--c12a0a92-5055-4de7-8f0f-98dbb429abda", "indicator--4f8e5ca5-4325-4747-be4d-f6eeee3c6876", "indicator--bc846c24-e81f-4360-bd14-f5b45d520728", "indicator--5efeea49-fdea-49e2-9e09-58f96d9c64a6", "indicator--6df163e7-ac50-4daf-9b31-d2975600c41f", "indicator--99501fc2-9234-4f09-851f-60239f10e5fe", "indicator--a0269272-9b1b-4a9b-93f3-ab20dcd7689b", "indicator--6af5ebb1-0da9-4eda-899f-a7631dcf9ed3", "indicator--66b1ffb9-1d25-40a3-a6fa-79a56ebab89d", "indicator--284913bf-3538-430e-965d-5621a5f4165a", "indicator--5e8f9513-c7a9-4a71-a359-e81c66543856", "indicator--4f2696f4-e1d8-4309-9160-1987da00c892", "indicator--577c39b7-84fe-49dc-8c8a-80536de49433", "indicator--13889fb3-06a3-420a-89b2-8c6ff04fe151", "indicator--776d7b85-00a5-4beb-847e-bfdc7a82d7d5", "indicator--a3772c20-c737-4fe3-8429-6b4812e62f99", "indicator--49a5f65b-8b97-4ebc-adf3-5bcb09a9c131", "indicator--4e372924-1557-4555-95d6-bf57662e2f64", "indicator--2d609db7-1b41-4e53-b683-8bca4c2eba4e", "indicator--75ed7813-2eb8-40d7-92a2-519e38f131d5", "indicator--50ba0c51-aaa5-46e6-93d3-630c0b3bd19f", "indicator--4077605d-9135-4ca4-902f-016f743879b1", "indicator--a133864c-b930-4175-abb7-e58ff2a26d36", "indicator--956b67b8-42ca-49f7-b78c-4f0283212318", "indicator--a1f84184-0145-4471-ad1d-93268fde9568", "indicator--17cbf6b3-1fb4-49df-b98a-0c105c01eba8", "indicator--a6d9f7cc-d12e-4760-a63e-646a28a66e87", "indicator--163707f0-c3dc-46bd-9582-4b81f880d2ab", "indicator--5afc7a33-05a8-48d0-a610-7fc67e6a5452", "indicator--2c4b7ef4-51f3-4c19-abf0-63df82f9c37b", "indicator--8e3ad221-378b-48dc-9d01-7c6bdb93eed0", "indicator--94a3723c-ef1d-4994-97cf-2dcbb8f9d280", "indicator--c9869647-41d7-41e0-90fc-c3e22a2a0b12", "indicator--20e6a339-4f94-4c0d-ad35-6230e102a87e", "indicator--f68f0aa4-1efb-4ce3-96c7-384c6749177f", "indicator--0f226e90-9e34-4fa1-abfb-1fee4cd7e8b4", "indicator--3f265af3-2b1a-4b89-aff0-98d5ba873fea", "indicator--62edcc27-43a8-4dc0-b7b6-db370868cf32", "indicator--7e0fd5ad-76c5-458f-8d5b-4033caa33c83", "indicator--78f3e4c6-2cfe-4462-a78b-1d2b538626c4", "indicator--f0094284-41a1-44d1-8746-5c7e640755b3", "indicator--2fbe437c-ae06-4878-9961-cf119df67fd2", "indicator--7208a622-7955-466f-9900-65a872b3a803", "indicator--3819b9ae-dedf-4ff1-bdc5-d14a6aa939a6", "indicator--af0ffee0-1e86-4cc8-a35f-2f26c5ebb31c", "indicator--7c79f5ba-c386-45cd-bf93-706344d652cc", "indicator--51528d19-078f-45ff-b0ff-7d2f3b4961f2", "indicator--8bc36bca-d186-4a77-a272-604ab073ab09", "indicator--6eaf9b24-12d3-41e1-aa25-0fb58f97a914", "indicator--3e1607b1-12f0-4afc-a3f4-dbe2eaa34440", "indicator--123a5dbc-f056-4947-84b2-5261d981ce07", "indicator--054c2673-81af-4f86-aea4-57b2b555868e", "indicator--1a8fcb6e-bc71-4a5d-a356-175fbec95968", "indicator--4c9b25b0-417f-4018-93f5-eaa39a3fc67d", "indicator--a74d8c61-5ae1-4af2-bad1-6b5ed22133a9", "indicator--39e8a4fd-da6b-4bdd-8553-580da729099b", "indicator--1b7ebf2d-f464-4c50-acc2-2f160a14396e", "indicator--0c6acff2-ef9f-4c61-a62d-41b72f5616d0", "indicator--227c36de-75b1-4594-98a7-5270b1ebd561", "indicator--9b022111-87c5-4e9e-9f1a-8a97c4874d80", "indicator--73fc1482-2966-4d8d-ba1c-1d21afa670e9", "indicator--ad5fa2c1-12f9-49e0-920d-eeaef6e3165e", "indicator--af97765a-5780-40fa-8a62-460510842b6e", "indicator--d03843d2-a5b2-4498-ae9f-7782588486c5", "indicator--d18cf688-4d94-4120-b709-9dffe32c7650", "indicator--24d52b9b-7428-4744-827a-056bc08fdd2b", "indicator--97a67fde-bab7-411e-a10f-e53ecc19264d", "indicator--c959cc16-9d7e-4099-b121-d4e687b7dc0a", "indicator--16b8b48b-d4c9-4def-8d73-e4270e96329a", "indicator--6cbb1b45-a26a-476f-b617-7175cddf523f", "indicator--3c45cc6a-9b7f-4163-8cff-50def9a02e88", "indicator--bc079c7c-05bd-4c51-bad0-29e0608f4eea", "indicator--46dcf234-7168-410b-899e-ff7c57508c21", "indicator--eff04396-6a0b-40d8-92a0-81d8e824f901", "indicator--30631136-0591-4d7a-b5b7-c5cb3453d035", "indicator--3ecb7f8d-7668-448b-97db-3787cae170fb", "indicator--dc33b45a-b7f0-4cb7-a64c-7012478afd88", "indicator--e100a0d9-2edc-45d6-ada6-294b22175450", "indicator--b2e5a75f-8e46-4d15-b27f-0a450d3e447a", "indicator--2afb57f0-ee88-4575-b18f-9f14204f0cbc", "indicator--7a06aad8-7913-457c-a9a9-aa00f3e4690b", "indicator--9315d5e1-2f04-4e21-bcde-55f492abf29b", "indicator--cb1034fe-43d9-4a52-84ba-e6db329aa2ba", "indicator--286942a2-5f51-4826-9f13-abdda270297a", "indicator--b4dd0684-b432-4ffe-a2fb-59359bc8587f", "indicator--9322e790-4533-4e78-8aec-b26b6a0949ad", "indicator--d8769d72-e925-4a20-96b8-351cdd2dd536", "indicator--412a43fe-de66-48ac-a253-45861a8419fa", "indicator--95f2b17c-3925-4423-82fe-ee18b92ffbfb", "indicator--283cbe46-28dc-4839-82c8-2d426046df1e", "indicator--dcb32941-515b-4f8a-931a-f62e3abe9e6f", "indicator--06f00fce-b9ac-4840-a18f-15af201388ac", "indicator--0749729a-05d9-47c9-91c3-f21362e4d664", "indicator--e249f062-2c45-4666-8fa1-b437ebd86f40", "indicator--b74d3417-0edf-4f1a-afdb-3e129449d710", "indicator--ccdd0885-9002-409d-953f-9af4b0fc7b74", "indicator--47d30cc6-84cd-408d-a973-a7fc73480657", "indicator--99508eb6-1573-4d69-a48f-eac7a23668df", "indicator--b087ba20-fa1f-4d08-b40d-98fdbe0cb83b", "indicator--242d8569-8a32-4381-8356-938f38015351", "indicator--46a5dcdf-dc90-4e0c-80ee-99043f078d2b", "indicator--2f7bc759-3ac8-47e9-9a38-60cf14e3ce5f", "indicator--6d58fc21-ca0f-4e2a-a5ef-5168cf43ab7c", "indicator--9d6e9c9a-1311-4162-86c6-879e3e9a8300", "indicator--592014c1-07cb-4410-a510-e946a566f105", "indicator--b21f623f-0e4c-4fb0-a341-f5ae130625b8", "indicator--19ec5a87-8ed1-4f06-929c-00584977cb47", "indicator--3cf23ba9-e0ca-4a6b-a2a2-c578aff89de1", "indicator--56a7f995-dfe8-4aa9-b321-958dfa6bb217", "indicator--bbe1bd5f-8355-41b8-b6ca-cb67c88e3cea", "indicator--5ff0cf48-1761-4419-93c6-f39ac2d19d78", "indicator--73476c15-c852-4f79-96af-2600a1742e11", "indicator--e9438fa1-2ea5-44f8-ad99-7394e715c7fd", "indicator--4fa1750c-6026-4549-a21a-c501deed8425", "indicator--a2ee5055-0ac6-4f6c-acc0-3a0b911b07e0", "indicator--ea197c6b-0caf-4684-ae8c-0dad9d374ad3", "indicator--681039f1-51fd-46fb-9016-167b79daa301", "indicator--81906c27-25a3-4589-8816-647fe321e6d4", "indicator--b21ae3f5-c77b-4a17-942c-e8aff0a87ef6", "indicator--05753aaa-4c44-4a2c-a672-07656b98fe0b", "indicator--40889855-ea8a-47f8-9789-320ba26ca35b", "indicator--bf3659f4-a031-4def-9903-518c36c3b565", "indicator--06f634b1-0664-4296-ae47-d4f662613b90", "indicator--f9767495-b02c-4cf1-85c2-d02864054270", "indicator--2629d268-ae10-466e-8b0c-8a748c0c6d07", "indicator--6c6c0078-09b9-4b11-87ca-0270ed369ce2", "indicator--6b523985-b239-4256-91b4-3d6fffda7855", "indicator--64a497f4-084f-48b1-95e9-fd50077f6eff", "indicator--6e105dba-e6fd-48eb-9e09-fb93d05ca32d", "indicator--7115c9e7-dce2-4a79-b6d9-f4b1615f7cd3", "indicator--8f3c9a5d-53d4-453a-95ae-5d8105c92ecc", "indicator--bf435c41-a68b-4d38-9b21-94b46f9fedcf", "indicator--226b8666-583f-4878-87f3-b7d21677b99e", "indicator--2c9ef592-6121-4f07-a1ce-7ed708805015", "indicator--117355d1-13a6-4bb3-8173-7cc330c127a9", "indicator--cf183113-03ff-4891-a318-eb1941901f16", "indicator--afec033f-d7e5-46a3-a64e-ae5ad9721ef4", "indicator--39bbde73-a38c-4a68-ba73-e709c8654295", "indicator--b984db82-1572-4aee-8747-defc9511b8c7", "indicator--0e8edba5-f5f5-4f48-8137-45600cf402b5", "indicator--64b7825e-66bf-48e5-a13e-6248e3773dca", "indicator--7e58d4ea-6006-48ab-b8d9-8eb354c9cba3", "indicator--5fe21113-e74a-48d4-b1fa-6811f2838431", "indicator--42a2e3c3-5dc7-4f65-81fc-d9b512267de6", "indicator--ced60488-3e20-40fc-95ad-c597bdba9b6e", "indicator--b7ff6fc2-2b98-4fc2-b522-c9a38d86221b", "indicator--846484e5-4181-49e5-a5e5-1fc7fe5d2a20", "indicator--c4f2eaa8-d9d5-4781-bbe6-d009ffccd6c9", "indicator--25fab7dc-424b-4df5-8e63-b05f4adfc91b", "indicator--cf98b9de-9918-4e0a-b847-7d308adf7e19", "indicator--ace5d376-ec78-496e-996e-5dc4a7d5a769", "indicator--f6391797-fa67-4ba5-808f-242c7c0e9553", "indicator--6732120a-59d3-4105-92ab-b909593eec3d", "indicator--ad3a4650-0e8e-41d4-92cc-1f7c37989169", "indicator--526b07fd-bb5f-4225-a505-2a47a1a478bb", "indicator--4659e2ec-93cf-4d31-8300-6c84b8fc0b26", "indicator--cd45c656-ad41-4d9c-aaa6-ee63ea365161", "indicator--1da8a99b-02df-4002-9d96-e88d7bf2eb8f", "indicator--9302dd39-cfaa-4ad6-8704-4524ee37e7c6", "indicator--47b30c78-478c-451b-83b7-ca84801d9c1c", "indicator--8a450b31-ad75-49dc-ac1e-6986b3334663", "indicator--a64fe454-0390-49db-a0e7-cbd72f4d223f", "indicator--a6e6acb5-6321-48c8-b8f7-16d44750a566", "indicator--29795767-5a5e-4c91-9e61-8938ee2c8845", "indicator--c160bc83-c902-4d75-b679-4dcdbf0f5205", "indicator--469c4f8a-0d99-4afe-adac-899834edd031", "indicator--f93d3704-26be-42c9-8553-04c33a508009", "indicator--9e41f1b6-4398-4166-b8bc-3d3467161fd1", "indicator--a45d71d7-6ec6-4c9e-ba1b-9dc9753673cc", "indicator--5ea19cdd-ba07-477a-ad4b-2a0d8e189ec0", "indicator--ead6d41a-f0b4-480f-aa24-883871484b94", "indicator--db335072-e9ed-4d07-ac03-af9df043948e", "indicator--b77029b0-cfdd-4bea-a15e-5275554809bf", "indicator--cd3c363d-2a95-46fb-a74b-98d2c8e96e5a", "indicator--f4a25d76-4d8f-4d54-87ff-bf3c914e2f5b", "indicator--392dfb07-af96-4757-919f-deaa0822ef79", "indicator--4673861a-be61-4ac2-b657-c70a9f55d9ec", "indicator--322a518a-664c-474e-be15-3a17ecbaa1d2", "indicator--f431a536-b244-43ef-84c2-913dae83f411", "indicator--0ec4bb75-6e62-4f6d-b1fd-40ecf5d0ef69", "indicator--c9be29a1-0a00-408d-91a6-8c618a5e8889", "indicator--e88e2ac3-4719-4f6e-a6df-cec79c2f54f4", "indicator--41a0ae17-ab00-4537-a47a-3389ebfd36d5", "indicator--6bcf9058-27ef-4d18-a153-a3f2783cf691", "indicator--67feb84e-298d-4287-b69d-fb0e41915852", "indicator--6c3f4130-f1b8-4301-a0e4-3ce65bf8ebb7", "indicator--fe3ec1ef-858a-4af4-9ada-312941448673", "indicator--14218d27-a5d9-49de-9cef-92028e6cc477", "indicator--450ed700-af1b-4af2-a3d7-fad8bed85a04", "indicator--1e1011e0-5754-4e8e-9524-6caea78b0da4", "indicator--a0f345f7-5d0a-4fda-92b1-28542a68815b", "indicator--bc856fb8-5b6e-475a-92a1-2a6c904b9202", "indicator--8b42741d-ad2b-4255-b8f8-5889702a471e", "indicator--98be2310-a507-46ce-a0a7-d6c00a17f5dd", "indicator--d83ea0ab-6a72-4342-9f6d-af9aca901761", "indicator--e4e2951b-01ba-4dd3-98f6-3c37f9e3597d", "indicator--228682e8-579c-4ed4-8f19-e6a68a140ab6", "indicator--1899f168-13ea-474b-b8db-e56c493cd344", "indicator--c7c53714-27ea-4090-a1d9-c2a8833a17c5", "indicator--5cec072d-1e4a-4273-97ca-2ed5d4a3cdf0", "indicator--c0c4ab17-b550-4a7b-84c4-7ec0c6518c77", "indicator--4ca90862-4e67-405d-9acc-9652ca0f313f", "indicator--82c558a9-0e09-4edb-81e6-714196bae464", "indicator--254ece2d-10c7-4d18-9348-95fc2e7f91a9", "indicator--3de2a80e-9055-45f3-8713-6f5fe3cfcb90", "indicator--2fd823ef-7812-4cad-a7ee-8a4e83d5e0f3", "indicator--5f4aea0f-6f03-492c-9452-92949b0b37c2", "indicator--90fdaa3a-bf69-4c23-8434-c4cef0424652", "indicator--09a06f95-1af0-404c-a60d-21f110a17021", "indicator--8e4c9451-b1c9-4965-b52f-eecd0f2f10a6", "indicator--8e9d0fcb-14fe-46e5-b220-304af471219d", "indicator--d4c829bc-d7ec-4ca0-bf81-912926db3f0b", "indicator--cb51fadb-424e-46a4-a270-3c09ae1aa160", "indicator--552b7725-a02a-45f9-b5a9-50336abefdbc", "indicator--425fad4c-5aab-43ff-af6f-63a1c0779a73", "indicator--38659a30-a133-4e94-ac30-6af060c30bb4", "indicator--b725e047-95da-4d7e-91b0-0b4a7684977e", "indicator--7d50c72b-93cf-4014-818b-669510d637df", "indicator--a0b5abfa-ffe9-47c4-a529-ad950298106a", "indicator--04c89b9e-6095-41f2-94cd-8173324fb849", "indicator--c2e9e728-2d72-4f58-8951-b871dd93e2eb", "indicator--57eb49a2-4370-4f3c-8252-c05a2343e045", "indicator--79c11032-3e44-49c8-a8fc-4ad84508040e", "indicator--54b8d315-e34f-4e08-abfe-3f90e7d5f305", "indicator--d52b3de9-c8f5-433f-af71-d25ac05bb704", "indicator--40c95217-0756-4022-8622-f2e5de98c438", "indicator--1161f5cf-e2f8-448c-a693-58af65f1a844", "indicator--75803686-763e-4aac-baaf-44844a4d9b53", "indicator--25c9be91-de89-4c34-90fb-8f8b753b202b", "indicator--82a761fe-367a-43c7-b4be-4beeff5fbb3a", "indicator--d20ea646-4a18-49f1-a1d7-382ea682914d", "indicator--6553dbbd-df18-48f8-b341-9353d4dd9ef0", "indicator--3890b627-1f9a-4613-a278-09e56e4ede10", "indicator--9a65d1fd-b8fe-4977-9cc3-126d86789317", "indicator--f62b89fd-9994-405c-8f8d-300aeee3af03", "indicator--e97cb180-38a6-4f6c-ba72-087fdbd657be", "indicator--6bdc183a-b356-48e0-8a3b-4ea0a9ab4f4d", "indicator--70f6db9f-d3c3-4575-a3e6-f1dd01675927", "indicator--08cb2ee7-f816-4657-ae5a-5925111ea569", "indicator--e1f210b6-fcfa-4564-8ca4-99d27b8fe772", "indicator--58099bd2-4f88-4a15-88a0-37a3cc0e1eeb", "indicator--2e4e0820-da75-446a-a3c1-c9b99eca14ae", "indicator--7ed25a95-89fc-4976-96a5-0d2f213f3ceb", "indicator--acb5c9f2-5663-4bd9-a359-a2f272a7f707", "indicator--80c46706-5173-42df-8a9f-cbba2c0820bc", "indicator--55b10682-81db-451c-a137-1ee8b7a29fbf", "indicator--d848aaa4-30ca-4bb0-8d4f-3cad2c2a1f51", "indicator--72ad2de4-2419-467a-92e4-a18bff335d9a", "indicator--f9979a14-b929-493f-8369-d1802e27581b", "indicator--92ddb611-e333-41d2-8395-c9b9371a7d48", "indicator--d6f59492-1796-4747-a20f-6b1587d3dbee", "indicator--954c158d-f614-4b89-9c68-609f258d48d5", "indicator--ee358e47-5aba-460f-8c44-e7905f84ff47", "indicator--37e1a6c6-1919-4ed9-bade-ff248e0bcf5e", "indicator--8e3a77cd-461e-4ecc-ae2a-e6b74fad8845", "indicator--93760dbb-1a4d-4290-bd15-e40a3e1204f9", "indicator--d880e37f-cf8d-43a6-9b17-7e4fffcebe63", "indicator--1192a6bb-72fd-4b04-858f-25b8b19138e6", "indicator--ea8a56c9-73b5-465b-bb25-44e7449513f3", "indicator--2d471c58-2ece-4125-8e44-93b6c8f09461", "indicator--1e4ae5ec-a089-4a42-a06e-391e32f1a4ea", "indicator--37c06924-6ad1-458b-9e0c-8af040993472", "indicator--a1c0ac5b-d2e7-4548-8b2a-ddf3a0613ecc", "indicator--0e315f75-9c40-4a3b-b6f4-97494faa5aec", "indicator--99a0dac4-4aab-4f1c-b962-e4bdf3213e72", "indicator--881f004c-67fd-4092-934b-d75d407a32ad", "indicator--92176aae-777b-43b5-a339-531507b7189b", "indicator--24bb0dc3-aa0c-4bc9-8a16-31efed9f5581", "indicator--9d2dd14d-4e85-4301-90ce-ec10bc91a121", "indicator--4bafe20b-39bb-4878-884d-bab6c3c8f317", "indicator--6bafc423-0e7f-4c46-9893-c5c52ab04906", "indicator--2bbaba79-738a-4b9a-b0f8-d633da75200b", "indicator--3b7f1602-3e7c-46aa-867e-f58a07f3898b", "indicator--956a0d3f-1e07-4e78-8c5e-ea809ab9a454", "indicator--359b708b-5c2f-4917-bdfc-71a23dffed99", "indicator--e16f426e-d8fb-49cc-9533-0adfb148bb46", "indicator--e027e7c6-c2fa-4f4b-9e73-240d939a73de", "indicator--1b1bdedf-dd27-49b8-b5c2-de3e7ba3e7bd", "indicator--59d4eb28-7544-4c94-94b2-b648e56536b4", "indicator--e7b8138f-07bd-4c6a-aa18-1bb637b07eef", "indicator--0d4f25b3-a4f0-4461-9221-8a81a4a4e572", "indicator--b27a9a76-5184-4439-a3d6-a56382117fe7", "indicator--ed442e0d-8283-4c9b-9baf-5e27ae261ee8", "indicator--47572699-8a87-4e46-86b1-5ee6380595a0", "indicator--ee20f408-c356-4956-ba33-ea4dd068ded6", "indicator--a98212fb-daa5-47f1-93a7-ae8b680663ee", "indicator--426160cb-5576-4a8c-bd7d-d5ec180056bd", "indicator--98c9ae14-e932-454a-8267-a757c156ba3d", "indicator--a9c7b575-60be-4a93-a681-48ac3e6f3745", "indicator--98ed9b28-b238-4a37-b1cf-dbeade814b30", "indicator--f4c66f2a-61e0-49c4-8fa0-7fcc759a6762", "indicator--e2ad8ba8-71b4-4d7a-b587-aaacf4132a29", "indicator--705c651e-b3bd-4347-badb-68f1427bd625", "indicator--4cc5d45a-3e0a-48b2-8119-0f40f41db76b", "indicator--fbe889de-b2d2-4a9f-9a77-2921a969efb5", "indicator--9f747870-5733-4a96-9b37-d759eb96e74f", "indicator--b2a582c1-3e33-4195-9932-2dd0adf18541", "indicator--47a8f5df-ca3b-4750-b2ad-38c64b885bf9", "indicator--bb188197-5f90-41df-ae15-b30c17f1a567", "indicator--3f716ae6-d4cd-419f-a17a-9ef39f2b8f6a", "indicator--7c5d8a30-d3cc-4f74-815a-22bb84779de3", "indicator--a3ce666f-47e1-47b5-9812-9985309467b9", "indicator--ed8d001a-2eac-4679-b48f-10cf7fb32ae4", "indicator--d1ca68a5-baa5-4b32-bca6-3c20b07f759a", "indicator--43056a9f-e59f-48f0-a335-dbd95fc85f20", "indicator--453fbe5d-3526-4d79-8a7d-afd298821625", "indicator--0b0e7b09-2281-4fc5-8639-bdf058929104", "indicator--38fa213a-7872-458a-890f-72feefe459d2", "indicator--dbd4569a-bc52-4ebc-acbd-51776cd0406d", "indicator--834e0207-ceaf-45b4-83a3-9109b5cd33a2", "indicator--c7dc7288-619d-4e2d-b8d6-e600f189dcf1", "indicator--3deb0118-ed42-43a4-9b4a-dc1c0aaeefd5", "indicator--7e11858d-c1c4-426d-af58-872d36265df4", "indicator--1cdfdbe7-fb43-4b6b-8e3b-0e7e3b503bd2", "indicator--5477af2f-d39a-4731-86a0-e3cc3ab9e4da", "indicator--62c49c41-7de3-4eb2-b65b-59e0fd59e1b7", "indicator--3876ed5a-7263-4dae-9c66-bcd0cada47f0", "indicator--803799f8-44a4-49e3-a63c-769d39a6eca6", "indicator--f04b08de-e8ab-41f2-a202-5e45cb20e748", "indicator--980fe162-9708-430a-bfd4-2a8f8fe458c4", "indicator--d2ddec21-dd5d-4fb4-9d4a-e787d157babe", "indicator--d939b457-439b-4fcc-9e66-3985c9c5c4d5", "indicator--a7a5d8b8-6b3e-43ac-9daf-2cb2f2a2fdde", "indicator--28483655-0245-4b16-80d7-5f777cb32c23", "indicator--531ab931-9c03-4488-b247-7e933cb3b9a7", "indicator--380afe8f-0e4a-4673-bdfe-5aeb6fd254fc", "indicator--da7473fd-0864-46ba-8486-5e50a2c403ae", "indicator--bfede355-0750-4457-927e-d093831a2215", "indicator--6d0a6005-9e02-41e7-869a-0e1a4c3b510e", "indicator--39f07a8f-5ed8-426d-86ee-a8455746eb59", "indicator--f5a8ccb1-f2b6-4e27-a6b5-5f32c34b08b5", "indicator--b7c8d3fa-8b1c-457a-a703-c0a9fc256f09", "indicator--6062b1ca-9b69-4a47-8f5d-dd4dc4e29b69", "indicator--af5941de-f28c-41c7-83ca-76f4228255a3", "indicator--93934a75-36d7-4e8f-aec1-2192e6fa873a", "indicator--61042ae7-2377-4d2a-80b0-aa300f8d4b13", "indicator--55d3c19e-c0b4-48f5-bedb-8ca317f54d19", "indicator--cf8771c9-1164-4c76-80c8-420cee52f2cd", "indicator--2297ba2e-907d-4283-8f3c-da2dc92a4bf3", "indicator--c66a46cf-bf87-422d-ba4c-c5654b425d07", "indicator--a4e4b98f-b323-4816-8979-fded8d87f0bc", "indicator--0a698044-3b68-49c6-aec1-036bf4c67bf8", "indicator--c9c90ea9-6bdc-41ae-adfa-16c106763bcc", "indicator--696f15ff-3db5-46fa-b1be-170e5253cc0e", "indicator--564cd989-5b2a-4790-9fa3-745d3f2f9ded", "indicator--b7676f8e-c8d3-414e-b499-50c5aa13c214", "indicator--8b7e40a9-39d9-4207-9e49-78a37c5ad607", "indicator--19d32482-0299-40dc-9d58-8ddd994dabf5", "indicator--c0dc6a8d-5376-404e-9659-8437ac605651", "indicator--ce447801-cc61-401f-87f1-b04a59ae3211", "indicator--2122eaf3-0e0c-4c91-9ced-62a94295282b", "indicator--d6024af0-9305-4560-84be-962942821e4a", "indicator--8e31c067-c440-4347-b816-9c8937c0eae1", "indicator--a20f490a-f842-46c3-8db5-b6948b0fc35c", "indicator--60d4c833-95fb-4f57-8060-f2ca538d3841", "indicator--22e6c63d-016a-4bdf-9572-f40989ac4271", "indicator--9c2464d3-b8f8-460d-b9a5-e1bced1e788c", "indicator--73bcb262-fe57-47fa-8caf-5b7830c015f6", "indicator--66e701ee-512f-4e2d-a18d-f3fed021a32b", "indicator--0aa8e64a-bf92-49dc-ad3f-40c7ae51f032", "indicator--de84b988-574c-4eea-92eb-3187fa5c527b", "indicator--6b343314-a6ae-4fab-868a-8f6c3338d806", "indicator--cc388f76-88ba-4a23-a3da-4a4d80cfe49a", "indicator--b773489b-e4d2-415e-aa7e-2f23db3c4521", "indicator--519c40a3-efe3-4f4e-bfaa-3c45d4fcc76f", "indicator--f687a273-f12f-4385-a612-57c4b088c53f", "indicator--d6599d2d-9c01-4894-be07-c3913fdcb44f", "indicator--423cc330-54a8-4bb5-9793-fd34f2e212e0", "indicator--59c06b79-d814-4ac6-9b6c-7066f174484f", "indicator--6c8bf4be-86cd-48d7-9c81-dcabfd422e95", "indicator--e7135c1f-0eb5-4a58-b307-0e8be21b6b7f", "indicator--ca0722a3-c30e-4e1e-8c54-0a66317dedfa", "indicator--60f06267-efbb-4874-a766-0bf1bb851a76", "indicator--67dbcf1e-6da5-4098-8cea-8b97ba535e75", "indicator--8c076f6e-0dd5-4a92-9dfa-f7f4d6b323d3", "indicator--93ff0c62-5dbc-4845-a17a-ef49b077a50c", "indicator--0784994d-425a-45b0-b20b-45c9e2ce80a4", "indicator--f098fd26-472f-4668-a47f-63467930cff2", "indicator--1878563e-d6f8-4d58-a92d-130533ed2ad4", "indicator--6ebf8904-50a4-41be-983b-91a9f98af461", "indicator--3cb0f484-d438-4ef4-b9a0-266d06593566", "indicator--0674a3a9-47ef-4583-a306-7353171c186a", "indicator--7102b779-e9d4-46fb-93f7-1a86304b2e60", "indicator--34cc17d2-267f-4d8a-a6f7-d30f5d7d1cc2", "indicator--fd2734da-ca9a-45eb-beee-6db81c2c2f00", "indicator--c5758e09-0c73-4b2c-bec1-5eb63d729bef", "indicator--efb386e5-d54b-4809-946f-abc3ca5c805f", "indicator--721c5d73-4831-4946-b07b-ab0140bd50c7", "indicator--6b3863e0-6d6d-4790-ad63-1f65f2a2d8e4", "indicator--08c534b0-e420-4cb9-9411-2c7a505f02ff", "indicator--725b19b6-7189-478c-8c97-da72634c3fda", "indicator--f64211bd-d871-4a38-a4a8-75e997817bcf", "indicator--35471dce-44d4-45c7-9225-be70c39efbbf", "indicator--22ff17ec-99cc-4d2e-9527-2bf40b132e95", "indicator--cbf18575-021a-4824-b41b-2309d02f15fe", "indicator--7dff26a0-644a-4a12-956c-ee8c68c2e66b", "indicator--93798573-0b5d-4aaf-95b4-b0cb38afbe9b", "indicator--19639d6f-ab43-4659-81b6-57c88b024f02", "indicator--a67c4224-b83e-4dce-a97f-bf959dd48cb9", "indicator--ef52bd46-6582-4794-b51e-6713cc577017", "indicator--0b224950-10b8-4712-ba7b-16d9abdc222d", "indicator--bb98e7c7-7616-4cb4-a4b9-29f2f0a18b74", "indicator--856335a1-afaa-4f74-a32e-d11021e4ecef", "indicator--ba9b6d9a-38d3-4e8f-85bd-e739bea56612", "indicator--16bb20d1-7774-4bf2-b4dd-cc8e1cdbd28f", "indicator--3d37cb4c-7693-485f-8a26-39012fa3af2f", "indicator--53828ba9-8a1d-4ab4-9abb-16ebd8bf6c08", "indicator--76cf30c9-5057-4032-bbaa-f68e8d24c48f", "indicator--414d9888-ae4a-4378-8433-6cccd28bb9a2", "indicator--5e16b96b-7fe5-4d77-b2a2-c3cb616ac7f3", "indicator--906c56ab-73f9-4300-b902-22022863c001", "indicator--1868afd8-6f22-4fd1-be9e-4b3de1535ce7", "indicator--2245023b-5296-4a55-b97a-08bd03541ad4", "indicator--2d98b09a-04b1-4413-b2a3-fe331bca3b5f", "indicator--d754c79b-f4a5-4f9e-85b3-5efeff6ad077", "indicator--a00d528b-2a0b-45a2-88c6-67912a11772b", "indicator--2102e47a-673f-41e6-b120-e34fed36ff82", "indicator--5ef0e38a-bc56-4775-a6a1-da7ce5a700c0", "indicator--22c07bac-f9df-4c1c-b01e-a87c2b432380", "indicator--b5d3b506-9214-424f-89b7-c0029289eab3", "indicator--23b09640-2d77-44f2-9fdf-bfe0363bb4c4", "indicator--4ae76d5b-61f5-4c28-aac2-37b3af9a62d5", "indicator--7a263d44-6945-4145-b6cc-4bff7308eea1", "indicator--e582cbc8-708b-4d15-b1db-b35542b6e2d2", "indicator--9399b18b-3542-4030-bb6e-cf3dd01c49c0", "indicator--4f8a6a90-232b-4254-b585-e7a6388e1e49", "indicator--99dac092-697b-43fd-b05b-12c96b3272c8", "indicator--6af0685d-b277-401b-9c9f-9911f1a1316f", "indicator--5266aea2-b225-4a16-ae40-636f374a14fb", "indicator--18482855-9d15-4aba-8c86-6a5e7473261c", "indicator--c5d2bda8-52e1-45a6-ac6b-87eb90b4f51a", "indicator--ad6703f7-34cb-495d-bfe8-4d6f7974c9c8", "indicator--e8b27ac8-c741-45f0-8d0d-d33103902635", "indicator--cdbd8756-80d7-4e40-a6de-e6456f3d4cc0", "indicator--9610a27d-5d74-4b8a-b214-4742e0181b4a", "indicator--ef3246ab-a859-4f6a-9f69-8459e0189945", "indicator--32dc8216-bd8b-4ae5-b77a-9ff3f052dcf8", "indicator--5a19bbbf-8cc2-4b97-a658-4336ef6a9012", "indicator--78280391-3bca-452a-932e-a9cb78c60e9b", "indicator--0299e6f1-61b0-44ad-b8c4-6741f408ee61", "indicator--884747f1-f936-40fb-b382-c8044905a00c", "indicator--ff464229-73dc-4f36-bfbf-88416f54c9cf", "indicator--b82477cd-80a1-45b2-a1bb-d5a38c912fb7", "indicator--8ca9cfca-b08e-4637-803f-9c84a2f23c96", "indicator--43aac588-ab1a-4522-9ed9-0d86341ccd07", "indicator--74374785-2b25-47e0-8bf3-81c27c25115a", "indicator--c6c5d636-10d8-4ea6-89c6-c47c4ddcfcf2", "indicator--0a4e77aa-5a89-4812-b1eb-9d2814e5facf", "indicator--8d9ca937-bfd5-4692-9391-28e45de9c701", "indicator--1556382e-67a5-4c2a-94f5-80d58cf10d86", "indicator--605a4f50-6658-4e95-967b-b9049377db05", "indicator--0ea2c374-af83-4f14-9857-74d913f533b2", "indicator--d635ebe6-66b7-4121-a771-8e096ee9bcdd", "indicator--8e99b1e6-1bfa-4fe8-9598-834f0a6a74a7", "indicator--1eab9f62-9730-4aa3-b785-85f0a0ba6233", "indicator--2c423007-695f-4555-954a-3c89d0557a55", "indicator--6005949d-0113-4c61-aa1e-47a7b0c3166b", "indicator--c2f3b8c9-6bd7-42b4-9eef-dd3a8baabe3d", "indicator--97a2dcef-48f5-4f40-a3fd-930651e58957", "indicator--b78d5ac2-0191-44e7-9a07-9bcb983dc613", "indicator--0991c228-aa04-4dcc-b8e6-980813fc3365", "indicator--1896e3c3-c697-4852-9946-edcf5874ea1f", "indicator--5a5fd995-3095-4390-a0b8-f0a7dc60e356", "indicator--dc6990ca-6adc-4ca4-a8c2-c755e12c05ba", "indicator--bb07760a-8fec-44f3-b5d6-a7d26ace5a5d", "indicator--75149c41-2564-40f2-ab4f-8e1bc0c5f84d", "indicator--1a77c0bc-0e93-4631-abaa-589f8ab969be", "indicator--421d9d5c-d8f6-47d8-8b52-5ab2991e35d9", "indicator--61129822-6ac5-4e4a-93d3-279164528d72", "indicator--0756b26f-fe2b-4c56-bc96-1eb453823cc0", "indicator--58172ddf-3a43-4ebf-8ce1-c1d347ab95cf", "indicator--36f3dbc3-e170-4dc9-8f23-f8be34fdacb2", "indicator--f1ece7e9-4ce2-4d4a-9ad3-fcf423f36d37", "indicator--1080aee6-3820-42fb-b7f0-0902a3dbae7e", "indicator--1a01f1cf-2de2-444f-acc8-ced736a6e4bd", "indicator--18fed68b-e85f-4a76-aa5d-b6af376ffd50", "indicator--b87254b3-2e01-42a8-a959-80bdaed9692c", "indicator--4d2c97f1-1fdb-48c5-bd89-8b8abed208ee", "indicator--ee3f3a38-1f60-47a1-831f-4fdaacc3b6e6", "indicator--33effbbe-c286-44f5-8639-57d242a496fd", "indicator--c485a71c-435f-4e9c-a562-eb7e3238d520", "indicator--2f1d30f0-61d2-4a06-bdca-c513077aae9a", "indicator--183bc564-03ae-47b0-82a2-6a80322c1251", "indicator--1260c836-22d5-4013-930d-20762266454f", "indicator--acd48369-6e75-4ca1-8dbd-9122c858579a", "indicator--a6b8a955-52c5-45e3-97e6-25f31d183d83", "indicator--adb92b28-c2ed-4b1d-8131-9fa55b4e2a93", "indicator--f25e8fea-a0fb-4dc8-93fa-9a48423d2628", "indicator--8c9c8742-fd44-4b18-aab7-08c451ff0352", "indicator--066c4a0c-e7ab-44e0-ad59-0ff35151f982", "indicator--76fe61a7-39ec-4f7e-b8f3-d74f08aa9d98", "indicator--13e5da10-b681-41bc-9ffe-284204c85cf5", "indicator--7590523a-90f5-4294-9606-962ecac6ad72", "indicator--9e54f7cc-e102-472b-aa9a-d51c4043236e", "indicator--08afc2ca-60ef-478e-ae64-a054f0eff4c0", "indicator--492392e4-6c2f-4a1b-95ee-e045a99e9026", "indicator--57fbe993-682e-4361-a71f-1e1f3a257f6b", "indicator--d9db9b28-58db-4ce8-a77a-af0df50b309c", "indicator--67e104f8-f8d1-4656-9c73-c5028b23e509", "indicator--20581bfb-6891-49d7-8107-594724a43aaf", "indicator--17597461-98c7-4ec5-ac42-a2e1566aec65", "indicator--34c1a7f0-fdf0-424c-a124-f37c488e7738", "indicator--4e0e036f-aa75-4bd2-bac6-3000d5c37933", "indicator--06b7b686-ce5c-4c39-ba47-6911dacd866a", "indicator--6db1dedd-4dc0-4751-a770-2410403e5b6f", "indicator--bd9b77c9-7530-4f4b-8694-4a3ab933c2ed", "indicator--9a443ec5-ab3a-4ef5-bac7-173141282db7", "indicator--5eaa47cd-5fee-44da-8dee-e68cfdfe5a57", "indicator--522b5039-cab0-4ab7-9874-19434653f694", "indicator--c32123c1-27df-4545-a471-3ab8143e9e5f", "indicator--0b836336-ca50-4d6d-869b-c60e68e3beed", "indicator--ce33f51f-6c1e-4b2a-9977-3e3b53853b85", "indicator--d0a1ed2f-9ccc-461f-9b10-6089884bc231", "indicator--d158baef-77ac-4fb3-8513-60556780e5d9", "indicator--f5bd5130-c479-40bd-a4bc-932da9ad037d", "indicator--b13758c2-c869-4c09-8218-d34878fb78b8", "indicator--c50eb4fd-e399-473e-8c53-bd6801a6f99f", "indicator--035ab562-fa29-4d59-8747-ecf283432396", "indicator--0a3d7307-2c32-4e64-9a61-cfffdb14fb93", "indicator--8d8ec522-b19c-4151-8ae3-bd1f59fca688", "indicator--29fb75f8-0c1a-4b97-bbf9-05c11bacf454", "indicator--012f3d79-0998-42a7-8795-1f2ded0059f9", "indicator--375d8ac8-a53e-4de7-9341-16d2d1c09541", "indicator--cbf20c4f-7f57-4a40-b774-0aa641a76d51", "indicator--3ebb9a4e-be88-45a6-b4af-7f2b6d8e8081", "indicator--db86c676-2df6-416d-8e1b-83143c60c8ac", "indicator--e661f545-6c96-4ddc-9df9-e19e9fa1ae97", "indicator--bb10777f-d918-4e0d-aabb-25741ddc7c26", "indicator--a05ebf28-9e15-4213-99ba-3e183f392937", "indicator--c9681331-9317-44d6-ae14-72051939d1c3", "indicator--13067de1-46d9-4fcf-b37f-9a923dc2fc44", "indicator--50b9ba19-e0f2-43b3-b213-46ade62d40c5", "indicator--a75101ea-dddf-4b16-8539-48f5cacaf8f2", "indicator--ba7786af-ce8b-4dbd-8668-efa0c8d2a2f8", "indicator--b0ddcd7f-a4f1-4071-8080-9e8bc7d8ac9b", "indicator--d253b4ee-46f9-40d0-9947-1251595c32fd", "indicator--effc052a-a717-4617-b7b7-67d89dbfb891", "indicator--6510ea2f-c77c-4065-a4f5-3b60385d4d64", "indicator--5d16233f-869e-4349-a318-7e37dd8f5192", "indicator--a7939a40-4e88-4b9f-842f-35bbfa08bb8b", "indicator--1dc58ce0-eae2-4f53-9ebb-a037dcf014ad", "indicator--e811e276-66b4-4de0-9c95-efac49de9c60", "indicator--88b96455-1ec1-4638-9f95-b7f34885992a", "indicator--b1393417-e7a5-4e40-95e8-887feb21464a", "indicator--b32b6d07-8f40-472c-b4f0-37fb046f4848", "indicator--2293e74e-4b2c-4290-864a-74038ac472c8", "indicator--11d917cb-acbd-4214-b986-ce7bb6e46798", "indicator--813e0811-f93b-448c-843a-b6753e249c0e", "indicator--9fef442c-fd17-45e5-a4eb-a6a39893f5a9", "indicator--7bd1bb60-383b-4c56-9da4-48162dbb158c", "indicator--8c82e4e7-06b4-4e09-ab85-2c3c31657703", "indicator--c81c3d95-d3ef-4ec0-979e-4aa66a97f0fa", "indicator--32e2d885-a0ac-46dc-b0f3-b2e15850dfaf", "indicator--db07a17d-c783-4650-9911-806491b0e89e", "indicator--20130782-7825-4335-ae38-d7a98af56e80", "indicator--baee6771-e81a-4759-9136-813da314a6a3", "indicator--558be4bb-a97d-40b3-8776-f951345bcb05", "indicator--aebf9c1e-e6f8-42db-9c4a-ffcf3e339023", "indicator--76eb0071-36a6-4e59-a187-52cb0afccd3c", "indicator--64f44dcc-26b3-4a74-8f10-1b77468f19ee", "indicator--c9464c56-cfaf-465e-91e4-0e18ee66282d", "indicator--bee7459e-4fad-40a9-ae5c-61d9733c3785", "indicator--2c866880-0904-4743-abd4-e481fdf30a59", "indicator--e445693e-55d5-473a-9af1-ae8b36ea240c", "indicator--8a32567d-c7d3-423b-930f-9ccb5dd4765b", "indicator--df44208c-945c-48b0-9d2d-db7465f2b3a6", "indicator--415d6c66-bd39-422c-9f26-243403e7bfb9", "indicator--5391e438-e578-48e8-95bb-6b093db42854", "indicator--b4dc7caf-4383-4e57-be2b-97998801ae5d", "indicator--b03d35ed-596e-4801-9d1c-804834040674", "indicator--1880f2a5-3ecd-46e2-a66f-073d9a740359", "indicator--25263633-338a-4c90-9b59-78ece72788da", "indicator--10e07347-02be-4b28-978c-c419a8bbf61a", "indicator--7fb60c49-adbb-421f-9666-b91d61207ae2", "indicator--fe56336a-593d-41a5-902e-0b5ed6e27182", "indicator--ca4d2b17-0085-4a9a-ad94-252abe90e7ec", "indicator--6314aafe-e443-42e6-bda5-631cba1a4d3c", "indicator--5353cb3a-7dc3-4f32-8e76-a88d22f92c77", "indicator--a287b259-31cf-46f2-b109-057bee952155", "indicator--7f80bf1f-4312-4f15-95c5-6fde020ec441", "indicator--bca2baf7-4846-4155-b8d0-2ad8696ac563", "indicator--0bf7e8a9-aa3d-43a7-930e-4de29f625035", "indicator--e5531b0f-3d6b-446f-9fb9-4ca3c437f87b", "indicator--cbc06c27-6ba3-47c2-84b5-7c7196d34720", "indicator--239a8cc4-5907-4024-a315-b9522ddf4abc", "indicator--e70799c7-3297-4029-adb9-e4a5233a5526", "indicator--e0ab364d-ca54-47c5-82fe-5cf600d500fa", "indicator--0bfb1aa9-e357-4a44-a90b-28a166c3205f", "indicator--6ba6cff0-7816-4ca3-b3f0-ff59b5d69a2c", "indicator--a7cf6391-ca85-4cd6-9d0b-ce4dbd3cee56", "indicator--d5e93239-fcde-408b-a7cb-2a27f3e89413", "indicator--3eabfb2d-4f02-43e2-9e7f-d7840189ff2d", "indicator--517c766a-f7a6-4645-97bf-e9e0c3cc650a", "indicator--4d5f3fb1-1391-4414-8f63-95baf19c6003", "indicator--c13bf347-b4bd-4c37-8c1f-ad73d79de2b3", "indicator--9353470a-8112-43e9-beb2-faefc298b1ae", "indicator--501d7575-a3a1-42dc-8b1c-fa2433eeec4f", "indicator--a18b226c-6176-45f5-b1a9-8257da6efa4a", "indicator--d11c42aa-e1aa-40ac-90e9-87a9718d4227", "indicator--34c1750e-d3ae-406d-aea6-c14e30f50893", "indicator--96de4c82-8d15-4bfa-9cb4-9a391edde282", "indicator--7001a1ab-70c8-4a59-ad90-b2b7643886c2", "indicator--93f02534-e885-476b-8ab2-e3492c9e7867", "indicator--4d264164-80d6-46c5-b676-cb16ac3328cf", "indicator--64c65358-c370-4c8b-aec0-a2ee11ec5458", "indicator--cb6c5492-9a48-49b0-a709-268a6d652cec", "indicator--0dc2b27b-638d-42e7-91c6-42faabbac345", "indicator--1ac8fd6e-14aa-4168-96c6-acb9b8a5217d", "indicator--a8ffbb4f-19b0-4511-a0ce-6a174e79e63a", "indicator--9fcc8238-aa24-4a47-b27a-86e905b69fb5", "indicator--6842a202-64c3-4d0f-9fb1-d1c69af4f9a5", "indicator--9a688683-b66a-45fd-adda-558d59776006", "indicator--a746325a-b6c0-4556-a46e-fd7f5d37f389", "indicator--ba972e2e-0dc1-4988-9cf9-cf1461ada0f2", "indicator--0d4da8cb-630a-4c09-a7ba-1b02dc30d5cd", "indicator--e56caec2-86df-46f9-b809-b5601372b06d", "indicator--126b9ec7-a35b-434a-8fd7-ad8179b17e45", "indicator--d158439d-edfb-4c1a-b2e4-5def4ea69a08", "indicator--05681fd3-0d3a-4d4e-ac7d-22791a2a95ad", "indicator--9f8fbec7-86cd-4442-8371-e017a1c0b2ba", "indicator--c906b0c9-3c14-4d65-ac4f-66b165c6dd85", "indicator--77fe226d-5f22-4733-95e8-0f39eca4bf47", "indicator--88a00358-051a-42ae-a5eb-ec9158dd90a6", "indicator--6779d791-d139-4f2f-a5bf-f52a98c01959", "indicator--faf7219c-8769-4725-942e-684743fe386b", "indicator--9ed38289-5152-494f-bffa-d3ab4063f101", "indicator--9b59c80a-4cdf-40fd-8d15-f3e24440920a", "indicator--9429f3bd-981d-457a-9079-02b8849e2c0b", "indicator--bbd06763-49ad-4f4b-9885-960c70788afe", "indicator--03144e98-37e8-4952-bc10-f15179992f3f", "indicator--70e54927-f495-4f00-bc5e-f3adc9efb84e", "indicator--9f3d5add-1b54-4a83-8101-f5036327e80d", "indicator--2ba00f1f-e684-43d0-9903-0ee48c926ddf", "indicator--6cb8036b-4f25-4700-adca-c9c94cfb8f8c", "indicator--7eb9cb0b-f1fa-403f-bda5-ff17ca71f7ee", "indicator--8e226919-cef4-4d97-8721-b8086dfa71c4", "indicator--f2852d0a-fbe5-44c9-9d60-6351879927af", "indicator--aa467515-64f0-4210-a864-4f5e0f175f93", "indicator--b01baa30-ecb4-46ba-a060-77b7ec0c7e1d", "indicator--fddd39cc-afaf-4b12-b844-2b65fe78b046", "indicator--c7dfa0a7-a2dd-41fb-9614-87cc9149e2cd", "indicator--5da631f6-9db5-44b1-a723-d464dd09eaeb", "indicator--a2cac5ef-19b5-4f53-9c03-978094d67696", "indicator--6747a253-99c7-47a4-821d-f9be55de52a3", "indicator--bf687fea-c396-44ae-82e7-f18e9d844707", "indicator--6b1bad5a-0567-45d1-9030-8c7c6f8116b6", "indicator--bc7e8438-0904-45b9-b1a5-a67fa8703aa4", "indicator--a73cd152-1f01-43bf-ae98-27d48db2c3fd", "indicator--8e3b7a16-3aad-4cc5-ac52-58526d59ad11", "indicator--08583cf2-3ca1-4110-879b-fab40296f8e2", "indicator--7451d969-f8d8-4aad-a456-2366de94ecc8", "indicator--5298c2ff-8a5a-4a4c-8d75-b3514f820b94", "indicator--86fc83c9-5b06-41ec-a3e3-f0799aa8d93e", "indicator--83db3ac5-19ab-4262-ae98-049d52d1aba9", "indicator--4f70e46b-aa2f-42d5-a056-db00ef4adf66", "indicator--0747b1dc-ce4f-45ff-8af4-6e03c0197fca", "indicator--e7241a56-2505-40dd-bd6c-63124ec46864", "indicator--2032da65-177a-47f8-a0d7-ce37e2e8303d", "indicator--c6da4203-99f1-49e9-bf85-4faf5c065507", "indicator--f1c7cfc4-48b1-4017-ae3c-e28900a2a4e2", "indicator--492d36ed-4650-46b8-96a8-08ed19e7bf07", "indicator--a317b61c-9796-450f-b8eb-42b9a1ff19ee", "indicator--1eed7dc4-fa54-4ab0-a1c8-5f2596344af4", "indicator--09cc345e-552a-42a5-b11a-c61686327498", "indicator--c2737d5d-ea1c-4f88-8413-29775e4d8835", "indicator--ce2593e7-0228-4905-a18c-05ed01244c7f", "indicator--95e7a157-70c7-466d-acc3-8df6ee0daf1a", "indicator--1afeed21-7bcc-469d-a6e1-4d9745fa89db", "indicator--5db4b7d8-73dc-47e1-8117-49dbb362f7a9", "indicator--65354c56-c8db-4889-b748-50422ed0919c", "indicator--91ac71e7-47b7-4e77-b7e9-ce24081103f0", "indicator--72d5c9cf-e360-4f0d-a7dd-49b2a632d9a8", "indicator--fe42aa5a-6099-4962-87bc-25c2bf58c671", "indicator--f7c736c8-aa3a-45b0-bb25-6816be052d8d", "indicator--c95a34e2-345d-4179-b26a-a5b8492dba42", "indicator--845ff12d-b74a-4233-a5c7-1e8476bd195a", "indicator--b9a8361c-0142-4f3d-b472-7c8096c82101", "indicator--3fc182e4-5ed6-4d18-8092-5efd9ffc23a9", "indicator--d88a3097-e930-4f2b-8298-a842d55a6500", "indicator--76b0e6be-6e12-4d6b-ad44-2f2b2b9a9aa6", "indicator--6dccbe97-4865-45bf-b9b3-774897d5e0df", "indicator--e989793e-12a4-488b-a154-d6d21d69763c", "indicator--3f26a22c-6125-4e9b-aa3e-5481c3a97c8d", "indicator--3cfb179e-63ac-4edd-9ae3-231780f3c5d0", "indicator--29c5fc86-cceb-472a-b017-9e22b9b86831", "indicator--2f80a7cc-3e5c-41ef-bd6d-6d77fff65987", "indicator--1a3eb713-c6d8-4b83-9d70-d2c851faf2b4", "indicator--aa5b3adf-f4f7-46cc-ac88-62e0fc5881ac", "indicator--94f7b420-7c48-46ad-ab83-5165da29d554", "indicator--a723b707-0e89-416b-9c40-74a01082c76b", "indicator--834a6190-0999-453d-a977-252ca59fa95a", "indicator--2f28200a-afa8-45e4-8f43-50443dd02ff5", "indicator--853fe05e-bd53-4ee4-9dd0-f6625ffdf26f", "indicator--4b30d8fb-71a4-47e9-a001-2d4f0bfec0a9", "indicator--9a546f39-54c3-4472-978d-ec192f81ba98", "indicator--42844c04-399f-4a29-a3d5-ba0d829f5cd5", "indicator--561c1187-7567-46cc-bd3e-bbcb33a6ea37", "indicator--e16fc0fd-f034-4b2c-a77b-8bdcc695e7e8", "indicator--8da4934c-c12f-4d12-a21e-043839bc1136", "indicator--ebac3fde-c4a2-4155-a8ee-afe2d8c725a7", "indicator--e5c01db9-9221-4893-893f-bf341963cf97", "indicator--e0376a54-0f85-42d4-920a-201d10051deb", "indicator--097c620f-6c54-4cd7-bf00-7305ab938d69", "indicator--b400b347-02c1-44bb-b956-4e6b9c9edafb", "indicator--7bb5d7b6-f8ce-4596-bbb8-abcffca1c29a", "indicator--5a0d4d40-eecc-4c95-93cf-0db07b439368", "indicator--3d36cccd-af45-4393-8f38-d16182dba6cc", "indicator--c854da4a-0305-4f20-8cad-818288d2e1a3", "indicator--8eecbc73-64d1-4440-b3cf-e7e1b5fe4db3", "indicator--24cf5537-a497-4e73-b427-4da610820f1b", "indicator--0364a0d9-f386-4acf-84e4-5baab898535f", "indicator--ab8a3eba-9717-49a7-a6fd-f91b3d536b8b", "indicator--98f922a7-fd4e-45de-959f-141dcc7f4a4e", "indicator--5fb0516b-1d73-4cec-a03e-058f2cac0fe7", "indicator--7204af0a-cdf4-4be5-a017-46094e84ad21", "indicator--57e5d28c-611d-49d9-8e78-c6dc2ed53131", "indicator--ba40a6d3-b38f-44bc-b367-8f6931fa7708", "indicator--be01a39e-9033-42dc-81fa-7048db57cf6d", "indicator--009921eb-9439-44ab-a9f9-25397fbc9bb7", "indicator--2b3d5acb-401c-41fa-8fbc-87d391acc329", "indicator--351d0ae2-1f87-4857-9985-3ef7fb70d843", "indicator--30d8548a-8b16-4e3f-8d19-81ac913d521e", "indicator--5db37538-9dc9-4734-8e31-d36ffe7d12f5", "indicator--8d269488-70df-444d-9d6a-02f68b833222", "indicator--33269758-e303-4bf1-9039-f67b5699e735", "indicator--6eda1f15-f62d-4229-90f4-ac4cb8d19590", "indicator--50a4c274-2a31-4dc3-8261-264bbe921dcd", "indicator--f7e99a62-6dd5-4b93-b18c-17ef688469dd", "indicator--630e3331-e85e-4df6-ad70-009bf560b0be", "indicator--fe11f35c-7da5-4791-92d0-19e3df1d822c", "indicator--311c8e05-d3ff-4059-bade-08372fe703ef", "indicator--533bc49f-d706-4714-8eb5-f777af6bb741", "indicator--86f306c4-359b-456d-b660-2b5caf5b24a5", "indicator--100336e7-a17e-42c7-8fb7-2a377f747b34", "indicator--3e4baba5-aa6b-4e7c-9717-36fd4bf9e8be", "indicator--2ad41f4a-4441-4fe8-8feb-ce5ef2372d25", "indicator--b04cbb66-3b1e-466e-856f-904947a44a48", "indicator--8ac24e96-a29a-4491-800a-e0366ed4a12d", "indicator--ba09518d-c500-450d-8656-2c5890313594", "indicator--689b0103-d86d-4e2e-9ad0-69a8d125cbf3", "indicator--f2acd8f2-7e7c-44a9-89b1-16771687b3de", "indicator--ede3a2fc-0211-463a-bc27-efc6d659946a", "indicator--41efe1be-3fb1-4157-8197-1f447b5fe104", "indicator--231d4e99-b401-4c21-90b0-a68626a311ca", "indicator--0995ff74-6036-4c6c-b085-8cc92ba92303", "indicator--4ad45d2d-6f00-4a7f-8be5-5b552a3c500f", "indicator--328260fc-9e44-44c3-84d8-e55cba5f798c", "indicator--d1088d84-7130-4adf-a883-93854413dfff", "indicator--a0079e32-76db-4953-9c47-f163acdf55cf", "indicator--96014faa-752e-4f42-982c-7de6df2c081d", "indicator--ba2e8701-90c7-478e-8521-7509fb91eb29", "indicator--f03e43df-4489-49f6-bfa6-1fa5b71b0a24", "indicator--97698e0c-a34b-49b1-8d22-3b5014b759a8", "indicator--eee64ff7-dd31-4b57-b8a3-51da7decd3cf", "indicator--0166e74e-7f2d-4862-81ab-791bd542f932", "indicator--35c6ba30-aa87-4f1e-aaa3-5415117aa685", "indicator--8ae04eb8-a16c-4153-8b96-304fa5552d48", "indicator--096e92bc-1723-424b-a5a7-eb254d051979", "indicator--29ac4f64-2af2-4a8a-be20-8e061f3239b3", "indicator--7042360d-3017-4483-aaa0-ed871edb98bd", "indicator--8e79ecff-d50c-4bd5-872b-a5f33778a8cc", "indicator--ec236b16-fde7-4269-83ac-6b61ca616ea7", "indicator--edc0dc49-cb4b-4283-ad60-ad0132801a68", "indicator--8f126803-134c-4f1e-8b15-8b8f0ef94be7", "indicator--f0a2a850-87c1-4dc4-aeab-122cc6d111c5", "indicator--b889e7ea-ee93-466e-bfb9-23aaa5a1833f", "indicator--9bc4d0be-d1a3-4b20-a075-f88c5854b72c", "indicator--656710df-7dea-4792-9273-c47fc14a0720", "indicator--61826bde-13aa-43f0-af44-c569603eae59", "indicator--e0443e76-530c-44e3-bd93-237ccec91fe3", "indicator--e3d9a5c7-eec9-4eb1-bcff-cd3beb466ce3", "indicator--408a7eb8-3e9c-41bf-bc97-360b24a50f51", "indicator--f7765c88-3f9a-467a-9bd5-252b6e4706a2", "indicator--a56e49d2-7a4d-4b1d-a4fa-6cc6e8e384b7", "indicator--65e82774-5348-4968-b830-28d18f660ed6", "indicator--51a7c372-264e-4339-9a99-bc6adeed9ecd", "indicator--17f60826-6536-4a9d-8756-cb88a945a90d", "indicator--9202674a-29c1-49b4-a37f-b387c2f06939", "indicator--0348707a-34a7-4d56-a0b4-1bf947e79265", "indicator--1906ea5a-423b-4df0-afb1-2180a3c40bb8", "indicator--9ef130e2-0221-4906-9a8f-27d3a537679c", "indicator--733ca630-3ba5-4802-8cf8-038bf299e61d", "indicator--3fff1891-2016-45d7-81c7-16e85d834af8", "indicator--200087ae-ce77-417c-a2a1-81f017f0bafd", "indicator--9799acab-171f-44db-bada-4200aeb347c3", "indicator--864f1e33-b43e-44d6-af85-954ce7442823", "indicator--0aa32dec-a080-4d84-8f2c-5799a3f31b42", "indicator--bc875393-c5c7-492f-9ea2-65cbfe2a1c3c", "indicator--b8c62833-17ab-4607-951e-ab04b28d96e8", "indicator--19a505f0-4937-45e3-af59-7d63cffce345", "indicator--72127413-94e7-400f-a06e-43a5dd3146b2", "indicator--e6eb8529-d9f2-4b07-aad9-b44dc58bec36", "indicator--15f96ca2-9517-45d7-8ad1-064575517431", "indicator--2c7fefc8-06f6-46d8-92ea-b8e6afa662d7", "indicator--eccf94ea-a722-467d-be10-f97d59049ba9", "indicator--e420a0fc-5695-4bfe-bfcc-a24c364f29d5", "indicator--4a069611-c770-4bea-9883-82ef1071399d", "indicator--13c72d31-a4b2-4eb1-a3f8-1609cbd5e27d", "indicator--68bba437-0b90-4275-be8d-2a26fd29c874", "indicator--0bfef025-4b4f-42f7-9f35-4b81f13e4165", "indicator--f6d7b89e-6c3c-42de-b3d2-daac10b64937", "indicator--7cf0889a-87c0-4f5f-83b5-f40a69af22c2", "indicator--91e9201b-3067-4106-8808-4ac9c9b64718", "indicator--7cd71a43-6700-43de-9c2a-db1baff75c02", "indicator--651d5f18-b1c5-4d25-9de7-e4e77e2b02cf", "indicator--86132b0c-2b94-4fc9-b789-2581c7a505c1", "indicator--9b7ea585-6e15-4cc0-b9d9-5033506500f6", "indicator--cbb96924-ab3f-45db-a75c-214a1743b0a1", "indicator--89f7c23d-542f-4427-9f1d-7c20e4fa3e02", "indicator--bb97221f-770a-40db-9d85-fb206781db93", "indicator--ec8d40ba-e30b-4375-932b-da859beeb90a", "indicator--0cf3a5af-1cdb-434b-a425-ac30198f9009", "indicator--c23bba99-04d5-40e8-a9e7-28a3c275b314", "indicator--d34c27f5-45bc-48ba-ad97-5eae9e4ff4ca", "indicator--96771a8f-fa87-4fbb-bef4-b6326ee80460", "indicator--170767e5-dad6-42f3-9757-c427c38f6060", "indicator--5083c6b7-57f3-4a23-a80b-9a41d81d3c03", "indicator--e6807ad4-8f98-4bcf-895c-104671c9901f", "indicator--b1901dc3-2a76-42fb-a5a5-5e096ae58923", "indicator--b05655a0-dd1f-4730-be25-5fe65f1fe3f4", "indicator--b7d4c2c4-9643-4fd1-95a2-6c604746af04", "indicator--75a4941e-12cb-48f4-88df-e38ce65877b3", "indicator--eb1a7598-b230-4fc2-9aa0-6d798536ffb7", "indicator--381c659d-e9cf-4dc1-8400-187023cd8e94", "indicator--5b36358c-7342-44c1-94bf-3750e605918e", "indicator--24621aa6-cfee-4a36-bdab-2cbc71485de3", "indicator--b4137ef6-80f9-4ef4-b7b5-2ecee23c105e", "indicator--b5245349-6096-4abd-be3b-705716a02494", "indicator--1a2d9a7c-dc18-4b31-b5ff-24b000678ee2", "indicator--2651a171-b4ff-4abf-97d9-3ed28dc23f51", "indicator--42410c55-07a0-4e01-99df-35c676a0913b", "indicator--021d5934-4cb5-4670-8df2-c41e74d3b8c4", "indicator--6dcd6808-1406-417e-9b5d-aa7671b3651e", "indicator--52d7bef9-aa46-4cf4-851c-7553e716a51a", "indicator--a1a61fc7-0690-4cb6-b7e4-558578c35ddc", "indicator--479b12b2-c6f8-4f5f-80d4-db211d4c9711", "indicator--33edb46f-ff2b-48dd-874a-99b8afbdfd20", "indicator--42d0ac7a-57e4-4da1-b2bd-760144e30dbd", "indicator--60e0dbe9-6311-4c19-bb86-037e700a7b36", "indicator--198deba7-81bd-400a-a18d-41d4bf3b44a1", "indicator--6da02f68-a4fa-46d7-9662-fe714cff95e9", "indicator--4a1a11c7-eb0b-4956-bff9-36fe7792689a", "indicator--8d6c0cc2-49e8-4691-8659-ef939dc795e1", "indicator--e5d250c8-d92e-4bf0-94c0-64f32cdcc5e1", "indicator--b9a89b44-6927-4550-870d-1bc4e47a15a3", "indicator--3448eb4f-0f2b-4872-a4d2-f8d3917ccfa2", "indicator--3be2901a-d5eb-48b6-89eb-8b146d3711ab", "indicator--762e4e52-8bf5-41df-b409-817b94a84aaf", "indicator--466bca97-9ab5-442e-8f76-dbbe5e8c0640", "indicator--8f571c64-5c69-4a8d-a674-12f2657b80a0", "indicator--4c889731-9424-469b-979c-b1c21c5fa3c8", "indicator--061e6fc5-7d78-4fbf-a197-19c7670b24fa", "indicator--e6e5d7cb-a66a-4145-a701-62e85c287d3c", "indicator--be90d130-ab74-4648-9335-110f622fa751", "indicator--f67bd36c-25a1-4684-b053-b68b1d3fdd9b", "indicator--956ef5f3-68c0-4f50-8ace-b594f3310186", "indicator--b4abbc23-50ea-49cf-a924-8c76649ac223", "indicator--18a9f732-99cc-48ef-b994-caff15a51c5d", "indicator--75ecaa1e-0997-4149-a4a6-543428cde6dd", "indicator--26a08f78-ad4c-465d-91b7-1c0f173c4d53", "indicator--7e432bf2-b467-43ff-ba88-ae7860712247", "indicator--dec86027-072d-44b6-b82c-a666e91a4fd2", "indicator--aeaab098-0933-45a5-8e91-7d35c8d801e2", "indicator--e2eac619-be3e-4a96-b52e-f009244c32de", "indicator--46b35807-e12a-4697-9b48-9dba15d08c62", "indicator--ce5e5c55-ad58-4cef-a3a9-5f4589978137", "indicator--38da150b-dba7-4295-86b9-ddc706f4edf2", "indicator--01a8df00-edc3-453c-9d8d-5d05b43b3de0", "indicator--e7c18376-08b7-4acf-8e40-2279553267f2", "indicator--0cfc8138-a3bd-4fcd-82fe-09e6136b63fa", "indicator--12b70670-7632-464b-ad7e-bef48e7ab56d", "indicator--6c901b5a-ffb8-4485-bc21-69d9750b266e", "indicator--564ff224-ab93-410f-8517-93019b2ae3d9", "indicator--b89ab6e5-4c7e-4e5e-97c2-5bbfa85c3a6b", "indicator--c0ff825f-dadf-43ac-a6d8-f49d509d0890", "indicator--45ecd0c3-18cc-4d23-b1c6-14a89316bf49", "indicator--8c67fc8d-a07f-4ab8-b2c8-e0f59e64f5e6", "indicator--4152c53a-c934-49d0-8e89-de8f84b0515e", "indicator--66fef9ed-eb65-47d1-8f41-b80e58b0684e", "indicator--82e30682-7452-4af9-8ac1-1fd368f8d512", "indicator--10d2d306-1e96-46e0-a6c1-1f7e8bd0b520", "indicator--150f54a7-0e79-414d-adf7-913e2216a308", "indicator--78ba1165-53a7-4a88-bd1d-18b8f63f5235", "indicator--90668bbc-67cd-4ff1-a459-83c4fdd16949", "indicator--e594bb4d-9081-4335-bcee-4ad2cc59c046", "indicator--9d4f94a5-5d41-4a4b-a23d-aaac1139d5c9", "indicator--c30a5ef5-49c8-42de-983e-6580394c777b", "indicator--9ee87f5b-d8e0-4057-b73e-a755be1d2d53", "indicator--ed9cfcfa-ddc5-40fb-a69f-d79f347d0866", "indicator--7cb5ca8b-f460-4afa-b6b1-b07e445db42b", "indicator--f7762b33-5847-46eb-b663-98f7825577c0", "indicator--2491791c-bef3-4ecd-8409-33a028f68947", "indicator--d1c4d5ff-a27f-43ce-b619-6ed0a7bead25", "indicator--d8926deb-7eea-4b14-8440-316c27133adb", "indicator--713c5555-a59f-4916-af61-ca82017c5155", "indicator--5c92fb64-1f8e-44a3-a68e-177f08a7acca", "indicator--b44d5f82-03ec-4655-ad2e-17ef2a3f1be4", "indicator--c9f6632d-622b-4b2d-b808-e9b5099501a3", "indicator--e8259b53-1225-4852-a507-4994d9011538", "indicator--286fb88b-b584-417e-b940-f687755ed239", "indicator--f219722a-a222-4b7e-b98d-617aadcc39f1", "indicator--c2e50d97-1a31-4230-81fe-e2245a157613", "indicator--1beaf1c0-777e-4684-9757-f293760f886b", "indicator--48d9c6aa-5f26-4b58-808a-d391568e68cc", "indicator--fa30b956-2711-4ec0-ad95-eaa05630dd40", "indicator--c027ac9a-1da9-4565-8b52-eb924fe7fcba", "indicator--87bcf293-4d3a-4fe5-80fb-179d65fafc4c", "indicator--7d78d2fa-6fd4-4f5c-8dc3-2d7693fbc607", "indicator--ed3458f8-d71e-48da-959f-5731bf3bd9de", "indicator--0e539c6c-ace0-4388-bbb5-850938f5315b", "indicator--9fbe25c1-8093-443c-80ff-9224c5ace39e", "indicator--26bd0bcd-d15c-4313-8c59-61e150776d5e", "indicator--ee4c1b95-b500-41a6-a6c5-8d1bf92b59b4", "indicator--cfca4845-a54c-412b-b932-48a62957aa6c", "indicator--b7a4e0cb-8817-4059-a71d-6d91bec5311b", "indicator--732b1b34-ecd4-4323-b035-ebbe84fb400f", "indicator--a323a533-56d1-4b1e-b47a-2a2b9ecf28cf", "indicator--4519f1a4-cc71-4629-9bea-22a901abd47e", "indicator--3651ad5f-1757-4062-a3c9-727af43b4b60", "indicator--a7293d29-294f-4f00-a286-749daee6010e", "indicator--67b2c68c-09e4-4804-b84d-1f7a6488f897", "indicator--12113279-e524-4263-be2e-a6bf59698a2a", "indicator--cdb7134a-ba9c-4368-acb4-abd1fa7b3b71", "indicator--99b92118-fac1-4c67-ba37-48238033834e", "indicator--9bd531bb-c51c-4afd-aa74-057e3ff359d4", "indicator--fc5b29d7-3a40-41a5-9312-e3d141e2f7c6", "indicator--03927f51-03df-46bf-9582-187637dcaff2", "indicator--5425743f-c941-4af9-82dd-85cc23fbcfc3", "indicator--27b3ee4b-cefc-405b-b43b-6265b6e99a37", "indicator--dee05968-ff43-4afd-bfc2-f4659ad04a0e", "indicator--0568a809-703a-41de-9416-520f9a1e9a1e", "indicator--8759e3c3-f7e8-4d74-8e65-514c5cdc4ce6", "indicator--c97d3430-fb19-40c7-8575-c46b56b11912", "indicator--f1c29763-71d6-4e0d-80b9-a95e3666b985", "indicator--12c77062-c7b2-4c2c-a3a1-603e889a1fce", "indicator--b9d234e3-c800-432d-9cae-eb47f4e2e8b6", "indicator--beecbb32-b1e4-42a6-a6ff-9f2c3225b8a6", "indicator--f123e8ea-0d23-42ff-8453-3045838c9a51", "indicator--a809eb52-3408-4b8c-8361-b9b7495a87a3", "indicator--eba1d91f-8227-4504-9886-4a8993221c25", "indicator--243801e0-80e6-45cc-87d8-67e0917942ef", "indicator--3cd13c20-e075-40c1-8d35-78b4a7d79134", "indicator--220d46f4-7277-49b2-9670-ee4e2a1cdfef", "indicator--c3b5d11a-e128-4f4d-880b-bd71cf763cd0", "indicator--0264718d-e985-4584-8967-271a0f15ef0f", "indicator--5cd2ea77-327a-4627-9464-14d451d56927", "indicator--aeb89085-b883-4cfd-b0ed-e6523a9d6ba8", "indicator--1a9703c0-83b1-4e57-aadd-27928aafab76", "indicator--b4e45c1b-a7dd-490c-8d42-87bafb8f9b1f", "indicator--2a8c8058-79a8-4cf1-b388-2571d7e35d7e", "indicator--022962e2-be7d-4d05-89cd-3d4a6864bd04", "indicator--f8a7902d-dbe7-45f1-b485-b3b61ffb40e1", "indicator--b8aefafa-69b3-429f-a3e1-a3e3a18974eb", "indicator--c871f25e-7097-4877-a7c5-015266577ba8", "indicator--21bda7cb-9a64-4511-9236-4493d3b52b10", "indicator--972f3efb-ede6-4c9c-a7a1-88619a6f4c6d", "indicator--2c32e191-77e4-4152-94db-61876134ce3c", "indicator--5787be49-6c9b-4f85-a19d-59eaf520dce1", "indicator--15e37aff-e391-43d2-b6a4-67a64f6ae415", "indicator--60cdf26e-ab48-4971-a103-22ca36758f11", "indicator--4ce4f968-e85f-4ae8-8326-1a0114cd8e7c", "indicator--7c4ea2c1-df0f-46b5-99ae-cd4b48aa7cf1", "indicator--a74ef8e8-afce-480e-a631-7baab3e9250d", "indicator--e7fa3493-ad46-4f5b-b39a-eea108ce0d9c", "indicator--37c909b3-ce6e-4884-87b3-e647cc0e9082", "indicator--e5f342c1-cb1f-43f4-bbd5-b7ee39e53c4b", "indicator--a659463c-a603-473f-8ee5-177b90a19a28", "indicator--3975ae75-f3b7-499f-b5a8-2f04368d51b9", "indicator--620a6a45-cfe8-40da-8fe5-a3f445d1bc7f", "indicator--c99e281b-cb7e-47f0-b826-fbd76e5f3271", "indicator--135664a9-238e-4b42-9f32-5b979c9607c6", "indicator--fe4b42c0-febc-45fb-b253-932656762544", "indicator--b0e63150-bfe6-4b13-9c50-2b6205980b33", "indicator--8954b536-f190-4ef3-a779-6e0cf3abc31c", "indicator--582c35a3-425e-4a66-bf84-6eff38356c76", "indicator--2da6b117-bbdb-4379-905c-5c7a600682bd", "indicator--d54ff986-997f-46b7-a84f-2a4310673c43", "indicator--5a703c30-6f3c-4a53-8642-fcbf1aec3828", "indicator--d1059b06-3f37-4e44-9009-7f1ac9b6a8ac", "indicator--3087511a-18ea-4fc6-ae93-7c437494f4ba", "indicator--968eac2e-f1ed-4a4c-99f7-47f0c718de96", "indicator--d54010c9-39aa-4bd8-baa5-9ffb85de7468", "indicator--bc80e154-bb97-4e77-a321-0f7f556de938", "indicator--cfc3d453-43c1-4cf6-9910-792efee073ef", "indicator--d98b90dc-e161-4d72-8d6f-dbafd1796b51", "indicator--d2f402c9-31d7-485b-be4f-67ae779aeccf", "indicator--315b4dee-0ce3-4bb0-90c4-1d3de3706d25", "indicator--287054b9-2e96-4cb2-bcc7-b2aae1d38c23", "indicator--1e681082-aa87-4f0d-8cd7-4574aa13a40d", "indicator--010684d1-af85-4e1e-9494-017ac80f5814", "indicator--53065999-c6ca-44f7-9631-670ee5b127cf", "indicator--0a3d6434-2495-4e0b-acae-6e860c8814de", "indicator--ea2d557c-73fb-4731-8579-1117f2b0341f", "indicator--dc24b10a-fab6-45cd-ae33-c041cd667e56", "indicator--e121e2d9-c87e-4346-a35a-8f945bbc6559", "indicator--21cd2197-a6c6-4c66-95ee-52d1ea6821e8", "indicator--2da6b484-d55e-49da-a848-822f6c9f9d9f", "indicator--b78732d2-c85c-4eb0-aba5-23a2cfa5d324", "indicator--3cc1bdb8-549f-4379-a182-8c769912d43d", "indicator--c813ae28-9599-4289-969b-f071bcce13a9", "indicator--b8f43f92-065d-4920-946b-34dcffc6bc42", "indicator--04bd028d-d44f-4f72-ba48-1a3b7516f721", "indicator--793d7bbc-131a-4f54-b12e-7f7da7bf6a56", "indicator--a509c220-515a-4b8e-9a74-0b5e7d687952", "indicator--9eb5d631-aaad-4957-af88-910f41ff7d7d", "indicator--dd2237b5-b7ae-4ac2-806b-3936068094a5", "indicator--bc18bf8d-6803-46a4-b47a-2575b250d218", "indicator--64a7f3fe-3539-4765-aca6-6d878383a880", "indicator--7b5182a3-0fe4-49d0-ae90-4ba5d31a5462", "indicator--a5e63148-43e8-437b-873c-6e6e52619de8", "indicator--e18e7571-c504-497d-a7cf-b8369d18ee24", "indicator--562a2977-a2ee-4eea-a0cf-171918671b27", "indicator--bca4925f-5947-498d-ac2e-7e4caf510677", "indicator--be5293df-2065-4c90-bb36-1a70ecfc31ef", "indicator--13fefa2c-499d-4619-957f-bebe8b5bd318", "indicator--1eeb8062-7e7f-4cb7-ba63-19b9c3af6d06", "indicator--6bbe42fd-3740-4860-b550-1aac607de8ff", "indicator--e9837277-b5b9-4791-be69-db80fbadc2a6", "indicator--eaf0befa-f05b-4300-b5b5-d9f22ac50d6b", "indicator--ef14dccc-b33b-4cdf-be81-0eeb2f9eef4d", "indicator--20a45a78-b7e0-4794-9b24-642e2a013108", "indicator--9d2d7a01-47d8-4ce5-b1d3-f53f2143b932", "indicator--84fe7463-8c12-45a0-9c57-895880d611ca", "indicator--80fb495a-c9a1-4161-8e5d-ed50536e5904", "indicator--e86469c7-ddf6-41c6-840a-deb110800b1d", "indicator--8043f456-bacd-4420-8a7a-86e1a303fbdd", "indicator--9a17f6c5-e9e8-4c9e-9be5-3c7218e1cfaa", "indicator--0baa0294-af35-4e8c-9fc6-3cfc69f7784f", "indicator--bfe4457a-4ccc-4acb-babc-b84a7b4ad6ac", "indicator--4716ce77-9ba4-4dcf-95ee-c48432e9f4f9", "indicator--3d917058-9a8d-4428-a470-8144c321130e", "indicator--a8cc1167-029a-4cdc-9487-c4e5161ce954", "indicator--e5c47bc7-0228-43b6-b547-250b80364ab5", "indicator--508c1600-c687-404c-9381-518720beb4c1", "indicator--fd703e0a-1122-4294-8822-ca6817737628", "indicator--d5cbc43d-63ce-423e-8787-a51f0ee21b95", "indicator--eefe27a8-9bfa-448e-8d45-ecb6463549e6", "indicator--ee3935e6-c5d2-4884-9eb5-60c4289e056b", "indicator--4bf76797-5568-42f0-8f3c-5ce72b930c9f", "indicator--e8c8d459-042b-47d1-9d8a-902e78b7acd1", "indicator--c5ac3ed8-7195-48ec-adf3-8c1965c7b4e2", "indicator--e25b9cf3-c1a0-4723-8fa4-7d015ad83cbd", "indicator--de304926-aa84-410e-aebf-b061d6d06b66", "indicator--4b14505a-d930-404d-81b5-3a6d28f53d3e", "indicator--541ccc7e-35b8-4427-91c9-a451cae1f21d", "indicator--53ea5a39-775a-4843-844c-1861dead5555", "indicator--a912fa84-ce00-4ced-98b3-6696dd5edbdf", "indicator--86faeda5-f44b-4a0b-a575-ef035b78ff72", "indicator--a16c32ba-97e8-4764-8334-43588bcaf97b", "indicator--25b70399-108c-4d2a-a192-68f607b08e29", "indicator--8e0cb2ae-0225-4172-a3a3-e9cad28b4e17", "indicator--1178ccc2-736c-4a10-96ae-516f6e263fd7", "indicator--f894eb54-a9f5-4aba-88c7-4175e6126f2b", "indicator--e2cc0086-95ec-4af5-8ad0-0fbb4ae00830", "indicator--aee23653-19e0-4001-b698-4b0f3be299cd", "indicator--7c86e3c4-1a78-4a9b-a11d-ff277e182fe6", "indicator--dd3a4259-7358-456d-bbd7-63a3c3f838be", "indicator--3069d94c-b698-46ef-a02f-27775e207db2", "indicator--18b6a2b8-4a49-435b-aa0b-2ab3398d1366", "indicator--1e080e2c-d4d0-4e47-80db-271962592c53", "indicator--798d389d-a42c-4fec-b046-76833a34ee20", "indicator--b996f217-daf3-4da5-916d-7784fbc460fe", "indicator--bb251f38-6e61-41f0-ae52-f50be81bf3d3", "indicator--a592d3ef-78d6-44cf-9e41-0c42512ae934", "indicator--a7836ed9-cd2e-44f0-9e24-c020be04e94c", "indicator--43757390-f13a-4870-92b0-8ac3a1cf109e", "indicator--d8a1263a-5b65-49c4-b84f-5991111e5085", "indicator--613c935d-b5df-4aea-8a79-3fadba38fa3d", "indicator--1be81a38-7a59-4fe0-9c08-0da1d2a212dd", "indicator--20660ef6-940f-4017-ac8c-628301fccb25", "indicator--6ca31649-c5dc-4fee-a51d-46345d52637c", "indicator--394d34a9-7c79-4979-82ef-29685e39b2c8", "indicator--5d53c395-1131-432a-a6fc-b898ed070867", "indicator--981dfc30-8beb-4300-b315-2016face9ed8", "indicator--f559cc7e-7142-4d84-a368-4a009e048f51", "indicator--6e77f935-9a8e-4ea5-b820-e1d0a6b56e85", "indicator--c46fb8b9-5a67-4ce5-a0ec-8d1831106d72", "indicator--3fab87c3-4b84-4ae4-a4e0-22ed34fcf26f", "indicator--2d8c0725-5737-4cf3-aea4-a799b1bb9a79", "indicator--ddfe0e60-d485-4506-a4cf-58aa74e64a29", "indicator--448027cb-364d-4710-9e81-606ec1fc9852", "indicator--de20f23d-3027-45c7-89db-c6d4f95656f0", "indicator--ce5084fc-24d1-438d-9e29-b8c48bef7e68", "indicator--cb14fb66-c745-44f4-95ee-9bf6373a6aa9", "indicator--7462d60b-14f4-4285-b9ce-29ca004c2f58", "indicator--e0ce5feb-a530-44f5-a17f-1a748246aebe", "indicator--54ed8f3b-1544-42bd-a604-123a63bbc8a9", "indicator--3123bd57-96e6-4df1-85ef-ce3453896709", "indicator--4df4bbd2-d572-4b16-b338-d5a212fe3704", "indicator--3fd8980f-488d-4012-a055-a4d5fe07b0e3", "indicator--fb9577ff-89e4-47db-b593-39b97981f9c6", "indicator--4a2e03b6-6ee6-4b41-90bd-05e3ba7432a7", "indicator--4744d404-fd10-40c8-9b5e-8207cead86fa", "indicator--87649ba6-8412-44aa-8561-6ba9c4029877", "indicator--8b33b380-f373-4c60-871f-548a697708e1", "indicator--96ff5fcc-c033-4d80-9bcb-cdc22071c0f3", "indicator--56d44750-84d8-40e1-a12d-ea8a455d5294", "indicator--54caebd1-47b6-4d78-ae77-2ad3f80dfd45", "indicator--2c950580-720b-41fe-9915-4d4bb6b6248f", "indicator--bb0fcfad-ed33-4024-98e6-d83caad786f7", "indicator--b5f8dae6-0deb-43d9-a2e5-d0cce9cf6989", "indicator--2e378968-b7d0-44df-8b9d-6059c50ce77b", "indicator--e5eda184-611b-4ba8-924b-b9a9f509bf73", "indicator--9c820e54-5c53-4187-8017-0f830a641e64", "indicator--870bbcef-c288-4941-96f1-39d165be3c41", "indicator--46e01b1f-c47f-46e7-9aac-52349fb33aa3", "indicator--aabfc832-6baf-4067-a5c1-9592b663d04c", "indicator--f94f72e7-3783-42c0-ac24-68f998166315", "indicator--80a60af8-fdec-470d-b6c0-29848deafe89", "indicator--4ab6288c-6733-4a15-b585-b2f035685108", "indicator--72ce84e9-9775-423a-b93f-b66e706c4075", "indicator--052b75be-31b0-450d-8f8b-c4695980ee58", "indicator--b0dea444-0d60-486d-b72b-4ba47ce18526", "indicator--fc43b9dd-45ca-44a8-b3da-e4ddead6b029", "indicator--b934ca83-849d-4f8a-84e5-14ebbf85abb5", "indicator--53a91717-7db2-4fc2-bf5d-790bee1b75da", "indicator--356941f0-6bea-4214-beed-e1b47c5ac619", "indicator--ba3225fb-5461-40b6-af69-955ff3e0b747", "indicator--76f9eb6a-8e65-4a14-bd1e-03332a27034a", "indicator--7f73982f-aa5a-4237-b337-3a74ce316258", "indicator--70927c23-2a27-4ca3-ad5f-d6fced291376", "indicator--226c93fa-b25b-4c7e-91bb-f0021c718808", "indicator--56cc0f29-3745-4e3c-b6bb-c80a3ec83153", "indicator--1ba02efe-c55f-41a8-a2b7-90da349f1bde", "indicator--8f88f349-a37a-42ab-a156-b0d56189814c", "indicator--206c61ae-8186-4ef9-ad8b-0692eea1cf71", "indicator--dd218b15-f859-4413-aea6-5bd86fc89ec1", "indicator--46111af7-5f76-4ca0-b003-12d60ffceb6e", "indicator--5946a8d8-6392-422a-9b1e-cb7008968d02", "indicator--7b5769a5-ad60-45fb-a9ec-e41711ed4f72", "indicator--1e2066cc-9a32-4d48-b9d2-ea1b8b4d2c79", "indicator--1f33faf8-6821-4ee1-8f4e-86417fc18a6f", "indicator--f5d06148-66e6-471c-a546-5d35c0aaad8f", "indicator--d9365859-c5d4-40dd-acf7-d909839750ae", "indicator--d6a50ec7-c246-404b-a558-d93b1b9d750a", "indicator--473c35af-aa1f-4ed8-ad98-33acf8ae9269", "indicator--80cc0aac-5271-4a59-a98c-38f1fb730e1b", "indicator--f53d078e-f1fc-40d3-aff0-011b432d16b5", "indicator--98af0286-878e-47ad-825f-40d2ef91652f", "indicator--3407b511-850f-4387-b9cc-feedb7313bf8", "indicator--b75568c9-1902-4262-b97d-e8cacc48b1f1", "indicator--599839a5-f587-4959-a6a6-9cf09beac5c3", "indicator--13645cf9-fa2a-4d7f-a3b8-28b84af1d55a", "indicator--c9c78664-aa33-4e40-b44f-f37819678d6b", "indicator--13bd106b-2f9f-4dec-ab42-93fcd2f34e0b", "indicator--fc5ef130-6de0-4bec-b0f1-b759b521ef06", "indicator--960aa6c9-97ee-430e-b0bd-28a73e6c80b2", "indicator--bc9b36c7-7069-482a-bca2-a870860206c8", "indicator--79798939-3b02-49a7-ad1b-2ff5656e83be", "indicator--2045ef0c-9115-4398-9b54-b683c7a3eb09", "indicator--97cc439e-8ccf-40d3-b4e8-ee62aed89041", "indicator--6dd4982b-5e6b-4af1-8432-4f410fee45dd", "indicator--c12645ae-e3f9-4eed-88c0-fa769313212a", "indicator--d22251c4-bcd0-445a-9120-31c32c62325b", "indicator--d515c637-eaf9-496f-93cf-9ff274f15da9", "indicator--2200bbc2-b733-403a-9355-7a363e11933d", "indicator--d8f14b90-fe8f-4a00-bf10-81181531fb5e", "indicator--744098b7-cfc9-482f-8cb2-d9144f3e9b49", "indicator--fd72a724-b96b-48c8-8d66-e7e2ffba1029", "indicator--389f9fe7-bcd1-4b22-a193-3aa558b1a334", "indicator--1b117295-3275-4722-90b1-f881cfa9a541", "indicator--4e5c4bc0-4894-4511-8dad-ba5e8d991db3", "indicator--cc2d2d02-9764-4ef8-9f48-3fe14a801704", "indicator--ba74fbd5-3fc2-431a-bfd8-4ac261a2d18d", "indicator--e33676a0-2825-4f74-9342-abc6bd0fe514", "indicator--f61eba49-1c4e-484f-8c55-a5aa028639ea", "indicator--f26c96f2-d2ba-42c1-ad8b-530124c62123", "indicator--74863ffa-dcfc-4d7a-a943-fd7cd9ab30a3", "indicator--097da6a5-73d4-4960-b2dc-d0cb3fa7a741", "indicator--e8bae4e4-1318-4efc-9553-03294aa95a9f", "indicator--0875a1aa-054d-4125-9367-05b7ac73cfe3", "indicator--9fd4422e-9a66-4280-b25b-9d03a57abf28", "indicator--8b5958b4-2a1c-4193-86e4-5d596db42dd8", "indicator--2d15f089-7a10-4070-88db-7a7eb354b5b7", "indicator--79e7c1d7-46a4-4e6c-8adc-8638c6324326", "indicator--25733a30-17cb-4a8a-b94c-de234e818a3f", "indicator--18e5cb82-4b69-426c-92c6-95382937795a", "indicator--6096f9cc-b9ae-4f08-831f-b769156281db", "indicator--8d83c419-8995-4208-a83d-67b9caa3fa0b", "indicator--d5166387-bd91-491f-963e-3f671a8892fe", "indicator--22448361-259e-40eb-9dea-783d80d326bc", "indicator--cde24732-20f1-4322-a53f-73f5a0436ffd", "indicator--0b651a9d-57c3-4e0c-adde-e9d1e305cc27", "indicator--54a95a8e-4461-4899-b0ab-8307e75a84fc", "indicator--2d7165f1-1649-4f25-94f5-1bf0a60402f4", "indicator--6ce9c601-4633-4ed1-ab84-7aa773efc378", "indicator--4402326b-3f95-4bef-86be-887ed7ecada2", "indicator--172421ab-1a6e-42b0-8995-a5561ec66302", "indicator--4b32ceca-c33c-4b5d-a653-8902ac703a39", "indicator--515650d2-6aa4-4bee-abc2-20fe3570f716", "indicator--084007e8-3034-4ed1-98d8-2f5a6daf32be", "indicator--c0254ea3-c1b1-4152-ac9e-84aa70008d69", "indicator--dd2e2ef0-eff4-41ef-87bf-f6820573bcd2", "indicator--7b4863bb-978c-47c3-a41f-ee5b269c45db", "indicator--00afcdae-654e-474b-aa05-80deefbfb730", "indicator--eb50497c-dce2-4471-a213-77f6e4f18a9d", "indicator--12a70a86-ce15-4944-a872-28d9d8b1b8bb", "indicator--226b9291-d943-437f-a0cf-d98c3ac1ea0f", "indicator--2172d8d6-2707-476f-9886-a25e3b606282", "indicator--8577933e-5d1f-44e4-9db7-6710850706c8", "indicator--a312957c-af69-4efa-98c7-f9f1632522c7", "indicator--7de91b0f-6943-4f3d-a9a1-9fb3a9efae53", "indicator--f69246dc-8cc9-4247-83ca-4f250b9052b6", "indicator--a257c005-5819-4171-80be-dae003c0f242", "indicator--cd623a49-04aa-470a-b93b-a7f1cf11b5af", "indicator--f86603ee-6740-4e77-b398-17f1b7598ff2", "indicator--5edd4104-efd0-4d4b-83ef-66adca9f8716", "indicator--17e5a669-05e2-4b00-920a-1a2082bd34e2", "indicator--9ea3a33c-ddcf-435b-88fb-c0a56e4aac8f", "indicator--7502265f-aa2d-4086-8595-810b78f2ce76", "indicator--113ac2b2-4b1b-4082-b7d4-9c4f4579d38f", "indicator--12065c57-501a-4c07-9abe-c1008466b37d", "indicator--34eac6cd-ba3a-4fd8-8e2c-b040d8c761e4", "indicator--9c7f59e7-099d-4fdd-bddf-7ee31ff720ad", "indicator--2502005a-c460-4f00-b23d-4870e961fe7c", "indicator--81e4ac5d-2ac8-436d-b9e4-2d6b5c0ff464", "indicator--d7513309-cb65-4c8b-b841-b4bc43c22859", "indicator--d04e3ba1-1dda-40ba-aaf1-1463ff448571", "indicator--800449e3-038d-41c7-87ae-ac05701d35b8", "indicator--14ed2395-247a-4ed5-b73e-db73251a85c3", "indicator--56b52da5-613a-4043-92a0-45f240e9376c", "indicator--7b33fcd4-617c-4b9f-91bd-150e2db175d4", "indicator--fb95a455-6678-4d27-992a-cd19107945b0", "indicator--d1bf3ecf-49f2-4276-b43e-3371b69eaea4", "indicator--5df1b9c7-ab0b-40cc-adaa-735d15ae4e8f", "indicator--138375d1-3c4d-4888-bb44-c7680de645d4", "indicator--f60e674e-c396-4189-b1c1-fdbaea5a4f8e", "indicator--8862edcc-5088-4b4f-bcc0-42a5c36a73ec", "indicator--9a5c23d6-956b-402d-87dc-ed65dff8b35d", "indicator--531cd660-cccd-4436-b652-afb085a7028a", "indicator--d6062be8-7df1-4ddc-af12-f39aac014503", "indicator--2332085a-9bb3-49e3-822a-348e33d8c38b", "indicator--48c69022-f888-4d4b-95a8-0634efc75c99", "indicator--a2591c8c-50f9-4c91-b27a-7fd94d604bd6", "indicator--bdf76f83-ab43-4ae8-adaa-4e3a4b080eeb", "indicator--6edbba53-af65-412d-91b3-6af7f991d943", "indicator--ae4ded60-17d4-4c93-ad66-fb7e22fb3130", "indicator--f225972c-b04c-42af-8cb9-2f31fb75a512", "indicator--9d57e87e-282d-463e-a287-55a37cffff5e", "indicator--b00175b9-df3c-4efd-8351-50a38add84cc", "indicator--445e378a-f20d-42d6-9669-d89906ce0820", "indicator--b752614c-6754-45ca-bf2c-fc6a17480547", "indicator--19630e7f-7382-4a84-9995-5da1a6362dcf", "indicator--9939b05c-aa69-4c17-8b5c-6e538ddaed86", "indicator--a91ef8ff-1720-413d-8775-62f685d17eac", "indicator--7834bcd7-20c3-437b-800a-6a43d4c0c796", "indicator--84a81a10-ca66-444e-b650-ea4e60bac7bb", "indicator--87b90505-fb4d-4497-98f3-32fe34ef3ac0", "indicator--7e30288e-2e6f-4f39-aece-9258ac8e430e", "indicator--021fd7c1-0c4c-42d5-97f6-f3c2bc7e7194", "indicator--70d4e15c-92fb-4eaa-9c32-89ecbe55b214", "indicator--f085a14d-8024-4c7d-95b8-8cf7bf52f9a1", "indicator--3860dd03-5cfd-432a-b79a-95c6c51273f9", "indicator--751b598f-540c-4643-818c-02f58c75df89", "indicator--733c6ca5-0943-4855-a510-9ca8f608d722", "indicator--f33d6be1-1297-419d-8391-49288839886a", "indicator--b2a66e83-c091-445b-be06-808283d9b8b7", "indicator--4a265700-4596-45af-bc3d-c02c603b91bc", "indicator--f3f98717-96f0-4540-922f-dc7d03ca6eea", "indicator--a6efdb90-c06b-4c45-a25a-bd9c94c0833b", "indicator--a7c073c7-059f-4ac7-8d80-c3cfbe4ad8cb", "indicator--9c384e00-4eb2-4a25-969e-bc7128be100a", "indicator--5d595371-351e-4f26-b806-bd1da414aca6", "indicator--98794823-a778-4ecb-8e25-8e04a4907eea", "indicator--568b95be-4c8b-4669-b5a4-2bf91b65b007", "indicator--6f8d4978-af67-4c17-89b7-30449fbdbe65", "indicator--1ecae01c-ae2e-4870-9b85-8526b74f3d05", "indicator--c3669958-4afa-4653-8992-0682e5c19160", "indicator--8a581d9a-d824-4174-b0c0-f8438247e77e", "indicator--f44262da-b038-46a0-9738-41b7aa999456", "indicator--87e86d19-a51b-422b-a5fd-093e40f922f5", "indicator--f3768171-589d-4b6f-ba85-96c8b69c8e44", "indicator--2f387a57-c56a-4def-89ca-d21d0f77d2ba", "indicator--b7504c01-3f6a-4a3a-8d7a-aa50fbefd3fe", "indicator--c640a2f9-4d72-40a4-8da7-45ed074a6c4d", "indicator--01af3445-f478-4e9a-8c25-56848efbf133", "indicator--fbd489b9-e827-4547-9c25-efd12b8ad22c", "indicator--7235b58e-0186-47db-8cc1-beaf76431637", "indicator--8ef08a8e-1aff-4e6c-b822-0bf6046e09dd", "indicator--3ee6cf07-ea55-4bf9-90ca-d10a852287b6", "indicator--62e619e2-8264-43c9-a69b-eba197942838", "indicator--7c330aeb-dc57-4b47-aac3-bc987c4a43b7", "indicator--77207828-e62e-4d87-ba77-6d1bd830b330", "indicator--1d53eee0-bf17-45c9-9fa5-cf06f7bbee33", "indicator--84e830b7-53fb-4d7a-a2ab-a44987e6fb0b", "indicator--f616c3ed-2ba1-441f-8fc3-20ce45347c90", "indicator--6119e0bc-ad22-4801-84e0-fe19c9432eab", "indicator--9c36cfd7-0dc0-4dd6-8e20-07df7bc84018", "indicator--1f54dfb2-a564-4039-a551-f3144d9aee0a", "indicator--7f4549c7-69c4-4f6a-b691-273678969714", "indicator--03f6db0f-4583-4669-bf50-6603d969fdd9", "indicator--75f6f81a-78fa-4f6f-b835-c38d8c2a6791", "indicator--d56b80bc-01dc-4e7e-995b-6d32fc38f9a9", "indicator--8673ea5a-8063-4d5e-93cb-e27d3d29240b", "indicator--895f0e41-ae01-4641-8ad9-baf39b37d22d", "indicator--32659209-c173-4f30-ad69-3699b53f0e7b", "indicator--b35bbc51-5314-43e4-aef4-a974a0a1e99e", "indicator--191ebc01-271a-471f-9371-259ece5feab2", "indicator--5307d0d8-ec16-4c5c-ade8-1e6924291d29", "indicator--dc7d3ca6-621b-416f-8433-8f1fb9302e0a", "indicator--a643e4c5-a4a0-418e-821c-959d33a5d901", "indicator--b8cc2d98-d9dd-4ef4-a44f-155ef2d402cc", "indicator--5163b069-3d4a-4866-a2d6-b88dd3cf3547", "indicator--9992d8a3-605c-479d-9ca5-dcc015f57dd2", "indicator--b2c3a96c-d4de-4e62-9841-5f353da2f013", "indicator--b00bb657-9720-4122-9b4a-7301eb853954", "indicator--e27ff030-f7a4-4aa8-8e60-efe65627a5aa", "indicator--3716a4ee-b31b-4853-9ea7-81678e7b0e23", "indicator--e9a166af-addc-4d48-8621-a01cf85a78fc", "indicator--fc26141f-60c1-40c3-8d50-8af6c1b0a5bb", "indicator--b3b38521-1346-453d-afcd-3a7ace30dc67", "indicator--772dc25b-fffe-48dd-ac0f-a538f3d7579f", "indicator--c1c39772-d708-42d4-bf41-308221e8e42e", "indicator--50e4bbcf-6f5f-4fcb-b78f-ee814b11e63f", "indicator--41b1946b-2386-4ae9-bdef-f375a02301f2", "indicator--2d8ba44a-482e-454e-bc27-0537a556c93d", "indicator--664edc28-2e15-4a69-b07a-c1757c319573", "indicator--e87b1716-db3c-4376-a4e3-63ab8139db9b", "indicator--ed748324-edf1-4bc8-bacf-621ee253d07c", "indicator--0ee1cc8b-160e-4372-9546-85e98469a05c", "indicator--8dfe9baf-fcb2-4fc9-91fd-d720622c8532", "indicator--dc45c7e8-c098-4d71-9183-87dacd63a15c", "indicator--fb06aa21-900b-4a39-b37d-5154316ae3d3", "indicator--d825a41e-3187-45ee-9eef-cee46de166c7", "indicator--6bc3c190-c502-42dd-95b6-571bed5d91f3", "indicator--6a6c6099-dc3b-4cc6-af70-fb5bced4d21b", "indicator--9372c6b6-eb1b-4d7b-9426-edbc79627fa7", "indicator--432f7d3b-02a9-41db-8f50-14ec0a501fcd", "indicator--37699d1c-da93-46ed-a31d-ae13cdd5abf2", "indicator--6251ad5d-5b12-475d-ad8e-19a67c6ce4d8", "indicator--2a86bf55-722e-4ee8-9e7b-e469cb9a1ab6", "indicator--84c07130-1f2a-4140-a3af-d9d3ae6361ff", "indicator--a92ab460-eaf7-4618-a5a0-e378d9d7bcb8", "indicator--44d4044f-534e-46e9-b259-1fb5d285085a", "indicator--b73c55fc-c932-4844-a459-022146073691", "indicator--d8c62b08-00df-44bf-9413-d765ad3ef50c", "indicator--e026a288-19a0-4c5e-903d-cc2bd789247e", "indicator--c563f3ba-98e1-427e-97a5-1a35026b23d9", "indicator--212046cb-6e97-4f12-bf8c-4e341330657a", "indicator--54541ded-008a-40dd-b4a2-3d87e9141504", "indicator--87cd1929-6570-42e0-bfa5-b9d654846481", "indicator--a5fc9040-6b9f-496e-a70f-c2d169b2eda7", "indicator--8bbb1f28-e9af-4889-8e3a-95df7b1f554e", "indicator--bdbae430-f60e-4ebf-b3f6-be2aa5d804e7", "indicator--da07aecc-10f5-458f-b3fe-dc2050ef6f65", "indicator--50f32b75-aaec-40e0-b357-d0d84ecada02", "indicator--1c33135d-821b-4bd3-8da0-d64b14f0361e", "indicator--db90e430-d194-4318-b326-bac6678b7c12", "indicator--3b3fb75d-1bd1-471a-8d61-f4ae84c1dabf", "indicator--44a81563-1d29-4edc-a233-317296310634", "indicator--3ef908f8-fb41-420d-aa00-fb5cb22b6063", "indicator--ca9f09b8-ea48-495e-ab5b-674048303166", "indicator--e02bc0cd-b430-4567-8abb-fb40a6fa2763", "indicator--5155851c-0d2e-4af0-a677-be1ac0fe11f1", "indicator--06923ce5-0e2b-47ea-81d6-f3c1e9385725", "indicator--ac80a4f7-e00d-4c7b-8bc6-35d91b6b188a", "indicator--e0d5efb0-6b86-42d2-aeec-9c4e41167231", "indicator--a2ec4001-49de-4ef3-a286-5ee645bebb0c", "indicator--a97c081c-a8d0-4b8e-bf78-1bd1318e947f", "indicator--a5f40d4e-afcc-4cbf-931d-a5f8e94ad46d", "indicator--1d65e581-dd92-42a9-b7f9-13f20653a585", "indicator--d4562eb6-fd6a-4f4e-88b8-40912fec7232", "indicator--ca8a4d3d-637f-4221-a7d4-d7b0fb1ed683", "indicator--afc22833-0d29-4a6d-b8ed-a6cfe932246f", "indicator--5e810a73-b840-4eac-9705-95dd6e3cf9c8", "indicator--eb8a9a1c-4263-45a6-bc79-22f39de20e39", "indicator--5b482451-64c0-4dd4-8281-b83086ace05d", "indicator--4dccfccf-7626-4222-86ef-757f25680580", "indicator--dc9a66e9-3ef3-4efd-ae7e-8091df2c7ba4", "indicator--7a0863bc-1dba-4aae-b7c5-f6e0d58c4d55", "indicator--a8e3bc39-6835-4af5-9bd0-b10eb118fe45", "indicator--09675050-13da-4b52-88da-ff0071b23203", "indicator--7ed3f774-10ea-4d62-9855-05068197db6a", "indicator--3de0be3d-b06a-4967-be2d-9da6cc67d7bc", "indicator--7b1e727f-c831-437b-a2f6-9acb62e1aa8c", "indicator--4903c308-a577-4618-b079-266673b25755", "indicator--b96b265d-5dd6-4b47-b8d3-3e85c0a1a3de", "indicator--cc02b66d-977f-4321-8d52-e2cbeae4c121", "indicator--27585b67-fadb-4814-9b88-208e986ba5eb", "indicator--9764ce8c-cd6e-44e9-9f1f-99f071734b23", "indicator--e3c36cc1-ebe4-42f0-88a5-6a26ed275fb6", "indicator--5aa637d9-6582-4475-a650-0a9536f80c41", "indicator--ab63e848-e760-4d3d-9b29-d65fd981397c", "indicator--5ccbc606-17e9-412b-83d0-19be70e96dd7", "indicator--ba6138fd-6f7f-4cf0-ab95-6a8b8c6cdbcd", "indicator--ef49dc7c-5a00-4d3d-9eab-4afc58ac5a4b", "indicator--05241a6f-7869-4a8d-9d7a-362ba2753b1f", "indicator--b3b72ae7-d647-429e-895a-34f942ed995e", "indicator--da34bd6d-4993-4bb8-be67-0c7ca291cf9d", "indicator--4e4c5533-cbc3-457d-b560-e99667411a66", "indicator--28411a01-1e5a-484e-add9-2ea510bbe542", "indicator--aaead317-e499-4f42-8fe3-1f1562bb16b9", "indicator--0a39e63a-4dfb-4886-9b3e-613d01fa049e", "indicator--9bcc58f5-7556-45e4-8914-adc2ba11bcc9", "indicator--d3d0530b-babb-43d1-b78d-af9d1b6946da", "indicator--b651d86f-af41-49b0-9b1e-35c3ae1cbeb7", "indicator--f9ad34a2-60e3-4455-964b-9f707418ca8f", "indicator--060cc9f2-25a2-4c75-a25f-ef5c48f1f5f4", "indicator--5509ab91-3920-4f2b-af26-3490bc6393d6", "indicator--a6475115-f44b-44d5-be26-1ad16cde1de3", "indicator--47dc0556-cd2a-4015-9abc-b109ecb7355e", "indicator--34fe30c2-9ee8-498b-8534-8e776bc58d78", "indicator--68dface7-dc5d-4073-94ff-99286ee03001", "indicator--fca258c9-5339-411c-84b9-2b4b1d12ae02", "indicator--4cbf74cd-e1fe-4577-8256-3b667de3cdb5", "indicator--a5b82ba4-7e83-4b56-b160-54c136e00806", "indicator--2b4ff77c-0deb-4f2b-acf2-7dc811dfef05", "indicator--9936807e-4eb9-43ce-8c7c-5f370bd071e7", "indicator--68fb2e06-3bd4-46ad-ac1d-cf05d6c0ec66", "indicator--bd8b87c0-9da2-4aaa-8c29-4c2c3959b211", "indicator--8c0d98b7-2211-47ef-b38d-69207cc7ef15", "indicator--66f3c352-b9fa-448a-81f5-fb9c23fa3a54", "indicator--76a35793-3fd9-4dbb-af2b-cd0c5fc4c71a", "indicator--71fb0812-e028-4081-800a-86715de49980", "indicator--40bde691-2503-403c-8fb6-279d18e77950", "indicator--0680b4d3-7d2d-4a86-b804-f880538b490c", "indicator--9d5356f3-0110-4775-af22-192744da4cb6", "indicator--c1a2dde2-d85b-4a32-9c06-849ad18fae5b", "indicator--a89c9bcc-287d-4c2f-af30-12124570c27b", "indicator--8f9edc09-4632-4e20-a00c-b2d4f2f5e2d5", "indicator--4155f83c-fbf0-43b1-ac9d-3c3679edeeb4", "indicator--66b9aa1f-787a-4663-b59b-da06d2eaca0b", "indicator--168a9eca-7681-43cf-b9de-1ec9bb5229d0", "indicator--9e9e1b61-544c-4a89-87a5-ebedf791d8fb", "indicator--d6236056-abe2-4829-bcd5-0bdd6fc4a991", "indicator--6e5658b6-4d08-458c-99ce-4795795a7776", "indicator--709d1980-140c-40a2-a97c-0ff1aa58c6f2", "indicator--3172d797-27c8-4da9-9816-40749cde7056", "indicator--a8ef28b7-090d-4cd5-b387-5277535e57b7", "indicator--6c9acbb7-f22f-4554-947e-32c349c354af", "indicator--29eb83f8-2326-4306-bfab-8a205e0a01ac", "indicator--cc3709fb-ec1b-4b39-8638-0027f6f087f8", "indicator--cffb07a5-28fe-4832-9e72-79836e56fc58", "indicator--904b10a4-a7f4-46a3-9410-6982cdd332fc", "indicator--9b0002fa-0662-4443-b846-e60c77469a41", "indicator--9dfa34af-f756-495d-b341-343e0eb6d45b", "indicator--2e37173a-b10a-4b00-a670-ce5d6b77b6d0", "indicator--6f1e03fb-38ee-4e11-bbe4-4aecf0e3c068", "indicator--1c9177b7-7061-484b-9daa-1fbb314b25c8", "indicator--206c8348-b222-41d8-90bb-b5487bd0d99b", "indicator--40a45b3b-1b69-4675-9de3-814eeeeb528a", "indicator--9438a4c8-8284-4880-98cf-068d6362896e", "indicator--9b0c0aac-a06b-4df2-b2ef-e3b3ae74e76c", "indicator--10df19e2-453a-4c86-85b9-228f1920e71f", "indicator--e3d870a3-c75e-429b-be97-ea693c830900", "indicator--e6bb4a27-fe20-4fbb-a70b-f90a0c9b41c7", "indicator--5e4ab6dc-ef73-4592-aa9d-c865bf7e66ea", "indicator--696b042c-b6d5-4b12-b9b9-e7927b065123", "indicator--06011c4a-1726-4955-89d2-95286cc3a069", "indicator--2181031a-10ec-47f6-81b3-0d7abddb6a5e", "indicator--b345d7dc-adc6-45eb-911f-6e8104f90f34", "indicator--141f3854-d51d-4520-bff2-24f42d80df93", "indicator--5fb6a4a0-27f6-4a77-8c83-cddcdf63c094", "indicator--6cfd7e6f-0a2f-4de4-91cd-c81a4af9599e", "indicator--fe767604-0a60-4b81-af9d-4e6898da176d", "indicator--b89ef12d-ed4a-44c9-8c4b-3118a7cd005d", "indicator--46ad5d78-fcea-41d8-a648-c23f4cd83029", "indicator--a224156e-9e7a-4585-93f4-d2d362b5d47e", "indicator--9690fcb8-9e1e-47b9-bf2a-10cc8ac25e79", "indicator--f0e33f6e-35b5-488c-a3cc-17a7877a8e15", "indicator--e660f0d0-75a9-49d3-8eb8-1a708fc46229", "indicator--332897a4-e371-40a7-9b32-5f1c97af6ed7", "indicator--2e229ac2-0d33-4fb8-8b29-385785f3fe1a", "indicator--5a78e84a-b69e-4640-a590-76d331c34975", "indicator--6dac7861-f1c4-4513-a2a6-8d89ad96c8ff", "indicator--d7896638-01e2-49bb-89e6-f3665a94ada9", "indicator--4471cfdf-c7d4-4032-bbf0-b3a78af26196", "indicator--18bbfa38-fed7-4566-8a3e-7b585b846092", "indicator--79d175ce-4a48-4a41-98df-d188f834003e", "indicator--f3a0bbcb-ca72-47fa-a559-01970976992f", "indicator--a2ec715d-0bc2-47da-b142-ae654758b77f", "indicator--f1634877-784b-4f7c-be03-5099cb3ddad9", "indicator--eb82094a-aa1f-4c41-b98f-d5d2d969b972", "indicator--9883c813-6644-4d62-bbff-affc497f4fbb", "indicator--27e95cc0-3bd7-429d-b126-b58a9684482a", "indicator--2bbb7bd7-2598-4d3b-b8dc-5cec2dbe12f3", "indicator--c4c64ea4-e928-438c-b6dd-40e1f59664c7", "indicator--e73f14a0-81ba-4e2d-aebb-a0edac369ff5", "indicator--0d2ccc24-3031-4d70-8a4d-465c5bfaaf21", "indicator--ac5b4aa6-43c3-4fc0-9492-e5a17a1b08a1", "indicator--3cdf528c-b55f-45f5-bc20-670bff859fde", "indicator--fef6033e-a5fb-4fa6-91d2-9b5c9eec30fc", "indicator--dd962136-73be-4d0c-829f-b218e5d1866b", "indicator--429a6993-2131-463f-bbcc-994110cde32c", "indicator--1faaec3c-9dcf-4322-9f4c-91eb5b14eab7", "indicator--d3961d31-9d1a-4f0e-bff0-3d0bd7cf1780", "indicator--a11db041-0af8-48f2-a394-9c38cbca2c7e", "indicator--f717cd76-8eae-49df-99b7-884518e6e345", "indicator--c4c18d94-e3ed-4fab-bdb0-da33088e45a9", "indicator--5a514aba-7105-4537-b0a5-49dd78ce09b1", "indicator--99842a99-d0ba-4773-a3b0-ae788720f6f2", "indicator--410b4037-20a5-48d9-bab3-44bec12b54d8", "indicator--14b501e7-f75a-4ed2-b637-f1aecf48bafe", "indicator--883c17b8-f6d4-4255-9559-d8aef8d38635", "indicator--ac9f0c2a-ac32-4c2b-b955-5be53abd5f3a", "indicator--3a7af3ba-0ae1-4210-b14a-8e76c9d69054", "indicator--4b9138ca-fe11-467e-b98a-50301801bf12", "indicator--a551e90a-fcfe-4f4d-9f60-7ed9e69e5bdb", "indicator--4e056ed6-d12b-49bf-936e-74d75e9853b5", "indicator--1f4493de-42c2-4c30-bcab-11c1d7c4684f", "indicator--79e98131-06a5-482d-b8e0-3d2f292ae260", "indicator--8d6e416b-8bc8-4c54-90be-2762569fd2c1", "indicator--6c9e21a8-65d8-4601-960e-01a1fea90e08", "indicator--db529cb0-7c75-4891-aec5-b13f68c1e419", "indicator--36c1e012-269a-4a86-a7bb-4b2c45e30de5", "indicator--ed419bf3-46bd-410a-ac76-5e2ddb1fdf3c", "indicator--c30fd9b8-8f6f-4277-b882-020ff0a5c77f", "indicator--0d220641-ccc8-4017-907a-c57566f3293c", "indicator--67170d83-9a23-4a57-9567-d97d2117be9c", "indicator--3d6ba8e8-a420-4fe9-9aa0-1c95e6113775", "indicator--1741ff92-9e11-4433-a698-4e1f77d5f38b", "indicator--78b65361-a38f-4d82-9462-915a20b1b6e5", "indicator--24d726a9-3869-4134-96bc-ceef98cd8f14", "indicator--597a214b-7d43-4167-8ef9-76c503453926", "indicator--28a1de1c-be66-4c74-821b-3e8671393abe", "indicator--23e9603e-c8f2-41f0-b956-5fb3c99818cb", "indicator--ae3e040d-2cd7-4c14-8401-34a4af7e5396", "indicator--58397ec4-e106-4016-9a37-2c47f388705c", "indicator--34759d41-936f-4595-a6a0-a9df5e06874f", "indicator--63f3b1c9-d983-44cb-b900-fcc7b9c62597", "indicator--994d030f-1743-4411-9df7-2c7ec8144b16", "indicator--7a7c52b0-8a29-47a1-b3c7-39f0ea6fd60f", "indicator--c6eab58d-d26a-4a5c-a28e-831aaf474827", "indicator--dfe9ee54-c917-43ac-a41e-36293cb4108d", "indicator--6cb5842f-5a98-46fd-9452-ebf73ee5ab75", "indicator--1b875cf4-a7da-420e-8ac6-fbadbe59e85b", "indicator--f8622499-0bd5-49b3-819e-e5ab416f3dab", "indicator--6c0b0c26-bf0c-48ed-be63-91e67ad803c1", "indicator--f7048372-2c1e-4a5d-ac86-99ae44eff795", "indicator--95193aa7-2af1-43ab-911e-691dc660c55d", "indicator--7daae333-2f92-4d52-995d-f35e1075a19e", "indicator--7882696a-8750-4ee7-90a1-38b2fdea653b", "indicator--327130db-49d4-481d-a3ea-840c7625fc2c", "indicator--35a19172-767d-42b7-85d3-1278ba8115e6", "indicator--568789ee-16e8-46f5-9ade-32edebe344f4", "indicator--3015f9d4-c600-475a-856b-7ce54bf4d943", "indicator--73fff566-dea8-47f3-9867-2110199f4607", "indicator--62819c9e-d06d-4975-97ef-c41e2a9fad96", "indicator--cacf5c80-38ad-4abe-8cb7-f53eec855d4a", "indicator--b8911d45-3e95-4dbe-806f-60b8c126563f", "indicator--ffbd5f1e-88a4-4100-b1c2-34bdf48838d0", "indicator--a09670ac-08a4-4334-8641-1e9d98b20313", "indicator--57d15677-f0a6-4756-a099-d97773eff472", "indicator--18a29972-aa68-46b5-9c39-29f0c79ffbd1", "indicator--e3570564-2347-4eac-bc78-4c7a8bfbac5f", "indicator--5fde3bac-ddeb-4f1a-ab6b-07a87cbcb214", "indicator--b2b5def2-76fa-4dbb-a78a-5390d01d3293", "indicator--3bdb289e-8574-488a-88e8-2f9ac51612eb", "indicator--3507309e-631e-4194-bfea-cd37aed5d6ce", "indicator--5f1adc4b-52e0-41af-8afa-761b34573688", "indicator--ead292fb-811d-463b-9dc9-a6a7377e18e9", "indicator--4ca3365a-50fd-45bf-ae01-c39c3ed9502b", "indicator--7f11351d-28c0-408c-8290-ddc0043f6c23", "indicator--1c249e10-6f67-4243-9bc7-cf5f5f6c4721", "indicator--5556d831-34c6-4af4-8476-0c214acdc837", "indicator--ebfbf065-7127-4e2e-9bc0-49e330b404cd", "indicator--1404d4b5-8f85-4d8a-987f-2622575f0349", "indicator--20923355-baf4-4484-bb77-e1b45f68aeea", "indicator--1b50c3ef-dbaf-4971-9cdd-31b40abb04e4", "indicator--d262e054-67bb-4362-b0a5-1e8a32009069", "indicator--aaa5ab33-5e30-4462-9daa-e6a916967ac4", "indicator--e9672855-ae16-4480-888d-f94d0e3515ce", "indicator--3f727465-cda6-46b4-9e13-47e1de21ba64", "indicator--629fe5c3-8660-459b-9c97-3b01892564ce", "indicator--4ade063c-bf0b-43a4-920b-16bd96276b56", "indicator--87d301b7-b345-4b90-a6c8-ff51fe0efb01", "indicator--ca1e3d23-22dd-49f4-a988-614f0dfc7c72", "indicator--40e2f7d1-1c34-4b1d-a8ac-4416922db941", "indicator--31937b13-0d4b-4a3e-82fe-834253041808", "indicator--30abe4bf-cc0a-4cdc-8470-7cc09d517745", "indicator--0ec628bd-36df-443a-98de-c83dca784244", "indicator--c365ee73-1850-41b3-a042-4b69e265281e", "indicator--452f64e0-abab-424b-a65c-91c3618464e9", "indicator--1be6900a-a52e-4b8a-8e34-ff47f2e10817", "indicator--3df7e7f3-2d80-493f-8b69-08484e6766f5", "indicator--c9abd92d-306f-405c-9772-772907c3ca7c", "indicator--cf7d5d91-3868-4c8b-8c21-53ba63dd6ccc", "indicator--11f43247-5a01-4cb0-9cee-97514fcf276c", "indicator--3ffedaad-c526-4e39-8cf5-9185886e5dda", "indicator--b3e3f8a0-e720-4b18-935b-1fe36bfd6320", "indicator--a6053ad6-9e03-4ccb-a953-cfd346221ae3", "indicator--d093165b-87b6-4e9c-ae04-212f8d95c88d", "indicator--c846cc7e-bb52-4b35-9056-2736ba8eba83", "indicator--dc0efa8a-5f09-47ac-952e-ffa0e3c8085e", "indicator--5dc7ec14-223f-471e-b664-e5faab66a0f4", "indicator--5007ffaa-0d91-4246-846a-69838b338944", "indicator--11d1ba6c-3942-4db0-85ae-badef877eb75", "indicator--fccc016f-00ee-41ed-a409-a4f2befac8ad", "indicator--48dd5371-edff-4bd0-8079-545fb29c714c", "indicator--d0c0e046-4ed1-42c6-8898-eedfc86cbc6f", "indicator--ad68ab80-5c68-4d9b-81d2-9df68099a323", "indicator--adbaf926-1de0-407c-a2f5-821a7cce1f89", "indicator--73aa34a5-37a3-4443-98f5-84213cace293", "indicator--f4fe62ff-53bf-465a-b890-362ad9e0ae88", "indicator--c5e643d9-9c3b-40c0-bb0c-91c2e4aa20d3", "indicator--46b5759b-2eca-4dd8-b129-58e670d1e516", "indicator--0017710c-e91d-4a93-8c2b-a25576218e54", "indicator--42a39bd2-bda9-495d-902e-b4ac8bf2cb56", "indicator--cbe9e90b-e489-403f-8adf-ea40ec825eb7", "indicator--7fd2bbdc-1158-4558-a341-f692d0166fcb", "indicator--deefa6b3-d266-43c6-856f-795914685208", "indicator--0b7e6c52-8a17-4340-b67f-87257a43a772", "indicator--25a0ea75-c6d2-49d3-a3d0-ee0921970aef", "indicator--84bebb98-aad7-4a58-b16e-818ebf95f8e5", "indicator--8a21eeec-9a60-4cd0-9be4-757bedbf808e", "indicator--a37f7f5a-e3f3-4def-b618-e9bd176ac3c1", "indicator--94542236-ae81-430b-aac5-27da10b2bc6d", "indicator--51f1169c-3bc8-445f-bcfa-dbc5617a9ebf", "indicator--a4950891-68dc-4d82-b082-c10193f0b834", "indicator--0aa9048e-50d7-48c4-8fb7-c89c411c7fb4", "indicator--b4a21e3f-bf1e-429b-bb65-0b86853faa73", "indicator--b6b12048-479b-45f1-b47b-fd9d0018f73f", "indicator--d16bd0b9-4a88-43c2-80a9-f88f00d42745", "indicator--3de6088f-dc63-4b7d-99b1-369168642f3d", "indicator--394e5da0-5381-45ed-8e25-4bcadb2e7ca1", "indicator--bdf5540d-35f8-4fc8-a46c-9bf045420cec", "indicator--a80284d4-1de5-4832-9446-1648bd538a8d", "indicator--affff226-b8a6-45d2-adc9-7669c4d115ba", "indicator--9b7276ab-e2d6-4c1d-891d-defffa109d5b", "indicator--b62496fa-ac26-438c-9bf4-bb5877e2adaa", "indicator--37314887-3850-4a37-88ad-04d50f719dbe", "indicator--fc7fca5a-d84d-461d-a1a3-0bd0839341cd", "indicator--3fa2b60b-ec66-4669-98f4-3e9d292cee06", "indicator--a2ba26c2-30e2-4044-b954-f79612ee67d6", "indicator--498601ed-a0d7-4817-9c98-859d54aa10f2", "indicator--a298c072-9d84-4ab0-9d44-436b8824edc6", "indicator--4098f42a-db03-4545-bbc4-88eafee56402", "indicator--291b3b98-6712-4cdb-a114-418143aa62b7", "indicator--4ae18f62-59c8-4cf2-85dd-719561a47877", "indicator--ef85759b-7f69-4b04-8a38-da1ba25569c6", "indicator--0c6d5aae-35aa-4d1f-b543-37e501b27850", "indicator--2e757bd0-0b8a-4a81-832c-b9fb25afe2bf", "indicator--98da130e-7411-49a6-ae13-988441895cd9", "indicator--d2c748ee-b5b0-45f5-8c81-910d7aae1b45", "indicator--bdb5c164-30e2-4d0f-808d-1fb83b57f633", "indicator--1e6dbb30-f0e4-4be0-9ba9-d30bc68b6304", "indicator--30a00da4-0ee4-4849-be7d-57d9e81faf4e", "indicator--d4f0859d-3f63-4880-a001-bdf4ceb70036", "indicator--e79fd37e-013f-4d77-a8b4-3e8256ade2d5", "indicator--f1230348-dc1d-4914-bf97-fb7737f6cec5", "indicator--e949e62a-8809-415d-b514-f35261b0c024", "indicator--588b6ab2-43ec-4ebc-8ef4-2c9b82987f78", "indicator--eeaece77-5684-46b1-815a-4943e805388f", "indicator--b16d550b-392f-451b-bad5-b3f0416cb35e", "indicator--aa800eb2-335a-4dae-a3b9-639ff651c422", "indicator--8b76e508-771a-4f34-80ea-a5a961b48041", "indicator--441160fb-91e1-4bd0-ba38-7f36364cbb67", "indicator--4483f70f-7e59-4f7c-a8ec-b80b10717ee3", "indicator--40038ff2-59c6-4615-b52c-8a3094832bdd", "indicator--7a4e7bc2-2598-498a-a8e6-6cf2daac8a10", "indicator--07c5e7f2-7826-4076-a279-b6dfc5bfc81a", "indicator--f785b344-2053-4628-b664-cdf33ffd348d", "indicator--8812062c-1ee9-442a-ae2f-0a7cdd77aebf", "indicator--a1de34ea-d184-4b9f-8d8c-079c2ff3aa20", "indicator--081c75ca-28b0-4581-b427-1d8f3f4091e0", "indicator--daba380b-6633-4015-8896-5545e2f17264", "indicator--aff115fa-ecb9-4429-81ad-ab0d4bec2d0e", "indicator--c405b207-d8ba-498a-849c-ce0d3702f8a7", "indicator--1bfb364e-e2a2-4fd9-b066-8b845dac34d2", "indicator--04cba5b7-25fc-4711-bb18-f57d8147c1de", "indicator--cfdbc4d5-25f9-4e8f-be0f-c46765945125", "indicator--9dfaf2cb-388b-4e23-8a19-e10034fc7d4c", "indicator--cfa44ce2-4575-4398-add5-ff5440cf0abe", "indicator--c0bbc610-683b-4cc3-9650-3e9e4df2e5e6", "indicator--e919d594-9da9-4a00-9166-b6dfaf653b6c", "indicator--0b9b69ec-a071-48e2-8b42-be22583bebf9", "indicator--afc5afe3-79f1-4957-9979-bb34f332df0c", "indicator--83b63d5d-b14e-42b7-8069-85698fd21197", "indicator--0eabf05b-0407-4cfd-8408-037e5f5e6407", "indicator--cdf00534-4d08-4ff5-b846-5e59b83e38e9", "indicator--0e6aad17-5570-4489-9482-9c745f18e792", "indicator--a5e979ec-fad0-42a8-81d0-f3e2a5aff50f", "indicator--1f68a26c-deb6-4c3f-8b23-06992aab14e2", "indicator--4c231276-48f6-4f35-9c1a-dc2e47166f59", "indicator--b8b7e0c1-e36c-4d2a-b759-7e23bd06f94b", "indicator--042207f1-d722-4a32-b7ac-1682c79c2de4", "indicator--83024cb7-12c8-4918-8c45-bc0770c40359", "indicator--de5c4ee0-6472-43af-b5fe-2ad36b972e5a", "indicator--3368785b-b576-4239-a57a-502e127241f6", "indicator--a6532649-24e7-4ca4-96fe-8ea5ec0c3c62", "indicator--5c3f6f0c-74a8-4e4f-ac58-f99c3e0e4d33", "indicator--2186b7ce-6075-4572-a990-96982bf992ac", "indicator--b79c0cb8-ff1b-4b66-a108-d589ab00e192", "indicator--0979dccb-ed16-4bbd-9f47-ccf3636723c1", "indicator--ae99b9a7-7f84-4ae0-b63d-eabdb6044ee1", "indicator--44eedabe-896d-4f8a-af60-0419f1b5f511", "indicator--5a14e2f5-1252-4fb1-9a00-182bd1326793", "indicator--dd036563-8bff-405f-adf0-2ef5543a786f", "indicator--ced6c126-d0c0-4dec-8a9e-6b550e26dc10", "indicator--e57c2585-1400-475b-8458-caed321a8514", "indicator--2e88df07-511a-4c6d-8b5b-e6f3d95e02ca", "indicator--f815fed6-7ca7-4c5c-abf1-5c1d3d9b8463", "indicator--179f39cb-b3b4-4ac7-9cc6-f21f8aceae22", "indicator--44d7dc6a-3aae-42e1-8709-ea0ddb09de42", "indicator--99c3f76e-7d0b-4661-a5da-5fe0e58694ae", "indicator--4f6f5acf-63d8-4868-b844-46a899b5c928", "indicator--6d5f99c6-3965-497a-873b-a94d8c19389f", "indicator--12e5b229-4b9f-4145-b1e8-7ed60a6c0db4", "indicator--5d600e48-d7a6-489e-9e62-33809d1ecfa0", "indicator--b8d8e847-dbf8-4789-a37a-b7038ae35cac", "indicator--714852d8-5977-4f34-ba9c-e9514abe4f46", "indicator--e519b0c1-f899-40b0-bd03-8df2ce4787a4", "indicator--360d5275-5048-4b45-8546-aac345c992ae", "indicator--5779fcc2-db08-48c5-83ad-f8bfa14ec27f", "indicator--8016dbb3-7c95-421d-bdaf-1ae6279737bd", "indicator--9ba12325-9f36-4866-bad5-14bfb3563ba6", "indicator--2704865b-506e-4a12-98b1-024be4af2d88", "indicator--7df6fa20-5deb-48b7-a6c5-a2687f4c38c1", "indicator--0b1e604c-47cd-45b3-8e6e-97bfe017423e", "indicator--08613792-5b18-4c33-a22e-e81f7c646e9a", "indicator--8e2b599b-513b-4f94-823b-a78be64da622", "indicator--e16692c9-a4d3-44a3-9f46-9089030eee32", "indicator--750b14e8-7666-4cf8-8932-a46116d32be1", "indicator--6528d7b3-e91f-41de-bb37-150384b1767a", "indicator--03fa4f79-5fe6-4dbc-b7a3-6ba5b19f1de0", "indicator--3ef82771-30b8-4a3c-afd8-958e3a64c268", "indicator--0d14a309-dd60-424f-a680-bb58d2972484", "indicator--06567025-41c2-4a79-829c-d791ace873d3", "indicator--09c1f6f1-3e79-456e-accd-e1b81ddca370", "indicator--2b8e81c4-2fce-465b-8736-9bc3f10897da", "indicator--da3b0ff1-8e44-40de-a040-0d9a9d2df57b", "indicator--e60b1e7f-776a-42d7-9e0f-1690c2878dba", "indicator--c1eefeae-b671-4041-a1ce-e51f9fe2e541", "indicator--b4524661-5121-447a-889e-e385f90d0605", "indicator--9410d010-ac64-413e-ab90-20551f3f1050", "indicator--7c3dc13e-4824-4fd2-821b-1f2ac8ccd595", "indicator--127dc5ce-6c05-4cd7-9562-687fe480c261", "indicator--554edfa4-7346-447e-a96c-e0cc070cd278", "indicator--7cf18010-c5f7-4b09-bdce-7d09d9501665", "indicator--32588ea0-da7d-4d9f-a15b-2a607f339514", "indicator--2f1a4d13-9791-4188-894b-16d4ce5d9507", "indicator--e00b8280-0b82-48f0-926e-e890e9f31d73", "indicator--1c3358a0-5de4-4cd9-848c-11f7fb594ad5", "indicator--4b50cbc4-4b3c-4a7e-b6c5-4370fd82e856", "indicator--25cc0b8e-4407-4a7a-8333-85e9b9e662b4", "indicator--63b0857f-efc8-4b44-b823-b4dfe4ba896d", "indicator--f8fad8bb-6e00-44b2-8804-885d2e8c259a", "indicator--572ffb5b-1d8c-4913-9761-23d6858751d5", "indicator--0bae54b2-8d96-46bc-9433-8431e1e617c3", "indicator--896f8541-c8f6-43c7-98f0-369e120206d5", "indicator--d63a8ae4-ca20-4ecb-a405-e5a31cc73089", "indicator--1fabf831-ee0d-42d0-9e24-736502e825f8", "indicator--aab9d020-094f-4126-9c8f-0ed05f847e6a", "indicator--efe59093-b425-4d0b-8b58-c1bdc29ec038", "indicator--353b894e-06b6-4653-9c3e-8857f13d49ad", "indicator--caf9ae24-9731-472e-8416-a9e57ada62f3", "indicator--89a2de24-6aa1-4438-8a2f-6eca5042fe4a", "indicator--1bce4215-a201-4024-91a8-3950f5412057", "indicator--4e6beb2e-1b0d-41f7-b1f6-482aea451607", "indicator--29a3a099-ede9-434c-aa35-f239760011ea", "indicator--2ff3aaf2-e3fa-493f-9d36-c0b94cc490fe", "indicator--53a3f304-ab71-47f9-9b25-86d0895793d6", "indicator--6c6a88e8-6b28-4df5-b814-8b8b4cb1c1ac", "indicator--d0676146-0187-4459-b33d-f3a7b0ce9ab9", "indicator--0628b494-4959-4d24-bef4-7c941d31676e", "indicator--d54bc937-e172-4728-a5ac-bc5d8eaee8f5", "indicator--1c6de581-c0af-4173-92f8-acb234295532", "indicator--27c5dfd1-4af4-42e4-9af6-21f72fe37b61", "indicator--c471e619-b5da-44d8-ac5b-a856cefb4c58", "indicator--2c6641da-26ce-4782-8209-c2ee51d132b4", "indicator--ece36585-ab90-498a-8e90-73af2de9edb7", "indicator--2acece12-4031-4103-b901-15ef836ebdeb", "indicator--17c24f98-9b14-4f46-8788-a4eb453dc6cd", "indicator--d5584637-6b9a-4192-ba59-7d5de4d42212", "indicator--48afba16-c449-4ff8-a7e9-a95151dffcec", "indicator--977e09b8-5d4d-49df-9685-bb72802af394", "indicator--235fe557-720e-4acf-ad2c-f22e22b809cf", "indicator--2e003816-5aca-42f8-a603-234f2b90487c", "indicator--11f43b2a-6dc9-496d-82e0-9054b326bcd0", "indicator--a298edbf-01d6-4edf-a8dc-90dc4d286357", "indicator--b26c7586-1476-42d0-b018-425fe82c6c00", "indicator--3b6761e4-8d7d-4021-a22a-181e4001260a", "indicator--6d33d108-e316-4eb2-97f8-43fd9da50866", "indicator--7e048392-4993-4148-8917-565b7a35324c", "indicator--fba134c9-a115-461a-9db3-747f735faaa6", "indicator--87384c50-7593-4244-8bd3-d3d448a88ef0", "indicator--8b84ddea-7488-4d93-82ca-53afc8b93d01", "indicator--5345f3a4-cf07-4ebd-81b5-6dc57a5e778d", "indicator--3664c553-d8fa-42ad-8c2e-dab27cb91c7b", "indicator--edf678e6-9a95-4e8a-bc0e-a21d34b17912", "indicator--3745b31a-d83d-4969-9eab-fc1e867c6908", "indicator--a03a8903-2a77-4680-814a-129d0b8ef921", "indicator--e9d5b733-49a7-4469-a973-c81436fabd2d", "indicator--a9ff1252-923e-4e7d-9ef6-5e3e92e0f31c", "indicator--e82f8830-bc5f-4c11-a4fd-407b777db60c", "indicator--5b9369fa-c19d-4ead-a61b-f0c7c82bba81", "indicator--aa80eb90-5817-4429-b9d9-21d757984d15", "indicator--8fa54664-3c69-4694-89ef-b487ce8da98f", "indicator--2b563f94-42e5-4fb9-aad7-812060a83139", "indicator--6b70853e-d5db-4649-bdba-9fdaf2a12244", "indicator--57af07b1-0cf0-46f3-a93d-4c99a9be3ef4", "indicator--cec6bb27-a6d9-4936-baf4-329be1e4f744", "indicator--7454aaca-6e8c-4c04-9db7-945d45c44184", "indicator--8f328a99-70a2-4329-9adb-2219275dda23", "indicator--63ac9784-f54e-4780-93bc-319142e5c47b", "indicator--1e70aea6-9c6e-42ec-9aab-64693c5b98af", "indicator--7334ee49-21a6-4cdc-bd60-bbdf1051b422", "indicator--81702b29-771a-4826-9a80-4ecb59e15055", "indicator--ea08c613-17ee-444c-a896-df43cdb52a05", "indicator--694c6dbe-0735-4060-840c-849afba3fc64", "indicator--39d8426f-430e-40b7-aca1-6345ba8a31ba", "indicator--1cbf08f9-7d3c-46f3-980c-a4fa313ac3a8", "indicator--5e11e5a9-1508-426b-813b-9a6d309541d2", "indicator--ddf9a4de-88fd-481a-a614-2c57858f99e9", "indicator--a93e8d6c-88d8-44cf-b297-a30b3712e7ca", "indicator--ca1be872-7250-4689-8d06-df48b3a8bae4", "indicator--151630f6-3287-4334-a374-5398d689b7f9", "indicator--09199b09-1a46-4c08-95b9-0a49d874f916", "indicator--d307dc68-09e5-4e59-8b0d-2b686aab3a3b", "indicator--8943f970-1f83-4453-bc00-148b6847e262", "indicator--03ff070a-a7e9-497c-9630-89c946d87827", "indicator--01350db1-77ea-4525-a9fa-d0d192e019e0", "indicator--2a90510f-ffe4-4c94-80f2-999416af4424", "indicator--f0fde7fa-2a9a-43f3-a22f-87081e9169b9", "indicator--44c16c5f-420f-404f-97b8-b9f1ae9851eb", "indicator--bf50f987-f58c-4ba2-b0a1-cf6bd397d9aa", "indicator--f11858ee-4c50-4050-8ad8-a67ed05cef92", "indicator--118a20ec-4996-4511-8b01-b6488cd14ea3", "indicator--de161528-9cc7-4029-8e77-2ac4f83e04ac", "indicator--84486f08-71e9-4a9b-9c50-ac550c4f148b", "indicator--23ef7c8d-e2ac-4adb-836a-0085d3668020", "indicator--d4ae0d2b-2e54-42e0-bcfc-6bf6428f70f7", "indicator--89014f41-a436-4ce3-b88a-3cf8e1ec4ce4", "indicator--438305c8-1f70-4f08-88a7-8aaa5bdd27b0", "indicator--51e6be0f-34e5-4e30-8759-265de25bb094", "indicator--35534a0f-470d-4db6-a28d-9672fa8fa969", "indicator--d608c301-1a58-4ee9-9c25-86a49900e070", "indicator--d9d8d02e-f484-4df9-9c0a-0e332fa5e58c", "indicator--2a2b0518-22b3-4f5b-92a1-053e1990059e", "indicator--397ef2a3-f774-40f1-8699-34304a13027f", "indicator--0c1e97d8-c8a2-424a-95ff-bd65d0ac9cd2", "indicator--9c8c7556-a509-4e16-bb2d-58cbf0ae8a58", "indicator--e59db556-cc2a-4a34-a1fd-dc1c4f480539", "indicator--bd51685a-38c4-4679-aa1d-7a8ee8a2cfff", "indicator--75d2cda0-72bf-43a1-b5ae-5032a2c8095e", "indicator--b07b1c41-2b5b-4f65-adaa-f121a9dfeda0", "indicator--bac734d3-f817-4c5d-9b99-d10a51d9682d", "indicator--ca9e785d-cc07-4a40-a6d5-8bd95a5e0578", "indicator--985a6b43-9e09-4d87-a297-ce8cc3783051", "indicator--c9a78236-0f29-4701-82a3-ac7a8ea9cf84", "indicator--55b6e973-483b-4882-8e9c-45fa799b5e57", "indicator--0e720672-0407-4a85-90c9-667ae5a792ee", "indicator--08a6b19b-f508-48a2-a3cf-5f878e98c15e", "indicator--c26ce34c-0e7e-4a0a-ace6-817d45cfcaa1", "indicator--d5e324a8-2844-41e4-8006-9041b3c0b8f0", "indicator--54ef998c-c988-49cd-81a7-c2f4ce8d35f7", "indicator--1af09b80-ff22-4a5a-bd7a-07ef05a41672", "indicator--e3c5346b-72e8-44ac-a6fc-897b8d9fd37b", "indicator--926261f3-1fe9-4a0f-bc65-9080c1dfb195", "indicator--83bb687a-a4e6-46ae-a985-7b1b02180ca0", "indicator--9bf1cd47-8fe8-456b-9d94-711d77081466", "indicator--6634d572-cf8d-40c0-84ff-9804fd852996", "indicator--70384b02-f480-4ecd-8517-d6746c96d39d", "indicator--7fa5969e-40ee-4aa4-84e1-bb95d5281201", "indicator--1a279de8-3a60-4c43-9da1-17651f2badc2", "indicator--88fa9712-22db-4f52-8357-77c372293dc6", "indicator--692394cc-7ac1-4417-90ac-cab593811891", "indicator--86ad6710-8b5e-4827-b48a-396d47b2a8a0", "indicator--54ceb53b-6bae-418d-b86d-32728f7fa4bf", "indicator--349ec438-5c18-4386-9293-b4db7051d911", "indicator--680834a7-fcbd-40a1-b035-781a166d8181", "indicator--19a145f2-09fa-4dcb-8883-3aed2bd9b07a", "indicator--2f8ff6b9-e985-4604-80f5-5867fed9eb5a", "indicator--0e448f4d-5495-42f1-97a6-0f1f002f0065", "indicator--d36fb7f9-bd28-4196-95ad-c4fda3fa8326", "indicator--6101a826-e9bc-4358-b4bf-9f98b4e29aa2", "indicator--778a175a-f07c-4cc9-a0ff-c6d22be40b2a", "indicator--5a915871-c4e1-4d35-84ee-5b4af4556d56", "indicator--e6a96a7d-6dc2-4ded-bede-8a12720cc963", "indicator--7f6c19b7-2bb0-48ab-bd8c-64b1d3861a0a", "indicator--11b89efb-c105-43c9-82bf-0c95eef32743", "indicator--e40c1470-cb5b-4341-92fd-faa629f60173", "indicator--bb04926f-7a60-4588-9980-18e78d8627b0", "indicator--9e1a1452-0b74-4b92-a9a2-4b520dabbef6", "indicator--7492dbee-c468-40f9-a338-753fb491afb2", "indicator--b2ffae76-0807-4a47-9481-ab3283d6e918", "indicator--f6795f30-078b-4a94-add2-c7499084af2c", "indicator--a6cb156b-3b93-43c8-90f2-bdea2dcb4af2", "indicator--5b33f8dd-cd99-4a12-8e77-36d4032f7acb", "indicator--6e6d9e66-b7ff-4ea1-9f1b-e3cc762ca66e", "indicator--5e954f91-ac89-487c-b3d4-61b2ed79853a", "indicator--0cb2e003-f91c-4331-beb5-5fd50c279e89", "indicator--7a965e7f-7db0-49cb-ac33-ae5623e42d81", "indicator--e68c2cb4-13de-4921-aaa3-8ed54c66c9c1", "indicator--1be52d55-a1ac-4130-aba2-6b1477c279e9", "indicator--f6e4dcf5-8f64-4dae-a46c-6d18dddb63c7", "indicator--97a586f4-0ea9-464e-8b9e-2dffa08d0630", "indicator--6b2d77c2-7d66-4c30-bb93-e76197410077", "indicator--6cf657ce-4c7d-49a8-801f-d6cae5efae19", "indicator--b7982bd0-d366-4835-9abd-1786aa45a332", "indicator--6c3ee380-e37e-4271-b0a4-333b20c14735", "indicator--199ce867-d1c0-4913-b814-5220b75b8330", "indicator--a5fe80af-2043-48dc-bcd7-b4825c17a8cf", "indicator--3a67bfd2-1710-4354-8902-7a26fe03eb18", "indicator--87af2073-cdea-4beb-b8e9-d3e160e43f50", "indicator--474b3599-b88b-428f-be75-7eb2e56019fa", "indicator--f9d7de54-badd-44d4-af7b-e1598dd1e986", "indicator--59fb982d-113b-4325-bd4f-3e2fe4b273a9", "indicator--9130cd12-5a0f-4daf-8c08-ace336cd9344", "indicator--e0895d8b-de4b-4d19-b596-a1c2e9f76e61", "indicator--3b644e95-1af9-4a88-bc8a-7b025ca46175", "indicator--ec1070ba-95c4-4000-9925-bf4678821272", "indicator--68bfe2ff-22f5-4308-b072-f6dae1e3900b", "indicator--14c08f65-f53b-4cea-a50f-78649fb65345", "indicator--3869325a-665b-4ece-9d5e-0f9c2a9111d4", "indicator--e673fb8a-dd95-4c62-bdce-af10591d5222", "indicator--e859a8e5-4e99-4e14-8d7f-a2c3286e4d58", "indicator--0b65d66f-41a6-4abc-89ac-39697af198ae", "indicator--cb66f2e9-34c1-4b87-ab04-c91d60fd245b", "indicator--8a130492-bb14-4126-b144-0082a2b00dcd", "indicator--2b8c713f-db8b-4efa-bf27-2a26e755d7b2", "indicator--e6d5c409-0a22-4454-a78a-c60068ef1be1", "indicator--bc0e8023-b1c5-425d-b3cd-3e0c2d992422", "indicator--d5737409-40d4-4639-a555-14e7e4c30b3d", "indicator--3800d675-2b2d-4faa-9412-06306b66d5fa", "indicator--e4ff0553-67db-4d85-aa01-ffd3e56ced2c", "indicator--5e0c9a3b-8f1d-4e9d-90fe-fe86cad35447", "indicator--bc90851c-7297-47a8-9bc5-9d6902d5173a", "indicator--ac731099-0e07-40e4-9cd2-e982ebeb15c3", "indicator--5b82061d-3f5f-4458-a474-48e2e4626b66", "indicator--9072dba4-e23a-44e0-8bc0-4cc8cb5687aa", "indicator--f2ad0448-10ad-421f-a54a-4039fefb6b84", "indicator--be7f5df4-9559-4c2e-af9f-79336683ec99", "indicator--2d7ed1f8-a380-4709-987a-3a7f7f394bb6", "indicator--52661864-e7ae-4519-891c-0929ed49a640", "indicator--05983558-ec14-4638-a9e3-43a265d4db4b", "indicator--9026ac92-7a77-48fa-a088-f3a103c4d073", "indicator--76d6b657-32d5-43d3-a9a6-1f5e24e1de2e", "indicator--0dafa042-f96b-42f4-9ab9-9c5186647564", "indicator--3f50d426-5458-497a-97f2-938901bc3670", "indicator--dd839290-ede2-469d-8391-a7137f8d1658", "indicator--2a2007ad-c292-4e84-888f-5cc043a8deb4", "indicator--8546cea7-7b3f-4c23-949b-f4173748794b", "indicator--2e80cbbf-0c7f-47e3-98a9-3a4141eb6222", "indicator--635f5ae2-840d-42e8-b2e8-652874eff8c0", "indicator--03aa6946-aa9f-45f9-8cb4-5f5f05a713a4", "indicator--ff03ca18-79d1-40e6-9b5d-18a940839e25", "indicator--82512c25-2d17-4e3f-a18a-3bdd497627ad", "indicator--d3112d74-4455-4c11-9c53-27e16a1d45d2", "indicator--30b60b8d-1f04-46b6-b0d1-d8a8f40a2f2d", "indicator--09295e96-b82c-4948-9cf3-f0139762ddc4", "indicator--0fb16459-0cc3-4672-81c6-1ec763ae0c34", "indicator--50058bd9-46d1-4561-8e81-053a8917535b", "indicator--7b1d8395-987c-49ed-9c76-6e17a8293cac", "indicator--e928c392-4566-493e-afbd-945e80f1d1da", "indicator--3f8d4cb7-84af-4d8b-b412-4182f266de6b", "indicator--4d7c8207-e621-4efd-acaa-47f994c020a0", "indicator--7c27192b-d1af-4833-bd7a-1dc4038e4426", "indicator--a85a9c05-86d9-4ab4-bce9-1ad1b4901478", "indicator--cfe92458-0462-4231-91fb-94281fbc4860", "indicator--bd69246a-9572-4a44-a5f9-eeda987192f6", "indicator--dbfac167-0f6b-4e23-b7c6-37638690af6b", "indicator--0c2af797-8296-456d-946e-06fe25fe802a", "indicator--c86c4e30-662a-4a95-a522-ef1a1abf5a39", "indicator--6f551c73-5197-4727-a8a2-d5f42881d2b3", "indicator--00e2c602-b39d-4abe-95e5-58275284ff64", "indicator--4d075f8e-8a64-4d04-921a-179a9dd8c76a", "indicator--c19ccbc5-9ee3-4c1c-be83-828c4adf8dce", "indicator--6d1fe2e4-e9b0-48fc-b162-da6ee7a1d556", "indicator--5cb101ae-ddd4-44a5-aa56-009b1fb3d809", "indicator--90ee1543-2d85-402c-a312-1f9486b2909d", "indicator--0d0aaaca-4cd1-4bee-abbb-b90571aa9b22", "indicator--3d062e1f-ff0f-4dd2-92cd-89709e05b8aa", "indicator--3780360a-8ee2-4b09-9c93-fab877ac9400", "indicator--d442be1a-b114-4e3d-a5b9-c5197a0fac88", "indicator--48ca2c49-bd3d-4436-8110-8c3a1f689eaa", "indicator--6a311298-0d0a-44a5-bb56-50fb46864bfa", "indicator--2df193d4-6474-4426-9e27-a28a9036852f", "indicator--00e8d6ac-480d-4fff-a254-f28d4e4a2420", "indicator--997fd588-7a7a-44a0-883c-75fe297fae9a", "indicator--fcc55667-a8ae-4ed0-a7bd-c75b8fb7fd9b", "indicator--c5909500-f4f3-4440-abef-7cc719136f8b", "indicator--767f228a-b63f-4fa7-b7b2-043d7377f0dd", "indicator--2e25a2a6-2e97-4476-8a4f-f3196eb5cb0c", "indicator--02d45db1-58a8-4ef6-bd62-5b9fe2b7563e", "indicator--97947207-15e6-4d5f-b828-8f56504cda19", "indicator--c8b0bd15-ad80-435d-9031-b1f70451133f", "indicator--851a7ae2-8998-4e88-afcb-2fe5196688d8", "indicator--3a4e3ee1-9792-4657-a81e-8e0cb7ae3151", "indicator--953a72b2-d598-4217-a2b7-9df1269ac4b1", "indicator--c61eca1c-6746-4889-92d3-da018fc9535c", "indicator--da24996b-1c81-46cb-98df-1ad2c80a7e6a", "indicator--b792ef96-dde0-4226-9320-c003b1633666", "indicator--51b8c5ff-6702-45d9-8614-d537a9602f53", "indicator--3eb35b0e-2b85-462b-9efb-f5bee909f658", "indicator--4aae013c-4367-4aba-8d9c-70f31ceb25b2", "indicator--dce92d1a-baa9-43de-807c-248772921a9e", "indicator--be96884e-b51d-4e3a-8980-6d1ab1218802", "indicator--cdd8152d-cd72-4274-ad7f-f4b9205b10f2", "indicator--c5cd7440-95eb-4998-8fed-77783f947a04", "indicator--2bc7030f-0383-4d57-93be-6315b59a7a69", "indicator--f028f90f-7804-4780-9f95-8188c9608fdb", "indicator--d7f095f3-3152-41d3-ba04-87e3fba7212e", "indicator--af6a859e-3046-45ee-b940-abc33fdeddfa", "indicator--926a22fb-a30e-4d13-9f5b-dcd97fbc83a9", "indicator--e8a31a0c-4541-420f-bc99-32a7c9450075", "indicator--5d22eddd-eae8-4974-a9dc-07d523b35b7b", "indicator--e8fc519d-5649-47e4-b3aa-c95572f9dd34", "indicator--8cf9ff79-eca6-45c9-aac1-60dbe51bee17", "indicator--725d4a7c-8287-4ab3-87aa-f30918755d6c", "indicator--4909cb59-78e1-40da-bb30-85e4c7e3f08e", "indicator--244e4a19-5f88-4ddd-9692-865502f0c804", "indicator--1aa4069b-e9ac-48a1-9eb1-8ca357d203f4", "indicator--0958aca7-77f5-4fef-b2b8-58cba1dd7bd1", "indicator--822ca7f9-cc91-4444-944b-02975d1f6356", "indicator--bc8a5009-6b9b-4dc8-b68a-649ab1751329", "indicator--50e62f96-607f-49b3-a4d3-9e0d4c598a3b", "indicator--f87674b8-3a74-489b-bcd8-5bf6daa56656", "indicator--2130bf3f-61fc-4664-a638-1e8c48816317", "indicator--92e0c345-cb36-4419-8e1d-ee4cc4c682a2", "indicator--d9ba8f89-95ee-48b5-980e-9f8e4af819a5", "indicator--0554ef00-e5ce-435a-97ef-d91a47c6260a", "indicator--3025f07b-6564-4ccd-9ed0-035bf044986f", "indicator--43c52f4d-5af2-4b1f-baa9-e823cc69835a", "indicator--ca205833-4073-482c-99c1-9ead05c2f46d", "indicator--dd62282d-a7fe-4fc7-b645-dd9838cf260b", "indicator--200a3dfa-c719-4f56-97d2-0b5eb9b4de4d", "indicator--fca21028-cbfe-480d-b952-b3e45e09c50b", "indicator--548687b4-2a38-49de-baf2-c56ad4f61cba", "indicator--0955beb7-7a8f-4f39-9fda-448678176fe5", "indicator--d8fa5ff3-c4d0-4818-9e21-3f29de595a17", "indicator--0986cddb-88b8-4e9f-90fc-405facb5886e", "indicator--757ef555-a53f-40dc-80ad-82fdffd744dd", "indicator--0e43f71a-26a6-4041-8e10-9a7752adf4d2", "indicator--f7d9ef5d-822d-4c87-af5d-2dfefe465ed7", "indicator--d24e55f9-37ad-422b-84d0-1d400cd135b8", "indicator--fe30e64d-6733-4cd8-8477-fbc2decf0b7e", "indicator--ab15c697-62e8-4369-b028-49c75ade364e", "indicator--3a06f56b-686e-4a59-9708-38afcd508fbc", "indicator--9c738eda-b7e5-43f6-971c-dbe7eb89e5a1", "indicator--3d84f1a0-dbf1-48ee-a6dc-12f9a29bd7da", "indicator--4450f76f-2ac8-4985-8daa-550a8bbfea52", "indicator--fdfe4b11-7325-41d6-9e75-8727d9663a22", "indicator--d35c3aa5-e9b3-4fcb-8b95-e1acda64d366", "indicator--79b0339f-b256-4416-a887-8d64fab7bfee", "indicator--96bc0968-89fb-4c1b-b2df-700c091fed2a", "indicator--165c3fc3-7add-44cf-85c8-bc02335ad8d0", "indicator--072f0e6b-1451-4619-a580-2fd1a2eb2c45", "indicator--b998c420-35a9-41a6-9ec4-9f4db32a1f13", "indicator--bd43dbdd-3b51-4fa7-8283-b006776bd325", "indicator--0b1fe332-904e-447a-932d-53c28215f5d8", "indicator--beeadb04-1194-471a-91fc-580e4d74b60d", "indicator--f7840b6c-4cce-41c5-bd7e-d88cb2138def", "indicator--e70aee5e-f35f-4e49-9d90-93881877652f", "indicator--0d81b70e-11ae-4cf4-9331-5fa796d1d08b", "indicator--69a00f7d-75fa-416e-877b-4daf8f84d8f7", "indicator--ed71a87e-31a0-4259-95f1-2c438116a562", "indicator--4e530359-17e0-490d-b1d7-086fb01faf36", "indicator--e4ccee41-b715-4669-9044-655d2f91aa2f", "indicator--adf8fb5d-a342-40bc-b04e-221a7ef93b2a", "indicator--fef974a8-7bf9-4fbf-8623-8d7d760d7f26", "indicator--74e800a7-4f58-41b9-929b-fe148b30ca29", "indicator--aafa2dee-4079-4b9d-83c6-2e6cac1727ba", "indicator--eaa514c5-0f8e-4c8e-b288-ee82a6b3b37a", "indicator--1b2055c0-202f-4fca-ba18-266cc0a402f5", "indicator--971ed5e9-59cc-4a6d-8f4b-c550332fd172", "indicator--b051aa80-38a0-4a38-9800-faf3d77bfcea", "indicator--797d1485-6626-4e4a-bacf-90b6728407e5", "indicator--5c922816-5a75-40dc-8ab7-0a56ad502ea1", "indicator--401266c2-709e-4ea7-8ac0-ca34c2ef6e2a", "indicator--f05140de-3620-4a62-b826-44bce135262a", "indicator--6ffe6d7b-b834-416f-a9a5-493adc5ba114", "indicator--1d2fa3eb-9f70-430b-9f40-825e909d1e32", "indicator--22e8b123-90f7-4f00-91eb-0818e933aa48", "indicator--d87275fe-00e8-48a4-8e4e-1e8cf01fad2e", "indicator--ffa44537-2eff-4f28-a492-67a5d2ed59b5", "indicator--374ef751-aef0-408b-bb83-9c32834e480c", "indicator--47734838-62ed-4ffd-aa9f-ebbd48402fb4", "indicator--d668e931-0b45-4357-8838-974925a5c809", "indicator--f6161847-74e8-4523-bae1-a1ae57a9c880", "indicator--3f38b68c-8a80-40f6-bfc0-4563bbbe5946", "indicator--ffd5b00d-3517-4b36-9762-eebd2b3a15e1", "indicator--3933b89f-dd7e-4dba-9211-101cd74e57cb", "indicator--cf09ff5b-1112-4a52-a24b-0aabcfc4ec8b", "indicator--c5a7924b-ac9a-4a20-9d21-c1d3e70f9753", "indicator--ce324494-34b6-4137-82f6-9520818355c2", "indicator--abd34ab4-c5ca-4ed7-80b0-8639b813fb5f", "indicator--3eed87b2-b979-4eb0-a641-0cd4799e21f7", "indicator--e62f4349-3897-4606-a422-72010a04219d", "indicator--f60b47e5-06d8-41a7-a87a-604b006880bf", "indicator--c47743bd-fb65-431e-9317-5094dbf19271", "indicator--437ecd70-a701-490e-8cca-e9a0c8ac8891", "indicator--e7bbf358-909f-4be6-a659-b6123b837635", "indicator--9dcd1213-9c0f-4add-81e8-a9592fbe18b3", "indicator--e02b12e8-a648-4e21-979c-179a6f4eef57", "indicator--6e01e3e0-4e8f-4215-a17f-f6764fe49931", "indicator--cd82af05-a7f5-463c-a8c7-937994220ccb", "indicator--b5e233c2-8bbd-45d9-975d-e8e8b2a440f4", "indicator--2f0127be-19c4-45c4-bf09-d50fd2063725", "indicator--8b872eac-93c3-475a-858e-899bb184751b", "indicator--3914ca89-8aa8-4980-a9e9-dc764f77aadb", "indicator--96ad7499-a825-47fd-b3e3-a10147780b4b", "indicator--7d456509-d2b7-459a-9cf3-c39f54957bdb", "indicator--7a2ad140-fac9-40b7-adb2-2c0695e7dfd8", "indicator--6b44a27d-02e2-44ef-b790-cbc2b2e45edc", "indicator--4d69b8bc-da6e-4d5a-bcfb-b073fe12ddf1", "indicator--519e16b6-7d04-43a4-98ec-e239f0c2b37f", "indicator--0892cb7b-5dc6-4f3a-b436-b68ccd8f4511", "indicator--dd51e47f-f92b-44e9-ba26-435db5e588a4", "indicator--bc317d5a-2bcf-48aa-b9a4-f1c02479f78f", "indicator--cbc96e9c-1ffa-43f6-b5ab-c598dadabe34", "indicator--69136c09-5d4e-4d05-a51b-70572df09772", "indicator--07f6be7c-6605-4f68-b77d-418d9b609025", "indicator--c76f8e9d-e124-468e-8838-c63daf12914d", "indicator--14bfe4d8-dcc8-45cb-8285-97459314a641", "indicator--4277d4de-d356-4b43-8290-e13f4a6c63e2", "indicator--36ff20c5-4b2d-4b50-8d69-89cc44969b0a", "indicator--93349719-b9bf-4121-8c7c-335d6b0c898b", "indicator--fe1439c2-0f44-4154-ab7b-753233946062", "indicator--e53600d8-c326-4ae0-98c4-03373667798d", "indicator--a36aa6a7-8418-489e-a0be-dd1886e46080", "indicator--ed5d363f-ecf3-4de5-8824-0644eaf2de87", "indicator--816a95f8-aee9-466c-a3d1-c906c128d198", "indicator--36dc79db-dc36-4a0c-b186-5c44b311a176", "indicator--6372bbf6-6cc4-4b3e-bbfb-80860bfebb97", "indicator--dc0a2628-bcd3-40bb-8037-d9054a9f40c8", "indicator--4af68902-a6a5-446b-8ae2-976e0bd8566a", "indicator--4f44044f-5249-4adf-a9df-ac15cfe3465b", "indicator--b758d99f-16e5-4fde-b085-186fc2e8922a", "indicator--e4f13365-323a-4adf-b138-d30b6018ced7", "indicator--2f489e24-5f77-461d-ab47-43adf8dc9c8a", "indicator--75df705e-63b4-4d43-a266-38bfbc29d42c", "indicator--d6d983ca-ec70-4c66-8a9d-be53f7661d9b", "indicator--db51f51e-ad9e-468c-ac4f-dbea3c46ce62", "indicator--07733bdd-010d-4b34-9139-b7d41885455a", "indicator--1775b625-2aa7-40d3-953e-f162f769050c", "indicator--dca2a799-4d01-48b7-af96-7d78222f3287", "indicator--e302d94b-d879-4686-a4dc-e0b066f52d3e", "indicator--9ed96b31-3952-46a0-8c7f-a9494424e0fc", "indicator--788bc933-1268-4642-9179-09368697b4f1", "indicator--ce7fd39c-c6f1-460e-ad20-cb23fdc0b299", "indicator--5f0d31e2-8e91-46c2-a69f-e7b4160c0e0e", "indicator--db18b1e2-9b55-4276-ae09-00ff70245a8c", "indicator--401a8fc9-0312-43a4-ae29-e7cf255b9325", "indicator--d44cdf05-1436-4cc6-8fb3-3469eb7e1bfa", "indicator--51d05927-2e68-412c-bfda-3cb053e9c0bf", "indicator--ff6660e5-f718-4359-a14e-4ae7d89e5213", "indicator--2ba3a2ea-892e-4fb0-b8f1-2f5e8423d3bf", "indicator--b5527e86-721e-4cb4-90bf-c04cb810f4a2", "indicator--6f98eb2e-5e2a-43bd-b42c-146dc4203267", "indicator--12af4390-9305-478f-baf9-18487c8469d9", "indicator--15d402c9-d3fd-42ee-b4d2-d3fce33ff9d9", "indicator--4be2b821-958d-4ec4-8131-ad88dde3109f", "indicator--dcabf318-5bc3-40a4-98f1-083557860eb7", "indicator--3587b2c0-3a30-4c67-b25a-bf104742313f", "indicator--cf7003fc-7776-46d5-800c-7c934269a9d2", "indicator--1e10ec53-af76-4065-a931-a6cfb79c6fe9", "indicator--4eaa84bf-3ef2-4c25-a825-81b1874fa52e", "indicator--bf54e291-b80c-4d95-83aa-b811e95667ca", "indicator--a708c02d-b658-4aaa-b486-91c667bfd90e", "indicator--667b3b49-4b71-40ac-b373-43b19e4f443f", "indicator--b96f36f2-4f7b-4a93-a59a-46461d7c05c6", "indicator--2f96cb48-844a-4a01-8e6d-de57ba75a5ca", "indicator--a294d749-44a0-4397-aeb6-350b4594af50", "indicator--8fd27d10-6a76-430a-bfee-95295f7589cb", "indicator--a41e5499-3601-4230-83fe-3b9b60b4d27c", "indicator--a283769d-770f-420f-be8f-9c8e6dc1cf5f", "indicator--155e6812-3b00-4fed-b7a2-c3beb78c47ab", "indicator--7cbc1806-6972-4f7b-92cb-4a2800aae451", "indicator--27de6ded-ed57-4638-b311-71ab41d8366a", "indicator--7b23055a-bfd5-4203-94e3-7ed8be7024e0", "indicator--d61de657-2bbd-4ac0-bfb7-70a4fc6b9801", "indicator--d37b8a99-aa00-442b-8be1-dbc6689bcddd", "indicator--a19bbc17-125d-47a0-a526-9d3c88943182", "indicator--b17deb08-0bca-4796-8955-82d13192af30", "indicator--44482146-ec0f-43aa-901b-eff1e79839c2", "indicator--8c905bd8-232c-4afd-9cfb-bc61c8a358b9", "indicator--fe29cc6c-ba8f-4b56-8985-566bc05e9593", "indicator--2e48a8ef-f1d1-451a-be6d-de5082d90f94", "indicator--1086aaa3-ab96-4953-aa5b-3d6d708e0dcd", "indicator--99a328e2-75e2-4ea6-b478-438feb9811c4", "indicator--c56bdd39-92f0-4963-8554-308de5a87299", "indicator--75d912a8-f583-408d-ae82-80e3821a68ab", "indicator--cdf2f5ad-27b2-4816-8401-f02136bda436", "indicator--1ff1f9ab-03ee-4809-957a-9326f38ba636", "indicator--becd67aa-6f3a-47c9-8657-3c43ca350c3f", "indicator--fad6ce20-e1d8-4ead-a759-b02faeda9b1c", "indicator--ade270a0-157f-4bcd-b963-0225a72f08bc", "indicator--e46aa5cb-c126-4277-ac40-c540b740d5af", "indicator--968e22f7-d20b-4355-a330-7662bd30388c", "indicator--39a2eaa2-9a71-4b9d-b94d-8cdb53a968aa", "indicator--5c53efbe-ce61-40be-83f6-66e8e901a11b", "indicator--4fe2f9cb-bbad-4a7f-af30-a33764766833", "indicator--314c9fa2-df37-471e-bff1-c00f84233a2c", "indicator--40c688d6-cbc2-4263-b436-d2da0d0e0f72", "indicator--cadfbfc1-4dad-4b87-a252-37173fee7ffb", "indicator--d7cced20-87a8-4ff2-a098-4a04d2dfa30b", "indicator--68e53276-b1ac-4ea6-a964-0dab8675efa4", "indicator--3c0c0e2f-02fe-43a7-b529-c05d73d43bd0", "indicator--39c3670c-608f-40dd-b0eb-d87ca2412d7d", "indicator--3ed0c69b-31e4-4b0c-bc20-69a9a0495ee7", "indicator--04f30b99-1b80-450e-94d4-669d82c4784b", "indicator--4f8900a9-d132-4307-b3ce-48ebd06f3c4c", "indicator--ae917158-e965-4565-a098-f0ea343cc4ce", "indicator--7df06c4a-951e-4dd8-a7b4-d345ddef5022", "indicator--4f4f1726-87c0-4528-9929-ebf5b127d8de", "indicator--cbe03c64-9387-405c-9e89-9ba9e67ae2f1", "indicator--51378ce5-73d1-4509-88dc-9884945b550f", "indicator--b8c15000-81f9-4d55-bd67-cbd9c9f3b394", "indicator--455ea0a5-b62b-4c87-adf3-a80083219494", "indicator--3f5580b7-2138-4056-ad04-3e8ac6dd9bf6", "indicator--30d663f8-3c1a-45b9-be14-afdcb880e131", "indicator--482e6657-639c-4f1c-bc26-824f62bdb337", "indicator--3c47f714-1c94-47db-ade8-c0890977f67c", "indicator--40e968c3-c042-4dec-9c83-95f9ae473aab", "indicator--29718f04-ab09-4cf0-8d66-8a7c41e76e7d", "indicator--b04db508-e26f-4ac8-b71f-f10714e691ae", "indicator--7c31af2b-7bc8-4b85-ac71-4071377871f7", "indicator--9e8177ce-721e-487a-b7a3-319be559d397", "indicator--2491b7a2-e574-45dc-9633-37e72bb81e84", "indicator--693059f6-9a1c-4e20-b3a8-d5ee92c2a25f", "indicator--71e4693e-252d-4f7c-83df-ed88f1a2ed4f", "indicator--abcd6824-9212-4641-966a-af93f1fe5af2", "indicator--0ea41161-8f5e-4c4b-8da3-9d411c34afdd", "indicator--c99b6ec5-2fcd-4d8e-95b6-193ae16b3e4d", "indicator--3e867e56-0161-4ae3-94cc-a768a02973da", "indicator--2750b976-5256-4290-811b-d4538e7ac364", "indicator--f1f88889-413f-4ff8-8805-84d42269ddee", "indicator--c5bbc22d-87c6-4829-b05b-c2a647e2d60e", "indicator--a9284434-6de9-4183-90b7-41a0563575c4", "indicator--dc2b1384-5e9d-48b6-8139-bd181d522ccd", "indicator--b4994dba-6c8c-4edd-8a05-ed3cfe82bece", "indicator--d088fec8-f2d6-4265-933d-9e3eeb37ea90", "indicator--777c6bed-1348-496f-8725-cebac283ad16", "indicator--97bed082-49d0-4ca7-a872-4435f0266fea", "indicator--1663aefd-c15b-40aa-8904-dba87194b76d", "indicator--50926c49-eea2-4f98-9fc3-807653f11ed1", "indicator--114e3ec6-7a82-40d6-8a2b-31c7352b912d", "indicator--a98d7964-f67b-4fbd-97f9-bd6adcc5b921", "indicator--4e54b559-247f-4801-8df7-935571a297de", "indicator--ade2e621-9a16-4abe-9c9c-0d53831155be", "indicator--159ae412-2bf5-4963-b0df-9fea688857a6", "indicator--dc3060d5-8ff6-491a-8cba-dd72de806e7c", "indicator--16540fb7-90b2-4dba-bf3d-59a38c25d2c4", "indicator--89c6ef23-999f-4b61-9013-a35364fd5f5c", "indicator--214af73b-775b-42e8-8c06-e306c658e5d0", "indicator--43d4568c-f4d9-4f3c-918c-5ccfbf223e28", "indicator--7945f526-30fb-477b-a7ae-497062ad1dc5", "indicator--e1816685-ce88-4d87-b2ad-d729c940b719", "indicator--d6a3f457-1855-4cd1-8179-10999a49fbe7", "indicator--aa169293-105e-4e12-81c7-27ad8f372fd9", "indicator--38f6a14f-8d0c-4bb6-8e8d-1ca56403569f", "indicator--75dc9f91-7375-4ff8-8efa-273a1a3f9f58", "indicator--6de0a3c1-fd73-46ee-889a-3c2f44b4d333", "indicator--f9f4e89f-65cf-49be-b522-223f29c737d7", "indicator--42ac5510-29fb-43f4-a246-b6f9ad8fcd52", "indicator--26aedeb0-da74-4198-8a8f-f3f1608b61dd", "indicator--38cb180f-7c56-4e83-9106-c9aa1eb6cacc", "indicator--61b8f7ce-5639-40fd-9ad3-a067a41432c3", "indicator--00438ccf-99c7-43d1-8276-91ef445e41b0", "indicator--0125f803-ced3-42d6-abc6-5dced9930672", "indicator--1840d2d2-2dbe-48c3-b2d7-2439679427b8", "indicator--2b66a0d1-7f0a-4664-8327-2bc71632f4ed", "indicator--1513c063-5867-4932-99b2-315f6de5953b", "indicator--a7ba967c-f85a-4c62-b57f-d3926d0a7ff6", "indicator--6acb68f5-a597-47c3-94ea-14031ef882e0", "indicator--21ed500f-40b3-47fc-9ee9-bb301a35ac36", "indicator--b164b3e0-d7d4-44db-8ee3-d416260549ca", "indicator--04e7ecd6-cc63-4dd6-8da7-9ebbad737718", "indicator--ccfcb00a-9dd8-482a-9188-d08c95840fbb", "indicator--5d7e21d2-754c-4903-b678-b18786cafd83", "indicator--3b2325de-f076-4f5f-b8e6-416b83ffbf38", "indicator--e6c399ce-ef26-4499-b9a2-ffd0a20c338a", "indicator--4d77dd05-2fd9-4370-80fc-93a647c17800", "indicator--b6f59c1c-b681-489e-80f0-678c19873db6", "indicator--6aeaf43d-69c7-4d36-bb1f-a4bb4ab030b4", "indicator--43294aab-225d-448e-967f-b019dcfe6654", "indicator--448bc58d-6705-4ced-ace1-a98bb5a3056e", "indicator--ea0aa2ce-a26a-40ab-901b-072254664d55", "indicator--62af3855-f650-4c02-9de1-f4b669000d08", "indicator--e584cc86-6eb4-423c-bd49-2716500a6c8d", "indicator--e95f1445-9b64-4764-a87f-fadf5fa50b23", "indicator--5386715d-b0c0-424f-86f3-4aec62e3002a", "indicator--8fd1947b-43f3-427d-b01c-98f644d9d8ec", "indicator--3c0f5358-850a-4986-942d-87fad88898e5", "indicator--7bdead80-0ff4-46ac-a4da-f45bf64f99e6", "indicator--b8dc5e27-0d0f-49a8-8ff4-c2c7176f049d", "indicator--8dc06775-420b-4ae2-a282-933d689ee2a4", "indicator--a8b94f47-21ae-43bc-a75c-c51437864b67", "indicator--8e875975-b069-4963-af1c-cf037e8d9716", "indicator--9eabc045-5263-43ac-9aa7-e586485b14ab", "indicator--dcbd5a21-8fa2-4e4c-af70-ec46fbbcbe33", "indicator--edeb624b-d0a0-47b0-adfe-ed8359a3ef7f", "indicator--58bdda49-c4b4-416f-8ba7-1197edc6dc78", "indicator--136038a7-45b2-43c0-8e55-5eb0df17687b", "indicator--8164bcc6-0254-4ae9-9ffa-9365438f1c09", "indicator--1a884557-1e21-4e04-938d-a8ee87923388", "indicator--00acbfda-5aa2-4442-9932-563e645b5d56", "indicator--187be7b5-f317-40c6-9cc7-98009ef54ea9", "indicator--6acd23e3-258d-40d4-ae30-45e342b5719e", "indicator--f250f604-712e-43eb-920b-6c5be4fa13f1", "indicator--2aaa06f2-5759-4972-b3a6-6ecf9b164125", "indicator--fc6afb8c-1f07-4cae-a9b1-fa7f67358beb", "indicator--b53df380-812f-4ae7-bd58-095504a3bcc4", "indicator--21190b57-7f2c-4fc4-8e14-f10eed4a4059", "indicator--93fec50a-895b-4075-9aa6-c00b9aae5099", "indicator--bc5cc3d0-0b5c-472a-8e14-9518293a4f87", "indicator--1a6b253e-9248-4213-839c-43ed29d6bfa7", "indicator--0b320595-45ec-4837-814f-07a6a8c333eb", "indicator--2f6ed1ce-7ae1-4ebe-a218-303d165a756f", "indicator--cde19f39-be47-4bd4-9884-6538595f6676", "indicator--aec727ab-4853-4897-9b5f-f0366246132a", "indicator--db0748f4-63a1-4f85-b3a7-27ef77c59ed7", "indicator--9a7dc968-6ca7-4901-a749-cc1ccb6b2051", "indicator--31224b54-9a30-41df-b86b-da69ba25c36a", "indicator--90afd3fd-0632-4455-8f7e-77218f2e7c80", "indicator--42146df1-eaa0-4ec4-89cd-d1065f388798", "indicator--e979c966-b8ef-451c-885e-78be30431f78", "indicator--0665f6c9-8175-415c-9753-6f955a4dc650", "indicator--b1e3c45e-5c43-486e-a01f-f033078b1d4e", "indicator--e2d2354b-0499-4b0b-9d06-f8b74bc28ef7", "indicator--8a5fb78d-5951-443a-a1b6-f248215dee29", "indicator--6b777778-2222-4015-9c4c-4b9b5d6a5452", "indicator--7e6bb0ce-8c7b-4f75-8b23-967e8d4780e6", "indicator--551b5591-1c17-461e-851a-9f8730411f59", "indicator--46a51091-3a1f-43a2-9745-0285b8b22738", "indicator--c2685bbb-48a1-4adf-9ef2-39ea5059d1a2", "indicator--fc9719f6-6890-41aa-abfd-48620c88e915", "indicator--bc03db73-825d-4333-aff8-560807ec205f", "indicator--4bf5b7b6-49e3-42e2-a52c-ee1be22f05e1", "indicator--3ffe561a-d430-45e6-b15c-ab0da6822f5f", "indicator--5bf826c9-43d9-4971-b504-989a4e89fc6a", "indicator--c6fbddef-c7ec-46ff-a6d3-79d6f5e951f7", "indicator--bdb6a8f3-be71-4f3a-82c0-501dfbd1bfd8", "indicator--b42f9241-13f5-47d7-8763-fceaf5834009", "indicator--b520cd10-a5c8-4181-8dc9-20a8a19ff779", "indicator--fa9644c1-81ea-4c37-9d7b-ae1caa8861ce", "indicator--8c090bdd-d1a6-49e3-aebb-b7c2e8713417", "indicator--50c1fdef-4cbc-4c82-8d1b-8f6ab0b197d4", "indicator--878be2aa-6cc4-4b6a-ae19-4e92c1205531", "indicator--6ba51d46-1565-4836-8902-5c5acda83a70", "indicator--0678bcea-bb04-4746-826e-9811dc80b13b", "indicator--549143bd-3ad0-4bd4-a9ba-573f906e5b07", "indicator--2ecc098b-c238-4bab-845c-1020fa3a4694", "indicator--83181f06-9352-42d5-bbfb-38d492f75c83", "indicator--69bd0033-374b-4f5f-927e-0591c08b63ac", "indicator--58b112dd-df2d-4571-97e4-8cd440d2849a", "indicator--82281fdc-de64-4d7a-89d0-dc9e2e3f8526", "indicator--fbca5919-115b-45cd-b00a-d56588be8b0a", "indicator--44e49bea-170a-4147-b9ee-0da54a3b69d8", "indicator--96bd0711-1972-46cb-90e8-5e650f8167f3", "indicator--921a0f03-36c2-4d11-b078-1022e72e6b3a", "indicator--0beaa768-da53-4416-8093-3ca4b7b3dac8", "indicator--694b5a57-65b8-4eaa-9f8c-2e335c946c84", "indicator--07d16379-6b0e-4720-9288-f5ba66fe2405", "indicator--2d3fac7c-7986-47ef-aeca-70d30d0afa3d", "indicator--c9e35582-4850-4599-a968-2176ff85b95e", "indicator--d93a435a-a243-4468-81e2-7ff3f7e9dcee", "indicator--34bf20e3-27c0-4385-963f-1da8d558a1b3", "indicator--eb11c230-0118-4f7f-9348-bca62ae6891c", "indicator--2fabb654-911c-4e5a-b7b3-47af3ff6a056", "indicator--2e0de455-4417-4e98-a4fa-0f98c66bbd68", "indicator--bd4a33bd-e0ab-4375-baf7-cfee1b3528a3", "indicator--3d0febb0-adad-46d3-9d47-6c1839a9728c", "indicator--503dda28-3706-4ad1-bad5-9fcabbf2f49b", "indicator--63ce6d0e-7912-4975-95c7-001ef7715eda", "indicator--8c2b39dc-54c6-48d4-b589-be031587b6ff", "indicator--c9597252-347c-41f4-bdd4-e403b385c858", "indicator--8282ca54-93f5-4319-aaa3-df2a1062dd33", "indicator--9bd9d6d6-3444-4d1f-893a-0b41b735a37c", "indicator--a49a9e1a-3589-4870-a80c-0bc47c7312c8", "indicator--89410515-9178-4c94-8404-0575f9bbccc8", "indicator--4e55af39-7a03-49e2-a8bf-09118cdfd0a7", "indicator--8ebfdf9a-6a32-4d40-82c5-69c063087891", "indicator--7f2ece4a-3829-44ae-9a4c-4485147a85e7", "indicator--2fb62011-b60a-4353-883f-f8c621884407", "indicator--5220cb70-656a-430f-b9b8-0977d0a6e92d", "indicator--8bf5cd57-a64c-44a0-acce-5d5ea883be10", "indicator--d6f70705-3723-4885-892b-769280d71b95", "indicator--d7d2a205-0fca-48b1-8d0f-b0e93d8b67f4", "indicator--24ff85dc-2c2c-45cd-9a75-e529d2a08b82", "indicator--09502b48-cccf-4742-8a4a-50cf0aa62eb3", "indicator--d7cd9f2f-4e70-4b85-97b7-7798b9d21f5b", "indicator--bc643ef8-f5b9-4a16-8052-de87022056f4", "indicator--48bdd55e-4bf5-4e42-9b86-e928f5b2f1e1", "indicator--2ce1e8ad-0ca6-4db0-9ce8-0f3dcb20b964", "indicator--99ff0d6f-4d30-43c1-a89b-c1a2502655e4", "indicator--0aa92ff7-8f43-40e1-a82d-68453e046b4b", "indicator--0243d9f2-e451-4b2a-bd48-417fc65d1793", "indicator--e2173a1e-8aef-41f0-9ed6-39102f7ed738", "indicator--e4b538b6-5101-4ca0-88d6-e5e21a6dda67", "indicator--8bf04ff9-63ee-4b35-a1fe-9ab9e5594e41", "indicator--d272b010-8225-4bb7-97c3-b61ef2b18fa1", "indicator--9081b7c8-5914-42e0-9435-007860dba391", "indicator--ca92d24c-5d4f-4e8c-9e08-725c0cc54fe4", "indicator--1ef0e54c-4028-4bd6-8be2-fd35f4a2dcf6", "indicator--e07eaad8-73e0-4346-a2e9-a22cb58b2675", "indicator--a2594a39-e6f1-4aa7-ba84-eadaeebd7361", "indicator--3e8cfe10-ceb0-41d6-9cac-132579e3fe3f", "indicator--e3f3b8a2-e3c7-4fb8-81d8-a2408a8b9c01", "indicator--a3ae9fae-b990-40a9-96f6-5b35158ca6be", "indicator--ca13ebf5-1816-4214-b1d3-477032c7214f", "indicator--55e76d70-6283-4046-bed3-b215b63167ac", "indicator--7b3e870e-4f9b-4a6e-95b6-d7a60df3054b", "indicator--d3988f10-45ed-4fe2-8a5e-fad5b332aa16", "indicator--41a52aac-248b-4bd0-99bd-8fa22a609cbf", "indicator--e8a3e987-0273-4fe1-bc0e-aa9e729c9d29", "indicator--9814eb51-2f5a-450b-a81c-e9c9502aba7c", "indicator--e90d6dbd-9491-4628-be49-dbf9dd6f075d", "indicator--b08507c9-b1da-49e8-9b61-fe471ac90f5c", "indicator--dfa475a2-757e-4604-9c8f-b8ccd8f14a65", "indicator--f5f36d5a-1e3b-4214-864e-c0f114586e39", "indicator--4138521d-400e-4377-91c4-0c2f38952ad2", "indicator--7187ded6-0990-4890-a0a5-891dc4e321fc", "indicator--db0a4139-cb55-445e-9ddb-5026f9ae7cbd", "indicator--dca18dde-769b-4eea-92e9-c154ba24f43c", "indicator--befe4e88-6d3d-4702-ae88-407c0da37480", "indicator--3934bfa0-6b08-4912-b6e2-1fce113dc14d", "indicator--a9312ec4-4ced-4fc0-9fb0-bd35642032a2", "indicator--1484421e-a449-4a77-a1db-bae02442a964", "indicator--a2399455-8b4f-4ff6-827d-725ae52ad35c", "indicator--7ae3146a-6b20-4219-8b2d-980fcc290e92", "indicator--bb884669-1981-4d03-bd6c-064a5152b263", "indicator--b5cfdf6d-21b7-4853-a4ba-5947a78e70f6", "indicator--93e80944-cf43-4c16-bbf7-f413aace3a57", "indicator--e410a5a8-9bba-4c91-8d81-83ef29319d74", "indicator--2244d08f-3f0f-46a1-be4e-58183ba4cd44", "indicator--93016a41-92c0-4145-9a77-293b2210d8c3", "indicator--da755b96-7457-4d98-bd76-0351af7751ff", "indicator--f182d5ef-9b2b-4411-951d-80d638bceca9", "indicator--3693605c-e492-4158-8a36-d9fb5cdf1cb1", "indicator--ce9dcb6a-9238-42d9-a3ad-9f09daea7ed8", "indicator--446af704-3f02-4d68-9c4f-f4a4f0b71461", "indicator--4df096df-69ab-4257-b833-fbba7a84df48", "indicator--4aed588c-77f4-42c7-9fde-d49d71d5707c", "indicator--c8c67484-19e6-4823-8799-fae6788a3e01", "indicator--51e003c2-1dd1-4e37-b63c-d550c6da64c3", "indicator--c366df2c-b7a7-4237-a6eb-5e5763e659b5", "indicator--c32dcbde-4a9c-45f6-b237-51390b93b575", "indicator--e9a7cf9e-742c-49eb-aa00-cc4fae2b8177", "indicator--1b5fd4e1-0171-4aa4-b463-3629ca06e56f", "indicator--c9788f09-140b-4381-8c72-21189e1fa966", "indicator--c235a4bf-bff8-4d12-9af3-c1c947306e9d", "indicator--fb6f7e23-917d-4b79-a60e-a81f4466ae40", "indicator--1ce84ec8-d179-42a2-9203-eb69b60c30ab", "indicator--5edd2357-8c70-42b2-9165-1bedd62752e8", "indicator--85b476a8-2f6f-4e66-8fc6-6ba0fd9f50aa", "indicator--4715a4bf-e541-43d3-9100-c3ec2e66851d", "indicator--1db2a5a5-391a-430b-8591-b4646b3359ec", "indicator--aa5a248d-f7d8-4b78-ae34-367e11fa057d", "indicator--745f3cb8-6842-44e7-990a-d543da198a2e", "indicator--d5219d47-1880-4621-baba-8895d7eee26f", "indicator--b85cf74b-c709-417d-b377-fafbb075e0c7", "indicator--1f4d9ec7-bfe4-466e-81a8-449d36f82600", "indicator--58909d4c-99b9-4766-a498-e30cc109a414", "indicator--f5bf083f-8342-4efd-a94c-e0c8eb121549", "indicator--7a12decc-5224-47c1-9376-428020d8c840", "indicator--09d12b43-3ec3-46ea-af59-5b951b2cf0ad", "indicator--544ae400-7c2e-4f10-a368-f598090b6205", "indicator--451ff2c2-9b54-47a8-bd8a-3c6e3e6be52d", "indicator--316fdf27-733a-4307-b489-638f6c9559f5", "indicator--9dff25f8-c742-4f30-9852-5714e94820c5", "indicator--0af2e6d2-8755-4bd5-8b23-89e8a24e2c61", "indicator--2b431705-665a-4405-a769-ade25a48e147", "indicator--a3abe252-9cdf-4a96-90b6-f94f3ad19386", "indicator--d437b945-fb66-47eb-a90f-2b776edc991b", "indicator--1ab69cdf-7197-4538-960b-6009c0bea948", "indicator--f336547d-2e4d-4e01-a857-9f9c1ef40e73", "indicator--bece9c4b-d677-4ada-a142-11d77305bab0", "indicator--cc8cd6a2-859b-4d70-a8b4-8422735d6624", "indicator--8f659e74-2c88-4fe5-8b2e-6b1f3ff71948", "indicator--60f482d5-9129-419c-9ac5-b5f6e0fcfb27", "indicator--a527f519-85d3-4682-ac23-5d962f71eef4", "indicator--822b9bf8-e5b1-49bc-bb9b-0fd20403e0a3", "indicator--a523ab4c-2c93-44e8-ae56-ee3569bc1c9c", "indicator--4fcf74cc-09f4-413d-b8a5-987c485d9bb9", "indicator--81b46109-46f2-4bde-bda5-115b83b6d603", "indicator--1a96a35d-5942-4c4a-9d3a-5cecf7d9400c", "indicator--d40f22eb-7345-4105-9189-e744dd1d7877", "indicator--3ea1dacc-0122-4cda-8922-0a623360f225", "indicator--7d1fb709-a413-43aa-9b4a-06ea02e255d8", "indicator--c69e0980-a970-482f-8ee0-5c74fa778778", "indicator--310535ea-2fec-49bf-947d-da55046116ab", "indicator--1c7621c8-7950-4182-a554-87fbbe38757a", "indicator--7162cce8-7c8f-4999-85f7-3e4362e52747", "indicator--3b80c1dd-5b71-4420-a228-0d5f837334df", "indicator--276be746-9094-47cf-899a-4a75a96dd17e", "indicator--2ffc8a62-2e75-4f7e-8ff2-89ef3166765c", "indicator--8f7b4354-b190-4b6a-8c85-046b2361aac5", "indicator--a1928ec3-2088-4655-8c49-fff986e1cada", "indicator--d02ab7d3-8012-44c2-a87a-fa1a6fc8cd97", "indicator--56be2b84-7171-41c9-8d12-42e2534936c8", "indicator--b55ea360-eb4b-4e65-aa04-40f93f2e5ce5", "indicator--2cbfff40-ece6-4c00-9277-66826c1e3b11", "indicator--2eeac41f-ae58-407c-af2a-e61afecc0d70", "indicator--30701bc2-1525-4cef-9a1b-7d9e77f1e4ef", "indicator--9ddc43e6-cb21-484c-bd88-5e40ef92bcb3", "indicator--7c0ab50d-12e6-44d5-8d02-d1ec3bc9b28e", "indicator--9c93a9c6-75c8-4459-afde-e2f480ea0fca", "indicator--00ae7380-cd67-4bbd-ad4b-71898d3a2f7d", "indicator--9ceea52d-ef61-4f28-a052-ab80e8d33f8c", "indicator--757be359-395d-48e2-88d4-9bea61fb6ea1", "indicator--7538b9ff-e172-4e96-935d-0034ae27e5fd", "indicator--b8286048-04b5-442f-ac29-bb498bb446b2", "indicator--533d7003-a628-455d-b5b2-d85c671b3106", "indicator--b77645d9-2e64-408b-9dad-31d82b3c9e3a", "indicator--becf1386-b372-4eff-970a-59fa4b016a7c", "indicator--7d5df129-ea46-40fe-ba21-b6a03bebe6b0", "indicator--9daf4fd1-4eba-479c-8639-0390072394fd", "indicator--cdf994a1-73af-4c9f-a157-d5721c323d58", "indicator--e578d6ff-3fd0-46ec-9004-7c88a6f8fce2", "indicator--f6e35be4-7488-4d6f-a916-19611721855e", "indicator--23b8d438-4bf1-4190-b7f0-133d9c3aba4a", "indicator--f6da98ea-f8d0-42d1-989f-7e404191df7a", "indicator--e81dd91b-b87a-4605-b1c5-99cd8e810b91", "indicator--5ab197b0-0777-467a-888e-eebf1fcf9dd9", "indicator--c7c2c5b7-10d4-435d-89bf-760433511f2c", "indicator--47fe91b2-3b29-4c90-a90d-204b6557ede6", "indicator--4265b31e-a76e-431a-bba2-93dbc3863770", "indicator--b8d90a1b-e402-47c0-a84e-6d7005704fbc", "sighting--cc2b501a-b9b6-4354-9373-2c2b9e56d2af", "sighting--7fe31906-df9e-4337-a7f9-348a73934028", "sighting--12c5bea6-d529-433f-a367-1dc9c1c13a7e", "sighting--f72eda11-9252-4085-bb15-db1212e2a023", "sighting--2e91c093-1f37-4dec-953d-96ea102fd72a", "sighting--f8bf49fc-29da-44cb-bb9e-de072b59d595", "sighting--55174979-faf6-4934-bf72-991aac948e95", "sighting--288a22cb-07a9-43ce-bf77-ede4fcd22e67", "sighting--beb29463-aaf4-4385-bcb2-a3ccbb5a6c9b", "sighting--6a3d2850-b445-4977-97f3-2b58f6ce71a0", "sighting--ca026c2a-ef2d-479b-bf85-1f411ca6622f", "sighting--77e93ae8-8d41-4c22-9b11-a4d66c7e77ff", "sighting--cf183c7c-3ad4-4873-bca0-181913eba5c4", "sighting--5f548c6b-cc70-49f4-9a97-3ad66d3265bc", "sighting--59248df5-d836-46c2-81f7-18e0be5144fc", "sighting--283e027a-f89f-42b9-a3da-b14d1b2af18f", "sighting--8cbd4541-f2fa-4170-91c7-23cd77a84f52", "sighting--9be166c4-d82b-4889-9a43-35358a9ecdea", "sighting--2639dfee-d762-443a-a1af-d0b40e84f865", "sighting--2b13af4d-2288-4e07-9003-4bc10859f35f", "sighting--c045aa18-7d2c-4eac-8b54-47147b97eccf", "sighting--0acaf049-61c7-4163-a28d-9dd16adc1e46", "sighting--2324fd42-7231-4ab3-9c21-247f762a626b", "sighting--8a01b4ff-dda3-4036-b59a-05e00f25bbdf", "sighting--5762c431-d84d-42a4-ac82-2b4c798abe85", "sighting--085fecab-f340-4117-b9ee-604da1e1ae5d", "sighting--be75b70b-c033-4df5-b9f8-3c4f51f4c33f", "sighting--a3a15c40-0055-401f-8fc4-85fcfea727b0", "sighting--7572ede3-1d41-4e3a-83d1-2d6cdaf47dc9", "sighting--9434b9bf-4cdc-420b-8adb-06d47f9efbb1", "sighting--80e9a6e3-b537-42ca-b246-eabd18fa04e2", "sighting--4d1c3a26-f7ed-461e-8b9f-03c675372d62", "sighting--fa9d31f0-3244-448f-83c1-70339b265be8", "sighting--92c63fde-9ed6-4ffb-9e26-4be2d35b4a3a", "sighting--4d37399f-ddbb-49ac-abf9-0f7dbc9538ff", "sighting--da4d9a31-8c40-4a5a-a8df-ca241e2c9a26", "sighting--417bce1a-3523-4de8-a606-9d43ffe1fa16", "sighting--0980fcdb-c1d5-4535-bb06-6f3a07695dca", "sighting--cf1edca7-8924-4f6d-970a-43acf614fdf8", "sighting--767e6edb-89f6-4245-8cce-7bd58c994390", "sighting--c711e417-3e2f-4196-a789-16b0b815e945", "sighting--acf4d3ba-4d60-4f99-926b-c9860044a9d3", "sighting--2152dd70-1e51-48cc-8bed-f3956d067d42", "sighting--326f4579-6371-4112-a771-aca9885a8cfc", "sighting--bc3977b4-09eb-4f75-9f4b-3c1127b8e5a8", "sighting--94b225ea-5ca5-4d74-8246-076b9855246c", "sighting--c09bdaa4-68d7-4a49-a382-21891e3096af", "sighting--4bfb6b7a-0e65-4552-b645-e48e84d9f88c", "sighting--a579a2af-6f78-4fe8-9775-fd75d2ca1aac", "sighting--43b8c093-246e-46af-b822-b7ef60d90948", "sighting--a7e7f4b3-9e1b-43e6-a76d-937a68ebda09", "sighting--ac83d151-008e-4444-b9c0-21108447fd8d", "sighting--b2cd4590-c2e6-4a21-a7ca-4519482b06c2", "sighting--06f6d6ab-0367-4bf5-87d7-8f60a95e1fba", "sighting--b87039c4-e58d-4a25-85a6-70fa0cb270cd", "sighting--75564ae8-f126-4214-b67e-c819df41e26e", "sighting--dfac984a-a001-4f0b-a1a9-f8974326039a", "sighting--00392279-c030-4a58-a017-8276d7015f00", "sighting--a0db914a-fcc2-4bb4-90b9-ede3964f97ff", "sighting--e9dccaac-7672-4a37-ae04-de608390920b", "sighting--30f6da21-2e40-45c3-ae4d-90bf1b017477", "sighting--4828b297-2aab-4827-9f56-e129e27431a9", "sighting--c77998fa-0187-4959-8185-750cc37deebc", "sighting--64f5b317-233e-451c-b960-3d088ef72f4c", "sighting--ab4235cf-fe1b-4d7d-9120-5173e6431bce", "sighting--1a785bff-e89a-494f-8123-b669adeeec86", "sighting--d2ed6fd8-f6ae-4f86-955a-dcd2fc985e14", "sighting--ca8a4046-d3c7-4256-bf6e-da980d037115", "sighting--0f31a116-e5cd-4ba1-a220-242044e86914", "sighting--c6652acc-1ba8-4474-9cdb-22642ad24c97", "sighting--6a02201f-0d7d-41ee-a1e7-ebb325c14166", "sighting--2e7707bf-2598-4632-8e1c-6f3c77988a33", "sighting--2e227bc4-2ba6-4280-ab2d-e70b1395467a", "sighting--178037c8-0a43-4dfa-9828-d4dc59e928b9", "sighting--e8ebeac2-fb1b-4276-a3f5-3d602c9829ea", "sighting--c7767ab7-aebe-4d30-b8c9-cb1b0c7408a1", "sighting--48b44af8-ce0f-43e5-a027-49d9f772ab1c", "sighting--4f79442e-1829-4ee6-9549-7d48ab749b11", "sighting--d795270c-883a-4897-b0e0-6b3ab6ab9ccd", "sighting--688ae292-ee45-42e3-9303-8a1b585396ac", "sighting--ed393c0d-459c-4c6c-a56a-76bde44b2897", "sighting--e1ae35b3-b1ea-4275-b569-40f289d909e3", "sighting--81a7cef3-a234-4d40-98bb-800af1bda5b4", "sighting--f2ef7282-0506-4452-a917-276f4dd4a267", "sighting--3cc92127-9c51-40ce-810b-e83cf3bc64b1", "sighting--dd6a6ad8-90d2-42b5-a553-b6cea5571f2e", "sighting--78ae33a8-e3d4-4ab0-a704-19fbd44c10fe", "sighting--bc75c569-78cc-4387-a217-7556fb90c2cc", "sighting--1791c095-8801-4bb8-81f4-5668c4ceaa62", "sighting--c4699896-1230-446d-bd2a-7f21bebf3b50", "sighting--3ae487bb-0443-4102-8a99-a5a165bac4d3", "sighting--b3dbcfe8-96ff-410f-b629-de38fa488e2d", "sighting--21d63d1f-7ac4-428c-ac2c-d70f52a57a89", "sighting--af25d1df-6dc5-4407-9278-b42f6f708358", "sighting--123ce615-a110-4d73-8f41-fa3d089b845f", "sighting--eaeab8d1-9eca-41e6-9f43-2d98f9be5cb7", "sighting--536959f4-2f87-4b6c-8f79-7b73f82457f8", "sighting--6d9a4934-517c-4952-a6e1-9d3d7a6f1e5d", "sighting--0b30a49f-bb0b-400a-b4d7-972d38ebf05d", "sighting--55921c41-f2fc-41b3-ad94-de7a673d15bf", "sighting--f24126ea-64bf-4ba1-9fa0-eb6d22d69708", "sighting--8e44fed9-a46c-4949-acce-464178b86bc3", "sighting--11e59f7a-494d-4ee9-afc6-d9b2823acd1b", "sighting--584957a5-6d5f-4a72-a29c-1347b8d814f1", "sighting--0111fa32-d013-4cc9-b14c-6b284878dc52", "sighting--c13587a3-9884-4ad4-8fa2-e757870bff1c", "sighting--0cf406e5-050a-436b-bdbf-4d1617e48542", "sighting--2f19c271-05bd-4d97-bdb7-38354a17a3fa", "sighting--09c136ef-a8c4-4a3d-ac1b-43c296c9155e", "sighting--ef1a68fb-7913-4576-8685-44f8e29cc97b", "sighting--9e8474db-23f6-4d21-a371-ef2cd5296e0d", "sighting--044aa39a-456d-4d59-ae0c-603f8b0e37f8", "sighting--47ce566a-43c9-4982-acfb-2467ad39aade", "sighting--9213df51-95ea-4391-8da8-04ee8bf97d49", "sighting--c3552d05-9816-4329-92f1-94f51e65ec9a", "sighting--48f49ba1-0920-4713-90e3-bb4c09e9dff5", "sighting--09eb3967-fcba-4936-9f17-c29cf28850be", "sighting--b3e2eb3c-05a7-4a3d-ab19-9aa334935302", "sighting--0b30736a-cbb0-4c21-af60-344274e96c93", "sighting--840785cd-4c09-4da6-9ab3-353c402bf6dd", "sighting--6d296a96-a3a9-4477-aa3a-c9a1018df6a7", "sighting--768a3ec8-a712-4ae8-9cf3-bc30d13d25e2", "sighting--14634475-553a-423d-a660-48121e8c13e4", "sighting--f4c3f027-645a-495e-b8b9-6a46f0b3dd42", "sighting--23829493-d2f1-49cd-a1c0-b3e59f03f97e", "sighting--90757542-18e6-4940-aafc-09556dc205d2", "sighting--b3d4d4c1-4901-4da0-b301-eade6553e369", "sighting--f3cfe54e-6098-4c8c-ab12-2c9530a80542", "sighting--b3e1e27d-2e84-4809-9080-35fd73ea8a95", "sighting--20f04d6f-35d6-489d-b780-58548b2961e5", "sighting--bd1e55a6-e3df-400b-a0da-9c9eb6acec44", "sighting--bdcc2023-8cee-45a8-9af4-e5aed692a4cf", "sighting--12e36b74-8ad7-4f74-aa19-55bb1e421cad", "sighting--a97976ba-9fee-4ba6-b585-15d07ce6bf7e", "sighting--849ee5fc-1f2e-47af-9332-3d02606ed737", "sighting--ea422d74-e240-44ab-88d8-a2ebc088c533", "sighting--3bef45c0-1d15-4ec5-b29d-0a0d9268ff6e", "sighting--1ac84fed-3bba-415a-acad-0fe353c2d534", "sighting--669b5f44-d29c-456f-bd52-d3017168472d", "sighting--b5a0316d-d8d3-4b43-adcd-db1777ff5a40", "sighting--86ec3ae6-f7c2-484e-ae1a-2a9e287f4297", "sighting--ab6f9063-cbb5-4b4f-8913-d06c59fa13a7", "sighting--40fa9617-e463-42b5-ad0d-02bb3b082e61", "sighting--05d6bdfd-d91c-4b6d-9210-501f001c44d4", "sighting--9c5447d2-b2e9-4119-ac02-d6b4e287095e", "sighting--0f095001-dfee-4b2f-b4c1-15158a8117db", "sighting--12a139cd-af84-4d43-bad0-6a4e40561d12", "sighting--70fc8af4-dd4b-45ba-81b0-0fa4e3379da4", "sighting--0cf22a31-ad94-4a78-bd3b-34b13a758303", "sighting--9d5bd1b5-78ad-4ae6-ad1b-31b2ee4b5009", "sighting--af8d5963-4b25-4363-8042-d3b58d0c97ba", "sighting--ab4c5dfe-88fc-4435-93b9-e6ebcdebd968", "sighting--35a6ab7a-470c-4ef2-9450-8492e09f6f75", "sighting--fc8b3fda-0cff-400a-8408-b749231beb5b", "sighting--c414033a-ee47-4977-81be-60fda4028627", "sighting--06ffa9d0-09c2-4e1f-9bbc-bd406520a2d2", "sighting--32299c6c-ec4a-4052-93bb-160db5118fda", "sighting--67a0aebf-1ac6-45cd-b528-290e438c1a3d", "sighting--ef1fffee-d0c3-444f-8ae5-fa4a721cd5ac", "sighting--8c2f297c-b5c3-4a27-901a-09a3d552e199", "sighting--c89ebd7c-485d-4ac7-afa7-de2db7593369", "sighting--369430da-a5c7-4e50-acf3-f301ba5ebfa0", "sighting--1efa42ec-357f-42c6-b6be-3ee7a7d03901", "sighting--07d06240-7467-451c-a930-dad8a76ba8b6", "sighting--c7102375-fed6-423c-ba68-930b18efd979", "sighting--112d6ca5-350a-4775-8534-d15bdacf62d5", "sighting--f8e252ce-44b1-4711-9cf0-5cda84b52121", "sighting--c1e8e2e6-014e-49b7-853e-b87ca58f7ebf", "sighting--bf372867-7c4e-458c-8b5a-c12576fe2719", "sighting--6ac6f33a-d89b-4faa-8b00-e53797def140", "sighting--8dc011ae-c2e5-452b-a1f2-0f27aa550be1", "sighting--b0f667a1-0915-4eae-832a-f184b03e60b0", "sighting--9f50af74-6f66-430a-8bd7-fdd505b61882", "sighting--c8fc892a-ad60-4fc8-953e-0fe609eb64fc", "sighting--e605e212-9af3-4bf9-8a17-b46c0be4a5b2", "sighting--64a0852e-dc73-4460-8e6a-28fa7e792b47", "sighting--a6f90e7d-089a-41f1-ace0-b90fa621ac5c", "sighting--78ab1f49-4c9b-4da9-b1a3-576085f1eb9c", "sighting--f054395a-cbff-4320-8258-1358a377db01", "sighting--54f7e2f1-dc14-45bc-8f58-c31a469f1d3a", "sighting--0765d8ee-00bc-418f-847f-02f9966da113", "sighting--09b7268b-8368-4765-8366-d3d8af783fb4", "sighting--0e2b6bab-3d89-4145-b268-82ef79f7ef56", "sighting--fa4299fb-fd90-48c7-b8f8-c59327be6176", "sighting--48fce93f-c887-4ba5-8231-285e06e11b11", "sighting--27c49ddf-d197-4bd7-8cc0-166705f6a348", "sighting--75862088-2364-498f-b092-5d18e9d5691b", "sighting--51af7b38-045e-4ac1-a762-9636dc8535ac", "sighting--e29ac0ba-67f0-4aef-98ed-7d71f11852b0", "sighting--e4fb8229-1d50-4ed1-9369-8916139aa70e", "sighting--984bc8fd-ad64-4b69-bdfb-ae5b14b3f141", "sighting--1d5f8eb8-45e4-4912-b1f2-bb14ee3aab00", "sighting--05e83dda-67e5-4a65-9401-fa46303781c3", "sighting--c13cf549-64be-4b2a-9c1b-8603cd1a5ede", "sighting--498ebb2a-7221-4f4b-a802-f7d306058948", "sighting--be4f31d2-ee31-4f93-82dc-a88737a9c2a4", "sighting--69c3b92e-eaa3-4bcc-a6cb-b41ead812c13", "sighting--4e4b9b3c-86dd-4b14-950a-873785194910", "sighting--3699e9c7-3193-4650-a0c5-ec9b2a4fe427", "sighting--07799870-43e3-43e7-a968-e9e1b6f288a0", "sighting--d6d91cd3-1eae-47c5-8a9c-3760d14248fd", "sighting--967df1c7-a661-49da-9c9e-26509591f737", "sighting--14519b11-2ce3-48f8-a34a-7f4f2c13021a", "sighting--db175c87-420a-489b-8369-58a0663204c4", "sighting--3e162ea1-2537-46b0-a8cc-6b882ae8e3a4", "sighting--c40371b6-fa2e-4b9f-a659-3a500c7afdf4", "sighting--a9faf2c8-b3f8-4f49-b465-1c69a1a0514b", "sighting--555f0c6e-b378-4b34-8d68-f6f5effc1916", "sighting--db6f0cac-b8dc-444e-a838-017875566ecf", "sighting--fa8cf55a-0a2a-4448-b999-6d34d8f66670", "sighting--fac97f89-2940-4d4e-876d-2a148d48e439", "sighting--81336bc1-9ad6-40a8-a77a-919bfabe5378", "sighting--f38475ad-75f1-48cc-ae4a-d0939d91f48b", "sighting--6a7dba11-19c1-49cc-a770-f7c432d05ea5", "sighting--311dfbe5-6caf-4707-80a6-ee5dc4648944", "sighting--96eeba0c-abe7-47c0-9934-17e83dde68df", "sighting--ebc8d1ea-719f-4917-ba69-7ad2ebd140e0", "sighting--4e504741-5534-4baa-8b80-e5f002823357", "sighting--e8dba027-ea4b-4b6d-897f-135a746cd599", "sighting--d203eddd-c174-45dc-813f-ac178cb24f61", "sighting--a98175be-c5b6-414c-9c71-01c4505e4320", "sighting--e1344af1-f4ef-41b3-ad21-aa76b8a207aa", "sighting--7e6445d3-3e4c-495b-a8b7-83a1c5532c0c", "sighting--e6b818f4-5214-48de-a6d1-632404bc4bf7", "sighting--6be02aca-9acf-4a96-9c3f-5c26b8607b96", "sighting--9ac01572-82c1-46c2-8092-ff6f48b2789a", "sighting--3cb36025-f736-4ec3-895b-e9d3b02c5b35", "sighting--33374d34-ac3d-4f7b-8311-3cad0b2702dd", "sighting--0021de7c-6fef-4f26-a2d5-2692623cbb8e", "sighting--eccdfdad-e1b6-4117-a715-9349e8a13f27", "sighting--8a8cb753-84ef-45e4-983b-23793135a917", "sighting--2226bb73-7f50-482f-85de-0f9105140149", "sighting--58d98335-26f5-4fbd-82fb-f032e1b7dd89", "sighting--9118fc9f-e6ee-4cd5-9bcf-91d046691fa2", "sighting--d714149c-5ca3-4c1d-96fd-2a4a3141d141", "sighting--46858e80-f98e-46a2-9a5c-e155ac769f03", "sighting--3e5b28b2-786a-483b-8ccf-266feedf671f", "sighting--048f1e4f-1840-47c3-9998-a46a850645f2", "sighting--27d3f858-c70b-4f16-b2f2-a94bff6e85ea", "sighting--d6b9a7ea-2375-4578-8ec6-fdeb4bdaf085", "sighting--051cd01f-6e3b-4b11-a565-8a5e9e9620c8", "sighting--2b072416-71b4-411f-a606-96b781da5413", "sighting--96222bf3-db67-4f39-8ad1-8ad80c015e0c", "sighting--94c6433c-404a-4a99-846d-3743d119c12e", "sighting--39e75a63-8ae0-4c81-b55c-fb34446c2329", "sighting--decfb74b-984f-476a-82cb-a048dee33282", "sighting--0662a2d4-e16e-45f6-9e22-87244083402f", "sighting--e494181c-9f69-416c-a504-9f132234087a", "sighting--c3cb0f60-8fd5-487c-b707-97514c08528d", "sighting--82b30e67-9f81-46fd-b892-7c74885f12b3", "sighting--ed2c3252-022f-4ce1-bd13-e735e684f487", "sighting--cbb6fddb-d612-4ed2-8dc7-a21d22a0d15b", "sighting--a471afb3-2345-4532-88e6-51787b874c6d", "sighting--b3b00318-760d-4bb1-a106-71d883dedd9c", "sighting--c5c84976-e4c7-46a1-95df-1e879fce7b1d", "sighting--e4608c11-c521-4522-b04f-4e0ee6db33d5", "sighting--f76237fd-73f0-4283-8a4d-7ee8266a9445", "sighting--9c2fb745-36f9-4f45-8b2f-014610a12d3a", "sighting--3050aa28-a030-4106-b642-93d7f2678c0f", "sighting--f57c759d-613c-4fe3-8509-a8f781beb8a7", "sighting--ffd9a0de-ec30-4ab9-9929-3d4e928ad802", "sighting--f2e9a47a-2ea2-40ed-8565-b701d52c10aa", "sighting--f54e1321-86a8-41f2-9e3e-f963aa8873ec", "sighting--e7f8ee65-d6df-4f9e-a41e-da018e310567", "sighting--adfb8166-3378-4d1e-9413-9c5de535190c", "sighting--5f3345e0-5946-460d-ab1a-a5d4ad0c38bc", "sighting--54c48d8e-a74a-431e-b072-80fc1fb7e006", "sighting--1a3dc9c1-abc1-4a64-97a9-3144135d8504", "sighting--bc37ac00-7b28-4c14-9ec3-df4e4c351810", "sighting--0cd02986-db1e-4b7b-bfab-10142b2d005a", "sighting--6c92684f-4f62-44af-88a3-efe9df53627d", "sighting--0f608ea2-34fa-463d-acfb-a34f06b2a1d7", "sighting--f6493770-37d1-4bd3-9bde-2703d36b722c", "sighting--c747019e-966a-4960-b3cf-5c680bc8b285", "sighting--9c93c2f6-b242-4a31-a651-17038f58ab48", "sighting--666e9b09-7d5f-413b-99fa-0c36b4b6f5de", "sighting--790ad829-b5f0-491a-8a2b-e37b296104e4", "sighting--dd0ff1e6-6362-41da-9d5f-5c105c4ffc99", "sighting--bd73c9e9-9e61-4318-891c-3a75f349f9ef", "sighting--f76501fa-d923-45d2-8790-62d7288547b3", "sighting--5663900d-57c7-4fa7-910d-44243308466b", "sighting--f7012026-2fb8-4363-a7ee-29f0471f0b97", "sighting--5ce57a41-3245-4a37-b7cd-1e5d98f5f83a", "sighting--6befaeab-c1a9-49d7-af80-4cc3efd90e99", "sighting--b215fdad-578d-4743-8770-5a7ef4c1f24d", "sighting--0f0b86bb-e398-4d8d-8b3e-b1347b03fecb", "sighting--7c38db6a-8741-4f28-a37c-62efce60284f", "sighting--53cc138c-ab3a-4721-aaab-90879c5d5ead", "sighting--d314cc92-6759-4fe5-91fc-dd15b1442348", "sighting--6df894df-555c-4f9f-ad9e-7123f5aac49d", "sighting--0dac94cf-a1ac-4678-a753-ba3947c0ba84", "sighting--aa10edb7-cb38-410d-b153-69ab0319cf19", "sighting--f31629e6-1ad9-4c3a-acdd-6cfbea747b66", "sighting--d965cc48-a8ac-4978-880a-7bffa5917017", "sighting--cf6e1606-d276-4558-a08f-e4acd9ae72bd", "sighting--4764418c-d894-4eda-8582-e3079069d666", "sighting--0af57f75-1985-42c6-bb8a-ca675527fd7a", "sighting--d7a0a076-c811-4e57-869a-f4120e25d929", "sighting--a913173b-d7f7-4e70-8daf-d799157af9c8", "sighting--2d39b4f4-e863-4bc9-99fb-73a1115883a3", "sighting--efd54e8c-2a4d-4377-8ba2-7ab3aaac86c9", "sighting--8ff03ba0-cae5-4710-b824-d0acf033041c", "sighting--46d4edb6-5903-4504-b96c-1703a4ffabd3", "sighting--aba107fd-2733-41ca-a971-253b76fea4a9", "sighting--3fb81e63-43de-4294-8cc2-44e564eeae20", "sighting--08f0c50e-449f-438b-aa25-c0d6ad318cb6", "sighting--eed13dae-7cd8-40dc-9b6d-6569cba1635c", "sighting--1c434844-44dd-4230-a820-be73540e45c6", "sighting--a4d07824-b38a-4296-a7bf-fb5cada4d90e", "sighting--3517aa39-eea7-4d41-acb4-d241d4a42ef5", "sighting--ec06894f-b9be-4b42-b395-b4ae4f5a230a", "sighting--68f26566-c9b6-40dd-ba3e-c35d2c706e2b", "sighting--467d91a6-8019-46ba-925a-cbb9d0573185", "sighting--790fca9c-8801-4d3a-ba09-271e6349111c", "sighting--c33704c8-dd8b-4e8a-91b5-a32b1c7bebff", "sighting--3a0d4b44-1c71-4244-9a1e-7a5de26c0724", "sighting--f02d6ee1-f96a-417e-8cd8-8b525e1587c4", "sighting--bcf8fa32-0a3e-49dd-9575-501e51ea7ce5", "sighting--c7499fba-a417-4601-bad7-7c6c8881bc50", "sighting--8d280fc1-ec35-4c50-b8c6-1ae8d5f0c739", "sighting--522070cd-2c10-4ab1-a613-570e2581785c", "sighting--01651b50-9f1e-4e63-b744-3bf9a1bc6092", "sighting--4cc22aee-f4c9-403a-95ab-0953064a2ced", "sighting--0d866fbd-7c0f-465b-b64e-805ea5f08fe9", "sighting--11f9d2fd-c47c-4e66-ba4d-d0ace18b0841", "sighting--08e70064-7433-47cc-b45f-3b488d60d5ca", "sighting--fb092773-bba7-4b1d-b1a8-9554442da640", "sighting--8e822051-3611-4e3c-8592-a8c246555827", "sighting--292db27c-e3f4-42ff-ada9-aea29dcb761a", "sighting--419dc7a1-5aad-4e8a-ae72-2d0ea5ea794d", "sighting--f110abe6-fc5d-468f-93f2-bb772919cb88", "sighting--3ba2ea8e-8bc9-4cd2-8de8-26d6f7dfa8dd", "sighting--69b78450-813e-44a9-ae41-b58323e8daa0", "sighting--dec26773-4800-460d-bf9f-1f5155929b8b", "sighting--c40d7887-a844-4d06-8914-209381d58cfc", "sighting--3d3edf89-9158-44f0-9fec-b33bf2aa82ac", "sighting--2cb11aa8-fdfc-464d-a70a-fb74f8c332f1", "sighting--8a27da72-0ee3-44ce-9078-979504a2fc65", "sighting--d7b7a934-201f-41ed-82f0-3bd32796007f", "sighting--6b4c3398-629c-474a-aa9e-57e761d22687", "sighting--0d845b13-5f12-446b-ae0c-1247835a646d", "sighting--2a73ad76-87d2-4c79-945d-7f9737ad09ad", "sighting--fb22225d-ad4b-4d04-91e5-ea12bcfedce6", "sighting--2c34becb-2bcf-42ca-9d2d-dc817814a300", "sighting--a34e32f4-7c2d-47c9-8167-7769a26a248e", "sighting--1305f7df-e3d9-4cc0-8695-71d3df1a50a7", "sighting--b378180b-c65f-4cee-8fa3-74f2eb90c87e", "sighting--11f90d86-cfd7-418e-a74d-4838504afb59", "sighting--45cb829b-8cb6-4b54-9ead-af72da31502f", "sighting--f3144b90-19e4-4bdb-9f59-bf658b8baad6", "sighting--56cec9e3-5097-43ac-841f-d532c4bdc53e", "sighting--4cae798b-d1ce-45e6-a5dc-257b74a7af20", "sighting--b0a64263-8ab1-4b6f-b987-80456c90d0ad", "sighting--2f6e39be-c7f1-4747-871c-d14fb727dc56", "sighting--8f72fda8-d95a-4633-964c-a854a678df55", "sighting--96ae47b5-9bac-4790-a9fd-2f6c863a08cb", "sighting--7812a46a-0ec8-4850-84e8-7257ad71f844", "sighting--c32b1b2a-c624-4db9-82b6-beca929212b9", "sighting--5ac6462b-44c5-42c0-bae0-f2139bb1a366", "sighting--b0a926b9-d8aa-4fb6-8637-1f901d097288", "sighting--c2ab67b5-becb-492d-97bd-278ac1e89f2a", "sighting--1f0da266-42c7-46ca-b3d5-f7355bbeea0c", "sighting--5c150cbc-a251-4a79-a037-f058e3250d02", "sighting--48cb137b-84e9-42e5-b874-83d328777081", "sighting--63310565-d49b-4aa1-8c9f-6096b65f24ab", "sighting--555ae79c-8ca5-4871-87ee-04b6f7fff65e", "sighting--3f9c39d7-1c7e-4821-8457-56c0a9ae2a31", "sighting--f1998b00-2412-4895-aa17-26fb63ee9a03", "sighting--0e255489-52b6-457e-8bf3-a1852651347f", "sighting--7954b05e-0d9c-4fb6-a2ef-ab0d43689748", "sighting--80f6534b-1e24-4af4-b3d1-1c2cfe9552d2", "sighting--2e2e11bb-38a8-42b6-a302-4319d5a3264a", "sighting--129285ac-e8de-479b-a78c-39cc7f9f3147", "sighting--7cf53256-fca7-4f97-bcce-ea4e258723bc", "sighting--f0f72a61-4552-476e-991e-56d05ba1519b", "sighting--400b5a9e-4a03-429d-accb-916b6f09838c", "sighting--f5527abc-f2a4-449a-afcd-381679cb8d73", "sighting--9856e518-62aa-4a5b-8daf-1d0caa3ff2c4", "sighting--fdbe754e-0fab-41c2-a99b-2c3b859ed0b5", "sighting--aa5e73e2-644c-4597-98a4-a716414847e9", "sighting--f5af03d1-c0c6-4b53-9f06-3dfe7c4deda5", "sighting--83a4645b-1786-4064-926e-49a5a10150d2", "sighting--c362ebe8-a4e3-48bc-b07e-c12420e1306c", "sighting--781f28e2-358e-45c4-b26a-605e5bd17b9e", "sighting--7c57e407-c35c-42df-ae16-2364cea4b752", "sighting--1c6098f4-e4a2-423b-967a-399485714eb6", "sighting--b1eb52f2-4408-4572-b9f1-72ecd3210302", "sighting--317b7740-dd63-4696-9a7b-db5a1d6f0e49", "sighting--49c52139-547c-424d-a121-ffbe33deee8d", "sighting--8ebf8ed7-9898-483b-9a53-28b8eba1a8c2", "sighting--0403e158-88f1-4ec4-892b-e809a31b816f", "sighting--e86ae8c5-ae8c-4f91-872e-311d66665a98", "sighting--3749b1c6-cd44-4c2f-bf08-3091dc098983", "sighting--3eeec087-ecae-4896-bb2f-670f1918d8cd", "sighting--00d0f9f2-4fa2-4df4-827f-426cd03f4334", "sighting--d09a6bc7-f632-483a-b332-d2aee92aefb2", "sighting--89b8d06e-bdd2-4866-b346-fef49394f4a6", "sighting--e23cf493-8de0-410a-9ffe-1498fda5293c", "sighting--6979bd5a-bcc3-47f7-93f6-7d828cd683ab", "sighting--302fbb9a-b384-4334-afd0-c90e706762d2", "sighting--027f4869-fee6-417b-81f8-148e0dd3ef05", "sighting--8136313d-33c7-4182-826a-9d1632ab8ce3", "sighting--0093c1be-37cd-47d5-8629-c9013afbc86c", "sighting--4b68b7c1-7ff5-47cc-84be-5d51191c5a71", "sighting--c1123389-0d39-40dc-9957-6c3eec6b20a7", "sighting--62bf091a-30bd-42a0-8cb9-35603ca25769", "sighting--727268fa-bd70-4526-a9fe-8a9aeb30bc21", "sighting--5f158e68-8164-4f24-aa1d-982653e16f31", "sighting--381d0573-47a4-4026-8a9a-a1921763ec1a", "sighting--1da6993d-5059-46e8-b4cd-4ff9d4079656", "sighting--512e7cdd-acaf-4c18-ad28-7859fccbf771", "sighting--30c9a4c3-8ee6-4fd3-ade0-ebd2a599df5b", "sighting--df30721d-52bc-46d1-b033-7ac717da5f70", "sighting--738ec101-02ae-4c5c-be24-9260d06db77e", "sighting--1da0c7e9-d5fc-46c5-92b0-e429c8b9a4dc", "sighting--c10dd912-3ae1-4b42-8fdd-22cff168d9af", "sighting--9a0e113b-b4c9-4c81-8b29-743c55c90a6f", "sighting--2ccdf0ae-bcf6-4656-8d81-54be824738f1", "sighting--396490d2-7271-4133-88f1-0eda4e24f5d6", "sighting--2feaeb2e-c321-4333-bafc-b3a0ef6fac9d", "sighting--a503bd53-d5b6-4bf8-9568-c40d3ed9f575", "sighting--93828e33-790f-435f-886d-54a55f4a3597", "sighting--9e3dec97-a8a5-48be-9314-69f74fc9ca7a", "sighting--c54d6f76-348d-4923-9d6d-31f2fad10248", "sighting--48dab2c0-7e9e-40db-a5c0-650ea6a05d52", "sighting--cb9a8e71-e66a-4a21-a3de-dae153cfe3a3", "sighting--b6a672e1-96dd-429f-81b4-9b2316476c68", "sighting--b4d3d7e1-f63e-4c82-a6fd-942263da87ab", "sighting--d8ad8731-7c8c-4420-bf4b-67415448e484", "sighting--7202082d-5b70-42de-b024-30d9ee5919ec", "sighting--5618f455-bdc0-4eb6-b278-90a3da960cdb", "sighting--9f1c188e-aa1e-44b1-adba-bcae32b9e7b8", "sighting--21791966-29c7-4732-ad65-2ef4d6124bac", "sighting--c6ab6257-2e17-4e2c-a0b4-b5529e7f49a3", "sighting--5b09e44a-9b17-4815-acb4-efd4b26b90de", "sighting--1fb05fe4-c8de-4d61-b093-8ddfdad4f03f", "sighting--8ec20243-e308-4040-9af3-934ba2cfe153", "sighting--71ff3982-13ea-45ca-8de8-d2dcb62f26df", "sighting--099583df-b465-4c19-9c69-9a0082660366", "sighting--aab49c5b-3c9f-4cd8-8cc1-b03bae12c8cc", "sighting--0d646dbd-f4eb-46cf-bc9c-bb0cb5f9a957", "sighting--8b590965-8b3a-46ae-bb8a-ae75542057d3", "sighting--4eebd5a5-566f-4851-aca2-8bd13a65c8fd", "sighting--24153f22-5c1e-4776-8426-0810a97933aa", "sighting--69d4394f-a403-4b5a-b4f8-ea03399f33fa", "sighting--700c9235-413c-4ea5-9a83-272508bf5386", "sighting--db992d0a-a835-4705-b0ec-70a0fdf45359", "sighting--71760b0d-c0f5-4d47-934b-73d01bce6a8a", "sighting--9c76b3eb-0da3-4af4-936e-54374951ab63", "sighting--ad1ba5d5-5493-4b4f-a047-d85a1a61d051", "sighting--1267918e-6af5-4605-bfc8-5af8346bcff8", "sighting--31e6f2f7-08fe-4d20-9ba8-457de4b24e4f", "sighting--2ae439a8-5381-4ad0-b1ec-b361f88d7672", "sighting--750bfc63-aad7-4c77-9dc3-022004b266a4", "sighting--b42fdedb-4274-4321-8643-35c93b217366", "sighting--ab533b49-2401-4faf-a7c1-61b4bf36f163", "sighting--512c5acb-f86c-45bc-822b-76be947c29b2", "sighting--8bfe6c35-a5ee-422d-853b-4d136c367b47", "sighting--bb889397-c28e-454f-b5a7-e3e822c393d8", "sighting--11c2a05d-1c71-406b-a1be-7ce5f67a06f3", "sighting--eafa43a5-7768-42a2-b52a-11cbd5e07a30", "sighting--6d3e5f65-22fc-4bba-a7ee-b7d36ee71497", "sighting--deceaf9a-43bf-42e6-9057-c9c47ca7cbaa", "sighting--1d082116-a6ae-490a-a3e8-75a83d5caab8", "sighting--be9b393d-8048-40db-8356-62dbfe934508", "sighting--05cbe054-d79a-4c71-bdca-117d75a11b8d", "sighting--3069cf9a-e557-4cc6-a7d6-1d99cea2bfe1", "sighting--30c010bc-cbd3-428b-9345-23c41b91b90f", "sighting--b8587787-2454-4360-9a8a-fef06a64f089", "sighting--d96eee1a-5689-4d4e-b60f-3ad98b3095ee", "sighting--1269e27b-3347-465d-83b5-eeae9b8137a7", "sighting--3da96711-362f-4e56-a2ec-edc1dd469faa", "sighting--36776bc9-2faa-40d7-a09c-deded6631759", "sighting--67cd1880-98e4-460e-b2c4-bc1f293d3721", "sighting--f3a4e17f-fe0c-4b72-9f18-94ab588e0070", "sighting--082f6dba-2a97-48c9-a40e-0bf4c924953a", "sighting--835a254c-8c26-463e-90a6-d07ea177ab4f", "sighting--206a7ab7-8e69-4018-be49-dff307b5a2bf", "sighting--1f2240ac-3db0-49a3-8b39-121279e03ee4", "sighting--026ce8f9-af58-48a6-b761-c7086d217cba", "sighting--976ba201-f59a-4559-870e-ed4fc375d4ed", "sighting--a41c8763-852a-4624-874a-4c659987dd4c", "sighting--7254a230-b642-4642-bcde-f354be8c3c45", "sighting--2bc54fb0-d909-4421-bc93-79c3a55ab6b0", "sighting--87d96806-6a59-41c0-9919-905a8544ce4b", "sighting--ec1183ac-400e-42b9-b432-ab95b567ec63", "sighting--a11a4410-73f0-44b3-b436-cb02d4a7d32e", "sighting--ce152a03-d2a8-48c1-9249-19b713cb6c1e", "sighting--c7732c58-d446-40c7-9c5b-93fe07356e0e", "sighting--d9acc557-067d-4882-8408-3ba705ffe414", "sighting--a08e34f7-a8d4-47a1-97a4-1f7c6479eca2", "sighting--422c0d3a-9da2-4e5d-8dfd-3067380ab0ba", "sighting--204bca01-5970-4127-86ba-928805ab9abc", "sighting--54a3e1fd-9ce1-4661-b983-54ee0f852d21", "sighting--2fbf564a-5b9d-41bb-ae21-36629c4b0655", "sighting--f7080b8c-ca87-4952-ba4b-9c78abfcc255", "sighting--c603e8c9-85e3-4f33-866c-b1ade8ce2df2", "sighting--59403cdd-d955-4a4c-a734-08bb423e78c8", "sighting--0f55584d-8d85-4841-9ac3-001ce92470dc", "sighting--bdff9dc4-29fe-4342-86e6-1e110252db2f", "sighting--8d3b50b8-0fa6-439d-8982-a5a7fbe6b040", "sighting--cce71a11-b8fb-43a3-a98d-7bcfe79f9af6", "sighting--e3661dd2-a42c-4f99-9a4d-e852a320d569", "sighting--fd134064-3cdb-4695-838c-1934a1d6e5bc", "sighting--6ceda586-68f4-45ae-9b51-e1fa60566972", "sighting--c242cda5-2411-4656-95a2-1ed7763f0b60", "sighting--00a57198-764e-49b7-aeb7-4750b1778cd4", "sighting--bbefecbd-1f35-43c9-8e1c-11b3885ff365", "sighting--29876e1a-92ad-4e9f-8e4c-9506a6496f65", "sighting--1428cd1e-8a7c-4a73-abb5-6ec884e5daf1", "sighting--b127f7b4-190c-4f83-897e-6154ce9a36b8", "sighting--2b45fcae-b159-4496-85d1-890969ae6189", "sighting--df97a41d-de6a-4f5c-9621-483115394820", "sighting--234d56b6-0b15-412a-b200-4d336abaf2d6", "sighting--7c9130f3-43a8-4ec0-9d93-52990efb7b1d", "sighting--6e97a37a-e022-4322-86d6-a83e50f624f6", "sighting--962c5e99-1a62-4d78-be8f-592a28995603", "sighting--c9063b04-1c0c-4949-b794-db603ed2ff16", "sighting--f23c17b4-0315-47a3-957c-c7333ba50909", "sighting--a8abb415-9332-4e2c-92ed-f4e6e01ed090", "sighting--478099a3-2532-4fe8-a4a3-4561d128f84e", "sighting--f4fa46d4-a240-4543-b7fe-796a26a3e269", "sighting--2edc49bb-39a6-4b6d-9e9c-b5c51fa5de55", "sighting--ac18d7d9-8c00-4cee-affa-efcccde96864", "sighting--5430d7f3-fde3-4c35-b171-613a5b9f34ed", "sighting--de35eb3a-74ec-4218-80e9-4fe751b59878", "sighting--521717bc-9600-4fb1-869f-72cb986789c3", "sighting--dd47a597-d120-4d17-aa37-7d64c73a4adc", "sighting--a076e370-009f-49ae-af9f-884b6d67d95c", "sighting--6ffbdff0-ce68-45f8-bc55-bae3657de0d2", "sighting--428045ee-826f-4b2a-b343-2aaf28515ec5", "sighting--6b2ca92b-2a75-45ef-a242-d0fcf39a5940", "sighting--d74cfafc-da74-4196-bfda-57a90121951b", "sighting--413673d5-1b05-4d7a-8b80-8732738298c7", "sighting--8faa9612-4d6b-405d-bdda-bce38cfcf26d", "sighting--6aacb4c3-0eab-4845-a9c6-2e3ac428c539", "sighting--5c71547a-248f-4641-826d-c997d5f57dd9", "sighting--dc7d1b67-d309-4288-90ac-012fe3c493ba", "sighting--d0116fdd-579f-4902-86a4-48755a1435dc", "sighting--58fd3185-545f-47aa-9048-b797188c179b", "sighting--7a183286-1f13-4a54-ade5-33fdef710ba6", "sighting--6035fc07-9170-40a1-9e1c-8a99ac83888a", "sighting--70724f5b-a15d-46f8-a6fb-64eb537ea9b7", "sighting--7a9bd74c-eb12-4519-83dc-85b02e032c54", "sighting--6de2e9f4-788b-4544-9c9f-c0ad48b06faf", "sighting--4123094b-5ada-4d73-9b66-5f5b24ccbf2b", "sighting--8bbd4d92-2844-4cee-8933-60f1ede61895", "sighting--fb09b94e-77f3-4997-8951-05f82206e1d6", "sighting--54b384dc-1fb0-4ce2-a476-880731b93fcc", "sighting--03d07e3a-e8ef-4d0d-8b81-fb383bf24f61", "sighting--77a5f809-ac3b-42fc-bd24-46d6a2bc9bf2", "sighting--9ec212c7-4e13-4ef6-9074-767affdfcc9f", "sighting--eb8177fb-5dba-4a76-acbf-ea47aaea1a9e", "sighting--5cf61ba8-5d70-4bc5-b8fa-d636f4304393", "sighting--5c310fda-59c4-453c-adf5-b5c0286c2c2a", "sighting--e7b56c37-c359-44c2-9626-cde784697811", "sighting--a75c6238-6d20-45cf-a594-b10f6f68dd5c", "sighting--e171ad5d-ff7c-4a0c-8b3c-c61e73bbc98e", "sighting--86d3720a-5d37-4d67-83dc-830a4ec8d556", "sighting--b4fa3e5b-9dbb-4907-afca-8c6b0734c718", "sighting--d8fd8401-b2f2-4c65-991c-17a34b8f51e8", "sighting--6883bcdc-48c7-45f1-9fab-45615ce4a77b", "sighting--046dde51-d6db-4c02-b37a-eabe9d6d1d03", "sighting--28ddefad-c2d2-4860-a6a0-1572879dbcad", "sighting--b48e33fb-83d2-4b01-ab9a-cfd73f71223d", "sighting--fa449268-d835-4df2-bbe8-4e49a4c3bf32", "sighting--71fc9c9a-fb2e-47f0-997a-9ead27d49c76", "sighting--2074b3b4-ca97-4f0d-a5b0-60a0fa49fe3e", "sighting--8783d267-c77c-4ed9-a3f9-333151fa4fee", "sighting--b092ce81-f23a-4e06-99ad-c954440cc1a0", "sighting--e3e7950d-d8fc-4eb8-86f4-b4be50614d87", "sighting--816bd8ff-217d-4c70-9dc6-e1189a789508", "sighting--233d5326-8150-423a-bcac-dc559190299d", "sighting--689ffcb8-1706-470a-85e0-8c0f4da6d0a6", "sighting--f9f9e8de-4db6-453b-afac-d4482ff4ecad", "sighting--993382d4-61bf-4227-845e-07a2423e4556", "sighting--d10a8772-813f-4501-9511-8fe740387042", "sighting--de802e9f-8605-4cbd-b2d2-83726debaaa1", "sighting--705b0dd8-f656-4328-b9c0-41a0888e852c", "sighting--932a0f7c-a076-4d30-b5f5-9ff9ac12c1f4", "sighting--30afe897-db27-40ec-92ef-59ec7e617d6b", "sighting--f54b7bec-6a49-4f89-bb97-3ac51cf79e53", "sighting--7251c237-db6f-4aac-a6b0-a335ce55bf97", "sighting--f7f7e282-baa6-4e23-9632-4a5921469a31", "sighting--15edc04a-470b-4f35-b5aa-7a79e605a7aa", "sighting--0bc0d4c5-b723-4a66-9ae0-7a43887d9ef4", "sighting--3ad4c5fe-c5c0-4693-ada3-ad610c0b4a53", "sighting--726bb780-77b5-42c1-9d70-229391891ac6", "sighting--7de94ab5-bd01-4a72-834b-adec37a8e484", "sighting--27486ddf-28a7-4999-8a68-1c91db511600", "sighting--e82a8d71-1eff-489c-b9fe-ab7f2946e754", "sighting--23629cee-ea85-4fda-b8ec-e1d7fa297623", "sighting--82d064b8-8dbf-481d-bbe7-3f6be36c790c", "sighting--d46094ea-7720-46d2-ba66-e92ab41ec656", "sighting--02d12b63-ab52-4334-840c-f2495b29a4fd", "sighting--ce2e770e-a1a1-4a97-aa44-73d6257b3c16", "sighting--c6c366bd-65b4-4be9-a208-b7a6723480e3", "sighting--27aac0e9-65fe-45b5-b804-1e574646ba6f", "sighting--c507a988-031a-4254-851d-4c428242e8fb", "sighting--fb5953dc-dd37-44ee-9222-a1f83e046345", "sighting--fac1b4de-b22b-41e0-85c0-fa2a7bc725d8", "sighting--21159c64-3bf7-4cbd-ab29-521dd93b3d59", "sighting--ac162207-aba0-4ff9-bb72-e5759445b4c1", "sighting--ed889dd4-09a3-4b0b-ae4c-4c1ff87311c8", "sighting--214d3a12-2034-4452-846a-77e9de3aa0bc", "sighting--56f05ee9-4450-4ff3-bc6b-dbff47aabdbb", "sighting--c002344a-d22f-47d8-87c8-9e91ea15d963", "sighting--a80f8329-a77c-42a5-ab41-eac5c779935d", "sighting--6a533b9e-ab89-4806-ab10-0257eae9c7f6", "sighting--d297fea2-3622-45ce-83f2-c2305515b6a5", "sighting--95361cd9-1981-44db-b025-9934ecda021a", "sighting--971bb587-d251-4cae-8c25-08134a52f2cd", "sighting--6b2194fa-fa16-485a-aa83-f1c7e47348e3", "sighting--ca85aff1-784d-449e-90e1-42ba181b2270", "sighting--c17783e3-b048-476c-b8f1-cd281ce5bccc", "sighting--23cbbd50-2e46-411e-9088-a43a77a0aaab", "sighting--243c2381-1547-466c-bc91-e81e810a495c", "sighting--0a2e16dd-a9cb-4f19-982f-74f5c8f20ea7", "sighting--bd9b2346-8207-42c1-844b-463a23295508", "sighting--1650f5d1-a9b8-4e73-b540-28df85462f4c", "sighting--ddc52838-8c7f-42dd-a9e5-b7dc9e1da050", "sighting--636d7c64-23c1-4d91-82d4-7e29c41e0cb6", "sighting--988592e8-26a3-433f-b358-7c7d2412a17d", "sighting--fa282f14-a4d0-43f2-a7b8-3326fec1388b", "sighting--6ac8a5b7-b789-49d0-9201-b1bbe9d3c55c", "sighting--df21c9fd-f232-49eb-881d-70b8abdf37de", "sighting--f33fd69e-0f3c-4d66-a033-db82d6595f90", "sighting--a9af5192-a234-4229-b5db-df0b38af64cb", "sighting--d1825c6f-c8b9-41e3-85f7-8d542d1a118e", "sighting--8ab61f7d-9453-4a1c-8692-aba53dde74b1", "sighting--bde6e4d3-121b-4242-b118-5b212d826b84", "sighting--44c25b06-c874-4eff-852f-ba64826bfef7", "sighting--bfe929cd-e293-4ce9-9b1c-49dd1c6d068e", "sighting--d5859956-f0ec-4a8c-999d-df01988dc179", "sighting--5e062b23-8e60-44de-b25d-142bd5735513", "sighting--1985c907-e90d-4e63-a814-b0bd7aca456c", "sighting--ae8d8c35-6f01-40dc-be0f-34099d80b0c4", "sighting--61cc3327-5e9c-4505-acc1-d05e101446f9", "sighting--ecb62031-b4c7-423a-ab91-111a1c8276e3", "sighting--9a53304d-baaa-4926-865f-60630424e966", "sighting--1a273ff2-676f-4c3d-9ce9-1b3efefca84d", "sighting--6bdef153-44d9-46de-bbc8-eaee8e5097d8", "sighting--03884ad1-1d1b-46fa-b19b-f355410b9c8f", "sighting--09bd7981-0d44-401a-9e75-797383a60288", "sighting--65c1a77d-c494-4644-a5cb-81a8c535dd09", "sighting--57ce0203-6cd3-4e47-bc0c-7f31f014fdde", "sighting--2066029c-0f8f-4666-924b-70bafe99e2fa", "sighting--aa879140-6d3e-4940-95fe-30c0301e1109", "sighting--653c25b1-e4c7-493e-a598-70373f407169", "sighting--8207f49d-eee5-43bd-8aea-3dc84bed91ed", "sighting--a9600015-18e7-4e20-afdf-50d6c5ba75aa", "sighting--5f717629-cd70-41b4-8678-713f5dd03a21", "sighting--f1891f27-5bb0-4022-adbd-80afbcee4654", "sighting--bc693d72-ab41-45da-a0ca-430b7de16442", "sighting--9a9036a8-37cc-49c3-b8c4-495e0be9f443", "sighting--a65f7019-6d4a-469b-9c80-40dc4e3be1dc", "sighting--b3123e03-7d00-414d-89ad-1dfd467326fd", "sighting--6553ddc8-2c7b-4c51-a463-754933703c03", "sighting--6d8dc8e1-8726-4965-8dce-a6458ba1247a", "sighting--a7ddcb3d-2d99-4425-a181-2f46258e41b4", "sighting--fbc30f9a-636d-4bf0-99fb-533ba2421874", "sighting--4856fca0-7d15-44a5-be0e-e477837288e6", "sighting--1b23ecae-9e76-4ab5-a505-4a01baa0838c", "sighting--773a96c2-216b-4685-98f2-507ec8410159", "sighting--d38b059d-cc96-4300-8617-9781713111c8", "sighting--4dea204f-99fb-454b-8a44-b01965086e61", "sighting--53038126-02d0-447b-8d7d-c544643ed5ff", "sighting--8b0bd1d8-df8a-4d25-a609-1a420710e0ae", "sighting--02cc6c0a-b69e-48ba-96c3-e7429803abfa", "sighting--d7251121-61f4-4e1d-b8dd-f3fef8420b96", "sighting--27571600-7592-40d0-be42-aa68685a5ce2", "sighting--3bc7c3af-3f80-4059-a266-ee0ea253c75d", "sighting--a674ab52-c915-497d-8a3d-4803cc0412b2", "sighting--05392b44-fa4f-46cb-ad22-c5745717b1dd", "sighting--e4637a5a-2ca4-4c3e-8c8e-6d5c848a446a", "sighting--4cd4d04d-6943-4129-a6c6-6852d33e4fda", "sighting--f0f1435c-498d-4ed8-b2d1-447fd3e8fac9", "sighting--f71c9c0b-2708-4380-a989-1c4106820a0e", "sighting--4e8d36f7-9e19-475a-902d-604e34bc3c16", "sighting--7149c852-3fb7-4034-bfcb-948674a4515d", "sighting--627bb00c-9ca0-4bf4-bed9-b6fd6e78567a", "sighting--9ef6cb20-79a6-4503-a74b-3347293a08de", "sighting--50392a2c-82d2-481f-ab2b-85e9ca5634fd", "sighting--734bdec3-e44f-49ef-9fa3-b82238e82067", "sighting--1f1e911d-2340-4c98-b228-1e443f071551", "sighting--00738d1e-61a9-425c-b6b1-bc812bbff3c0", "sighting--727b255d-d18b-4b32-a370-1bc9e50c8079", "sighting--dad6af0d-5d74-4653-8818-91591185fc47", "sighting--6f1c157c-4769-4a99-a8f8-d6e610c2c202", "sighting--e0d2ddae-3a21-4512-90ab-c52bf8987359", "sighting--9822cdcc-cbdf-4ba0-8d92-b7a06cf3a8dd", "sighting--23200bd6-0d39-4bf8-b63c-3dd8589adfe9", "sighting--206edf4a-2b56-4157-baa4-0922eca268d7", "sighting--468d3462-2618-46f4-8209-52044313f40b", "sighting--a2d376ea-140a-4b96-9472-02e711bba2b8", "sighting--47f51e6c-77b5-411e-b368-63a41c0307ed", "sighting--87ae9641-13f8-4a9c-8b62-9ba7b49d45de", "sighting--487c8124-6ca8-4834-ac76-249fe77c8fdb", "sighting--97d97846-6332-436b-9c1e-358ae16c1cda", "sighting--b95f8344-639d-4e42-8072-ca78d7f3d5c3", "sighting--70c479a0-1aaf-41dc-86e8-e3a2709ec81e", "sighting--a28fdbf5-b454-4ef0-8eb8-b7a71c26ca29", "sighting--54fdaed5-a41c-42f1-a2a0-f3d058e3efd6", "sighting--4a970636-0f51-49bc-bd78-126b658130bc", "sighting--40f5172c-38c7-4a4e-9480-b6dbbd328444", "sighting--0a522a13-8a51-4893-a6fd-0296f4780927", "sighting--ff1783e8-15b8-4436-b0e4-c65a2d270800", "sighting--bbc96d05-fc29-4bb7-bc17-869f7b3804f6", "sighting--3243c873-b27a-4ccf-8716-d53ada50bca5", "sighting--27c784bc-67db-4871-a670-195830587c84", "sighting--9164729a-4e3c-4029-9c40-abf565c0c56a", "sighting--897eee1e-69f3-4d0d-aadb-fda483f12132", "sighting--36b48aaf-60a2-4d33-9445-b1a8a51c0606", "sighting--ce25fe68-b593-437d-89ca-fdf1686d0267", "sighting--c0817266-c021-4756-b0d2-f80e017c3cb7", "sighting--f5ba1d28-ef2e-4255-af11-abe13bd93fa4", "sighting--cc0bec17-97dc-45ae-a089-09734a85f2c8", "sighting--6f5c6834-6fc9-4f9f-b77d-5d595fe286b9", "sighting--336f3675-4253-488a-b3d4-c1680a492e42", "sighting--26ce7869-e712-4a5a-b881-5cec7dab1cbc", "sighting--474b3af6-78b3-4aca-9667-20e4f91555f5", "sighting--72e88f63-e431-4034-ae81-1744c016ca24", "sighting--db5e08f6-d990-44b1-999c-83293f0d4bd0", "sighting--3f6a3025-711e-4893-9124-2bacc81e39f8", "sighting--09a3e3ba-1d38-463b-8084-3db84b7ee012", "sighting--9c72d2e4-938d-413d-887e-bfba78b61810", "sighting--cc78c789-ca55-4ad1-ba9a-5d396233cc04", "sighting--61baa40b-da78-4aaf-9309-4a51a0fad7d7", "sighting--75c7518b-73dd-46c9-81d3-cb53d35f602c", "sighting--c13c679a-efdf-4ac2-9ba2-7f4f40985973", "sighting--450a3b18-d11e-4ebc-8dd1-2900b5f94749", "sighting--461d52b0-1fec-43ab-be51-cbf3192e1258", "sighting--db0e7097-63e7-48f5-b62d-33823277e23e", "sighting--f90c7419-f9b2-4d82-8087-724127fb27ef", "sighting--298a4af2-bce0-4efb-a145-f5a13f8d2a5b", "sighting--b5b62a35-d060-4fa8-b0ef-16de3012a45f", "sighting--f7f9f587-74ff-47de-a360-848714ddf486", "sighting--61e6eb53-b197-4950-807c-c1460f92e747", "sighting--bb244d90-34a9-462f-a05e-4dfb3d3cc37b", "sighting--b9231940-4243-46dd-a8ef-c6a0826bcc96", "sighting--43b6b8af-090d-443d-a91d-abdbaa7b4893", "sighting--665afc67-398d-42a5-8480-160ee1c1422a", "sighting--d57dd48d-b616-46f3-aeb2-3c3e4f9d327c", "sighting--a7379b4d-4b69-488c-99f7-435af38c2fa3", "sighting--97ab9e57-0c33-4660-9d78-e64260815873", "sighting--1abec2c5-e3bf-45ff-b976-2f95d8c05523", "sighting--486ce942-d681-434a-9869-d5c7eb30ea15", "sighting--0d15242c-b679-4085-a832-1a209e851e10", "sighting--a45bb707-7570-4d11-bbb6-5638c9bb41cb", "sighting--271c447d-e9df-42b9-96db-41f31c1f024d", "sighting--0a2e5b78-c755-4797-9ea9-6f93f3dbb3cd", "sighting--f4c41af0-9e10-4242-af73-03740749f6a2", "sighting--d8b585d6-a1dd-40c4-9c1c-f44e197a3fdc", "sighting--8136e746-f6e6-4dac-9d40-24c1c87d24ba", "sighting--ca2e2bb1-614e-4a4a-b2df-41d072adc461", "sighting--c926ead4-49af-4208-9f82-c0d16c70e5fc", "sighting--ab696204-e431-4218-9c21-25a84f06ba57", "sighting--85577d7c-2096-426b-a5eb-6b9f0e5d8ea8", "sighting--22d6be5c-b4bb-40b7-aa06-a70638ead071", "sighting--94459e79-cfcb-4f20-a113-ac41e533fca3", "sighting--e84abbc2-c780-4d47-8f39-d0c1f34e4723", "sighting--78b8ad07-f377-46d0-89ed-840eb4c7f9d2", "sighting--12ffd017-ce8f-4750-8b5f-5f846ebd04f1", "sighting--d89bd34c-a4c6-47ab-9b2f-850a12687965", "sighting--de3b2053-c486-428c-8414-da2ae45da8ae", "sighting--431bd36f-4244-49e5-ad90-340203252f7d", "sighting--e3354254-52bb-4822-84c1-6118275be0cf", "sighting--4725f72c-f2fc-444a-ac9f-8c763bf8dfe3", "sighting--88bf6f1b-9524-43b4-817a-4926e8babed2", "sighting--e8954439-13c7-45fd-b8a3-ea5bb3d77c71", "sighting--4eb8fe59-d265-4a3f-8d31-fb5ef0dc9ba0", "sighting--050f5186-614d-4656-8253-17fe5605b328", "sighting--4d2dd25c-187f-4a2b-b5d8-5cfac215ed74", "sighting--3782c89c-5049-4826-9a4c-47e9f2334552", "sighting--6aa28d69-e1db-488f-8648-cf6413d50e18", "sighting--0c592e28-fa7a-4550-afcd-511562ddd8e0", "sighting--5a0204e3-fcf2-45f5-9eb3-b1167a8836f1", "sighting--f85b3ff0-45b3-4709-ba7f-5011a57158d2", "sighting--684375c7-f6e9-4fe5-ae2c-0423a7a5384f", "sighting--ec272fb2-94be-4fc1-bd70-66528c99acc1", "sighting--828f144e-5174-4299-8091-029018805449", "sighting--b3e6fcbe-f665-4c6b-b8d8-0482662b22ac", "sighting--31fe1969-6626-456f-9b5d-0f68b50cf741", "sighting--b05387d6-101f-4996-aa26-84f4f20333ce", "sighting--bfdd8ab5-b6b0-4671-b16e-8f4f4f1ac2cd", "sighting--cb8024ec-1fc8-4442-bd48-c90782c227cc", "sighting--8e408770-440e-4ed1-b2e1-f81e7f5cb8a3", "sighting--3d32e4c4-966b-433f-b0f6-8e8e8a9134f1", "sighting--819a222a-9f35-43f2-8af6-022edad4d3a1", "sighting--f2bbf1fd-9b50-4a55-adeb-9328af93f413", "sighting--3ea53422-c5ca-44aa-8a4b-cc8483cd23c6", "sighting--59905cd8-1ab5-46c2-bc3a-ffca6d0735fa", "sighting--482bfa0c-4574-4498-8934-7f263b3a18ff", "sighting--3afb5252-214a-4644-8ef1-f2e1bf60a1df", "sighting--80a53749-58a4-4ed9-b593-664038b97668", "sighting--2a429042-c9f0-4365-8d1a-04220c73e7fd", "sighting--e83170e5-cee3-4a41-a326-bee18b99537a", "sighting--6e16fc6f-72ff-459d-821b-e948501eb092", "sighting--12810554-83f0-4020-8504-67a4584f4b59", "sighting--dfc5b944-6c97-4214-ad23-58cd5ae49a6b", "sighting--00570a71-a2f2-426a-854e-e262e03af6c4", "sighting--b4a6dd4b-70f4-4fb1-856c-f8a67842c516", "sighting--703c1b51-8996-405d-a256-4e27c673a95b", "sighting--b8f57956-026a-408d-8ae2-5661cd634638", "sighting--d493517d-eee9-49e2-bb67-3a71947fc561", "sighting--9d84fca4-8636-4d03-a15c-51b98634a5cc", "sighting--f00dac8f-69e7-4ebb-8d65-34d138f7b6d8", "sighting--201e779f-a1b2-4703-873f-9d3cee5ad8dc", "sighting--35da958e-a2a7-4555-80bc-c253fe3faa0c", "sighting--d1424f03-97fc-41f4-98d1-3482f9985cfc", "sighting--27c44087-0eaf-4383-8210-cdcc58e87a8f", "sighting--14d8f881-c254-43d2-b583-df27326e3bdf", "sighting--8da78559-e36e-41ce-81d3-69f92a54da5c", "sighting--ecc6d41d-357a-43dd-9b6f-d68efabe5c89", "sighting--7861d03b-3005-4f68-a8f3-5809ed152da0", "sighting--61043ba3-5c02-48b0-8653-df5002647f4d", "sighting--349c27f2-df2d-4690-b18f-0b935081cc77", "sighting--72e241b4-02df-40ec-a3da-492baa149cdf", "sighting--cfc25dda-1339-4e69-be8c-fdb7fd36bf55", "sighting--c70f2e74-cbdd-4ef3-9f70-37d34b71e907", "sighting--7fff7093-0585-4e50-9be5-5a2673f9b26e", "sighting--237cd409-c757-4bf4-b89f-28809e792273", "sighting--7ca5e661-2c9f-4daa-a99f-2bf68adb8af4", "sighting--a94d4aed-baf5-4828-bb28-cc349c226035", "sighting--ffdfbf81-6f81-422f-816a-15103b74297f", "sighting--ab6cc03c-9430-4811-bbe0-d86a05118edb", "sighting--8b57e9b7-af21-415f-9d2f-aa30eb7ddb75", "sighting--4da6b796-1c2c-492d-bf2e-ec6c18fc226c", "sighting--851e6510-78bf-49d9-8117-2d3e9ce608f7", "sighting--83216021-5e1a-44b3-9290-0863425d6c2d", "sighting--d6da8095-c817-4eee-b3d5-2997c8d4c36e", "sighting--90d88595-e8ea-44b6-a631-1c28f5398090", "sighting--74031794-3620-4ac4-b01f-cf651026d9d0", "sighting--500d6b24-17b0-4397-91ad-82181b425303", "sighting--97b37b5d-8845-47d4-9f44-de91524cf3bf", "sighting--eb7e7a1c-798e-4fc8-ac12-1b30d0b6ca58", "sighting--baac18cb-3825-4a70-9724-e03c4122f5a6", "sighting--5f9113b6-01bc-45dd-a1c7-8defb1fef47e", "sighting--57e93ec8-bc3b-4b35-b8aa-488974bd5063", "sighting--76f85643-005d-4283-a536-e1cde70e56f7", "sighting--c2cc94fc-c83a-4358-b3cb-8488034d87b9", "sighting--72dcf820-0707-438e-bf41-39548e987114", "sighting--674b1b69-f1c4-4adf-a8a1-d48f750e1b46", "sighting--9072fccf-cfe2-4d87-ad97-13d5968ade79", "sighting--90ff02cf-cc38-4740-8199-4895a909c3d9", "sighting--7edfc1fe-3ca4-402d-ae24-e65a2c35fa3f", "sighting--e23855af-e7b3-460b-aba8-6d9047acdb96", "sighting--b32c5c6f-33bb-4e77-a6fe-e2250ced22b7", "sighting--37b07057-4fb1-4ef7-a87e-aae01a9d595b", "sighting--67e5b894-4b90-4732-a7ad-1c6bef441246", "sighting--99757c5f-d1db-4e21-bb4b-e4afa75f1b5e", "sighting--76242dfb-e0c4-4236-9c2b-95678f0a5bd3", "sighting--111e8f89-a7f4-44bf-a5ff-dba06de85551", "sighting--493aad6e-d301-47df-bf05-802d9f5a816c", "sighting--d4d75f91-6619-4757-8bd7-3cf952716086", "sighting--f99cad7b-bcea-4252-97f3-3d0e6a0c7835", "sighting--99db97df-0067-46da-8ebc-c8ab8c7f0ed1", "sighting--2839c403-c3ab-4b6a-bb19-141bc8001a9b", "sighting--fce3881d-b18b-418b-879f-1ada4c0bc9e5", "sighting--7eb01f81-46ef-4da8-ae20-aa9c498df45d", "sighting--26a34b9a-cfe6-4bfe-b7a4-1431970c6c14", "sighting--dc0ab4e4-4ab2-47ec-949a-ed59d2290751", "sighting--16a15e23-699c-48f3-8896-16685c8e0cb1", "sighting--4ff483a0-9083-4a4b-9985-a5a8424cbb76", "sighting--2d3565d7-af93-4fc7-9426-95b07ccc37dc", "sighting--56835307-8668-470d-9149-c00960f9858e", "sighting--14e5b26d-8553-4dd8-952b-a1ef2d4328d9", "sighting--bd8bab15-d39b-45a1-9766-0b8b027e8f63", "sighting--c26a7508-f2ef-4af1-bea8-7de6a8e6cd11", "sighting--6304ae9f-edcb-485c-bf2e-880302efeae3", "sighting--c6431c31-f381-48e5-b3da-261b77b57840", "sighting--c843e485-321e-454f-a45d-d399093f423b", "sighting--46266039-ce0a-4802-a700-a656eb3fd84b", "sighting--bc56bba6-f2de-4790-8579-03a407c66541", "sighting--d17bd5c9-bc39-4d35-9ed4-cfd0733be894", "sighting--8bff76b5-3450-45da-babd-2b85e5d8bdd0", "sighting--16e0fa64-d67b-43bd-81d3-a42e0cfd6e3c", "sighting--312027ff-dc0a-4347-b06d-518474e1b8bd", "sighting--4e8a597e-eaf5-49c5-bf0e-ad4de127062a", "sighting--1df3c277-5c62-4f57-9d25-857899120f93", "sighting--218cdc36-3eb5-4845-b6f8-9ca571ddbcbb", "sighting--50d04e49-d934-438a-850b-4a79e5458c3c", "sighting--c740cb6c-a032-45cf-86be-8e141131e55e", "sighting--daa271be-e461-4b9f-81f6-f3b8547c0e4e", "sighting--5c5185a6-1811-4fdb-99a2-118112475e22", "sighting--8e2f5eda-90ae-4e44-9438-294f9d795c47", "sighting--2d53e326-ddd9-4764-8979-75d415264f34", "sighting--1bc05f84-5393-4efd-b5fd-ded0550c918e", "sighting--abcec284-d624-43af-b2fa-f80cc3e761db", "sighting--6f978873-a7b0-4874-90af-82802e622219", "sighting--5fab3b7d-e850-44d2-b883-b4df7149fe81", "sighting--3206bb3a-4f96-4b8e-bff2-a7777c861eb1", "sighting--8666f3ca-671b-414b-a1d2-45c980884656", "sighting--15f955a5-0d24-42f8-bc99-29d2a4a870f2", "sighting--47554bbd-e365-49bc-8628-77ca427817e4", "sighting--78e9e9a2-95fb-46c3-93b1-f2010389f3e1", "sighting--b59134c4-b596-4daf-972b-5be31c7b171b", "sighting--9632d59e-1d48-421f-a1ea-34d2c597688c", "sighting--fb47a356-de51-4eae-8722-6cb3da9b3dd3", "sighting--503763be-71bf-47a2-8a3c-8b93a269a7d2", "sighting--32522993-3a5d-4b6b-8b0c-c55c2e3af226", "sighting--80393e0f-3091-44a4-9b16-257f9aa2fcab", "sighting--9ddb30d4-1d2e-4262-85c2-36e24f8483b7", "sighting--8e3eacb7-a0d3-4603-b38a-63b2cad8d125", "sighting--7c1a825c-3e38-4174-ba02-ff7a3bbd7f7b", "sighting--f9b3a245-14f2-45d7-9120-4f25ec76c72c", "sighting--d446ba4f-f5a5-4af6-b2ca-ca8845b52d3f", "sighting--deb3e54d-0b44-46a1-ab9d-5ea246eff533", "sighting--04c83dc4-04a0-4e1c-b44f-59d2560018f1", "sighting--0da82635-24a7-4124-be6d-f56c183141af", "sighting--63986363-c10f-430f-9812-d48c8f94e0b4", "sighting--5c1eefe7-29b7-4a20-b011-d5f6601bec47", "sighting--8f2b299d-e80a-4324-ba5e-c6ef5a288964", "sighting--1af566a8-fad0-48bf-91ca-95cd692c7044", "sighting--63b9a237-f7e4-4f7f-9872-c7551ff8e9d8", "sighting--43401eed-7cfe-4114-ab28-e79f4f8b478d", "sighting--9d50537f-06f0-4102-aaaf-a0d6f46062fc", "sighting--ac02b656-bd80-4ac5-80ba-31cf66d7f0e9", "sighting--c4dc2053-b793-4740-ae82-78cf19144626", "sighting--572528e6-d35a-43f3-b18e-7b1d99284811", "sighting--3ad7df4f-a07b-4917-a948-9ffb07d7c388", "sighting--e6eec1dc-23cf-4064-ba87-a1b572f2d167", "sighting--617aea37-686f-4b41-a588-83dbe401ffa3", "sighting--d531d88f-9d23-43ef-a75f-c6fdec2dc4f8", "sighting--820940a0-1e2d-4a29-950b-21ec1df6ef50", "sighting--0013594d-113c-443a-a950-b4f803c3ff6e", "sighting--9fbafe9f-05cd-44e2-8445-18a66a5dbad8", "sighting--79892333-4bac-4a8f-a61f-312a244f6b02", "sighting--822db5ca-b9bd-4d65-89a9-8f70a254a4e8", "sighting--ff12255b-7419-4d14-9302-1d57f594f2cc", "sighting--b1ce69b7-4c6b-4016-aa75-e4432278b583", "sighting--56ae13a9-4437-4515-a5e6-77dfffe3c5ef", "sighting--e2da4c81-398f-4f19-9e8a-e74620adf5de", "sighting--45dd57f6-08b7-4964-8b38-982c0de641f7", "sighting--52055cf8-9b26-45e8-9760-0b944a525fbf", "sighting--0003e42e-f3a4-4c17-b096-ddbe3c9c611b", "sighting--d884c951-051b-4457-992b-d2cbb797944a", "sighting--d49acbac-f493-4210-8e90-59b1a20d31d8", "sighting--218d8766-fd28-4f86-9cbe-631ae19c2e31", "sighting--28066fec-5ce8-402f-9b5a-2a3cebcf42b5", "sighting--06cbaa15-7359-4f64-87e6-30de4995c50e", "sighting--f499e6a8-801d-4689-9872-a4a51c2d5ae6", "sighting--1432ef87-f033-4dd4-8bd2-9ab23c5a267a", "sighting--58fdc262-fcf3-41b3-b4ce-2e37e58686e5", "sighting--855ecaee-cdf0-4375-9a75-9ed517a09862", "sighting--3d45b6a2-d99b-4c1f-8d6c-d6592dc653aa", "sighting--0a8457a2-451b-422e-821a-9da949485513", "sighting--1fb58981-e395-44f4-bb35-9ac053d9cb82", "sighting--11a0b805-ddc7-4de3-b692-c0685d6492d8", "sighting--4ac481b9-c1ab-4a05-b0d3-6168e460f48b", "sighting--a86ed4d1-8685-4a0b-8d7e-112209603ad8", "sighting--2c775d9b-461e-446f-a05f-e4acc0a4b304", "sighting--aa71f7f4-c798-4763-942f-1b6cd09d47d0", "sighting--42004ba2-6dcb-4381-983a-52f994e3b77e", "sighting--a1e38560-5b6c-491c-9df8-da6032a49515", "sighting--38260266-b624-49d1-88d5-c79f05e7f0c6", "sighting--21e5af3f-b836-4c81-950b-f3eeea605970", "sighting--b587d91e-8903-45e8-a2fd-5bd837e41c55", "sighting--7e673902-729f-48e7-b416-8cde83d768fa", "sighting--80225f2d-07da-4e17-8d6a-aed29419bcc7", "sighting--51707762-03ac-4197-8b0c-e32e44c8c2fe", "sighting--aaef73bc-5fef-48cb-8f2f-4c46860065f0", "sighting--bb4ec97f-cdb9-427c-8c39-4f11cf614332", "sighting--29b046b7-42b9-435f-aca5-f95399d57285", "sighting--9c098281-9388-45b7-9c91-abbf3e50188c", "sighting--347f6aee-797a-42af-b3a6-a06cd60ba69f", "sighting--8d129b47-6a74-4395-a2c3-1591703bae3b", "sighting--f0f1365a-99a7-4c77-bb52-0f0be1c9f9f6", "sighting--411c44ce-d3be-41ee-8a1d-77e5beb204f6", "sighting--7a10d674-6a91-4f4e-aa19-716d2959170f", "sighting--fa637c63-8b35-4a02-85f5-a551eacb5429", "sighting--982c6ef7-8f82-4efc-9092-6c7b268919da", "sighting--7e88d744-8b2f-49e8-9b6c-b2d63b8881e4", "sighting--5068b077-d313-4390-aa67-d0eaf1879b6b", "sighting--12939056-fe9e-4eb7-bb9d-0aeaf9eb3392", "sighting--6c160c33-a82a-4ae5-8c68-c8beae205632", "sighting--f4906c8f-2ec2-4854-99b5-c45aa8c808d8", "sighting--96a101a9-b38c-431e-bba5-beafd30d41fb", "sighting--5543fd70-c939-4498-a093-739a5b4f59d4", "sighting--d2d7ebf3-aba7-460b-888a-3f2d220ccde6", "sighting--b06cc6d2-494b-4223-9c7c-4bb5992660cb", "sighting--912e7750-a73e-4744-854a-404b2bad01c2", "sighting--9f1f2794-2dcc-4b94-bce2-36a170440045", "sighting--55e70258-1bee-46eb-9a67-2b45320746e2", "sighting--a382b4e1-ae2c-4515-8db4-07360999bb40", "sighting--08b7b4e5-56cb-4688-b2b4-e7c305370200", "sighting--c667b699-781f-4741-a3d8-4a82c0024f32", "sighting--40bf07c8-8958-4ca4-8468-828d3646a1b0", "sighting--10f6b31f-d08f-45cf-8dc9-05831e8efbb5", "sighting--b8c6b0e3-f08c-4361-a865-8d26d32f70ae", "sighting--663389c1-d910-43de-893c-b61ffdd5e77b", "sighting--f930e653-1460-479a-a9b4-6a33a8d39e3f", "sighting--1c54cec4-5f07-466d-80d6-3065efbfb57c", "sighting--6dececb6-32b8-4470-a515-6b18fc9b8a1e", "sighting--ee6074e1-5966-46bf-9905-268cf1deebcf", "sighting--d32f9b36-80d7-4bd0-9a33-cdf20367d8c6", "sighting--91bf926a-f462-4537-98c0-657fc7292c54", "sighting--76079c32-a5f1-4b74-a504-d4bf185c39f4", "sighting--32818d5e-02bc-4290-af05-df361d1aaddd", "sighting--69f37218-c7b6-4d48-a52d-e2de66e2a16a", "sighting--80ebb6ff-b0c1-475b-b2d8-eb69026bb822", "sighting--a1b9594d-0c82-4bbf-8e55-718da00ab325", "sighting--7c0ad6a8-53e4-4bc6-bdba-94328465c45d", "sighting--9ce19f61-adbb-4e5e-8446-8d50b63f5b32", "sighting--9cfbfe0c-edf9-4976-93fd-e492e2f1d7ac", "sighting--9c6ad556-24a7-4d1a-8cbb-96e48c4621c2", "sighting--b0f1e2e3-7c77-4a18-81cd-08821019e737", "sighting--06c6f17c-5811-443c-9d66-8370611c10ab", "sighting--1ad44bbd-d6fd-498d-996b-f74c8a4b7070", "sighting--c25e10de-ac08-4af1-bc89-ddaad90c554b", "sighting--31dd27a1-43a2-4a5c-8ed5-8b2ede748379", "sighting--953cd7bc-197e-40cd-80a9-ff4d16005d46", "sighting--d1f84ef4-e5a9-42cd-b268-8d4af3912aff", "sighting--dadf1866-507f-4a2c-89b4-d101f29ae8e4", "sighting--f9e3533d-964a-4a36-9dd4-43e021bde28b", "sighting--3e0af4f5-6d89-4241-8b99-3acff01b56fb", "sighting--6b22dab0-5f80-4c42-9f20-e8f38b6bbe56", "sighting--ff225380-e393-428e-ab3a-5b1adbbb3d38", "sighting--fd9945b1-bc8c-43fa-b836-e4407a054974", "sighting--e3e029a1-488b-4c8f-a1ce-b8760fca9ee1", "sighting--8942342f-3cc3-4efb-af17-c64984501eac", "sighting--d80f8fef-98dd-49af-8bbb-241947e830a5", "sighting--98a58927-a582-411b-a565-1bfb03deb871", "sighting--c9e09b97-1221-44b6-bff1-337eb7b15b76", "sighting--172559b4-6119-4436-928d-696ede5a4825", "sighting--bb4fb319-dbfc-4928-af36-4724d286a365", "sighting--15886443-1740-416b-846d-21429881c5e3", "sighting--c77fe8fc-0b24-4628-a313-09694c5ba392", "sighting--1c46a7d9-a0ef-4170-8587-82a67ea7b1f0", "sighting--65efd9a3-41fe-4abb-8b13-0902ce4a8230", "sighting--c6436bc8-b27f-453f-bda5-e2b0297918d8", "sighting--b8c086ed-43e5-4c36-a891-ce38446f604a", "sighting--7015abf4-3be8-41c0-a937-03d24dad424d", "sighting--4731dafd-a86c-4409-aa47-928a8e0c0f05", "sighting--24a67b75-b907-4f34-9e67-44895b84912d", "sighting--e44f6fa0-9281-4a78-aa0f-566c08da5eae", "sighting--a6518699-777b-4f2d-b3fe-b523acd80ea2", "sighting--f4347074-41f3-4532-b0eb-b03c75b4b16c", "sighting--5eadc0e5-a03d-49c6-b236-be621dc7ebb2", "sighting--8ac15c31-3b36-48b9-9b8b-b44f40e6014f", "sighting--1f8da8e5-7370-4da0-9f2d-36f273b2d1b4", "sighting--9cbaf03f-2b61-4a99-9c44-94effaa45c40", "sighting--ca3eb856-5c55-4c5c-8a93-01d5f682568d", "sighting--dcf610ea-e9f8-48e2-8498-9005a72becd4", "sighting--27b657de-2185-4e39-bad8-3f55d36154df", "sighting--595eec31-f1eb-484c-bf50-4245121a8a8a", "sighting--4d22eb4b-c675-4505-ac1d-42a13b0cb455", "sighting--d4434f65-ce35-48eb-b059-55a036556588", "sighting--7ed156d8-3bcc-4cb0-bfab-540056edc03a", "sighting--5ef27dca-7f77-42c1-a05b-b585b7d8e35b", "sighting--9c6d2260-4064-4281-9193-1929a809daf4", "sighting--036779fc-8b57-471c-a6bb-a1403bc0b2f8", "sighting--429fef74-4e31-4e96-b7c1-e79a8de7ca20", "sighting--edc4d6af-5420-403a-b2f3-3517acb92d2d", "sighting--8b753071-d225-43ba-bc37-dd75a9b8aac3", "sighting--c29c39e2-2921-4859-afde-f58f85d21113", "sighting--d262ced1-881a-4125-aee7-5bf51904b7fa", "sighting--35d6c2b2-e357-4141-88f4-b50c62db471c", "sighting--f09ec013-a012-44c8-b1ac-afe9eb8f4f9f", "sighting--89fbd577-ee7f-4f9d-9601-d9792b5f644f", "sighting--1c9cf535-6040-436e-a2f0-2365fd09cfb8", "sighting--d4cd6c5a-cdfc-4c89-a4af-98b63edf2cbe", "sighting--36702314-85ae-4529-8121-7fbbf484ff36", "sighting--628f9819-829b-47df-95b1-1e3586ad8de4", "sighting--dd186bac-52e0-4bf0-9e3d-4f7bbc5403cc", "sighting--8c0a0c3d-32a3-41a5-b5c7-394d83728979", "sighting--435352f9-7f97-435f-b58e-aeea4f79d5d2", "sighting--dacd6e0a-243f-4671-954c-4db8ef9ebbe2", "sighting--db172010-abbf-4b86-9069-c2f2ee6440c7", "sighting--e041a4d4-a623-44a9-bb71-ab4fa861556e", "sighting--6fd14c23-ce93-4203-9c45-f2ec2ee398ff", "sighting--40893ee8-6ea2-4083-bd56-b360f4b83199", "sighting--699b767d-51b8-4a14-a72b-6240ff752356", "sighting--3e3e4428-3271-445e-9001-e98c90a8322c", "sighting--1edc02f3-730c-4d7d-b5d5-6926ae1c7a7e", "sighting--dc358654-1123-4e94-b660-b644b89971e8", "sighting--a551f551-3c9f-495e-9419-195a2df1ce35", "sighting--0fac5c99-06a8-408a-a7f7-d2e687d3e395", "sighting--ad40e3bb-22ce-457e-b31b-7bbfa88731eb", "sighting--cc7f8e0b-085d-43b5-9d31-2f33ec970f3f", "sighting--323843b6-8cea-4ea4-9864-0ce37c19f4a3", "sighting--3364d8f3-f7e5-4b9b-b61e-e4ef9946b574", "sighting--188f6a66-5260-49c7-b6ce-62ea3103db2c", "sighting--e2d3d542-2965-47ed-9559-c4e984658bdd", "sighting--8199c046-77cf-4193-a237-efcc9ed6aa89", "sighting--d9aef126-1e80-409b-a9bc-a032ee6b7a9d", "sighting--24d00afd-6b1d-49af-a819-ca63ae26dcc9", "sighting--fe7dd19c-7647-472e-b190-c09b1f24a82c", "sighting--7949dff0-9404-4e29-9b02-7c083a19af58", "sighting--48511ec0-9141-412b-b3ef-c41e8e29508c", "sighting--12bf513e-7eb1-4e6d-88f7-ead162811a30", "sighting--0961ea14-c568-42a4-a337-ece201a676a8", "sighting--fa17f996-097e-4670-840a-57c981efb961", "sighting--d528721f-4f10-4ef5-84bf-dddf3a8fe8b3", "sighting--fdcfce58-fc05-4f4a-88dd-d0312b9c7866", "sighting--83b082e2-6010-4a06-a645-9f06719182d2", "sighting--dea304cb-c4f9-4467-a046-69bb4c379826", "sighting--91067d0e-f87f-42e9-af1d-73df8b0a3fdd", "sighting--c2b90e64-e2b0-4a0c-b7dc-1bde897b52f8", "sighting--194c45e9-d2f5-472b-8eda-8d42b554f858", "sighting--5c5e7d7a-7d30-4daf-a680-3aeafa27d6ae", "sighting--ed61f68d-9fce-464f-a279-049f9d494759", "sighting--0b290f31-03b4-4e2a-85c1-28a923dfd761", "sighting--9bf42b6e-87a2-4147-ba00-9a08fb57ec19", "sighting--e818e048-8605-4c72-a8ed-91a2764160f3", "sighting--ebdfc968-9ab8-4fff-83ea-f71d07ca4dcf", "sighting--38f5dd6a-b4d6-4a00-be6b-fb61ceb39679", "sighting--473ad9ac-c6ee-4af3-b8dc-fd5af5fa5c74", "sighting--56dae01e-757c-4916-9708-1fd396c02e71", "sighting--e763cb19-5bf3-4a1e-a06f-606ba75d7698", "sighting--2130bb7a-93f1-44f4-8979-36e4f591fa21", "sighting--85c552a3-c9d5-47ef-98cb-ad5039c8d3e1", "sighting--264eeb5a-da70-4693-84fc-c1f597b3781a", "sighting--66f92aa1-9b85-44d6-bea7-81a3899c2c3a", "sighting--5501120d-9e6e-4b0f-8288-0e3892f9169a", "sighting--7c237dab-ebdc-49e6-84b2-216d3a1c79e5", "sighting--91987053-4b19-4e41-886f-d7edd35088f7", "sighting--b8c083c9-6181-432a-9230-3a0fd25fb480", "sighting--dac64d9e-7c62-4414-a822-fa674bef948d", "sighting--77a40ff0-5c66-4fc7-b6ea-69b7dff9473c", "sighting--ccb6464b-4a4c-4fc0-b92d-2b7b3c06a849", "sighting--0d60ac73-2abe-45da-8d7e-df13e0219768", "sighting--51864342-ad4f-4ca0-924e-b8d26eda4d01", "sighting--8cff7686-d6df-4e2a-8c3f-00b1ef77e8a6", "sighting--63f6c1fb-9970-441b-b326-c06c57efa30c", "sighting--2e5b31b2-c9b1-43f2-aeac-5aa69d3d19ad", "sighting--ab997788-6bfc-4bcd-9ab1-5eb57f562c1a", "sighting--d77d3aac-bb53-44e0-801c-da681c69e207", "sighting--7d119951-f70f-4e00-9951-9d862667bbbd", "sighting--b0240aef-4059-4d59-b016-3288c0171cdf", "sighting--0af41b66-0a42-4d57-8565-90016b8172a3", "sighting--cce9dda1-4802-41e5-926d-1c8448d43f27", "sighting--a147c5ec-2578-4e5d-a9f0-a38b8adeeb83", "sighting--1bcd5704-be78-4b2b-96a7-3238f1a58ee0", "sighting--16a07f4f-8353-41c5-9bf2-47b800dad582", "sighting--275b8ea9-1de3-49ea-9325-c0eb1a763b4a", "sighting--d8dbfe78-d5aa-4b42-94cd-5da2e77e52f7", "sighting--b7034758-339a-4788-9766-ac60fc7ad589", "sighting--6ffbf13c-fe66-416d-97fd-3340516871fe", "sighting--882e5f23-8c60-487d-9833-ac386d93fdf7", "sighting--c8a27e65-768e-42a3-b875-99a04a52e879", "sighting--1356e643-7a1d-4c88-9906-7ef0cd1cde4f", "sighting--2daba6f5-0d7f-455d-8873-911e19e47ce3", "sighting--dede58ff-6b5a-48ca-9a2d-097812ac473f", "sighting--46e6f3a1-0abb-4df8-945c-23f49ad94c43", "sighting--8d422667-0d2c-498b-9578-02e5361eec12", "sighting--8619bd2c-77ff-485b-80f2-65392eed1a01", "sighting--6cfb1b0f-199b-436a-a730-a975d1d5b86d", "sighting--28807c4b-1dd8-4a1f-933b-4d44356a975f", "sighting--944b7742-c7ea-4b9d-882c-2ac0cad5c3ab", "sighting--3b06011c-b737-423a-b486-47c7b5535a53", "sighting--8bc28b96-455d-4b3d-b4e0-596bf064ca9a", "sighting--6a17a7fe-b8b6-4f18-a57c-f00c6f5bea7a", "sighting--597a7148-b239-4474-9103-c8dc3afc5200", "sighting--177e40d2-c846-4479-9af4-c3a21368c0cf", "sighting--d221dcbd-2a46-4079-a748-8a545d7795ee", "sighting--90c78c01-46fb-4a68-812d-d554db6d9a61", "sighting--2fe0740c-e3a8-4edc-8ced-c40def85a091", "sighting--3142f6ea-55e0-4e24-bfd3-b66c2fee380c", "sighting--f538d9b9-f787-47e7-a6dc-d8a549c472ec", "sighting--b34d9f9a-6ac9-4bb5-8c2a-2d0a5c8253f5", "sighting--5ce79cb7-d495-47ff-a56a-4c4bc20e55d2", "sighting--c0eb123d-03ba-44cb-ae66-400b78e49a51", "sighting--c377cf9b-9d02-48aa-8c41-75527de4fe06", "sighting--7cf5bc60-cc2e-482e-80ab-ea9f9804aa7c", "sighting--6a8d01e0-b6f8-4841-b5ba-9c08c4c56b5c", "sighting--e8012ae0-87bf-4fdb-8169-131a99a8de4d", "sighting--9d02f6ca-603f-4e19-bd61-2931026d1a23", "sighting--cacb3e43-7c51-47cf-bef1-7f14c5898448", "sighting--2c5780bd-e049-4447-867f-224eb2b6f78b", "sighting--9dabbd34-8f03-4571-aad4-ccda3b76ef97", "sighting--eefbb056-f454-4f82-b946-2ae241051836", "sighting--a6834538-5b36-463b-ad15-23dd0e87d6f3", "sighting--ab2377e2-b196-445e-9057-6b6a0a4daa62", "sighting--a5a39d47-a929-429d-908f-4d3b4e61ee23", "sighting--5c85d3e0-78dc-43cc-9403-d711fb8600cd", "sighting--b4b1671a-2917-4ecf-852b-b1d6a17da7b6", "sighting--406287eb-9a3d-4dc6-9469-f9b09d5410df", "sighting--5321898f-76d7-4e40-9421-ee41ed859c00", "sighting--6a87facd-fd1b-460e-a37f-7fdb908654a7", "sighting--e641e2bc-5380-4f08-b96a-182be7d7e10f", "sighting--3316089e-9d8c-44a6-be86-3881d9638422", "sighting--9d6b04b4-3846-4dfc-b21d-229e7aa49380", "sighting--0a05091c-c56c-4276-b395-4b527d1b540a", "sighting--22fcc31c-f4cb-48ab-b048-56ea3d5ffc48", "sighting--9d185fd1-56ca-420c-a9e1-14444341b631", "sighting--4a7705cd-5c70-45ff-9673-6093a42e1b72", "sighting--1d4c6672-904a-4bf0-8697-542c6550a327", "sighting--67e60e6e-a773-4d3d-8c55-f5539f63669b", "sighting--801e8b54-0305-42d7-a81c-b86436e2bbcc", "sighting--4b565063-34be-4cdf-89c7-a4bef855e06f", "sighting--74da10ed-ddf7-40fb-9173-955cb10dc9ea", "sighting--2e198e9a-f041-4d3e-9586-5882085eede7", "sighting--718decde-d4a2-4262-9bbd-6295c6932e3c", "sighting--5a28724a-c276-477d-99d8-389fd649c106", "sighting--e4907bc5-beba-4aa1-a423-323a8565b60e", "sighting--923e5df5-9080-440f-9086-14b2203fe413", "sighting--3a1afc2e-bcb5-4feb-ad99-02ca691498da", "sighting--8126de0b-d09a-425e-8bb7-b91696b77096", "sighting--b1a5d620-276f-45a7-ac65-55d3d900961b", "sighting--81c578e8-78e4-4cba-ac4f-300c13587d82", "sighting--b57bc071-5fd3-44e1-9205-33847f9939f0", "sighting--ad3b92a1-b832-4c6a-b9fd-b19225808bf9", "sighting--1648ce55-3876-4055-9038-5988b6d58ff9", "sighting--6a1b144d-39d7-42bd-b724-dcfdd494471b", "sighting--8300f5d9-a01e-46ba-891d-8584af8338cb", "sighting--a10b1dce-f985-4e61-bb6c-a092aefdb70a", "sighting--b47d2e2b-c9eb-4c11-bd7c-3222101dc119", "sighting--c7cb7544-8ad8-4260-870b-2aa7146f48df", "sighting--3a9a4c52-540a-45ae-9725-149499cae181", "sighting--af64a23c-8894-410a-ab95-5f9033763aec", "sighting--f6d3a72a-06cc-4c26-a212-f36da476a4ba", "sighting--972081a1-19e8-4056-9624-35031d400e38", "sighting--b2b4659e-0766-47a1-b461-63eb0408126b", "sighting--1af92bba-b19f-4d1b-bd4a-98f21dec3929", "sighting--67d037c4-0c60-4f7e-bf89-2bfc900bbef3", "sighting--ab2ae1ab-8c41-4d86-b6c3-a388cb12fbab", "sighting--1a39d8ca-145e-4f0e-833f-3f7e6c275da8", "sighting--e932199f-8f73-44f8-8f8f-3b47bb182f83", "sighting--48b07f77-cc12-4b27-a6ec-4edeb5b5eec0", "sighting--7c938fb6-0e0d-4318-b8d3-dd3da31e8973", "sighting--83279744-bb44-44e1-b0ef-487fa665ead4", "sighting--780279ab-f3a3-4228-a0ab-6a79779c011d", "sighting--44cc1779-ef2e-40fc-bac1-329d33fe15fd", "sighting--3a7684e1-a887-470e-bd9c-a7e3450f3cc2", "sighting--42bebefe-87e6-4287-b2e2-e19aa648c702", "sighting--07b799e3-bf85-43bd-8c00-3dc9059c82c2", "sighting--5b95d7da-cb64-4eac-bc47-c8c6069daaac", "sighting--0dc8e1ad-6adf-402c-983e-9891804ad711", "sighting--3b0dab57-68ff-4b06-af39-201cee81cc49", "sighting--7d580347-9891-4c0e-815d-b5eaddc3d83c", "sighting--f537b56c-3956-4a9a-b55b-8535a3b1d057", "sighting--c894722b-848c-4769-9c57-e1a09b0d7b72", "sighting--17894bb5-0554-4196-b74e-dbfcb24ffdae", "sighting--c88e895c-8649-43ec-841c-857b9016f5ea", "sighting--b38e19b3-506a-46ef-b2df-3c4213dab892", "sighting--77933b17-e83b-471a-b51a-81309cc9dd08", "sighting--b29bc503-f658-4e3c-b825-e2160644e97a", "sighting--7197b026-3ae9-4bf7-b789-e573b7a1142b", "sighting--34a5c6c3-37e1-4cb4-bd84-54ebdc01b3e8", "sighting--e34b2572-def0-4bee-a7a3-e9be35e1eee1", "sighting--3cac2f0c-db00-4ffc-ab32-a8d6fec4f106", "sighting--6bc59eee-16a4-40c3-9db0-0f2479e0c00a", "sighting--789c23a1-ea56-4e19-bb9a-e8e440b87da5", "sighting--71f07a89-1516-4419-8417-f2fabab53b2a", "sighting--1b8105e6-76e7-40e9-8413-709ecba0e74a", "sighting--fe66f39b-fc35-4f46-aad0-eb6ab15b867a", "sighting--6768b3ed-36f3-49c6-b8fc-ea70d299d73c", "sighting--3b5f0604-1596-432e-ad0a-86389bf6dd02", "sighting--4f60885a-a824-40bc-86a7-ba8ec953d1a8", "sighting--ac7aaae5-4e27-4689-b763-afabfea35c11", "sighting--c973398b-4ef8-4d1e-b3bd-a5ce308adaf7", "sighting--5883aa1f-eba3-4603-8275-5cd31f750528", "sighting--868338ea-fd5f-4435-8cd5-21f78abb1864", "sighting--4854e31e-b421-4942-b470-b958332abd88", "sighting--8d4f240f-25a5-4caf-b836-b624fb75d306", "sighting--cd2251c9-ddc6-4338-800f-16b22d13a3c6", "sighting--3e398ba0-0257-40f4-9aa8-cabcb14095f9", "sighting--a91d47eb-c4e6-41c3-a0bd-cd140972a956", "sighting--a1e616dc-ab16-4841-9eab-268ff1c00065", "sighting--393f0dee-9c3d-42d3-9895-6e01ece26717", "sighting--cd6dcc32-0692-4252-bf56-1eddb556398a", "sighting--6b858374-a09d-4208-915c-a858f84f045a", "sighting--73bd66dd-8e66-4486-bb3e-16b143560ae1", "sighting--bb5f9772-15f7-41bb-95c3-7867d36ff305", "sighting--a9c8c8ca-ef2c-452b-a521-3c20d3f701e8", "sighting--15b28faf-484c-4377-898a-3b3153cba89d", "sighting--4ee9dc09-2ccd-488d-9930-790e63c26a7b", "sighting--5387dc97-af17-4bf5-8d58-3ea66f9af420", "sighting--47b97f4f-8206-421c-96b1-f1e077f46f43", "sighting--77a24e8d-fe8b-460b-af7c-12b1ef011fc9", "sighting--d6563d1c-0b57-4889-8bf6-8fce71e99f98", "sighting--cfc8b203-fe7b-4889-b719-1b5858c40d40", "sighting--63b3219d-a85d-4f67-8863-09649dab6945", "sighting--6312da74-f382-4874-8e78-eeca122d4838", "sighting--d6fd40f0-3776-4e25-b9e4-c80f6fac5a1d", "sighting--13362072-8ef4-4c4b-bf76-a91f82ff7bb2", "sighting--3cead6ef-1960-4ee2-b750-f7190c0741f2", "sighting--efe073ea-c4b9-4ac5-b8ee-26694ce82f2e", "sighting--39b53794-dda5-44f6-a1dd-c047fe3c5fb7", "sighting--718f3b03-8777-4d6e-89ce-3db5d072d537", "sighting--2e902a7b-2562-493d-a4f8-9a7bbab99ac4", "sighting--6c4ab04c-bfb7-4961-aa06-1352e3fe0fd5", "sighting--ca884eb3-5afb-4f2d-97d9-90729d64b681", "sighting--e0c61449-0365-4611-8c83-dfd7e21d4d91", "sighting--01ef5937-6c39-4156-b5f0-d900abfc8818", "sighting--f114402b-03e0-46f4-897e-edcdd8cdb2d6", "sighting--e3cf8dca-fc68-4f86-833d-403a0a74ea31", "sighting--5aacaa5c-e941-4c22-b4fe-d5635a8ea110", "sighting--6d689a21-0513-409f-8e05-250b7ab8f1c7", "sighting--b0dd96c3-ecc9-4c2c-b10c-a02169b51c1a", "sighting--0661afe1-0f26-4d4b-91f1-f57c2600a662", "sighting--39c178a6-6e93-4077-bc1f-f97593cbfc9a", "sighting--fd732df1-4581-47e0-8dcb-ed8acf1c5e50", "sighting--c610ed96-f419-4da5-91b7-6bbda265b7be", "sighting--a6b95948-02e3-43e5-845f-c6cc62504234", "sighting--b7b1f711-e048-4fb4-88d0-34416b7ed96c", "sighting--42bfb435-5970-4434-99f2-6a4839e73648", "sighting--ff9328b5-f07c-45cb-8a38-b65188e3409e", "sighting--9a2eea54-6cf3-4361-8b84-cae184ce2aa4", "sighting--e349a568-7215-44f6-bd9d-ec37aff17ca2", "sighting--2197ea37-eba9-4c8f-90b5-f51f74942701", "sighting--db3fb33d-ef3b-4100-8b79-301b02ea4935", "sighting--a382d68f-08ac-4794-9fd9-8c0c0a523690", "sighting--fc2f26e2-277b-4ccd-9519-dfdab48d4248", "sighting--88e7adbc-3edc-46ac-83af-b0c9cacd0c37", "sighting--02ff7b1c-70af-4f01-afb6-e8fff125f1b2", "sighting--63a9f23f-7ac3-4b96-a84d-87cecfd38922", "sighting--0559a708-af83-423e-9eb8-f5fe06773cab", "sighting--6e03fc1e-0c5a-47ef-9c14-338f680a3f02", "sighting--903d4403-dcdd-42a4-9e6b-3938ce707877", "sighting--d5c067f8-48f1-49c9-bd5f-7636eba79553", "sighting--2b5fac81-b917-4dbc-813d-39bc95460ece", "sighting--583b970d-aa73-4f5a-9516-03450c4388bf", "sighting--c92a1c97-0cfb-4fdd-8421-820d5a1b2b0b", "sighting--1f6e4447-bae9-4094-bfdb-ab5a56c42d98", "sighting--fe8d9a07-dc52-4ef5-a98d-4e29d48e64e8", "sighting--4649fe28-feaa-4195-9b8d-23c5e05699f0", "sighting--488331bc-23c3-4594-acf3-dd4e18867e4e", "sighting--08b4b9a6-a5e1-48c6-a947-025554804b92", "sighting--e04f9a82-b6bb-4581-8b1c-50b78547ebd7", "sighting--c0ca4427-c7a4-484f-bb6c-354a633d386d", "sighting--def8db7d-35a8-4cda-b08b-468d7a21dd05", "sighting--6cb376eb-af26-44ba-a7b4-6e973b2bf1d9", "sighting--e5773f5c-36ff-420f-bcfb-b24e77ff5ca6", "sighting--70ff1a9b-dec1-4b60-a0cf-ba327a61cfe9", "sighting--9d503a79-3690-4f1a-bb1d-f7d5525b983a", "sighting--11275f96-6612-48c4-aa0f-01c863336dfe", "sighting--6457c627-1d33-48ff-aca2-07bdf206e1af", "sighting--de137d0d-7edd-4a24-9fd6-8b27d38ca27a", "sighting--1b980ee8-609e-43c8-8b51-8543ec2ae868", "sighting--9c40ddc2-b200-448d-8dda-7d0aec64a25b", "sighting--b7c50182-adbf-4c20-9e89-bb3020957765", "sighting--4c6973e1-65ec-4ead-af5a-a8cb5dccbb3e", "sighting--cb03f5ba-ee43-4ac9-a5ae-15eede2d2a69", "sighting--121d5d9d-d333-43c7-b39f-d24d0290489b", "sighting--e740b46c-6f5b-4d5c-b225-0d276ce0b80b", "sighting--0657095a-ac57-48b5-b6b4-e567f53e5326", "sighting--28d61a8d-2b02-4826-9a46-958249f4cc85", "sighting--25d9951b-291e-4065-bc73-0587b1995f98", "sighting--ce0387d4-d5b3-42e5-9db2-06ef79777876", "sighting--05bca85c-7349-4a52-8dd8-62defbe9aee8", "sighting--0c888404-be59-434e-a19e-6c89f4a6ad93", "sighting--5c4a8628-4c50-47d3-88d3-7b1d2b95f579", "sighting--02d06f9d-888f-4abe-94c2-369d6f4ed887", "sighting--1294bac3-7478-4c3c-9493-277811764f89", "sighting--0ad62386-a17f-4259-8c43-28d50099316d", "sighting--1fc3d191-57a6-4637-bdff-93caf5666cfc", "sighting--731a6f9e-41e6-44a8-bbb7-0f95c890795f", "sighting--c056f89c-19a9-42e6-a31d-389540b679ca", "sighting--9acd86c5-2b13-456e-aa2f-5c312cc967a0", "sighting--1c9df32c-638c-46d0-a628-ba224bb4a3c0", "sighting--26530821-5809-4676-9e7a-4264a23a56fc", "sighting--aa03595a-0cb4-4cee-a933-af7615810e75", "sighting--896b1153-e37a-4f83-823e-d50041aedc4b", "sighting--a5b0e097-b9f4-4c5e-82c4-1799ef7a4b1c", "sighting--388ab72e-b8c9-47cc-a4c7-59aafaad5366", "sighting--e91330db-d5b6-480f-9394-d174f696dac4", "sighting--5ef56e94-bd8d-4d1e-bd4c-1556f94acfba", "sighting--572f6a9a-44b3-4a00-9e89-90f2ec821bc3", "sighting--362e3bdc-b8c1-4b47-832f-dfa6c1dbe18d", "sighting--d7f4aae1-48f9-4d47-8f77-2fd7905b8e40", "sighting--426ef470-431c-4318-bfe0-8e6d5ab2c4b0", "sighting--17589408-54dd-4fb7-9d0f-3d83a062d695", "sighting--989a9d62-19e6-4f52-b0e2-1807f2e28934", "sighting--39478660-6462-4e68-b33b-2c428d74b38b", "sighting--ca5088c3-37e4-4cdb-bfa1-23d24a062285", "sighting--8f2a3beb-b6ee-4822-9619-8a68e3c204f9", "sighting--f2499f00-8d6a-41be-8b92-99c2c66138c6", "sighting--e8cfc622-d188-466b-8db2-dc4625120f89", "sighting--eaf98663-cad8-4da0-9949-ac6b9457a0ed", "sighting--afe7a730-7c51-406c-85e2-e10e0ced5665", "sighting--ea8f538e-3047-4c5a-9bb6-f87e1e94f367", "sighting--9e7dad10-3c00-4085-b106-ddbb3f52286a", "sighting--28f873b5-f9e6-4c11-9f27-5bc5cb0d6f7e", "sighting--e09a1841-79b9-4e49-aa63-f40f3235a7bc", "sighting--0364b15b-8487-49c6-893f-94377b0ddb81", "sighting--944e64dd-1d02-4cb8-9e02-870be3d62d98", "sighting--56ff3d57-7da0-4be5-bf15-7fc3e6c66cf5", "sighting--d27194e7-7abd-4e6b-8c79-390cb013b9d1", "sighting--24534c43-7fc8-47d6-a824-ec28ccefb8ce", "sighting--9d17d0c7-9819-4fb6-94eb-fbcc1010bb8e", "sighting--92dd5c33-032c-48f5-9ba1-f6f0d0ea03e4", "sighting--021a5192-2a19-44b4-9371-25c43bf13104", "sighting--0c1c54fc-e46e-45b8-bb08-f20d4f3f1371", "sighting--76a86ec2-3480-4954-a923-9e9e89462911", "sighting--2ff65e3f-c0da-4397-95f2-099ea3b65417", "sighting--52646d17-0945-4184-bcd3-9edd3d48e602", "sighting--adf118ef-7f32-443c-98a4-38462002c680", "sighting--3ae38139-92f0-49c5-99eb-55581fa0f7e9", "sighting--2e366bdb-43a9-4cc1-b6d5-1ef97c906a3d", "sighting--95db43e1-7ed2-4e93-8b54-8706d9e78f04", "sighting--3129f8f2-6b3a-495d-b2a2-0c199b7819f1", "sighting--963433ba-c4b4-40f6-9b5b-3a0a73e98c89", "sighting--3a1fee5b-6ecd-4d7b-b65f-35bd3549240c", "sighting--8fdf2e91-0ba6-4344-8f64-4367d5b261c8", "sighting--e5c464b5-dab0-4237-948e-9081a2d6b205", "sighting--e7b0e7ab-eeb0-42cb-b11f-f748624c8514", "sighting--6d622b9d-d548-4589-972c-f6eb670d9d6d", "sighting--ccd5ec51-ecd7-43c9-9eda-16a4f8ada9d0", "sighting--edcd39cf-7a2d-412a-97de-9630b781b570", "sighting--70cf2c38-329c-4858-9f77-794090f28f3c", "sighting--b9e3d5aa-bf81-4e3f-8537-8be1f2a649f6", "sighting--d227cee4-db4b-4b68-b847-bf1878349cb0", "sighting--177a3bb0-0c1d-4d02-a24e-ccbe8a933902", "sighting--906d0e40-329f-4719-a7be-5c2e0ccb4b90", "sighting--cd81a3e3-b643-433a-9ce8-4cf14956d902", "sighting--f6ef736e-e2e6-442e-95f1-23bb1c9a95aa", "sighting--43e21524-f2b1-40fd-ba84-9878c9dc96c9", "sighting--ec8bceb6-05bd-4d90-9259-cb0071cf384d", "sighting--ba331ec3-22d0-4344-bbe4-8e78e1e59504", "sighting--822925a3-3fc2-4410-9e70-32ab3f5f6336", "sighting--1c1cfb49-ca34-443f-894b-1861175005b0", "sighting--bcc0f58a-b3b9-440d-9f97-381f3868b4ff", "sighting--facc14a5-865a-4d9a-95b2-cece45fb9a8e", "sighting--38d6aaec-7270-4b52-aa7b-ce2734af2acd", "sighting--b94dd0e1-3f69-482f-b913-b82fd66c4ff2", "sighting--9abf9368-1bc8-4d8e-ac7b-af7d8f7a1c40", "sighting--b79f1323-fa8d-4116-ba1f-4ddd763d058e", "sighting--6e6acd56-4325-4cf2-b3ac-2c52a5a07c29", "sighting--a228ba98-102c-4c11-82af-bb040e6bb0e0", "sighting--d77ffbbb-fe00-4f8e-8125-74d50939321a", "sighting--3956a691-cfd3-4ed4-8cda-8022fe890c68", "sighting--673996e7-0bf6-48fc-b58d-525b40fd1d96", "sighting--b4e7bd40-89a8-444f-8d3c-79dee2fd2788", "sighting--34c0d720-0b45-44ad-8855-27c5914c9da9", "sighting--ebf2682e-48eb-4382-8e96-a8114c64a0a3", "sighting--6a5facd7-e85a-4f00-9513-b3d8b14a5b9a", "sighting--57d58ebf-1241-437b-9e0b-6af4f7204ebc", "sighting--ec92b959-f7dd-4079-aa0d-2682a016f337", "sighting--b4e387ce-e5f5-47d7-99b6-73b228058d06", "sighting--16427c93-d785-4de1-88f0-80601befec7d", "sighting--63eca19a-3076-4e7e-be46-4b9dc5cb6c74", "sighting--bb0cf62f-9e88-48b2-88a7-d4abee8b37a5", "sighting--31118a5b-5e1a-4dec-bc52-7d5b956e1461", "sighting--17773a9d-2aa2-4604-b9ef-e227b61450f7", "sighting--f5621826-81e1-4e33-aa1c-6c0dcf6103ba", "sighting--6291f078-ee5f-4dd7-8704-99b751669122", "sighting--37eaf4b7-b3a0-41d7-816c-a4a09c896c83", "sighting--b040fbd3-b272-4e80-8487-53ed6f0e5682", "sighting--56d3c173-5f48-445f-b0f3-d2ff612bb60a", "sighting--100f9d08-629f-4380-9584-4c33e11e4587", "sighting--3c8164cf-ebff-4f4e-9adb-53cb3a1528e4", "sighting--e268ed27-3729-408f-b6dc-f2e2e4d8a7c3", "sighting--f7b73479-8185-45d0-91df-46fe84021e69", "sighting--0215038d-7511-49c2-bc67-9b22039071e3", "sighting--23c75ce1-6820-4073-bc75-b2cfa892e88c", "sighting--4daeb730-11d7-40f0-a0b3-f31c21ca4b75", "sighting--8dd0fdf6-32ee-47e2-b13c-cd6edbc7b2ab", "sighting--caede0a9-56a6-47b8-a6b0-ed193f6f8872", "sighting--f45912a9-0cad-47f3-a73b-abc04f1dfd6b", "sighting--b9ddb8cd-b866-4cc8-bc9c-4e2a5fa58b73", "sighting--06ec5844-1adc-449b-b381-ad9eaf3e5cab", "sighting--0209825c-30d5-4198-b37e-4ddbae4686f9", "sighting--795904b7-954c-428c-87f5-add1fcb921bb", "sighting--03df3347-20ca-4ad6-a2cf-16c0ca71e869", "sighting--75788a61-395e-4f1f-aee2-3c287849e849", "sighting--bd7ee773-2a05-4858-92f6-4199ab5ef28c", "sighting--152216bc-d91f-4e35-a8fe-3ff0a7bfd3ac", "sighting--e77b1cdf-a8f7-4a64-ae7a-d76ede53f444", "sighting--8b2fb458-1675-4178-87d0-c4859470d430", "sighting--dfd786fc-6dea-44be-8e9e-ca4c467e376e", "sighting--f1690a84-58fa-472d-b418-06563259f336", "sighting--b366e886-acab-4349-a77b-4d22c9703842", "sighting--360c2263-fb5d-4aeb-a8d9-b74f8acb282d", "sighting--64b3bfef-5388-4f3a-931c-2d1ccf6b09f3", "sighting--8ba970a8-a331-42ea-8ca5-e8a40dbc5e40", "sighting--b006a316-9ea9-4cf5-8bc2-5798bf62e3e8", "sighting--2f0637f3-2a9c-49f0-b1c2-beff44942a40", "sighting--4c047c86-9862-466d-9cbe-2804a67169a3", "sighting--7eea887c-42a6-4ddb-aebf-ec89e69a256d", "sighting--f4430c45-b916-447f-8ebe-cc130e45b867", "sighting--402f500f-7d4f-4b8e-95ea-b6ce3bff93b9", "sighting--67f8a781-9082-4c80-82f4-7857fb4eaf1f", "sighting--97274152-d843-4c68-8337-4b6e7378296b", "sighting--76af40f9-df8a-472a-a772-e3a1f6822304", "sighting--c36f0685-b6a1-4e91-9743-a4a003ff31bf", "sighting--2c0b8f0a-452e-4036-a237-a7f2547d8753", "sighting--e8d54ae2-1f57-497b-92f7-75236a9f914d", "sighting--e999889c-7d9c-40f2-8aa8-fdb541bf37e6", "sighting--4dcf425a-bdaa-4a05-adfa-5b50112c0fd7", "sighting--da2bb429-0f82-415c-b36e-cfd792397ec0", "sighting--dfa3479f-2a4d-4432-a90c-5afc1ada3a92", "sighting--1952e389-e852-4916-af6c-2ba1b0d39b39", "sighting--d84980b6-60f2-4050-835d-a90541fce1a7", "sighting--95b5e45a-a0ab-471f-ae92-ac1b31906dcb", "sighting--5cb81020-78ee-4046-990b-94e1a568e16b", "sighting--b413aa5b-0404-4d88-ac75-bf2625225979", "sighting--6ea99755-9f93-4a4c-a097-8797fc9f4dd6", "sighting--13f221e4-cf0f-4b90-9a45-909284bd7743", "sighting--8d4f1baf-b3da-4680-88c6-44f3dd1caf44", "sighting--f27540e8-e1ec-4cff-b2a2-cc6aca82a190", "sighting--a31f613b-bc49-4254-8916-bacc04896c50", "sighting--8f370d63-f0ae-4bba-bc63-e92ad6626518", "sighting--6bb21ecb-82d7-4a9b-9998-e035a0924217", "sighting--bbe042c6-0d5f-431b-abed-407a84fcb52b", "sighting--1cfd732a-cdcb-4eca-ab0e-a0a3357e411f", "sighting--5778420b-57ff-42f9-815b-6e341a088313", "sighting--1808dbb5-bac2-4fe1-91d0-4e7b1c49abed", "sighting--611f9ae1-a7f5-4e40-b2ca-0acb54bd6fb4", "sighting--20773fdf-83cc-4b49-807b-3b2ff6a79f41", "sighting--aa34a510-d29d-4466-84ea-c96cc1297078", "sighting--cf4a4338-f5f2-49fb-bea7-85bd12734fec", "sighting--7578f120-8ee2-4bfd-9243-a469563ccc06", "sighting--9d16ab37-6904-4ee8-8372-b31b2601cc45", "sighting--bae6a047-1a44-4a88-8c2f-d8d64262dc8f", "sighting--89dd0066-c001-4672-b185-4176de315ec7", "sighting--8d3c9148-777e-4bf1-bdba-a56c5caaa3a8", "sighting--eb7f75e6-035f-4223-8410-f8d404027651", "sighting--44907fef-6e9d-43cd-b1b3-77ff05a2c38b", "sighting--457c6086-e999-4eee-9643-55fcdf520042", "sighting--405b1427-7c6a-4f80-94df-015032dd20b1", "sighting--f9675e9d-c7ee-406f-acd6-433bf18ae8cd", "sighting--94d9222d-c946-43bb-a195-4e8be0641821", "sighting--9f075833-bdfa-4a0f-9498-33b9c522c929", "sighting--30f86549-e87b-4ea6-8ad3-0d0a0754cb85", "sighting--69b061d8-1a9a-42b4-aff4-e1e0c9605d2f", "sighting--94363ea9-b548-4ff3-8c01-97403fb127c2", "sighting--57e7d968-2a8f-4828-976a-8112b3732e56", "sighting--71fee6e0-28eb-4050-a2c2-f652dea06a98", "sighting--5951a5d3-0c43-4ad8-9fbc-3251234fa013", "sighting--ce535f00-2607-4371-90d8-18b52b879812", "sighting--0d2fe61c-ee36-408a-a04f-eaa142ab95b3", "sighting--edea0d92-dbfd-493e-a307-e6cd00e871fd", "sighting--78a53f4f-762c-47c2-b6d9-f7648100f916", "sighting--87d4d3b4-26c8-4140-aad5-ce1f7d97f840", "sighting--38359a83-c0e1-4294-9a19-8664a40947cc", "sighting--bb322bca-e89c-469f-ae07-0b78e1d9833f", "sighting--7a032495-4e61-4b44-bf26-22cc3e99494a", "sighting--5aaf0ba0-f369-4bd7-b8c3-1083abc94d46", "sighting--acf84254-f9ce-4fdd-a868-d6bd4668787f", "sighting--0bec9529-56e0-40f4-8164-3a80afdc7ade", "sighting--06e50478-9274-414f-9ec1-5de2ba4e2390", "sighting--24ff6927-4ee4-49e3-bdd2-44b9252b6dac", "sighting--57bac164-fb67-4195-8974-3a8009fb231a", "sighting--02ebfd0f-5aee-4e7a-8850-4a74701a4d7c", "sighting--847d89c8-5ab8-4f67-8f18-3a38662bdc87", "sighting--d51c3b2c-2f9d-46cb-a7a0-557552cdb6ea", "sighting--2639a5ad-feb3-4365-9b22-d373ed87438e", "sighting--3c99f464-2bda-4bca-821a-709b4da6063e", "sighting--80af219f-b4e5-48ef-92c1-ef73bb3ab66d", "sighting--c80d79b1-e0a4-4737-b81a-0fc43b7224bf", "sighting--f8df7d97-4815-4aef-a27e-7079d1a0c2b0", "sighting--6339710c-e952-4d69-9801-a3c60804b58d", "sighting--35298ab8-a349-4644-8f6b-9d4d911dad69", "sighting--15764e32-e451-41dc-b9c0-5221de1ceb29", "sighting--4d2d614f-1595-4fbb-abaf-62274c15b579", "sighting--66cc028d-1182-450f-ae3f-ff9038768baa", "sighting--309a5bc9-7b88-481d-bc39-55bf3da9bdee", "sighting--3dd3018d-bf93-4c87-a56b-6392df2dfa8b", "sighting--f7da83d8-4287-4b3c-8c86-f80a80d70810", "sighting--1f6e8aea-6eee-4a61-80e0-1d49058f3b84", "sighting--aa1d8163-068e-44dd-943d-245377bc2f24", "sighting--3e29c034-3b80-4178-bdb1-6ce46690df5f", "sighting--b0516613-ee49-4eb0-8dad-063315b4dc5f", "sighting--5d969a78-12dc-42ff-927e-9b403ec60865", "sighting--40737eca-938d-4e19-bc4c-1b7d9f20cf0e", "sighting--1796d595-0d4f-4e5d-8e2e-9a1a9380174e", "sighting--4bdace40-292c-46fd-9b71-ab8f08c7c5e2", "sighting--675a9336-57dd-4015-be36-091e314ae5d5", "sighting--8a33aa0c-91de-48c3-986f-96b8df08f894", "sighting--8dd92710-0da4-4eb8-b4f9-f870514f7627", "sighting--4f3b377f-1342-4af7-aace-e546cc148262", "sighting--60af2f89-2293-4c43-a201-84a1faf8111d", "sighting--b57b4cb4-b157-4878-9d97-88bf3bfa9178", "sighting--6fcb43e5-1a8b-47b1-99ab-80b8e3790eaa", "sighting--bd8ffda4-fa19-4ca3-8518-0320669c1e0b", "sighting--5367fea7-238d-461d-bcee-a5fb49ea0956", "sighting--7648b7f3-6fb1-4ec9-8564-4d2c263fee2f", "sighting--d16b3992-7bb8-4cee-85c5-cfd79788a847", "sighting--db7c09e9-ae78-41a1-8806-71040c44c10e", "sighting--07d5fafd-1f22-4fcc-bec4-eef16dbc887b", "sighting--1b1da28a-0475-470b-a09b-c0f2384fef6a", "sighting--4108cecc-9ae1-40ca-890e-ef0abbda511a", "sighting--1a628a60-9994-46ec-a832-aeacf6a772c4", "sighting--260d2994-81e1-4599-ba38-896f46575d19", "sighting--8d08b1ad-0231-4ce3-a2b9-b4d5b5817150", "sighting--5040d324-86ba-4d14-9eb5-47bbe6fb1869", "sighting--655ffb44-107a-400e-9736-2705452c5d98", "sighting--74b2931a-1b3b-4c75-bdc0-c6e275038d33", "sighting--3b965d8f-b871-4605-a4b7-c4ded306a1b9", "sighting--2db5cf3b-3b89-419f-b700-1addc00b87d5", "sighting--b1aa1509-e604-44c8-9cda-354e508f31b1", "sighting--8386430c-5821-412b-acbb-a93a416d4df4", "sighting--de9f030c-af39-4cd0-839f-e1f8b0f67c1f", "sighting--6da9e588-f72e-4e20-affb-d07be9a289fe", "sighting--d71cb0a1-576a-491b-b4c9-5fee11ac780b", "sighting--6a050d24-f3f1-4288-b2b5-30418413917d", "sighting--a8db456e-6a43-461e-8804-3d7ed90e076f", "sighting--4aa663af-67fd-4a63-aa50-2bb036392c48", "sighting--7302cc45-2e89-41dc-b065-7346b0823955", "sighting--85cd8a61-762b-4701-bc6d-9aba19f23db5", "sighting--e33cca2e-15dc-4c45-9009-72136a5ef3a3", "sighting--3a149f28-81de-4aff-863c-c64427862d39", "sighting--fb17b3c5-a532-4bee-9ae1-3f6f4f96b611", "sighting--5bccb2cd-1401-4c1b-b905-1f7cc91340e7", "sighting--ef1bdc1f-50e2-42ae-a051-7521ee657abe", "sighting--b4691171-409f-45a0-8cff-07bc1f4d397e", "sighting--e45bf067-9c68-44e9-87ae-25cc011d32c8", "sighting--34bb0035-f42f-41a2-83b9-37db7fb94ccc", "sighting--3476ab28-96c8-416a-b2af-2a8ccfafa669", "sighting--18e4c28c-83eb-4d9c-b201-348381656993", "sighting--8d67bdcd-96e9-4f18-addc-6ce186216107", "sighting--6062de90-fd06-42a3-8c16-43fb3f8bdb19", "sighting--aeac0ac6-294e-4112-9921-6ac64d8065f5", "sighting--99d8512d-a1da-4d48-9180-e6fb2735efa2", "sighting--3be58b86-81bb-4faf-a90f-60d7ffcea27e", "sighting--0e58ef08-d963-489c-aada-f69160a499d2", "sighting--2dbb5584-f65d-4aa1-a5b2-5b45927e21a5", "sighting--e2e3a1d0-f997-46c4-837e-5999a20b0a91", "sighting--193697f1-4d04-4265-aff1-5de2397c5b06", "sighting--caa45c2d-1a29-45e1-ab81-70f2c6040700", "sighting--4f85bf90-fc23-4f82-a478-7d403d03ab76", "sighting--8d08a866-e77e-4f2c-b25d-ebc995491726", "sighting--b3f6e59f-bff8-4be4-92aa-99818ff40a44", "sighting--2a62453e-bad1-4f2c-aeb0-a0e85f8197c5", "sighting--726f8fe6-e34d-4fba-baad-5af3aa5a86ff", "sighting--6b29b69e-4b2a-4779-956d-6b19c3855ff6", "sighting--3fae8a18-2c5b-4b39-b73d-5cc137ec11fa", "sighting--d83142fc-5401-4dab-b318-9322b04b3d32", "sighting--5db018e5-6655-400c-a08d-900c652fd684", "sighting--9af32816-a203-4e8d-a295-128f1e8255ca", "sighting--a9e21e5f-212c-4bb6-ad84-68d1a1011c65", "sighting--20930fa4-a634-4deb-9384-92000c4da208", "sighting--604d7677-26c3-4959-92f3-8108a9d8a2b9", "sighting--ba684edd-b3dc-440e-8ca3-c7c459a5d29b", "sighting--085cb34e-065b-4598-b5c6-0f604507efbb", "sighting--2f59377c-39c7-467a-ab21-8b6e52a13fef", "sighting--93527500-31ff-403b-9789-659570ce3831", "sighting--85cc0ee2-4b7a-40d0-ab28-7ab4ebf476d7", "sighting--ff70a19f-ba45-42a1-aeae-82da26dc2a36", "sighting--c7d3c629-ccd6-4ffb-af06-341ae594fb68", "sighting--398d2bdd-d438-4541-9707-e8054d75a5c0", "sighting--c850f23d-b111-46a0-bbb5-ddb86573334c", "sighting--d3d850b5-53f9-45ce-bf2f-a863a7bd7a68", "sighting--6a7106f4-db44-4ac6-bc4c-dca17a108fd3", "sighting--a0fd6281-7397-4c4e-8a26-b05a443a680c", "sighting--ed4df883-e498-4b6f-9ec7-e93bf0141e36", "sighting--682c1f46-a91e-415b-b2d1-b04f627b8fb5", "sighting--01152978-2f40-4071-b543-cdfd900dcd55", "sighting--a987d68c-ca4f-48c0-91c3-bd6f45177983", "sighting--88d470cd-4cd5-4893-abb4-3eee5b18e256", "sighting--cee2eeb3-952c-4d87-b384-a8598524c9a6", "sighting--b3844ef4-6cd3-4cdf-aad1-41ab3fa56336", "sighting--a1885395-2388-43ff-b0bb-511abdf299a6", "sighting--c8afbb2b-f266-400d-b75a-a480d5dff51a", "sighting--4d50e173-4244-472f-839c-b0f157d0d122", "sighting--0549b497-3f8e-4049-80ff-1fb100991d2c", "sighting--9b9fdc26-9acf-499f-abd3-a82ed21c5aa4", "sighting--a0f59bdc-7dac-40c4-967c-e7d7142c5dab", "sighting--724a7880-71d8-425d-9829-fcc313f8cda0", "sighting--9b77aa72-2584-4c27-86c6-158ad06aa789", "sighting--321c370f-86ee-4734-be1c-9343747b53af", "sighting--46011bf5-40c0-4027-be01-71e1016ca418", "sighting--5fd17636-be40-4af8-b08c-16afea2af0f7", "sighting--ee601946-4b04-4f04-939e-11d2b48bfcc4", "sighting--8b27f34b-0583-4a0e-abb1-7630fcc3e2d0", "sighting--977c8401-d49b-4359-b398-2b11c2aca32c", "sighting--117b141e-94cd-40d4-97f5-9f1edd125f90", "sighting--5da24646-a083-401b-bb2c-30dcc263b604", "sighting--13e3e808-1baf-4e9d-b4de-931d13393a35", "sighting--dbe3c773-7976-4026-a3f6-3d2a4bf0637f", "sighting--9aaf0f4d-a8c9-4094-894f-a0f827868c71", "sighting--bcf27ad4-1134-430d-a171-5a4d320133af", "sighting--70e4d99c-6f5a-47f3-ac6a-71932bbf3615", "sighting--dbcc0ac6-94a9-48c5-ba51-29a851560253", "sighting--f1be5d09-1e8b-41ed-9c6d-d44d773d38da", "sighting--4b2681c2-f39d-4a65-9405-80e9dc51678d", "sighting--476b7473-0df9-45fc-a23f-fdc46b737ab2", "sighting--87883f23-9f98-43ee-b8c4-0cb143349171", "sighting--fec41736-9900-405c-b0ea-aa50b4157a87", "sighting--35058b49-015c-45ce-88d2-57b5a571c5ac", "sighting--0c3ffee6-d760-4ca5-878d-df84b0e52589", "sighting--ddff9097-5c47-48e1-900c-562755256067", "sighting--64070fe8-4ba9-4c10-bc6e-5b56f4b50c6e", "sighting--d08ff4cd-7fdc-451a-a045-ac67e72d407e", "sighting--ecc2f5fa-7eb2-48a7-9624-042f11efcac9", "sighting--850a77b3-5f32-45f6-a272-1fe7aa7282ff", "sighting--11f7273b-72ec-4103-9633-617075985cb2", "sighting--30e5a73a-f638-4e51-b8d7-46a0600040a7", "sighting--df1a9687-10b5-4554-abcf-4eb4782ccb03", "sighting--69d2b35e-de71-423c-a693-23f653867832", "sighting--947bd255-f5a3-4da7-b6c2-18bdd9482fea", "sighting--50eee727-2acb-40be-8809-1de00d3e073b", "sighting--e0974b6c-cc58-4202-88e8-4adfcb578b01", "sighting--74a1bdb4-b5e2-4868-a0f8-00440e92c88a", "sighting--df09a943-18d5-42a0-8124-a88c0e2f7b8f", "sighting--f7673e88-7ff4-4761-a988-e080ed136e21", "sighting--4e83acd1-dfa9-4e4b-adfb-d14caeb97406", "sighting--a7577615-aa85-4607-8342-f6c758b97791", "sighting--e13c94bf-83ea-4284-991d-2bb0a17889a6", "sighting--1aade89b-75e1-4389-b710-733805dc1446", "sighting--6769375a-b040-495a-bcc9-b151a9a47e6f", "sighting--23474b76-0d9f-49d9-89da-ac691edb148d", "sighting--a02b68a4-d408-4c3b-be0b-d2d4ccd108f7", "sighting--ef68b82d-1ec0-459a-96df-59b0c3b1c71d", "sighting--28c61f88-58dd-43e0-a887-e089c3c5160c", "sighting--79aa92da-81f7-444a-bfd3-56463368689e", "sighting--e2f1fbaf-2b13-4629-8c30-ddbd9524beac", "sighting--1f310b9f-ab90-47be-aed0-6aee4f65fece", "sighting--9c28f5e9-ea4b-4dea-8295-d529e8be01f1", "sighting--8a547726-18db-456e-84c1-e84373749fc8", "sighting--ff91cf96-f63a-4017-94f0-1b45636d24c1", "sighting--e0e30101-4571-4b0f-9ae4-fc28e26c66da", "sighting--ec199d30-1174-4e76-a235-0ec6def796dd", "sighting--a6519d1d-9f30-4ba3-ab14-e3c8100026b5", "sighting--7e61e36b-78ba-4582-bee1-65225192f46b", "sighting--ba286b78-a117-40d5-afd5-7c27ac60ae40", "sighting--ec385d44-958f-4489-8291-bb533d063437", "sighting--6e61d817-451e-4858-b56f-993597843d61", "sighting--15d63d96-cabb-4905-a1bb-779328782b4f", "sighting--f10a3e3c-b9d3-4c20-bbb9-da590f40de07", "sighting--9c88bee4-43a3-42a1-bcac-2bee0fbb1b33", "sighting--ba22073f-d09c-40dd-b4ea-9328c9f0a8fb", "sighting--d539fbdd-f255-41bd-9a46-5583e57e21db", "sighting--196e44cf-3f23-4f48-a4dd-a68abc4f2f7e", "sighting--1d462fa3-e314-4d79-a612-f98f310685c3", "sighting--7c924374-f73e-4cc3-a541-fced466d7577", "sighting--6c42b92b-7e46-4894-aec6-ad0e43eb9f70", "sighting--cc879b98-bf6e-4713-9c54-5f303963009f", "sighting--3ade8bb4-485b-4287-ba32-279a2f9d8483", "sighting--473df8c4-e3f5-4ab3-b9fd-f1cf7d1c30af", "sighting--23aaed30-8f40-406a-93a2-1d4332d987ee", "sighting--a0bfb7e0-56c6-4afd-9d33-51b87d5bf2cc", "sighting--be5b3cda-8013-4a86-ad57-84c0a5c84188", "sighting--aa330e4c-3156-4646-a0b7-cf3c8064f0c1", "sighting--25ce1e65-4906-48c0-b7af-89f14cc2f468", "sighting--6f1f6d72-d5e9-4e34-8e67-c125d7e4a5cd", "sighting--c5df2980-fa86-4265-848f-05194589272f", "sighting--91fbd9f9-176f-47e2-9e8a-2d9c900a621b", "sighting--56f5664c-c23d-447c-b2b3-987c763f9fde", "sighting--5f66708b-bbdc-40e9-8d67-28576b4e564f", "sighting--d384f7f7-025c-421d-a15b-5a1ef1dca2ae", "sighting--ac333ca6-0eae-480a-a921-947cd4fabe6c", "sighting--032cb6e0-508d-457b-acb7-f0f99f642c6a", "sighting--067d1823-0f32-442c-aadd-cd0f2c888e76", "sighting--72eb75be-ea33-43c9-988d-201a43021f80", "sighting--0db1b9d4-aca9-413d-91e1-bcbb1142ba55", "sighting--11c54161-fe38-4c26-8aae-78e1111235cf", "sighting--7d874a70-f69e-456a-98d3-4091aef62c51", "sighting--379f94f7-34f5-4a84-8b92-e1847dc59f79", "sighting--e302f1e2-edfb-4d65-bafc-bfbfa2bc90db", "sighting--8342ba2a-f965-4b16-bd7f-343f537a30d8", "sighting--5c1a1000-eb86-47e3-9597-86fbf9e7b6a8", "sighting--0e5992de-c839-463b-9c43-41fbec9f2019", "sighting--4a72a3a1-76f2-4232-a6dc-15c83c7b0f39", "sighting--a572c7f9-c7ed-4529-9d1d-9a6d053fcea0", "sighting--ad91edf4-e1cb-4f95-82e0-e2421edb3801", "sighting--0c9068cb-9d7c-4f6d-9d9e-88c03e5c4a43", "sighting--02a6cba5-a248-45b0-aecd-bccd993da370", "sighting--687349eb-776f-44ee-95de-2691e6de6b38", "sighting--fe7f7e68-c984-4a29-8a2a-be826906ce08", "sighting--fd21cac6-8c3e-4042-a57c-87fdc8355626", "sighting--fb3836cc-3dd6-4923-b321-1eddc3c3ecbe", "sighting--e386b819-1dc6-4703-9dd4-f141fe426f43", "sighting--e7dec00a-6b4d-45e3-b705-7f8d7e41ecb8", "sighting--3addf658-cc01-44be-85da-4e96ec801f55", "sighting--9318aa0c-d479-4b6c-88e8-b6390a8e40cb", "sighting--ee55e3bf-3453-42d6-876e-7f8ae342289d", "sighting--59625ac3-b7b2-49a3-9bc4-9b8c232fdd91", "sighting--fe91b603-78a9-4a73-bcc9-4896dd6cac5d", "sighting--21cb24fa-c991-4347-ae50-97ac3caf108f", "sighting--6e765d0f-12b4-488c-b69e-2c8aa654d66d", "sighting--b99c7056-b7ed-48e9-b1d9-01aa7373ddf5", "sighting--479ccb4c-3409-4d48-abe7-c2c901bb4abc", "sighting--9d9eac98-7171-4bd6-89fc-7c497763c6ce", "sighting--60e93990-27ba-4f0f-b64f-13376520504f", "sighting--56634fad-503e-4f11-885f-4398525bb448", "sighting--69387da2-886c-4b8a-aa23-d3d28f746666", "sighting--c2b45a81-e53f-41bf-b434-0c1d7452abcc", "sighting--c1ed4675-d36b-4f7f-86fa-b577fa979a6e", "sighting--5bbd79b0-fb0f-4ec1-8caf-63345ea89b81", "sighting--c269bd4c-8018-45ab-a532-0771108a1535", "sighting--1e549ae4-4760-40d9-bef6-b6b2d483dd54", "sighting--856655f7-a3dd-4b80-9d98-0b178143ae78", "sighting--548a56ae-3449-45ba-b53d-3b087e07a160", "sighting--32578d37-865f-4c93-b2e9-3edabe33933e", "sighting--0ceb1f3b-36de-414a-a286-41a1a635834e", "sighting--5008d287-6917-4931-ab76-5951d0399970", "sighting--0ca1efe0-3fd3-49db-8862-abe291e213de", "sighting--1e54915b-6064-4809-89ba-63a283f64adb", "sighting--75e3eefe-b4af-44b6-86b8-6cde4c0df7e1", "sighting--392ef79d-e94c-4d7b-a060-9020a1d75fa2", "sighting--4dd5fc7b-d4eb-4082-b301-ff3b6f92ad2f", "sighting--d8cb00fb-3230-4d5c-ac06-c10e78a40dad", "sighting--63eecb58-944a-4384-a8df-96df3ee5dbb0", "sighting--d6ec1f97-1dc5-466e-9327-f4433a2b6498", "sighting--2fea8717-485c-4cb5-8de7-b66716d462eb", "sighting--6fd08ae8-e155-4834-b715-2504294486f9", "sighting--dc9e0851-4f39-4e17-842f-67c9f6c86636", "sighting--53e45d65-e9aa-4ca8-9829-ff1ee5208332", "sighting--1a4335da-f4f6-4684-8032-fae26557d3b8", "sighting--83a0216c-5125-45cd-9fd9-7312f0f14d65", "sighting--41a727db-dfa1-4207-959b-d189051d5ab8", "sighting--77e87eac-ff4a-44a1-b9c1-f553d5279bfd", "sighting--1b1ec7d4-1316-484a-b908-97d710d8853a", "sighting--1fafa4f6-daf7-439d-8794-229906f0e1b8", "sighting--c72781b2-0cb9-45c0-9eb1-51f9ede1bc34", "sighting--ee42a039-9956-4f67-97c3-db3db931c340", "sighting--b742e872-3e9b-4272-88d9-bb3f0c7bb7ed", "sighting--9f7ee1c5-1701-46c9-a865-713466945555", "sighting--590f397b-2719-4902-ba2e-76b383795bdc", "sighting--92630995-96c4-42b7-8742-78beb88c5bb3", "sighting--8b1fa1e4-4857-4c53-8684-d9d9d2ad3080", "sighting--a8626730-79e9-43ff-89e1-79f6f3bb1646", "sighting--7d5fb10d-ddd4-424e-9e9e-a603ba468c92", "sighting--ec09b474-4022-45b2-9097-6f60dd51181b", "sighting--996c55a9-b160-4d14-88e6-91ef1331d440", "sighting--4fec4146-4e51-4e85-b6e8-5e21dd94823f", "sighting--8b3b4a80-7d2d-4959-a772-48dd5daee603", "sighting--1d6f04e7-5887-475c-b527-6be8788e9350", "sighting--6e8c3c36-028e-41e1-b436-5548136c8be1", "sighting--5de84fdd-69b0-410a-9123-da7554e2b2de", "sighting--8493f0cb-7e03-4d74-a072-8b9f296e5db5", "sighting--40c0cf20-bf64-4496-9bb1-2d2a1bef2aa6", "sighting--1f868359-a999-4a04-b5d6-332dad02709f", "sighting--455d2fdf-eb5b-4480-9435-249481675c49", "sighting--5fbefa01-634c-4530-81bf-9c3dec926ce6", "sighting--6e680782-7fc7-405a-9647-77a54e8001f5", "sighting--80672b69-5fe2-434e-a217-cfc1a2e7aafd", "sighting--91ece1d2-cbed-4808-ae63-e19c4b1b3403", "sighting--32296728-f27e-4bf5-96af-5f9b486b2123", "sighting--5416fe8e-9019-47df-a760-b9468be590a0", "sighting--9d66666c-91e8-43bb-bdaa-54c7c844fa49", "sighting--2681e61d-88ee-41bd-840c-9b96b31bbbbd", "sighting--a66b045d-28f3-452e-aecd-51636bab6619", "sighting--aeb6a736-f2a5-4348-9e19-4c8ca699fe8f", "sighting--8a4f510b-f226-4702-ac61-d1530c2ac56f", "sighting--00078e62-4939-4f55-a7cd-e389a1dfa06b", "sighting--363954a1-2068-45df-9214-dd8bd1b6868f", "sighting--e38b14bf-9330-426e-9b88-b6e3b69c57ce", "sighting--e25acf33-7ac1-40c2-9e13-946c5ae253e1", "sighting--225ead11-7990-45f0-89ce-51e98a453390", "sighting--de011cb3-584d-4479-a4ad-8fb2499c7b0f", "sighting--a5783df7-a7ae-4f97-9d91-cb2ffc2cc682", "sighting--42db7131-4d73-4186-876c-3f5d27fce53e", "sighting--8dc80892-fefd-4bb6-8f07-8e26a95d36bc", "sighting--aa3b9c35-7850-4bd8-a4ea-81d6622f744f", "sighting--11e4bf85-8a37-45ff-8910-87d989a7d097", "sighting--bddd4e42-6d3c-4dd7-8209-92644cba6c7e", "sighting--6423c44b-d950-4407-a38e-eb0af5ada480", "sighting--2564c9ea-bb8c-40e7-a589-e44d6e78a780", "sighting--535a4a8b-3f7e-47c2-bb79-23510aaa76fd", "sighting--330f7561-2df0-450e-96b7-16d1db230981", "sighting--25284ced-3f1f-4a31-90af-37727bae26d0", "sighting--89e45273-df9b-445e-9d6c-deff5acf53bf", "sighting--60b86d32-437e-4d47-b7ea-51bcfb3620eb", "sighting--376d448f-4b0a-4508-83bd-e0f5d055c22b", "sighting--54664ad0-688b-4e2d-9a92-bc6e4301221e", "sighting--bb24846a-39b4-43a4-b3be-83a04eac0954", "sighting--c795bb5e-6f96-4bf0-89f9-73d37cbc21df", "sighting--d9e79c73-1b8c-4f1c-9ce2-9afd388015b5", "sighting--ce436180-7975-4dc3-98c0-119bce046c83", "sighting--2c176bba-9afe-4e78-bc7b-f22fc7c40c5d", "sighting--d54591d9-de04-4b99-b08d-a25ea52ef3b8", "sighting--25dff165-e930-43ce-a116-1f6e8bb7cb9f", "sighting--4d683920-184e-4b23-879a-3987ec937694", "sighting--8f013f6e-e621-43af-a3d0-6f2b658de429", "sighting--e69231f0-e143-4574-b6f2-a97571191362", "sighting--15193f37-1860-4d79-94f1-173862e0fe1e", "sighting--2e1b915c-bc68-48a1-a435-cf60cce5d868", "sighting--94b3d03e-0ecc-4b5d-b6fd-f785ecbe7181", "sighting--f3bef442-387e-46d5-8fe2-1359eb1fd5db", "sighting--31f92dfd-41de-4ee3-9f4e-dc16fa3e4c96", "sighting--4b9d827b-4b9d-463d-bf48-b8b821071b89", "sighting--3615da30-3ca1-4c9c-82fd-6dad44d6f70b", "sighting--65d32178-c08a-452f-9bb2-e0d892ee6485", "sighting--7235ff5e-2581-4e3c-9793-83883b7fffba", "sighting--c7f10dc0-4091-4070-87c1-799dbdf7f232", "sighting--f2802eb7-d757-486e-8d55-777d91378c83", "sighting--5eb6899c-78e8-464e-9992-053811da41a7", "sighting--97b3647f-6bd9-4dc2-b259-ac75ce5762f1", "sighting--b64d8a43-488f-45d6-a62d-4ec0bce75768", "sighting--9d519363-e5d1-4882-9973-6baae390477f", "sighting--62904de2-dca8-4cf1-ae40-1f59f9acccfb", "sighting--308a0789-44b2-4230-83f2-426ffa1b4d3c", "sighting--332347bf-4309-41bb-9810-54b644b63981", "sighting--9b6ea8bc-3baf-4d6c-8f3e-b38711d5f1f4", "sighting--ee84e369-e2bb-4268-a8b6-d04ccc7347cf", "sighting--d5ddc6e7-e716-4702-961b-e926ba149b28", "sighting--76ec31d4-a042-46b3-9711-ca96c8ccb7bf", "sighting--d9ce882c-7d82-439c-98e0-6f6d88f46e83", "sighting--b95ffb87-8147-4253-b267-82dd55574eee", "sighting--36caf157-50f3-4e9a-9292-82e92bf32980", "sighting--bbcb01eb-60f1-46d5-899d-5611a053b8a3", "sighting--75ab068e-aac8-4b6d-ba22-623802527a89", "sighting--f3739eed-e4ae-4341-b9bd-11407b3b9085", "sighting--9fe52f5d-4068-48ff-8920-ca733dbeb1d7", "sighting--6bcc903d-bc5b-4353-93b9-38ddcdbf610f", "sighting--0f01435c-a450-4e3e-bc08-78964e144b17", "sighting--2e99c071-5228-48b1-aae5-b2a415abdca5", "sighting--99ef4cd1-66ff-446e-8fa5-dca684c39e66", "sighting--56823985-8d2d-46c4-895f-f7ef83546856", "sighting--e0567416-7ecb-463f-9444-bc793055026f", "sighting--bff202e7-6cea-4e8a-9dc1-e0881bfd89c5", "sighting--7e0df643-876f-4e5f-b770-e677b71c8de8", "sighting--0d88894a-d2a6-4732-81bc-4bc6da0493b6", "sighting--599ae643-d05a-4277-bd45-f1746f886135", "sighting--86674846-7873-48a9-a9b5-b967bfea9447", "sighting--cf34bd68-b894-4f41-b6a9-37a3d9e91f09", "sighting--7c39d118-9b14-4369-87cf-3a78fee0acef", "sighting--46fd2e2e-5386-4f90-9786-f39e23863ecd", "sighting--a84f53ee-720e-4a6f-b98b-79ab338c8bfa", "sighting--c771e3a4-e8f2-4753-8ba7-dd58b73f37dc", "sighting--2f8183c4-d8ef-41dd-a6b3-ae91438e9d4d", "sighting--3af190f7-14af-44d2-a7e5-efc8abccd9be", "sighting--d28c8ecb-ea78-4e4e-86b2-4b6415dfa768", "sighting--e2129fea-d4fd-452d-9769-a73487ba5815", "sighting--ecc90afa-4df0-4762-aa63-9f786cf37c5a", "sighting--64529cca-ec88-4efb-a980-859fd93990f9", "sighting--fd90171e-21db-4d04-b430-1abe16015d9a", "sighting--4c3d3ef1-7d52-4f8b-b863-e767b6879a1a", "sighting--8f592ab8-d636-473c-b26e-bfab53a285e4", "sighting--f7993a09-6c8f-4e80-bc61-1478b6b3d991", "sighting--2b3a388e-2533-4794-9464-daceb8e208af", "sighting--fd233eb0-fce6-47f8-baa0-7abd8521c26b", "sighting--591ee04d-94e3-4e1c-a048-fe38ceff2299", "sighting--ded318d1-384c-4f89-8ef6-cd607e3cd888", "sighting--e5219d60-3314-4d7e-b96e-97c4cd76dd26", "sighting--23e20149-042f-45fd-8174-9375de09ef7e", "sighting--6ed3d80a-2052-4bd3-ad05-68eeaabf3276", "sighting--1c61d51e-4bb2-4bc7-b785-9fc8612ab19e", "sighting--a4a65c8a-095e-4a4f-ad32-8649720a86bf", "sighting--b33585d3-26d2-4814-939d-64a8717b6d13", "sighting--4d082d73-4bf3-4bca-929d-1587ab2a86c0", "sighting--003f99c2-d6cd-49d3-b44a-7c7e17ab7c13", "sighting--742b72bb-fdab-4509-ba57-963f4e754986", "sighting--c0916b82-0a2c-47c8-9e06-afcc5d4f5e16", "sighting--6862715b-332b-404c-96a6-7b9aa00034e5", "sighting--b96417a6-f313-4321-a6ea-638fe0ff8792", "sighting--2fb137c3-6990-4009-87fa-69d1843122fd", "sighting--49045957-0ae0-41e6-9a73-000a84f12179", "sighting--6bde814c-ecd2-4c63-81a5-e3227c601b76", "sighting--47193c1a-9108-4439-9f36-a64b918d8cf5", "sighting--01a899fa-1933-47d1-83b3-21e41de5dafa", "sighting--ca22ab72-7ba8-400e-aa4d-03966085812f", "sighting--10943015-5cdd-4860-a53a-f706625441ff", "sighting--65c2396f-a9be-4fcb-b53a-34999e47efe3", "sighting--7da1f3c2-c0e3-43fb-9b7b-15d03ce3a7bd", "sighting--206b50d9-8fa8-467c-a7fd-50eb6191b929", "sighting--517a8e88-778d-4222-bd42-059b3d883042", "sighting--bf969854-095b-4b24-90b6-160faa519e28", "sighting--2a5faca1-3181-4e72-8df2-969fd0a89715", "sighting--e8dec6fe-a3ea-4627-992a-e59721bc5ed4", "sighting--4c6faac3-792f-443f-9199-741c2e07f14d", "sighting--f9c6ddf5-0ebb-41d7-b19e-6a95a4b5d758", "sighting--d832cf94-3f98-458c-bb21-3adc7f564f8b", "sighting--094db0bb-a41b-43ff-adad-baa140a72b55", "sighting--ec4d0fd9-8387-46fb-ac86-47f626c14914", "sighting--d63929e6-8010-4a21-a5cb-7024392d8665", "sighting--116f4768-ccf8-4a35-a91b-e51985d84f90", "sighting--33e4267c-1902-4778-b04b-2eef12623a39", "sighting--c809e9ae-9e96-4661-a8f1-79ed4775b8c5", "sighting--48e732ac-e8ae-4de4-91ae-9d6c188a9268", "sighting--5a63f56b-c7c5-42c7-a077-ecdf6c697d92", "sighting--1ef8ac83-d523-4e0b-a4d6-7e862c628e3f", "sighting--a8ec9345-3a24-45dd-8971-7ddac5c1cf09", "sighting--cf9e537a-ec14-4eb5-abdc-6ae4ac3e6db8", "sighting--a29b1ebd-b73f-4522-87ba-1fc4d36ea871", "sighting--b5ce3cf5-5cc6-4377-b2a4-24937a7a13d8", "sighting--dc8999ff-ecaa-497a-b60e-37d76d60e075", "sighting--d3ba3bfe-7b15-42fd-805d-30ccdda6a72f", "sighting--31d67d64-9400-47e9-9628-f5f29438c95b", "sighting--a6382661-8a46-48b1-9bdc-2128a66e3625", "sighting--9150446e-0087-4bc1-9458-1767be0c0a1f", "sighting--099dbd15-0301-444a-89ed-6639f61e575b", "sighting--abadf682-32b0-4f47-bc2f-3856755f3312", "sighting--e2401764-0952-434a-a046-a3d05bfcdced", "sighting--c3de5360-9b11-4daf-bfd9-1ec7fba70d7c", "sighting--16535ca5-9704-4703-9ee2-367c3d16d249", "sighting--228462b8-6306-4f7d-a899-f2606a5f8c53", "sighting--195b0b4b-5ee8-4dac-a2be-bc97660235e5", "sighting--d5cbbf96-0680-4628-bbfa-c96256c84026", "sighting--f71e6788-5b55-47c0-95dc-94bc0ae2acd3", "sighting--4489c8ee-d519-49bd-8d71-f9a10412c6b1", "sighting--cf82d136-20a3-4085-a3b6-673b989b57f9", "sighting--ab7cbde5-42fe-4a33-9756-e54be9a7bfd3", "sighting--ffdaa599-1e04-4cc7-8c18-85de5adbab05", "sighting--5263e1fb-9204-48b1-8567-34392f2b2ab7", "sighting--fa9231c5-96fd-4570-8b90-51b34ee40866", "sighting--7480d9d5-dc28-4a0b-bead-4c6ab0105d94", "sighting--d3dd4655-bfcb-4bec-b094-d913a2761b0b", "sighting--9a23bc54-714d-4e54-8b28-423e901f5606", "sighting--dd9d37b2-6159-45de-bf00-040b26552418", "sighting--6696f1ec-e3d6-4b09-9b39-246ee1a475df", "sighting--85928eb1-8391-48bb-b0b6-ff7e16ab1ca6", "sighting--a34b4f62-8d9f-41db-82a8-875e61f3179e", "sighting--7a1c9a93-58be-4c51-8d28-36fa73d1e3f8", "sighting--d041d763-8614-43dc-a199-6879ab1cee98", "sighting--dbf28521-d7ab-4782-be30-dd523c142929", "sighting--3563a78f-3dcb-451a-9895-4c4ba08ea2e0", "sighting--61f8d26c-419c-4f43-bbee-e894b771eb4b", "sighting--3d02782f-4685-41e4-b402-42fd338c46d1", "sighting--609ccc61-e25c-4fdf-8ebb-62c304754ba8", "sighting--649f18a8-f78e-4172-9b85-b23df27b510d", "sighting--29bd9716-2d88-445f-98dd-0ec66d2aa8d4", "sighting--d251bab5-6945-42b7-a303-80818721799d", "sighting--b1f2cd5d-5560-47b3-9ad5-7ef37a81ea64", "sighting--b15e2f5d-029d-440f-a29e-db27c6e08437", "sighting--00cfa978-02c5-44e6-8526-e2eb45fc6fea", "sighting--ec8e3253-ff1e-492f-861b-b6ebcb5f1138", "sighting--6b251bc8-23ec-4f51-a00a-5b225517cfa0", "sighting--8b9de7c5-1294-4ee6-b243-03bb043f00a0", "sighting--b31c35bd-e0ff-4de9-bce8-4296c0716f3f", "sighting--c26287d8-ea9f-4cd8-ac6a-70579b5af20a", "sighting--9224ab5a-1196-42f2-92d1-6cc69ff42e19", "sighting--3ec7cf50-1dc2-45a6-9b68-6ccf0edb7e7e", "sighting--6c16a4f9-ab0b-45d8-932a-719318c27fc0", "sighting--6fce3326-e25c-4454-bd4b-50d7cbadab0a", "sighting--ef674e49-34c0-49ca-9c8e-07212ba96602", "sighting--0e927f02-80c3-41f8-8108-6daa2df0d53f", "sighting--0c4407c5-fc71-4bd6-84fe-e22d84dae475", "sighting--fee96801-2b65-40b4-bb2c-b8c6223ca6d8", "sighting--08b8e854-1431-4bbc-ac3a-b4d11c10df1c", "sighting--59d719a1-ca6c-4fe3-99fe-9df9c4b0bb46", "sighting--7b40401c-4555-4e8f-a51d-b3dcc054c0ce", "sighting--f7b964c3-e628-47ec-a15e-b26843ddd124", "sighting--7a38889d-de99-4f9e-ba07-7ef968ece634", "sighting--d98a1349-d37e-4d17-a1c3-6d8a26d1b80a", "sighting--94401ba9-494e-4354-bbdc-4a02579a77dc", "sighting--07729156-da10-4015-b677-d18000fa54ed", "sighting--f3025fdd-ba61-4536-8b1a-c86ae009472a", "sighting--b63ccea0-343f-41f6-9d9b-e405ba479dbe", "sighting--005607c6-e187-45bc-a60b-b0c229b71782", "sighting--cda68269-f990-43aa-801b-74753f658a4e", "sighting--d33da8e9-c839-4c93-a273-daa60f12403e", "sighting--598cd897-c6ae-4ae9-931f-554b3efd96d5", "sighting--5e26bd40-3419-4926-bae4-773ebe173c2d", "sighting--2be6698b-daee-4958-ad7e-94e2bf4d49b1", "sighting--cca00a27-8508-4357-8de6-28308a9c4c7c", "sighting--9766bb8d-6322-4dd1-977f-c83668e07d52", "sighting--e7b65904-dc27-46e4-a04b-2213e558763d", "sighting--9e4b7e41-0efa-421e-a54a-7a0c55776b4e", "sighting--d524d7a0-fc97-41af-a592-c7e035421aad", "sighting--5e302cd8-161c-4ff9-a523-9d9d0aafb9b9", "sighting--9c952847-bb2f-49dc-a46d-f33f6e22c196", "sighting--c9d6557b-93ea-4838-a652-8f549d160cdf", "sighting--b8ea874c-8cef-4162-a7d2-5e54c29e37bb", "sighting--ae0c84ca-4ca6-44db-bb38-039869bd5438", "sighting--b3fbd4c0-2649-412a-b29e-a00a2a92791c", "sighting--68e2cfef-c067-45d7-8673-7f34058db49f", "sighting--dde9d69e-1a9f-43e9-9105-7006f33a105c", "sighting--82923be1-090f-46f3-8433-e4cba3a0aaa2", "sighting--011252b0-a02e-491a-a142-1b70952e1571", "sighting--2b2b5fca-1b93-4fe1-bcd4-f04633e9db15", "sighting--c72d2393-6a7f-470b-9684-0324e10b878a", "sighting--73986d37-eded-4c8d-96f1-2e825ae9ad1f", "sighting--05937356-375a-4d12-b7c5-970de655a50e", "sighting--fde805a5-e92e-4b19-910e-b9733c353692", "sighting--9a1ecd6f-5581-4a68-95cc-473414ed32ec", "sighting--b18e7ca7-20c3-4aa1-91a2-0f697dba0ce6", "sighting--9aa39f19-17ec-45a2-88f6-678e21f782d8", "sighting--87d567ac-8336-4cab-aef3-d09db20530a0", "sighting--25571bc9-e4d8-4dc2-9bf7-b7dd1489ec42", "sighting--af4c44c7-9f76-4eb0-a87c-fc51c3397a61", "sighting--08aeed72-52e2-4258-9219-466c764e2599", "sighting--ede594f7-89aa-4a60-b120-827197a4ab1d", "sighting--2f7ecfb0-4841-4168-9170-b69766540d55", "sighting--79761d11-bbc3-4d60-8392-e311c31fefd3", "sighting--eec1a1ab-d289-4b9d-85f2-ae495118ed49", "sighting--94824b33-edce-412a-b079-a05b48e6791c", "sighting--3287dc0f-2c12-411f-b82f-15c768ddfdf1", "sighting--fd8375d7-9668-4235-bda2-f9253feb952b", "sighting--896ae279-7773-4bd4-b356-34f2d31510d1", "sighting--0d7c9fb8-fe10-4e98-98a2-8cc6a603dedb", "sighting--b503e807-0edb-4ce9-9ce8-f35a5f372a8e", "sighting--714ab3ae-9a7e-4423-8a7e-e744f62b8e95", "sighting--a940950c-5b10-4241-a132-d8e2559e0fe6", "sighting--5dcee712-7aac-4965-b50d-c9f1a57885d6", "sighting--6bb6982e-9ef0-4937-98b6-6b42ce281506", "sighting--a8fd5bdb-627e-4711-bc6a-a53b58ec767f", "sighting--8c98dffe-e521-4bbc-9c86-84c6393573be", "sighting--e7f28724-171c-4104-b285-718153658a14", "sighting--91ba82b2-d430-4546-89a5-71ed1c35d9d4", "sighting--dae7667f-8c4b-41ab-b3fa-dddfde425e43", "sighting--77c90488-c435-4705-a95c-0d572acb1da6", "sighting--f3e8992c-3029-4d14-b17c-67b02bfc5566", "sighting--40c67857-9971-4993-8770-15303ae2d403", "sighting--bdc60766-4656-4a23-b9c6-f75b6873df7c", "sighting--cc9c4062-a811-438d-9edc-a09f1e89c6ac", "sighting--77c0dfd7-ced1-4528-985e-89cda9bf7a82", "sighting--cf9e5123-3148-4e7d-99e5-bfd5b9312a7f", "sighting--cf155106-69a5-4f12-a325-cb2bfc82f09b", "sighting--abc1ee9e-1cef-4d48-b0ef-d39b0509df57", "sighting--699f58fd-8025-4764-9d8f-d6544b683018", "sighting--0cafc75a-fd21-4659-a090-61f20af405e4", "sighting--cac6b7e8-8ed2-4d53-a8ba-af8e01f0fca0", "sighting--76df6a46-c7aa-4469-9138-a57e4339a24f", "sighting--ed72e9db-c076-41e9-8eec-97e67fab670d", "sighting--9199c986-b7ee-4abe-b34e-e9b2ab983700", "sighting--6aceeb23-1eb6-404e-8d0e-f89de8687268", "sighting--b50bd332-f582-48df-9ddc-2e446e9f90f6", "sighting--ca270a20-ca94-42df-b31a-9d93734ad893", "sighting--7b19e677-74d1-4828-8344-8a74649e1c0f", "sighting--ea9e2c8a-9689-4777-a51d-c246fe5e925a", "sighting--114872ee-fb92-4169-ab12-71f26457f024", "sighting--cc555d6b-bc8f-4685-af67-3c0e99585ff9", "sighting--249215fd-3a85-4111-a0a5-af17811c124e", "sighting--94428439-b02c-4c8b-b106-7d2361e36c25", "sighting--58f5b93b-155d-4fbe-93cb-617b068fdf68", "sighting--c606031d-9f53-4626-8ea0-74b8a1107e72", "sighting--35821f5d-2d69-4d8b-8ffd-95b75c56c141", "sighting--62dbe934-7b84-4062-9a83-6c7278aeaede", "sighting--e5177a9d-3aa5-46be-af97-d670f18642b4", "sighting--8afc7194-6d9e-4289-9250-b13de5b2d3fd", "sighting--044a154c-e63f-4bd9-9e5b-a9d645713d46", "sighting--257300cb-2bba-4180-a774-22e7714e276a", "sighting--27540a2c-2585-4d3b-99c3-e0da392eed44", "sighting--0bf697a6-8592-4c0a-a15b-5f3d3dab9009", "sighting--487b9146-daa8-4288-83e5-a8f8c7f08162", "sighting--7ed2a8a1-b5a1-4185-ab01-9192426f3a41", "sighting--02ba9c4c-d64f-4946-a890-78fc362fde58", "sighting--bdb2515e-f2b9-4ee9-8542-ac8eb163e6d9", "sighting--b5776db8-a151-4be7-86e6-c8bedaec1205", "sighting--4d76e6a7-fa8c-48fa-82a0-de75a9ca7c0e", "sighting--b6ccc88f-b1fb-4d37-b834-4b9ae8f02531", "sighting--14f91437-a8e3-442d-9c0a-f834ac190048", "sighting--7d1a775a-b490-462a-8c91-71a0fe39d3af", "sighting--c2dee22c-606d-47a3-bca9-eb6a57914858", "sighting--fecbe3ed-4d68-457b-ad32-8bafe7ffcf0a", "sighting--91ad673c-ffe9-429e-b955-1f80947aeeff", "sighting--de2243ae-12f6-40c7-b02b-9911b9286af6", "sighting--f8923522-7552-4fd3-a036-75ccd44a4520", "sighting--f47ace12-db42-4a7a-bf95-ff8ef6e2f047", "sighting--57d62877-f4b5-4777-a90e-920045515e20", "sighting--b69f0f70-d6e5-4df2-8ff7-6c78ac955c33", "sighting--2dddcaa2-1796-4e78-b6ff-a27e5f3d0e76", "sighting--048e8419-8ff0-44c2-b003-f3c196fa9a4b", "sighting--d9a8277e-0bb4-4bc1-a3ab-eb01b080258c", "sighting--8ef39c81-5d1c-402d-8f98-76f7084b3d8d", "sighting--e11e5a33-db25-4db5-9744-169cf4520822", "sighting--dca10181-4af3-4393-8a63-47aeca43cdef", "sighting--01b2b3d9-8504-401d-bc79-b9a397b90929", "sighting--70f724b0-1b99-4839-b77d-fc55f240f36b", "sighting--cabfd28a-de39-49ad-9423-e8ac9dfd0447", "sighting--4a1d569a-941a-4d0c-883e-a524a3f8b2d4", "sighting--a79e237e-d8c6-421b-8f69-aef8bcb18c8c", "sighting--1a9fb3dd-aacf-44ea-9170-a944f5b33663", "sighting--da8cf8a2-af0d-4c84-8f30-1d74ec521f8a", "sighting--aa732d0f-3e7d-4d48-acfe-fb96453c5048", "sighting--2e67a544-f0df-4f81-8461-2478523d185d", "sighting--47ea7944-2e49-45d0-82ba-f19f6d6f0fd7", "sighting--2506b6a2-6826-4c13-bf81-66b81ab1c31c", "sighting--044df3cb-9757-4c7e-b120-d20179156517", "sighting--f1ad45ee-c325-4445-8aa0-77556e08cee7", "sighting--ec6d519b-d0ef-42ce-910c-200f6a7d1104", "sighting--7b6aeb6c-3822-4899-8e72-b52f11ae9de5", "sighting--cdf7c00c-bdb5-48f7-9892-8ca58abc38f8", "sighting--d779d6a6-65cb-4209-aa05-3c7a7f5426ba", "sighting--516af213-7774-4400-bcba-bcf2b9e425b6", "sighting--adc81491-b175-43cd-9ee1-b171e55ca4d9", "sighting--0da46f72-9d78-45dc-a5ac-2920746be8f0", "sighting--0fe6ee35-1ae0-418c-b3f6-34482fb51209", "sighting--7204d608-a374-44b7-aae1-bf04cde04158", "sighting--ad5a3f3a-577b-4662-b373-fda149092566", "sighting--8ad7f3c5-5395-4ffd-b015-899f6b01d299", "sighting--46f23fea-148d-440d-b592-b7d7ac2bfc35", "sighting--d2a9c037-1565-41ce-97f5-d991396f6824", "sighting--0d36ecf1-2898-4a98-9875-73e1c66e8422", "sighting--f3737ecc-c633-4599-9063-1c331a6cf5a4", "sighting--fb14161d-8920-4bf7-9ec7-e63d40db78e1", "sighting--456fda28-15a7-4778-a534-e6577ee427ab", "sighting--7721a851-5bba-4589-8491-3c58b50a7c0c", "sighting--d9f5e9e7-47f7-4ea5-bafd-9f5aceee1cf8", "sighting--7b23f073-e3c8-4d15-8877-bf165310b8b0", "sighting--e5336565-e81d-4aec-b5d8-b15ecdc38805", "sighting--886506a0-2e17-4dd5-be76-799549d650b3", "sighting--2e8b9864-649e-4daf-a1e6-ca1daf569654", "sighting--0d04958d-2d81-4b5d-a678-9a18c58e2bae", "sighting--87628462-a71d-41e8-83b4-896a75fc4c0a", "sighting--f162696a-3d75-460a-8e60-3fcff726e57d", "sighting--e48cfec2-60e7-4da6-870f-8cc5619db891", "sighting--f4481b3b-4b76-4af9-a90a-57a50aeea216", "sighting--d781761b-5f86-40de-8229-03590a6f50ea", "sighting--5ade0433-628f-4056-a662-016986fa9ab3", "sighting--9cedce08-7cda-474f-b6e6-4a4a2b8a7e37", "sighting--bb701915-8f77-44d6-b6c1-10aca999ce27", "sighting--8fbe8200-0211-4e49-baa1-f58c6590bffe", "sighting--a83f4751-319f-4777-8b9d-d6ceebf58f1c", "sighting--a4aed2d5-8ccf-4a87-8ba0-8c0fd3595968", "sighting--29587825-b5ad-4c77-b699-06dbb84b7e42", "sighting--b675a35c-32d1-4030-a3d8-dc77740e9217", "sighting--242ab4d5-127f-499c-ae76-187ae179971d", "sighting--27858dbe-9777-4ddd-8e3f-fcb02fbc5145", "sighting--4e9cffc7-8779-4d07-bf55-98d1bb17ca34", "sighting--24faa161-e922-4da4-8acc-ccd1c582ed9d", "sighting--73bc4315-81c0-4478-84ef-048c57019bed", "sighting--2fd4dfdf-1aad-4531-be1b-7046b93b29a3", "sighting--9063691c-9097-4d6e-8f52-620d222a57fe", "sighting--4bb8435f-d63f-4d08-9d3e-d37a2d272fe2", "sighting--49368715-26cc-4b3b-9b52-ab5fc88c6a99", "sighting--d2fe2dc9-bf8d-4f9b-b90f-4e842eca02c5", "sighting--dd7c0c1a-8ffe-4ecc-a65f-13da2938e367", "sighting--1c2c6e14-86e4-4d09-a48e-d4324a547fdd", "sighting--bc837e4f-df2c-4dd8-8ffc-cae05131c307", "sighting--7916809d-c054-4c50-9653-d7bc0dca4ef2", "sighting--3758ba89-10bb-4de4-b330-4d3f1351bff8", "sighting--e08afdcc-f0fb-4401-b025-25ff83a32c27", "sighting--7da2d573-a97c-447d-9b46-2c19ca18a2a1", "sighting--da958e96-e5d3-41c3-ad36-d3e9a596c841", "sighting--cf84de5b-129b-4abe-888b-be07b5c1470b", "sighting--9246bf40-9b38-4f54-bd4b-00847e081e6c", "sighting--291c9018-a57b-4515-a880-da026fe88b83", "sighting--4759b7a7-9171-470a-9c9a-7caf98181e47", "sighting--c237b383-9423-4181-9114-ee466cb845a3", "sighting--a6ad9ab9-2f09-4825-91d3-03aef5fdca54", "sighting--cf4be15e-4535-4ce5-8eb0-50d021557f92", "sighting--4b10722d-17dd-47f3-ad2c-401bfd180c41", "sighting--ceea1cd6-f0d7-4191-af5d-e4ff3979bf21", "sighting--0e472be8-ee68-483a-bec7-e9be7cb976d6", "sighting--04f807a4-aab4-403f-8f41-87aa7abf4393", "sighting--7655343c-430d-4ce8-a9ba-32e27e3dc8c1", "sighting--255d3b37-9ae6-480f-b155-2db6988df2e8", "sighting--ba3cfc35-5f45-4bb5-b8e2-96b56f1d3663", "sighting--5fb20bc6-26c9-485e-b52e-18c0957c74d9", "sighting--62ee3fd7-cbbd-4ff7-9d32-c258d27ad387", "sighting--301caac8-7a70-49c6-8fbf-2ff7b482e404", "sighting--d779767d-b43e-421d-a58f-b442e3c4c954", "sighting--1dfbc1c0-47c3-41d4-a549-f076fdbbfff7", "sighting--5d530ee3-2621-45f7-91c5-e9df093cfc9c", "sighting--7129d5a2-b4b8-4959-b7e5-171759fe6961", "sighting--74949faf-0985-46dd-895a-321cced1146a", "sighting--8781b91b-fd2f-46b7-8453-4e5fa81f195e", "sighting--d83b8a73-3b24-42a5-b167-5858163b3812", "sighting--ff68198f-3424-4659-a6ef-05dc1f5dfbdb", "sighting--74ad80da-dde7-4000-a56e-3f4144641344", "sighting--9fe2c54c-da54-4d2c-babd-3c2c0e4fa4ca", "sighting--94f1df31-05e5-4891-82e1-1c60c60f7dc6", "sighting--e7378418-b614-47c7-8547-5501a05ecca5", "sighting--8fd72081-3afd-4201-8cb2-c3f274f7a14c", "sighting--f1e98f2b-00bf-4a4f-8eba-79e9c717fef1", "sighting--91a3570b-3658-4a5c-a979-944132080e17", "sighting--1dcae742-0443-4679-b84d-05362788b303", "sighting--ea005586-5452-4329-bd4f-34fde510ce57", "sighting--11762b1b-439a-4241-87d1-1df28b786221", "sighting--93c2f616-3007-487b-a46d-592e41c55404", "sighting--585ad99e-989b-48f8-a837-ab9d1fa194a5", "sighting--7dc11086-94d6-4506-8b74-9bdaf3298994", "sighting--a22b8d94-5148-4b30-87e2-281a5ee0634a", "sighting--d1f117ad-f599-4f52-9efe-f7d50a921b35", "sighting--9761d2d5-2d23-4a4b-8d26-a1afb3278cce", "sighting--664762be-129b-4894-9254-2cc6d9185bc3", "sighting--2c544585-1d85-4184-b28a-8adb68a39873", "sighting--7f87cb64-be14-49a6-b852-93cfa9fdc553", "sighting--bb937975-40ab-4b2e-965c-c1c62267ecd5", "sighting--e8394cb9-3565-431e-abb6-1802a80a7666", "sighting--135dbdc4-32e6-435d-8a35-72f46953a599", "sighting--d1932e86-daf3-459b-a70c-f26ecbe97eea", "sighting--13f7f4ad-b80d-4fe1-88db-b68f823b67aa", "sighting--64bc6d7c-7e80-4ac0-b809-fc4b0f6bf0c4", "sighting--e41a6353-9ef4-4ad1-8a56-06bf4a9e17d1", "sighting--57c65956-f4f5-4d3c-ac73-78f56a3ffe86", "sighting--b0c2b529-ab12-46e7-8a0d-6276a7c24892", "sighting--ac2f3e8d-2040-4592-acdd-6ffd460ce3db", "sighting--86685539-cfec-4eec-b21f-4d56eb18fc7c", "sighting--34a0b68c-d343-438b-ad10-fc3b5f54d692", "sighting--b3a139c9-5878-4f78-8446-4e734f3939d5", "sighting--78d991fd-fd60-424e-ad9f-f8ddcc6ed68b", "sighting--9a9b506d-c279-41e7-8e68-2e63a9d5fa16", "sighting--d8b49c4b-a418-442c-83b9-aebb2123b877", "sighting--a79d1671-ac98-41c8-821a-90fb047fe57d", "sighting--f23c7ec5-cad3-43fd-ad54-4aaf468b1115", "sighting--76d586d2-d7fa-4687-98fa-393823b4e68f", "sighting--b99fa46a-7c48-45ad-90fa-8cd72095d74d", "sighting--4911b628-34ca-4654-85e0-242f0ce67780", "sighting--f1337c50-710b-477b-ac06-60f87e780468", "sighting--60c6b68c-4233-4dad-b4ac-7ddbdb79020a", "sighting--7c35313f-0244-45d2-88a7-3d452312b3ae", "sighting--9072120c-ed41-4286-9fb7-59a6b4a015be", "sighting--8f4a43a5-5f96-44eb-a545-67b1febebf31", "sighting--cb6071be-c035-4606-91fd-f71841ed0a7e", "sighting--540f57ac-b596-462f-b404-27c0868aa2ef", "sighting--103a0b46-8b8e-4486-a0c2-b75deebeee97", "sighting--904d40d2-a675-4555-9bca-75e1f8c71a0a", "sighting--32cfc045-e521-42e2-9185-be6e2d518aaa", "sighting--9024b98f-f364-46e9-8ccc-1583f5d7b4ad", "sighting--f430720d-ee15-4795-903c-a0e2c2e61e50", "sighting--2f000d76-24b9-4ee6-806b-744ced704bb2", "sighting--af7bffb1-2b51-4e23-a02d-91267d54bc65", "sighting--2cd65476-e316-4d9b-bb69-b5648bb9c60c", "sighting--184dc92f-cef4-4e60-9eec-67dc133dc57f", "sighting--1c4100ae-d424-4a47-84a0-e94e5589cfa1", "sighting--d982894e-25b5-44b5-ac85-9096432126d8", "sighting--7b0d1243-1cac-490e-af7c-22794640eb74", "sighting--85303691-bff3-4b70-865d-edad36578ad1", "sighting--89040afd-b1ba-4ff4-89e3-368022662397", "sighting--8774ecbb-62ba-4e46-9be9-078b460b3c40", "sighting--496d2a2c-098e-4411-a3cf-998dd08c2978", "sighting--64055d0e-5062-49ce-861d-849497700a16", "sighting--84730784-e54b-4e5b-af36-76189e1834b9", "sighting--0e9f862d-a90f-454a-81ff-d0de9c7e8d04", "sighting--260311e4-c1f3-4ec4-84df-4fa01f744c47", "sighting--9155d390-4f0a-4f23-8455-4bf27b2c5c9f", "sighting--8e8e9e4b-0f58-4b88-a1b4-b9fd5de915f5", "sighting--753b5028-78de-40fa-aadb-1c61b39d52c9", "sighting--4eb65b04-3756-4dc6-806e-d734bbc70ec3", "sighting--a51221df-995e-4f21-84ae-6df291ed165e", "sighting--0b1474ca-70ef-473a-94d6-8a675db62c9c", "sighting--2d375766-aa98-4e49-9a1c-60306f8d1aaa", "sighting--93ba0ec3-5f7e-4fc3-ba9b-58f7a87fe341", "sighting--4c9b9eaf-4c56-465a-b267-51f870d76298", "sighting--642b2c20-fed6-4584-be25-1b76adef73fd", "sighting--da6e460e-9253-442b-b5a3-a644f4eb00bf", "sighting--48caeb90-7a80-4926-94ae-6e55d9270cd3", "sighting--779f2f4f-49d8-45d3-8ef1-4bd5515e5cb8", "sighting--afcc73da-2693-4d32-b729-aabe2062bd1e", "sighting--6cf14af5-b415-440b-92d9-e8a67e4c9694", "sighting--2659c4c5-be17-44d2-9868-f1db79e31100", "sighting--09ddcf88-fcaf-4c96-97a6-5c8b43d9d213", "sighting--cf1b2b53-a1cb-407b-b7c1-4cba5cdba570", "sighting--0112fecb-3dc3-403f-8ba2-17ce4afd626c", "sighting--1c01284e-b943-451e-aa10-792556abaa28", "sighting--2a9ea7b9-8052-4a0c-b8a6-3d9a74b1fb62", "sighting--55d1f339-7959-48d2-a3b5-60da1f99cd16", "sighting--ab052387-ceb6-47f2-b3bb-c6eb40877bc9", "sighting--7ebe821c-a2ff-4457-afdf-0f8dfb4ab9d2", "sighting--f10d5c37-9361-48cc-aea2-fa79514f119c", "sighting--ff33245f-4be8-49a1-9084-e749bacd25c0", "sighting--12d464d0-679f-4b94-894b-0bc9afce3812", "sighting--854bc264-eefd-4c9d-b891-34b0c9f2b288", "sighting--82366e2d-7843-4123-b535-daeb75ffcb30", "sighting--0e4e08eb-94a9-4f10-9af8-7054a910e7a6", "sighting--b428360b-eecf-4f54-b22d-12f6b1eafa28", "sighting--b2918a71-1cca-4902-8c82-7fa7c695c112", "sighting--725cba9c-1662-4b44-8581-cfde84572c1c", "sighting--f0deb991-01eb-43b2-b976-6edff9e2d9e9", "sighting--89de0e8b-dc41-40b5-b0dd-38b79272bbd5", "sighting--c7bb0225-8eb8-4a32-a50b-768c00cf57bb", "sighting--65ccb989-bbbf-46e2-bcf4-d4a365b9f5c9", "sighting--736e5711-11a7-4fa9-833e-dc2788268ba4", "sighting--67f5aa11-c3fd-451d-96a0-5002d7b249c7", "sighting--1fbda0b9-091f-47de-b3da-a58acd244eea", "sighting--bd479852-791e-4c12-ba1f-83a0ab2b1ebf", "sighting--c974ccca-234b-4b2d-adfa-2e4969893181", "sighting--9f79c67c-3c00-4dad-866a-d692963cf0ea", "sighting--2fc38975-08de-4cec-b68f-1b84258df4b4", "sighting--833fa9f3-06e8-4322-8df0-6eeab45211ca", "sighting--ac953a1f-822f-4146-af7d-d4f6c7f45c44", "sighting--91ee5847-69de-4822-a20f-dedcce5c5a23", "sighting--f0da30a1-a078-4f27-b475-b88497598c47", "sighting--4293ac67-273d-4ada-8479-6ed4e3656202", "sighting--34a6ac16-3a1b-426c-9ffd-dcca997e4eb4", "sighting--7b35b4c7-3a8d-4db5-901b-ac07d4cf38bb", "sighting--a415f8c6-9581-4c58-b002-04b3eed70e14", "sighting--38a4bb47-cf38-4129-ab81-cf2ed6d26654", "sighting--8097d571-110e-4bdf-b156-e0fbdc03c097", "sighting--b476fa04-4794-4590-a6e3-c2b9abd28555", "sighting--4e91e97b-6a3f-431b-a32b-cea6440f74a9", "sighting--2254ee83-7470-4f05-b33a-d2281e373f23", "sighting--6a4c093a-a5d3-4302-a8bf-381de8784bff", "sighting--a99074ab-c90c-4811-bb59-cd134e36e287", "sighting--652f0218-9d9c-49d8-bd5b-2228447a6a8b", "sighting--b8c8848a-4fb1-4fac-a2df-80d62ae26297", "sighting--70d0ef4c-d4b3-41dd-8b35-7474cd57c0cb", "sighting--06fa35c7-ba3e-489e-8642-5047669132c2", "sighting--b1413ce3-20f9-42ff-9137-c77ae697c603", "sighting--89c570fb-287c-4c00-8664-4390afb5be4a", "sighting--1d73c7db-2fb6-4c63-82de-6f31b4fc0835", "sighting--28805d92-eb17-41a1-adf7-5a24b9ebfbd5", "sighting--c3239199-efb2-48f9-9622-43272c50385c", "sighting--f4318d33-44ef-4103-ac9d-7d3d920d90a2", "sighting--537ddd08-bfc9-4009-a00e-134aa12f203c", "sighting--e510c827-9c80-43a5-8b99-6855a56b2cbf", "sighting--a825d0c7-b25e-440e-8506-94c8487d1f24", "sighting--6f8fc260-1e26-4ee0-a0b9-43a16a129fe0", "sighting--9d3ccdb4-f06b-4aa0-93d2-4130c7c96485", "sighting--b9064795-288b-43a8-bb77-4a1a4c491b74", "sighting--6db4c92e-6b95-4ab6-897a-3a65bf8d0548", "sighting--3a83974b-86bf-49c6-be47-a11a7d91ec9b", "sighting--d048c064-8433-4e5d-bb12-61c02a7287d8", "sighting--d3294c76-577b-425e-ae2a-293d1d2b7f5e", "sighting--3cdee0cf-771c-448d-b93a-2ea744c2efd1", "sighting--9a9a9f48-1ea6-4756-a7b9-51bd00dbb88c", "sighting--b29bd651-9863-4919-b3ed-dad8a5ad35e0", "sighting--03424980-0cf6-41ba-8e3a-6fe83978ea71", "sighting--6fb315cc-e0cf-4084-a373-2a3a5d2156a5", "sighting--2cd040b0-5d19-4d09-b7c0-e729f25bbe84", "sighting--9a787e83-eb15-427b-af8c-879f6463d469", "sighting--134385e9-06d5-40d0-9a8d-cebcd1858831", "sighting--aedf581d-5759-434f-9350-505a98fdb447", "sighting--05e3d4db-d718-4fca-adb0-9bc4644991ad", "sighting--3bca540e-9a8f-4508-944f-7f176ff84562", "sighting--59a207b7-aae0-469c-8167-ca2977ef20d2", "sighting--bc0fd3ac-0c9f-412e-a24b-31be1d42d993", "sighting--a2b62aa1-0f4b-4334-a2df-8e6d5f980dee", "sighting--c5658598-839a-4315-969e-fe63f6300346", "sighting--109f433b-d8c3-467b-8748-13630fc48e15", "sighting--7c236275-d9af-413f-827d-72ec8ec1cb7b", "sighting--a36e5bd3-93eb-489f-8a20-2d1ee8e9128d", "sighting--821923c7-c137-47f8-8866-12d6fb39f799", "sighting--c9ae11e1-2a6c-48cc-adb8-59cecccc1652", "sighting--de7745da-b9e3-475c-9863-7c0d2ffb1d2f", "sighting--e1093521-e9fd-4d15-bebb-62ca5632c2d5", "sighting--47ae234e-f18a-43b2-b08f-572509699df9", "sighting--c060e41d-ac12-4c19-83df-fd189925b1a3", "sighting--f1ba7b0a-7c91-46a8-8548-ec1f2ecb4577", "sighting--1cc270f5-657c-4663-9331-eb9ba56d600b", "sighting--5b4cbf85-a125-411c-a1c6-c811a0508eec", "sighting--1406440d-d6f1-496f-bd62-26d2054e3f1a", "sighting--22b11a3f-0a56-45da-89ca-d5cbc856a91a", "sighting--4bab42ca-edaf-4012-a7eb-98cf61795ec1", "sighting--b05c1f77-68e3-4454-b6c2-60cb3667cb03", "sighting--f829d2f5-5f94-414c-9c9d-d766c80291cd", "sighting--9d5d13c1-48f1-42ef-b2bb-945f384f299c", "sighting--1130bc7f-e0ff-4051-88d7-fb9646bdb033", "sighting--4763ade2-77fb-4f7e-9232-73e858bfdc93", "sighting--5a1adb1c-4d05-41d4-9b1e-e493499b1861", "sighting--335deade-11d6-4a94-9dbb-068030c236be", "sighting--f7c33c8c-42b3-44ba-9fb4-aabed6df3377", "sighting--bac7bf7f-8fa8-4f88-b8e6-ac614c1e62cb", "sighting--ff748352-894f-4a39-9797-1546129b5778", "sighting--3553da27-7932-4237-9a79-b85a81838904", "sighting--46f567e3-dbd6-487a-93a4-05b8b1e59a1a", "sighting--b8cbf4e2-6102-423a-8e0e-ae6527491a5c", "sighting--d2cf1141-bd49-43ce-9663-e34c835c260a", "sighting--e6313179-2b60-48cf-ac8d-21bb7342d7e3", "sighting--1c45bcd4-e76c-46a5-a01f-da0ad0664473", "sighting--4c318cfe-6f3f-4924-991b-dd9901187718", "sighting--b349163f-1496-499d-aec7-256bf9ad1950", "sighting--48689e94-e598-4383-82d4-77e2eb57cf8b", "sighting--18f548c3-6660-4f06-8ae9-e4ce6e93148a", "sighting--540de92e-cb93-4ed9-9cf6-e4cda26874da", "sighting--a755dc07-7ab0-41e4-9d01-96c912cc94cb", "sighting--31652fad-bec3-4e23-b344-037f6bd82009", "sighting--71b3d066-c75b-46b9-90cb-5b6dd773a9d3", "sighting--6e7ef2b6-3978-4763-8845-c300836225c2", "sighting--bf4a8d88-22e8-47a1-8eab-40f96167ee93", "sighting--48f3af63-e2d1-4432-bf34-a95fcb25bd1c", "sighting--ac155ba4-a04b-429b-89db-556dcf1fbea2", "sighting--aaad932e-c955-4aca-ac6b-38daf2f07446", "sighting--69697eec-4987-43d1-b4a7-44b1c9ee400d", "sighting--180db56d-febe-4840-82f9-1338fa544002", "sighting--2d59fe71-a2c4-4d58-8295-548861e94c6f", "sighting--ffe9fcdb-1f35-4800-a45c-34e27e415f1f", "sighting--2c34f2f3-c015-4a64-bc9d-cc7b66322483", "sighting--a9b4c5f5-c8f8-4439-ae24-4d6cbd1cb15c", "sighting--b3366638-8f2e-4804-a84f-6f5b7d4699bb", "sighting--2359adec-d3a3-42d9-a597-3749ea1e2e1f", "sighting--7b750e43-596a-41fe-ab98-ec5bdf3cd7ce", "sighting--9de9636f-8cc6-4d8f-92b3-eb13459557a3", "sighting--e6e346ad-0ccd-4e05-90ad-f5d50b5ba734", "sighting--1888d8e3-ac8c-41b4-8979-68201fc86c42", "sighting--e91bad25-029c-4c14-8b7e-f16e6c566213", "sighting--298a675f-0e1e-47c2-8bc8-3efe24ad1fab", "sighting--74971668-019d-4fab-a762-5d2fe030f911", "sighting--51595986-21cd-4021-9f0c-e0ae87d0c3d9", "sighting--8dc5a901-d5ae-48a9-8b9a-f2e5f7f4731f", "sighting--21b318c0-94c5-4dc1-815d-cde870c6d35f", "sighting--cbd54fc0-7d26-47e2-b2be-3333322af8f6", "sighting--0a00dd16-51b9-4d0c-a47c-e4308770dc95", "sighting--677b4eff-c706-4652-8bfa-e7f6e0119b0d", "sighting--f2f645cc-a7f5-4c20-9695-6c476227cb3f", "sighting--7639130a-e18f-4572-976c-0635aee57650", "sighting--3959599c-970d-4a27-9a5d-4ccac3f2d1aa", "sighting--96a30c13-55fd-4427-b5df-ae456cc10192", "sighting--9670ad7d-7c26-4ceb-8429-91c42bf0f11b", "sighting--2ee8d784-66e4-483f-9a81-d308dcc6017d", "sighting--0515dbb3-50fb-42cd-a884-b2101033d297", "sighting--946ba414-7123-4d63-84e5-ea4c0ad4b53a", "sighting--80843f27-7439-4650-8a73-4a5a79674403", "sighting--076bcd91-3322-416d-bd47-a571a45a27c1", "sighting--66001c16-a711-4ab8-8f9f-d1fa5ce6e0bb", "sighting--50ff342f-35fc-42e7-a480-d607c1e0a785", "sighting--dd5ddd2c-8c43-46cd-8c4b-38050c86c8a9", "sighting--92d8817e-11ff-4ea1-8b2d-68d5a7df1a76", "sighting--5ede33f4-9e47-4bde-91f3-64f4348ee32f", "sighting--84bcc97a-e0ce-4966-9cdd-9ce0d8cab5d5", "sighting--db9c9966-3a7a-4786-b23e-a4a8192327bb", "sighting--584b424d-b8b5-4191-855a-ef1345dfdc92", "sighting--3de8f528-1d2c-4dd5-845a-f74feef10615", "sighting--0c103064-2136-4572-89bf-26b4ed2633bc", "sighting--dac6ba8e-e14c-4e48-b3d8-b87dca098558", "sighting--6607ff97-a9c8-46c8-8530-90f4455641fc", "sighting--1a4234f3-2555-4064-a9aa-e88619224496", "sighting--f07ed12d-5c16-4376-b88b-988b719364f4", "sighting--d9db23f1-fc96-4d55-a2da-8f7cd4f4a213", "sighting--1dc58642-eeca-4e60-9f98-7f24d8df0e85", "sighting--8a16aafa-0329-4ced-b089-0d2013ceee64", "sighting--51d06136-b241-442a-8701-2511b97fea9b", "sighting--9c2e9f73-08ba-44a0-b3bb-9886b42ebc65", "sighting--aa219a47-a77b-4153-95a3-18d41c0bae0c", "sighting--225929e2-9433-48a5-9a8c-5cb356bd3125", "sighting--76c876bb-9766-4023-8965-a71a7ed5e726", "sighting--7fa7ce22-c541-4e9e-813a-ae4e9847195c", "sighting--120b4387-0385-4526-8770-215f33c8167a", "sighting--f1a584ca-a094-4290-8a3b-c4053353019b", "sighting--2e9d86c5-35d4-47f8-81cd-21b5ada2602c", "sighting--092a4568-1f63-4768-bc01-e8988b7dba67", "sighting--28c1cfff-1e9d-4bf7-93a9-31e74c168345", "sighting--74cc8cb3-d867-4cda-988a-707be51941cb", "sighting--7f27095a-1ffd-49e7-9433-2a6092da09a1", "sighting--552403bb-a4be-4d1c-93fa-2b3492994423", "sighting--9a6c1054-d3ab-46fb-b229-ed10509d196e", "sighting--6d314a57-d870-4581-9e2c-45844511c21e", "sighting--1e14fb40-cc2c-4525-aa93-5e8055195c1b", "sighting--84f627c2-bf75-4ef6-9b69-37248a3ae2ba", "sighting--fe3e2e6e-7b94-404d-85bd-314035c50025", "sighting--3e3071bc-1966-4372-a8f1-fcd5d8356aee", "sighting--36f2c449-e90b-4547-9d5d-40e6e8fde240", "sighting--8122ff97-d6eb-4bb9-bda6-8add9063941e", "sighting--b6c827ce-9ef5-44b1-bfe7-fbdccae9c525", "sighting--31ee04ba-c1ac-414f-b9cc-2eba9ea657af", "sighting--479c9dff-14d3-41f1-84ee-77e2904a5ac0", "sighting--4c5968dc-d260-4ee2-97f5-30b5d5c7630e", "sighting--dbef644b-5c6b-4410-9ba3-92e075559e2a", "sighting--bf01c3e0-b607-4b82-8e42-30c5799c5705", "sighting--252b6387-1eb0-48d6-aae7-222356f9119a", "sighting--4b0d3798-84d8-47c5-bd51-d1af225a7518", "sighting--7055cb86-8770-4f08-88e5-90bacb018e9a", "sighting--bfc90932-4809-4489-8b3e-0dbb679f8493", "sighting--fc7ea827-e319-4719-9ccd-6039ad1cc51d", "sighting--66e2d84a-c03b-46eb-afbb-5af757a34e33", "sighting--d946dc5f-0b55-44f8-a69d-167974338a65", "sighting--07214ab2-f14e-4d03-bcbe-98e9823d9823", "sighting--3e5e1ce2-85e2-459f-a1ce-bae7e7b8ef42", "sighting--a7f7aa0c-09b2-41d9-8e08-7083363cbd9b", "sighting--c34b5373-885f-4726-abb9-b38a9617a76c", "sighting--62e16edc-5258-4d36-99ad-9cdfbba7154f", "sighting--391cccab-f6c8-4575-aa85-9fb97e3dfdda", "sighting--b5b3f6b0-b376-4917-b8e4-3c2adb83f80e", "sighting--9882c5ca-f037-4f6f-ac99-d4cb56414b29", "sighting--2887ca8f-3187-45a3-9795-de72f1456198", "sighting--03397834-c2d1-463f-a6dc-3b2c7af7d350", "sighting--cc5bf352-e347-4cbc-9a03-3565c4508282", "sighting--ac3f2003-4b29-493f-b070-431565ae5260", "sighting--42962838-45e3-4267-89b9-bf5d14dca8e5", "sighting--5f3f076f-19ac-42cb-9794-815152561731", "sighting--bf3e3969-0928-4597-b399-731f61a5ac57", "sighting--0e119bfd-1bce-419d-9318-2d028aab6505", "sighting--2fe9b147-b826-4657-82a6-5fcc3fc637fa", "sighting--3fbc1d69-3d0f-4750-8b0c-ac224798a999", "sighting--7d189ad8-bb36-4444-8a9e-341024ae1335", "sighting--062dce5d-b3d3-4a7d-b52c-b6a849036f1d", "sighting--83c0ef81-24e6-4da2-971c-efe0279dcb72", "sighting--efd94061-0b75-4a64-8a2d-4082bea0992f", "sighting--921566fe-8ee5-412f-a777-2fdd9e178d69", "sighting--7159000e-6a60-41fa-b285-7b6e51e05f4e", "sighting--a73265d7-5c73-41a6-9020-bbf38cc9c487", "sighting--ba9bea6e-d399-4ceb-88cf-c12949a820cc", "sighting--a51768af-be58-47a3-8fba-bcc7f7bf11c9", "sighting--770a6485-490b-4186-92d2-e5bf5cb22b2e", "sighting--cb0109a4-9d41-441f-990a-3d30fbe3ea29", "sighting--bb604029-5eae-4f00-8014-8beeeb975b79", "sighting--73911ac3-1823-47ad-b4ec-0a6d57b6e22b", "sighting--114ab12c-31fb-442b-909d-42a7f82cfd9b", "sighting--b834f98a-386a-4b1c-9f97-4667dd6749ae", "sighting--50eead12-aeab-4575-8c58-1380177e5879", "sighting--4de1e749-029b-4ceb-bf55-b60d1ce88aab", "sighting--8d893151-f1e9-47cd-b800-47351a0bc52d", "sighting--82206a25-8aca-4ca4-876e-515da2d9ab76", "sighting--49e8d45c-f628-4d80-93f9-968ff3770414", "sighting--fc437b42-d3f7-41c3-81ac-493ad4302090", "sighting--b49931f6-0cda-4d76-ab69-9be792ac4eb7", "sighting--a79f1c6c-ef63-4573-83d5-d5434c5ecd8d", "sighting--6d23ea38-230e-4e6a-ae63-1612fbf7bbec", "sighting--92156d7c-f74c-423c-81c1-bbfb8b6807ec", "sighting--90b9984e-fd02-43b3-aee2-f9ee4bf7bd19", "sighting--443a8b6e-36d4-46ea-b1f0-6970cbe76684", "sighting--c9914ebc-c10e-4b02-9d18-440060292604", "sighting--3c4f5a3f-1f1d-4ed2-845a-b0a1f776c0dc", "sighting--cad4dda5-4203-41fa-8f05-2adb49a4302b", "sighting--f383a9ba-652f-4543-9438-1cb96fda1852", "sighting--bc832ad6-2698-4081-8082-71687a7d48fc", "sighting--23254fc6-371b-4289-ba35-61baadc3065f", "sighting--c7e48bb0-91a4-4462-8b73-c03a6c689aca", "sighting--ccb81c3f-f235-4d06-a932-85a02bbb8fbe", "sighting--1fd466b3-9a0b-4200-9b6d-b4c1384fbfb4", "sighting--5fde3761-dc53-4b95-a67b-29049d447951", "sighting--c6ec85e8-78ad-4a76-a688-af33615c53aa", "sighting--fceb4fe5-b9f2-4caf-934a-0af7d3e96e37", "sighting--d567ad89-3840-4902-a916-b1a4017f9b67", "sighting--f4cb83d0-b9d3-46ee-8cac-dda5cee4bf48", "sighting--2e4e8ccf-5c59-49fc-981d-a96ccb5a4f7f", "sighting--11296922-51b3-4cb6-8115-5bf4e1f78ecc", "sighting--7cd5aea4-f7fe-43db-9930-3a833d5b283e", "sighting--1544509c-dbf7-4cf1-ba3b-a41fa02870fb", "sighting--ff22261c-0482-448d-8aed-53b21b33b1b7", "sighting--7fe6f62a-e001-4868-8e89-de3e49176e35", "sighting--bfce08ad-2cc9-46cf-8615-04e700ffe367", "sighting--12495fb9-5b9b-4ea2-b7f4-add9bddeee95", "sighting--d8d60208-432b-4a60-9c7d-ba0c87b5eb97", "sighting--2269360c-d69e-4dda-b3b6-b0035f187e57", "sighting--1622d8ce-4086-4915-8fd2-6312eb1b1e69", "sighting--c25ef3f8-21a2-441f-bfa8-56660eac09f1", "sighting--8f1ab92c-a87e-49d3-8b91-33612dcc8c19", "sighting--186347e1-ac7f-4e9e-8ff6-e48e3725e2ee", "sighting--00f21789-e01c-40c7-8201-0e848950bb08", "sighting--f10e3759-99d8-4a78-9a81-f8825ed2d324", "sighting--c4cc8be8-87c2-48d6-98b7-d85d5aacedae", "sighting--af2f2c95-60b1-462e-8556-c9ec7be44cf2", "sighting--a8dff0fa-a2e6-4fd5-b3a3-822361eca491", "sighting--64d98cb8-98a7-47bc-b12d-a13cf998e968", "sighting--37b5c546-5789-4a7d-9520-2a235b890c2f", "sighting--0d9722d8-ae8b-4805-9d65-6005cf3806ab", "sighting--bd3bf70f-262d-4ef0-97b8-81d749984e0f", "sighting--a4db6f4c-b558-4a19-b504-699479aea480", "sighting--05e62b5b-83dc-4497-9605-66a37a3b4ec2", "sighting--96c627c8-8b91-4306-8e5b-65d28447378f", "sighting--5cf7d93b-45aa-42c2-ac30-6354f9db4f4b", "sighting--4c97efa3-8bdb-4a74-97a1-f136d4d61f64", "sighting--938858dd-6fed-44fb-b8ff-e80c75cd0f0e", "sighting--db556598-fb1d-4b8a-8180-7ebe4f496161", "sighting--e7937874-29b7-4d55-ac3c-bd0358af876b", "sighting--639ff394-dc3f-4341-b9dc-e87e3bbce1e9", "sighting--41b13f16-be64-43e9-aee2-6ca91ce1a4e8", "sighting--dcc9d183-366d-4753-82f9-68206a70b549", "sighting--cff07ae7-9072-4e8c-889e-86d6bb6b2c1d", "sighting--776f0e7b-49ea-449c-8608-ddbdeb01de99", "sighting--4c831960-6d7a-41ee-8b3d-da6835224cf5", "sighting--218b0ef2-7bf8-4204-b0c0-96b2c6776c0c", "sighting--ac7b6cdf-7f7f-4ece-ab7f-6caa69f380a1", "sighting--d29da45e-179e-4a90-9cf6-4ed775b303ba", "sighting--a5ef288f-f1d2-47d1-8798-1232b42a4143", "sighting--e06235b4-b3a7-42fc-b641-0d79238ed0dc", "sighting--d7c71f4e-2d7b-4473-a14c-6f1e1a94dcc9", "sighting--45e196eb-97a6-4ddc-b22a-58d2c7812c8f", "sighting--b2ec78dc-0c04-4fe5-a2cb-31664b7b26e4", "sighting--d60e604c-c5c6-4d20-8b8e-9f5db1f25a22", "sighting--6ea61a70-3202-4394-bfd3-386b14dc0e35", "sighting--d991a896-78ce-40a3-8acc-745cae2bfce5", "sighting--1e9119ce-194d-4521-b963-73931e884362", "sighting--3dda0fbb-a5bd-41c4-ae0f-dbedd705a125", "sighting--6b164d00-4050-4d94-952b-01553e63484f", "sighting--d51d82ec-e0c6-41a5-a0a4-9f80d4148efe", "sighting--e0ca1350-1331-49af-a48d-cabdd3e59e2b", "sighting--3b48bbaa-57d6-4d0c-a542-39c15b99f12e", "sighting--a1dfcc20-7a4f-4841-93ec-428f0105369b", "sighting--b13a449f-c228-40c5-83f0-d4e0adad083d", "sighting--841ea1e9-5589-4234-8ec7-687d10b4468f", "sighting--44cd9872-3dd0-444c-a1cd-3b1ef0d34ee8", "sighting--33a48c06-cbfe-4dcf-b65d-3f4ccbf686da", "sighting--93d7698e-9456-4508-95d8-6a64c8ef35b7", "sighting--11281885-3ebe-4efb-9c8b-1ca7f8936bcb", "sighting--656709d9-d835-4415-880e-4720c5e00b58", "sighting--e7541d2a-b8b9-4f0f-af4a-f6c25169639a", "sighting--610b5cb7-3461-4d11-bb73-ea0e529741e6", "sighting--05718c7c-89fe-4a1c-8564-277f570f4e98", "sighting--a2136de7-934e-40f8-83a3-3d26f078da34", "sighting--febc56a4-9d0c-4eb8-a161-54e11c0fc57a", "sighting--97352ada-d282-44b3-8ebc-6f7dd5243891", "sighting--03ada756-2919-435b-81cf-d619faafa2bc", "sighting--a85b1ad0-5aff-43c7-abf6-075bbe4c69ab", "sighting--ae1e2611-9986-4e6d-87f1-e6ad55da2fb4", "sighting--90dbb55b-19fb-4217-93fe-09afecddc3c7", "sighting--b8f42dc7-308e-4d44-af43-b251aeced69f", "sighting--3cb09d34-3fa6-4201-8359-1c3c306eb067", "sighting--41d10737-c908-46fe-82de-40b42c0d510d", "sighting--904744dc-283c-4efe-ab83-463d6cf91073", "sighting--be7a140e-2e8c-49b5-b5a5-f8fa7934867d", "sighting--a0bcc772-5588-4dcf-bebd-82f4fed49b85", "sighting--450706de-0f6b-4605-a93f-f7b9c46d79fd", "sighting--49ed3445-2eef-40a3-8d32-9b4eaa56fa21", "sighting--62a451c5-7512-4e9d-922e-aab0c899705e", "sighting--968bdc3b-4fd8-4772-822e-d472dc733def", "sighting--73129afc-a869-45f7-bf3d-8a23163f98ee", "sighting--93d6b134-ac0e-42b6-a3f9-82635fb39041", "sighting--764201b6-02f6-4b24-989a-148646bae3bd", "sighting--675a7885-0e43-4a7e-89ac-8de9a5ba3e78", "sighting--d6d34b1c-6cd3-4648-b556-144a5d5d4cbb", "sighting--ec1dced3-cd9c-4d15-8237-f369ced6f040", "sighting--1fd2f73e-6473-487a-9ee4-9dfbedc1f635", "sighting--ae81a8e6-cbac-491b-ac85-b9e670e8cb4b", "sighting--aabace69-9785-4115-bc73-c0c6b1db31e6", "sighting--acf618d9-d017-4a30-a1e0-586fcc73728f", "sighting--1179212c-5bd4-4e86-b895-2112eb0dd778", "sighting--f3e11c07-c311-4e48-8477-8178297ff802", "sighting--64c74655-d6d3-45a7-883c-0d1cee438848", "sighting--20fc4223-7cb7-4b21-81fa-abc8b87096b9", "sighting--6cb0a85c-7601-4f57-a6a7-5e3df06cd9be", "sighting--00512fdd-2444-47cf-9590-14d0509642e8", "sighting--a578d1d3-1dfc-4d1d-9d06-71a519efdb25", "sighting--dee0f145-12f1-4b81-86ac-2a1d1fd539fd", "sighting--048a5335-7ffe-42b1-8222-4b0aeba4c826", "sighting--bc876f22-2d18-4bca-93e5-f7b4a56f4475", "sighting--a6f17abc-c4e2-4f9a-ad63-2ecc12ef2582", "sighting--ac1828ba-b836-4e08-ae3a-9fdbbff7fdb1", "sighting--d0539d00-f4d5-410e-b444-20b4b3ad5b4f", "sighting--d52a723a-3403-4b42-a419-39918b17cc17", "sighting--6b51f5e9-5d9b-452a-8ffe-0b7b18f86289", "sighting--290c9f01-4b9a-4aa3-8d1e-df9043a549e8", "sighting--e16b5937-2364-4a5a-9831-cc247903e261", "sighting--ca3f097a-c6b2-49a4-b94c-a88e340a3ee6", "sighting--bf08682a-31af-485b-9531-39f5d4dc7341", "sighting--519e3468-855d-46a7-b945-ea825cdded81", "sighting--bc91fd7e-509f-47d5-93ef-8e973287618f", "sighting--5b566bbc-3087-4dea-8c06-69ffc0039d03", "sighting--23e5b45b-716e-4177-87d0-6841634a483b", "sighting--3ad5e301-a6ed-4e8a-92cd-88439816aa75", "sighting--53db886c-1421-4612-b7af-e9d641ea355d", "sighting--44639354-50ee-44ed-9c1b-a46235a4674e", "sighting--e39eec8c-2dcd-492e-a4a4-005601a52bbc", "sighting--6088675c-57fa-431a-95af-3c75f24c7149", "sighting--11104d35-1707-44f1-869a-c2fb8c128ca8", "sighting--b41bceab-aead-43b2-a9d1-3a624f54e6a8", "sighting--8fb747d6-c455-4ea5-a256-807d6bc9f35e", "sighting--8f2aeabf-f19d-42b4-ae9a-95f07571556c", "sighting--685774c5-ce1e-47c1-81f3-f1ba2a642d04", "sighting--246593b5-a267-40e7-b195-568ddfabdd3a", "sighting--5492e2f1-7921-4bda-b3c5-cc1a75c53748", "sighting--e1006f72-7df7-4801-aeb7-b6c3abc7798f", "sighting--b8a6625c-d5ac-4aa5-83bd-1ec035e454e6", "sighting--20705256-5cbf-49b2-9135-d3f05165398c", "sighting--54159938-afdd-432a-a1b8-9cadba161bb7", "sighting--25cfe948-7ce4-45df-8bf0-a1924c826425", "sighting--e6093e90-e9fa-4219-9268-cae9870f0e53", "sighting--17aafda4-5bcf-4606-881b-b00c44d693e1", "sighting--a713552d-297f-42b9-8141-45ff91514ba6", "sighting--3f23e399-4ea7-48f1-bfa9-1863fb64c73f", "sighting--0f3fbbec-cbb0-4fe7-971c-2ed293091d15", "sighting--61166282-3bec-4f15-b1a9-3d9f9b406b42", "sighting--fbaf4614-f7d3-4ed7-aa4f-a6a77503bc14", "sighting--f8b0a27d-8890-4e03-8e76-e0a2814db554", "sighting--72819667-2cfc-48ba-8d84-593f2ae4b68c", "sighting--fc851e54-a6b7-456d-b152-c759fa2d1c6b", "sighting--accee5cd-b7bc-4491-b72b-584fdfb7862d", "sighting--48069d4e-f455-4edc-aba5-b92aedda5722", "sighting--9cd8bbb4-27ed-481b-b459-f8a311196aa9", "sighting--60c1339d-ee88-4bee-9cf6-ca04688c0269", "sighting--04a4714b-f309-4a3b-a85e-bcbfcbd64a07", "sighting--d22ceaa9-3dea-4d38-8516-07f87d9825fb", "sighting--33fc7dcb-4d29-4ff6-927f-ebe22ce1d5fc", "sighting--dc794be5-356a-4ad5-862a-c004814138cc", "sighting--7f19d293-d474-4759-bde3-aa7e808a6b56", "sighting--689828cf-640b-42e7-ac4d-fe2600b4c576", "sighting--387206d7-9256-4c12-b5c1-2b8002f8eb30", "sighting--e8d124dd-611d-4831-b1ea-93d6f489c7a6", "sighting--b99b1f8c-21c3-4d6c-aad3-06cdafafdc1a", "sighting--2b399fe6-fc02-4bc0-afe3-a5d5c9b781d8", "sighting--da259a74-e5a7-4fd5-89e0-05a495e57d17", "sighting--da9a24a0-4f2b-47a7-bf68-84b21a1bc8fe", "sighting--262e1910-0311-416e-b515-d13d11370a64", "sighting--836bdb01-3d2d-49eb-ba3b-5ed8ee5c2522", "sighting--9cf881f6-d4d6-4670-bf01-84745bddea48", "sighting--a275d49c-8674-49f3-958d-ccd0a03a6836", "sighting--25211940-08f4-471f-a593-602104927476", "sighting--740bafea-47df-4e7a-a6f6-27152798ea32", "sighting--94715fc0-c5a0-4c8b-8097-888a64358446", "sighting--f52b98f2-a464-4a80-b9dd-0a9c4d5cd6aa", "sighting--72bb65ed-160b-4eca-b9ab-e293bf08183a", "sighting--8c22e7f7-df04-4152-b087-776d131b9160", "sighting--b3f947df-5b31-4c8a-b332-3d783b8138a9", "sighting--6c60d40d-003f-49f1-bb70-8cacbaff60f6", "sighting--67204d53-a0cc-4179-8a18-d67ff6174269", "sighting--d97c65a7-25db-461c-98fa-d22ab39f4c94", "sighting--b3e2b54b-a11d-49c4-9b17-526f08e90873", "sighting--4c69dc7e-44eb-4de4-967e-6ba9be81bef2", "sighting--263c55a9-ed91-4ab5-9c6e-32e7079d9360", "sighting--b4711953-0e0d-4efb-816a-fbdc537fdb0c", "sighting--93bcf045-c7ff-4ddc-bc34-b3b50eb5a2db", "sighting--8799b7c3-5e93-4d03-bfd7-53ae15981174", "sighting--db749adc-7dd1-40a4-8438-5aa4f91f2b39", "sighting--b316082f-21e1-4708-86f2-324840ba2a2d", "sighting--f3f6761a-896c-4414-bea1-7ec2e4e17d26", "sighting--2671229c-a9aa-4a91-bbf6-ab54033b9634", "sighting--7dbc2b32-9b73-48c2-93ed-1b69ac480c0e", "sighting--49ea7a99-d3fa-441c-9484-6c7ba98a08c4", "sighting--83b754f4-5c90-41f3-abb0-f6cf82353d0e", "sighting--aaf28622-876c-4906-9888-c7e80c38654f", "sighting--1998a413-0749-41c5-9d51-94f4cc62eaa5", "sighting--902a4733-cd1d-447c-9d1b-b6ac8787b727", "sighting--03c116c4-e3fc-4589-8c67-f0487f4c8fbd", "sighting--ce14dfd5-aa62-46ff-aa7b-f6a3d8640879", "sighting--ae8e5718-edbf-45cc-95cb-7cbde3de3cd7", "sighting--4ec926c6-a99e-4743-9cc0-1edb28617013", "sighting--36801d8f-8ae2-4cfb-9a01-36df35098036", "sighting--4841d5e6-8ff5-4e5b-9902-1101f3db896a", "sighting--7f49c4ec-e962-4806-8da9-23bb7e7bc020", "sighting--32e9d672-1370-4ef3-8dcb-26dcbe76da09", "sighting--d39df7fd-9268-4d63-829c-37aa5df3ec8e", "sighting--e11b807f-ae3b-4be2-995b-f0e939e4691f", "sighting--0eb6b070-7fbb-427c-82e9-ce44b594235b", "sighting--a1bbfc5b-c0aa-40ce-a699-ffc4451793eb", "sighting--0b09bc1b-5fd2-4530-aa0d-8b5c6bad7d0f", "sighting--6ca2af08-6140-4919-a9ca-33d3b7dbb819", "sighting--d6a6efbc-77d5-4de2-b499-f03a236ab6ca", "sighting--1adce31e-8a57-493c-97ff-7494035c14ee", "sighting--58188d25-d5c3-4c6f-9f83-e9416845228c", "sighting--5b6f86e5-962e-4ca2-9cbd-7c2c4c8c6205", "sighting--cf4e865a-c5d6-48fd-9c7a-fba38c9d649e", "sighting--e98e0ac2-c44d-4b7c-81ac-6f4b6a4431b0", "sighting--78ae8cc4-e3b5-4931-8f3d-601927682c5c", "sighting--d97b667f-4843-457b-954b-503764f4a607", "sighting--a94a3076-6ca1-4121-a080-3f42b07ed96e", "sighting--b3880ff5-0adf-4243-a151-f3bd368319cd", "sighting--8809b670-cdd0-41e7-a24b-125935688bcf", "sighting--b65f63c3-731c-422a-9bb5-5583c0f55a8c", "sighting--2257826d-03a2-442e-b37f-89aa3e649bea", "sighting--4b0a0ff6-d10c-430d-ba78-de6a66fb6e70", "sighting--2628eee6-3ba4-4059-b6e5-3a261f729f8d", "sighting--c5a2e6b1-9299-42c3-91e7-0fd7d38e53ee", "sighting--d623749d-e281-4a37-b5b1-c83f2f22bbbb", "sighting--5d5d8b32-06e3-4706-b253-8e3026823a1b", "sighting--97559a56-faf5-4aef-bbbb-708459c1f630", "sighting--099bf29d-9fc7-4d13-9c0f-6a00821b46a5", "sighting--f957787b-c3ce-4f0a-a536-8624b4ba93e7", "sighting--d9a062cb-213a-4a0c-a465-152c9ef7cbb0", "sighting--745fa729-1ca8-4feb-99b7-0784bfdee751", "sighting--a03ea6f6-ad81-4cc9-a9e0-15df28199d3b", "sighting--5d493b42-3d1a-4418-ae79-c6e2b0744406", "sighting--25334d46-e37a-4f76-8f11-27e26dca08a2", "sighting--b11f4077-c081-4f20-97f9-a614f0971e2a", "sighting--bf98d289-5244-4d2a-b22b-1585db9386e2", "sighting--9f4a25b8-8a0e-403d-9f97-69d467b02ca2", "sighting--e2a60c74-d556-45eb-ab3b-573d786f256b", "sighting--7ca81c18-7906-40e3-ac0b-375420c9b13c", "sighting--c1d483b3-1dc9-4e5a-a087-2528f8a76e0e", "sighting--e9573955-38ed-40a7-a890-42d0c86cc487", "sighting--4fd4919e-9747-4cc4-ad92-02df35ae1b32", "sighting--eea7142c-381c-4340-8a36-d8dbf315711b", "sighting--b256a1f0-dffb-42c7-b0e2-e34f47d9b2c1", "sighting--7e54da25-ae75-42fc-acc2-3af714267854", "sighting--2cc580b5-845e-459b-bbb4-10fbc7d54b32", "sighting--48a45366-1c9a-4181-a3ee-145a9e1037da", "sighting--234e7f91-9374-4cfe-a89c-9b41fd0fbea3", "sighting--617373c3-94c5-41db-a1d6-bc42678f2999", "sighting--25e5208b-b8aa-464b-a609-fe5bb1dcb441", "sighting--3794a208-44a0-4bc4-a05d-d36c2e085b1a", "sighting--85b1ffe2-c6cd-4e9c-a2d3-1f3a96b04c1b", "sighting--9d887410-bad0-44c5-bddd-0fb26f40131c", "sighting--96e485c4-8d86-420d-905e-3a49356b509b", "sighting--b4ec8e2a-3e79-46b7-86c4-65a5b22e833c", "sighting--484f8571-4ab7-4791-b2f8-8677e4f44c12", "sighting--5833da68-e409-463a-9924-1740c5d864fa", "sighting--b10f902f-e556-479e-b115-61dadb5c759b", "sighting--d64531c9-83a6-4a6e-a5a5-c0117e61eb38", "sighting--f9dcb01a-b278-4148-b491-4ffe86349832", "sighting--e9ffc847-ce0d-4c08-9e46-55635311500d", "sighting--c46c6ff1-2612-4313-be78-a8270370b85a", "sighting--3600010f-d5e5-43c6-ac44-16b9d0150e01", "sighting--60480e80-5147-4fa4-90fd-c7dece9a878f", "sighting--1854fde2-ae76-4190-a07e-dca2d03afe5e", "sighting--cf73bca4-b735-4877-9818-decddea41809", "sighting--382e97c2-25a6-47a6-ae49-d90b885cead8", "sighting--b5987756-8f06-4473-9048-ef91624458fb", "sighting--3f61e07e-2183-4634-9067-b4f9dc813ca9", "sighting--afa77e3a-9ab8-46c1-99fa-ab0eed43e96c", "sighting--2f2400d7-f533-4ee7-88a0-4da8771242e9", "sighting--4e7d82f1-b2c6-41bb-8d4d-1222d304b693", "sighting--e03a5f44-2b28-4e00-be92-61b03b7e2ebd", "sighting--1e16e369-6665-480b-9189-4269b5a18939", "sighting--44119980-9eff-4dd1-a534-9170f5b311a6", "sighting--64c1759e-c871-4c7b-8106-d80209f3a462", "sighting--20ddfefe-71af-4867-93e0-69b08ce5938a", "sighting--a9d43caa-423c-4654-85d0-e630e758e621", "sighting--440bf69b-1b1e-48b9-8b70-04aa5e1361c4", "sighting--40633c4e-e900-4eb6-bc6f-58a54c1c23c9", "sighting--c0e8935e-91f4-4f62-992b-0bf481406398", "sighting--bc34231a-3d5c-40f7-87e3-e99368123fce", "sighting--38d657ee-259d-4e6c-8980-76cc36a93004", "sighting--1e597c76-eb38-4222-b70a-3515153530ae", "sighting--e32a8735-e8e1-4794-980a-77427551c94d", "sighting--86e8f199-9eeb-4217-ba13-e96f6214e2aa", "sighting--a87a2965-e940-4d28-81e8-7f276911970c", "sighting--d03a2953-e168-4fae-a143-ee8a5c4f2f73", "sighting--41de04c5-f5b0-4c22-adc6-dfb95c229817", "sighting--86af252f-2923-42a9-a76e-967d69f5dc3d", "sighting--0463457f-f42b-4f4d-9358-6faac1bc5595", "sighting--233dc766-b30f-443a-90fb-e9c197eb8635", "sighting--e571c8ed-4e23-4830-a47b-1882a5ee69b9", "sighting--f1b41448-d4f6-41a1-9e68-a913a49b0f4e", "sighting--67dae861-260e-4a34-bace-3f0d11d8d63d", "sighting--518a25ab-2b7c-4095-9826-43b178e825e8", "sighting--3caef75a-16ef-41ae-81b6-fe2d7ebe7ebb", "sighting--b1777981-7920-4f06-81ba-c2ab7d7d27a2", "sighting--0febbc5d-66de-4bbb-a904-4355f7e62777", "sighting--3a7e0b6a-cafd-49b0-8f5e-cfea23b42f5d", "sighting--2eae0741-032b-4751-b29d-5948abcca2a5", "sighting--f6af6444-7062-4a1c-a09d-6c82f1025477", "sighting--8c04c296-b6c3-41ec-a4f2-94f74faae419", "sighting--d8a8c97f-3a87-445e-b23e-86019dd49c7c", "sighting--2f553efd-1e7d-46c2-a106-fba6e42dee03", "sighting--f55f6bf5-2573-4998-91e3-016e435b9dd7", "sighting--71a12c17-5867-4204-990d-ff3a5feb7e2c", "sighting--36640bde-6fcc-4037-b6ea-cb559546ec6a", "sighting--46d5a073-cc4a-474e-9759-827bb46bb73c", "sighting--e8b969dc-c069-43f5-ae90-3f291c31d7bd", "sighting--86840c53-1b68-4102-8fad-5fb669b38cfc", "sighting--0bece0aa-b994-47bb-97ab-d4dc1ee2520b", "sighting--60da69dc-4b75-4979-89f0-79a38a219671", "sighting--be5fb9b8-28f3-4e47-8500-76fe49b49534", "sighting--c901cb96-0592-4f02-bce7-493133f06224", "sighting--57c424f5-d7f6-4180-b023-cad6f4eb938b", "sighting--205580fe-bd0c-4f0a-a468-82088c1cbac8", "sighting--1ee42eed-c4d1-43b2-a053-bf95849a4ee1", "sighting--c43c61ab-60ee-4917-a638-f01b8b921dfc", "sighting--f4146a92-3f93-4f75-a6bb-93e07daf05d4", "sighting--66f6690b-654c-4134-8052-f7a2f377e997", "sighting--b6a714bc-ce8f-4c85-a0b3-1b0bf098c3c7", "sighting--af808349-8df3-439d-852f-9f3b99702c01", "sighting--764331f9-4c51-473e-9375-099ac85376ac", "sighting--7886508e-c111-4683-8223-cda9498d2ffd", "sighting--8038130f-a0b0-4bc0-a9b0-b4572653426b", "sighting--c95cce1b-1a34-4422-a8c2-0165f5bf2f07", "sighting--70cba4cb-6614-49c7-b5f4-87dc5d3cc8c1", "sighting--097fd4c9-f162-40de-a64d-12196ec9e4e0", "sighting--1d59122d-76c2-4068-ad4d-0b716999d0f1", "sighting--b407ef71-cb9a-4d72-b40a-69b681c82fc5", "sighting--851b3ddf-eed7-4906-8344-d406040ef6a0", "sighting--bbbdf0b6-8b56-42c7-b1f7-db6c591d3eb6", "sighting--af849ab7-87b1-4d23-a240-502fad31674a", "sighting--7a4a4294-7510-4f79-ad28-ed075e1b6ee7", "sighting--6b814f26-6135-4528-8f2c-6fff6d8dc423", "sighting--431fb508-7469-4f98-8527-f31fddbfdbd5", "sighting--d58360f7-21a1-4b9a-91c7-ab8375f22d5d", "sighting--db1349f5-165a-4895-be71-ea2cee8551c7", "sighting--0be3a86e-d260-4df5-8a7c-3b38b33c9ad9", "sighting--7a9b0a1d-c97a-41d1-9cc2-5a758d4dee1d", "sighting--9c5883be-452a-4ddb-b22c-9b1acb96bbe1", "sighting--e2c11652-1cb0-472d-93e7-bca20ef715a3", "sighting--538cb4f2-8a1b-4689-84c3-a564f3ba8ae6", "sighting--cdef4023-6a17-4255-a64b-d926e6401bc1", "sighting--da3ca3ee-7add-4298-9b51-99d52c98da33", "sighting--4b3b836f-5f1e-4366-ae42-c8d6ac212c3c", "sighting--bbd0e81c-5ba3-4a0b-9d94-c79cdeb7d799", "sighting--8ac8b9a3-eb0f-4e0a-860b-e97f6ac14b9e", "sighting--fba96fa3-f82d-4a27-8986-a8e474b25097", "sighting--8c797832-7c0d-4cdd-9150-bb770ef4a781", "sighting--95b1be56-e0f5-43f3-aaad-7fac22a95d4d", "sighting--fdc0cd20-8c74-4f59-a662-7773083bb251", "sighting--a98b8330-4eb7-467c-9ef9-b2711850a70d", "sighting--86a35218-5e58-49df-842b-9ab6933f3b92", "sighting--3513f9fb-da2f-4b9c-817a-cffc18152f9b", "sighting--a3b49045-a5ab-4618-89d5-901d69255fc5", "sighting--3d749ac3-cbad-4347-8a44-1f6c126215e1", "sighting--31e4a9b4-9ff3-4aaf-b24d-5c470ac74dbd", "sighting--96e2d7f6-af9c-438e-86f3-6d80701329b0", "sighting--a805969c-6358-465f-b134-0ce6393b8c23", "sighting--0f7ed88a-83d7-4d63-87f5-476cd2925819", "sighting--f8098442-3694-46f8-9532-466366f3438d", "sighting--4fe3ec28-cd3a-4daa-8390-eff675b6fda3", "sighting--c21e4a72-8564-4c73-9f28-81fda40e176a", "sighting--3266dd20-e317-4ef5-a73b-691e390bbb21", "sighting--11edb39f-9656-463e-b05b-3166f8f9a70d", "sighting--4ac7f340-b467-4040-83ce-ec8a8bd33cae", "sighting--84bdeb02-6b56-4707-8f54-bb8821efb6a0", "sighting--4b60810b-dafd-41ac-83fb-861ff20b2856", "sighting--cb39df09-bea5-494b-b419-9689a4a0b3fc", "sighting--e160020c-adcd-4554-b67d-1f2b9bbb6f8f", "sighting--edf26735-e14e-4508-9384-f45b9abb96e5", "sighting--5c4ec158-f989-4857-878a-aac7410fd8ad", "sighting--62728854-a0cd-4482-be5c-b731ab7cd14b", "sighting--cb004711-9f32-4195-ab0c-fe7d302deb7c", "sighting--10a688dd-5c53-42ca-b34d-b595fab33687", "sighting--654b2121-69f3-4dbb-a7bb-4cd026be0992", "sighting--c3465251-6f18-42a2-b605-898c23c0c803", "sighting--822368b3-4820-4c89-a93b-d04ff15726b1", "sighting--6b1651cb-ea57-465a-be1d-bbb4cecaf0e6", "sighting--81dbac81-b333-414f-aec7-43e1e0bfd69e", "sighting--60466b2f-5b24-40ba-a3ed-3768339e8927", "sighting--23c3d30f-c233-48e4-986f-2be23e5624e7", "sighting--446bf500-f2b7-4f8f-b26d-be921ad4676c", "sighting--128336ae-a973-4917-977a-0ffe07ca3530", "sighting--26cb71eb-1d1d-49a3-b60d-2daea6c75878", "sighting--7abbf2fc-33a4-4ae9-b05d-a5e2a83ea249", "sighting--04dfdda4-bc06-48e9-9cc6-539fd2cc95d3", "sighting--c18908ad-7408-405d-ac52-e99d2f07b332", "sighting--fa038591-6b08-46c5-adb9-298fe98d4292", "sighting--a87fbcc2-78c0-4ff5-bb66-c6a624b2289d", "sighting--cca00ca6-75a4-4b55-acc7-cd93350ef466", "sighting--1573957e-f229-498b-bc6f-33454a1e8471", "sighting--82c13a60-a26a-46ca-83db-982a21199319", "sighting--eb759ee0-255a-4cf2-b3b3-6d850a8b0a6b", "sighting--ba00fb74-b585-4248-9a53-9637afb6e9af", "sighting--bd8871d6-0def-4055-9ed7-4eecb34cd8c0", "sighting--0f24a0d7-7723-4aed-9e3f-070380140ef1", "sighting--05291757-1d21-4ec3-b312-e732f6fe1a7a", "sighting--9ffaa4c7-f6b8-4a4c-baa3-b9c4c96d7884", "sighting--91a96374-69c1-44ae-8c64-b285691c4dec", "sighting--60f8cc9a-a25e-4dca-ab68-45df179a8580", "sighting--8084f55f-bbd5-4f93-924e-570f63beac1a", "sighting--9f46319d-5033-452a-a5a4-4499de7c9ada", "sighting--6923dd63-e385-4a22-9a63-193125857549", "sighting--b0dc4482-5791-4448-b229-d72301022dff", "sighting--bfe5fd3a-dd30-4ce1-936a-da88578494fd", "sighting--e93abb59-aab7-4636-ad16-39a258aa7fc3", "sighting--a580b29e-ec63-4ec1-a056-21eafe2c90de", "sighting--788cecf5-e2a7-4613-8a45-32c2b6fae648", "sighting--ba6e00a3-450f-4e73-910b-66eea54880b9", "sighting--3a2f14bb-4665-4633-8dca-2f5a2ff73d96", "sighting--88c6fe89-7a2b-4ca4-aae9-3574fd484eba", "sighting--f6b4bb1b-095b-4e60-945d-7b8392f08a49", "sighting--e90fc2f9-80d9-498e-8d7e-2577bb8363c4", "sighting--287bc81f-644e-4452-97e6-0397da704d60", "sighting--731e67cc-314e-4a9d-b809-ff63de207ff8", "sighting--ed9603f1-8c9b-42e6-825f-7f3e60e018c1", "sighting--a0efd0d0-28c7-4d47-b524-49c9b386e027", "sighting--06387ffa-ed52-428e-93f1-162938e69159", "sighting--4adf01d5-f381-4603-a6bb-8f7bc66c2041", "sighting--ab6beff5-72ff-4764-ad4f-b3d2d6a00842", "sighting--61a5b99e-cdc5-44e7-bea4-be84a3e5e6f5", "sighting--b8080382-59b6-434c-98a1-10c398aa752d", "sighting--96e2c587-d754-48b6-b57b-d8bf371c683f", "sighting--beaeadd7-af97-455d-a422-1e1b5ff85b81", "sighting--68e16c8f-1c8b-4d6c-b9fa-7181558f7f65", "sighting--7bcf2a4e-4079-4eee-9b5a-6d0141a721e6", "sighting--6a608540-4372-4cbd-8a24-c45b4f210d6d", "sighting--e07a06d7-325d-4389-8e6a-db5e563e5d42", "sighting--a65a694f-cfac-4ef6-af84-6c72e3b6c9b5", "sighting--e8197ea0-ccb4-4bb6-8e41-5e89162682f8", "sighting--7e3558d6-9481-4eb9-af58-0749e12cf701", "sighting--51ee9514-47a3-4910-8ea5-3b8d9a86efdf", "sighting--33b9874f-0e7e-4e3b-8f90-74c2f41257bf", "sighting--30144cf1-06b5-4709-b528-61b936d39d65", "sighting--1146718e-9f8f-49b1-bd43-9269ecef6d1a", "sighting--4b2697b9-c58c-48fe-ae64-3b54878a2800", "sighting--cb8fe502-3f7a-4e3c-be52-b077cd820314", "sighting--6dda42c7-b867-49dd-ad65-e4d61bbb7ede", "sighting--0f76fc8e-d559-4fb2-85d6-ddd865114330", "sighting--964ba666-f60a-4085-b156-6efcfff9e7f7", "sighting--93322578-209e-46ee-9f58-11901bec695f", "sighting--68d6f7a5-3409-4886-9f58-3bc182cfab68", "sighting--33cb2ede-551e-438b-bcec-14b90bd892e8", "sighting--c2f9f4cc-c184-4716-8911-d31f0a35cfe6", "sighting--7042eafa-8ae2-4a16-b772-181879c39481", "sighting--4ee7d7c1-b2ab-4994-bd61-f2333ae9e26c", "sighting--3c0cfdfa-d6a7-425d-a6ec-2989935b7638", "sighting--689dba40-c9df-4eaf-a4ee-d449d646ffef", "sighting--6b55f593-e973-4d4f-980b-77734f6f5e92", "sighting--527a8e6d-50b4-4185-9f75-d2d38e8a5505", "sighting--c5fe2b3a-acdd-4182-8929-6bea6f64840b", "sighting--d5dd2f9a-22f5-42fe-b58c-429e8b9b41af", "sighting--b12ceb0f-7a96-49e4-bacd-76deaea90b12", "sighting--85c7d5f8-323d-45fb-a413-48f97c2299f5", "sighting--55322258-602e-4d51-8a37-f2424bf66625", "sighting--5a11bd44-f98b-4329-9ae5-c2ebde98f2ab", "sighting--dd3c4fac-9a86-4221-8a88-4170c8db0ec1", "sighting--8e4f6a27-cadf-4ee8-a8c9-13ae5c8f2fba", "sighting--0891f3d2-69c9-48a0-8346-c83cd65561e5", "sighting--3994ffe4-74f9-4b4b-9734-846005ac4bc4", "sighting--a6574956-0662-4b1e-b3b2-aeb955ca2f11", "sighting--2aba1c59-b144-4e12-bce4-05598c14b0c4", "sighting--610619ff-4fa6-4e9d-8ad9-c9fae6c17c52", "sighting--a2f6a1f7-2e1c-4d28-be4b-c4e3104ee842", "sighting--36921893-4ceb-43c4-bbc6-93fb0053e88c", "sighting--0b05ca44-8bcf-4c6e-8d04-87de92f2c42d", "sighting--9224a242-5d1d-421f-bf38-dd85e37832c9", "sighting--2db5101d-1701-41a8-8088-c8f44e1b1f16", "sighting--97585e26-f95d-48e8-befe-edc845d5f675", "sighting--0f55d8e8-bbff-4c7f-aba5-a1db1214d61b", "sighting--1ed804be-93bf-4e3e-b263-56822b707d23", "sighting--a7a27d67-bbe8-407f-9441-1e5fe0be13b8", "sighting--48edf936-30a0-4038-9da5-577d6eb8d56a", "sighting--6372f265-cd86-429b-9cbc-cab80f727f55", "sighting--14f6baf5-0b9d-487d-8bf1-dc197318f433", "sighting--49181755-6288-4fd6-a2c3-d8325225cd74", "sighting--bf7aa660-cd20-4c25-ad4a-613970ec3667", "sighting--b248216c-1513-4b5e-bede-e9c05b83d65d", "sighting--c279a9d3-1692-4916-a441-393baede0e2f", "sighting--f629cf59-223f-4009-8d84-bf3fb4bb8f29", "sighting--e7463b0c-29bb-43a7-b217-2eff988cf175", "sighting--904dbf9a-9760-4845-8b40-f3022540e5ac", "sighting--f4af5b69-7e50-49d4-b291-00f1d467eeee", "sighting--d46ad4aa-dfbf-43e7-ba8c-2a2b62e6583c", "sighting--904094a5-af36-4b85-93a5-302fe2b490a3", "sighting--fe63e5eb-781f-493a-aa48-6dfc55be8ce0", "sighting--8d0c8535-4cde-49d9-918b-032c0bfff57e", "sighting--1ce57cd0-813d-4f85-871f-b180cc9ed7ef", "sighting--85dccc62-ca71-4431-9426-978881042f67", "sighting--ef9b6f43-484d-4cad-80a5-a729e0482b5f", "sighting--c72baa09-b693-4d4d-b292-b24fba8e8170", "sighting--293c0f44-a6e0-4f5f-b61c-59bae0b121cb", "sighting--b7cbea56-9ed4-457e-97c4-5a9d6569b738", "sighting--a24631ed-fadd-4d85-8823-6a238b40ae1c", "sighting--7d71fa63-4e88-4c08-aaab-0f65a3f71cd8", "sighting--689c93f5-f1c3-4bbe-9bce-2b80ed7dbe27", "sighting--aba861f4-c379-43da-acd5-810bd048ea68", "sighting--ea85b6b3-c4b6-48e5-bca8-5099e644ac69", "sighting--6fae9d76-bfeb-4417-91d4-10ca6b94a890", "sighting--51966267-5da7-4bb2-915e-439329e15a83", "sighting--23258ed0-c341-43be-8fc5-5c24c9f9a7f1", "sighting--dcb27213-fa4b-4b30-8ff0-366f49b39a0e", "sighting--40c4f79c-e998-4f40-8247-a33efffdb3cf", "sighting--279f83f7-5821-4a7b-9636-331e48d027ef", "sighting--5d45f0c9-d939-4057-9aca-6c4aaa496fde", "sighting--31dfc3d0-f02a-4bb8-a0c7-58ddeaf588d8", "sighting--f8441280-27a4-4341-b364-5794b345d0d0", "sighting--1a6103b9-26bd-479c-a639-c42f07405484", "sighting--e5689a46-ddb5-4122-9853-d9607bbc4e9e", "sighting--ccbd4070-911b-4c6d-b82f-67e4a9deddb6", "sighting--0159c847-4450-44e4-8f9d-5e9a0af83e3f", "sighting--3e817c4b-e243-485a-b600-14691cf0a32b", "sighting--84053b35-1c72-40df-8c20-a3c4561f95af", "sighting--a67f5749-0481-4036-9e62-e77f4ce25c87", "sighting--d91d8859-8b43-4bd9-8eec-d1294414768f", "sighting--37be3139-91e4-46df-a4c7-9b0fcabc5513", "sighting--da9ba692-6cfb-4f40-a9f3-5b4148a33db8", "sighting--5c79f360-719d-4a27-a745-84a4c7c7b60a", "sighting--2456b295-31ab-400b-ba74-92b33df7a56f", "sighting--7c581830-351e-4650-a8fd-5bb5716eadc8", "sighting--0b524a46-9190-4546-8aed-99a2a314d87f", "sighting--11751007-8a58-4cfb-b5fb-2b171a8783bc", "sighting--d2c0ae57-2f12-46b6-acf9-b454834ec09b", "sighting--8638ea07-b3cb-4dbf-9184-174194f5fde4", "sighting--8c447f54-312e-444d-9542-5ad2f07ee8cf", "sighting--cc94c62d-3111-4374-b325-2cc5a9ac3390", "sighting--b8c9e523-c56c-40b8-983d-b91c2c56fba6", "sighting--d60c2101-4fce-4dbd-885a-53294f2d1825", "sighting--f627dde8-2304-4fe1-b1e7-970c3a3567c8", "sighting--c8eddd1b-9c6e-49fc-944a-c7cf7c6c8028", "sighting--dbb9e354-45a5-49d1-85f2-62c026be6826", "sighting--8d1dde35-b7c8-4915-9f57-4fee82d426fa", "sighting--68ecc819-8922-43ec-9ec7-1746569df9e2", "sighting--476c2070-40bf-4014-98da-2590a81a2f2a", "sighting--564a2fb8-99cc-4d7d-87be-bd112c8343eb", "sighting--829246bb-ba68-40ef-b577-68cd68ddec02", "sighting--c236ad5e-f17f-4c7a-bd31-70f4be947baa", "sighting--de4ec414-f843-4c6a-b564-e6bf90d65832", "sighting--3dc15088-369d-44ce-9e8e-314cbb5d2402", "sighting--ff77f8bd-9626-40da-a6c8-3652c7d6ddef", "sighting--137a040f-f90a-4dc2-9b5f-3bc34411626a", "sighting--e2d0281c-80b7-47f1-b36f-d2518a7b9b2d", "sighting--ab21c330-ffc0-4c66-aab2-ca13d3a4fbb9", "sighting--c81b110f-4f08-4c5e-9786-7bfdf86a84c1", "sighting--d41c924b-989e-454a-921c-8437bc151cf1", "sighting--a516d3fb-cdb1-45b7-8348-9659e3705bf0", "sighting--e1ae6324-9a3a-4bc3-9e25-d35c4bfe2dc0", "sighting--f7a7773c-c214-4c25-8264-3ec6d535e008", "sighting--6dd263b4-18e2-4868-972a-96fa0cb9a401", "sighting--7b2972a9-c0fe-4520-a98b-67934bb4d38e", "sighting--9ca564fc-fa14-4a4f-91b3-7b468347821a", "sighting--592d5743-5caf-47b8-89a9-2829b19a8ca6", "sighting--22812d9f-0163-4a68-9a31-76707d0d89a4", "sighting--9a1d5abb-4b53-4bdf-a9ec-957da85b26fd", "sighting--8c2b5c59-e02a-4bef-b48d-36d60c301a03", "sighting--1d033d23-bf51-4eee-b021-a7540b7e2a45", "sighting--f4ebc4c6-0f20-423f-8db1-c821ac302d46", "sighting--8bade0e2-56fd-4419-88c5-0d41ea5c2950", "sighting--af792ff8-5fde-40e5-a642-4d83901cb5b2", "sighting--46a5a3ba-1238-4e37-b68a-44d9261838c1", "sighting--571b7869-dd26-48af-abb9-9d4f8f0aa41f", "sighting--ebf36c90-6eef-499a-9a2a-2456e5d8b9ca", "sighting--078441f0-ccb6-416a-8dfd-a3ecbd234f56", "sighting--f1be0afc-020c-4a4a-92f7-243f16daa1cf", "sighting--91ccd3a2-11f0-4b20-b717-a664a2a917d1", "sighting--af3ecdf1-8dd3-46ec-a8db-a9578f491aeb", "sighting--5ce2615f-46d9-4830-9c5a-55d18f253392", "sighting--e971bf1d-455e-4eb9-9816-309ce3694d33", "sighting--3f215a44-f989-48aa-9000-b239ace2f80c", "sighting--f9e28c22-994f-4f90-a552-d5fbc1bb61fe", "sighting--830792a5-3ff7-4b5e-8c6d-0e08e0f88cce", "sighting--51abcb46-4ed8-4d9f-90be-fd43cb04cc42", "sighting--4e04f01b-a9cd-4d3f-ac61-c1c778cbec10", "sighting--f8812916-a09c-4c71-95d4-8f0c5d3988bc", "sighting--5b7f8560-8681-4194-8a98-208dbd106a5b", "sighting--2870ff2b-783d-4834-9dc7-fce03177c74b", "sighting--f70a2277-6044-4028-a375-1229ce40c94b", "sighting--75794156-45fd-4b74-909a-a0c0a5d219d6", "sighting--27a2f341-ac8b-48b2-aa00-ebd16b212d79", "sighting--f8425b32-960d-430d-9d9e-28e4778e3fc4", "sighting--83c92742-79d1-42bf-88a6-8120b6d9c5df", "sighting--0d9b8cdb-f4a9-4f09-8f42-faa7565603f0", "sighting--f81214e4-880b-4d3c-b2cd-e8447755745f", "sighting--1ec02051-24db-46e2-ac01-e9d24351a113", "sighting--3676ba7f-8603-4038-ac22-961d02ea4e05", "sighting--3bf50e4e-63cb-4e8b-9141-0562a908d8c7", "sighting--72f12253-ced2-48b6-ad1f-4516c5ec0dc1", "sighting--7bd6d5f8-b8fc-485f-822c-6057cabb6d38", "sighting--206d7bf3-901b-46bf-bb93-1306812f99f8", "sighting--afdb768a-b249-43cb-9049-23cb27dc6a91", "sighting--6078f029-1512-4d8c-b168-1389e52c99ff", "sighting--9fd69f88-c6f9-4881-b6e3-d646dbb78816", "sighting--44389e77-d99c-4fa9-8586-2cf2fdd84580", "sighting--1656ae94-76db-4aee-8dbc-83e9f166a47a", "sighting--70acc9ac-ddbe-4f43-93c5-ba337901aab1", "sighting--22453e7e-cc62-402d-94fe-b330f54673fd", "sighting--13a5b523-6e08-46b5-a6c0-0d1c7a930178", "sighting--0a525e0d-1e19-4c54-9d82-ab593a0b854f", "sighting--34960489-5af2-41ae-990b-25c36a7c60be", "sighting--0567048f-68a6-4173-9bf2-80b63ee8f306", "sighting--bf4cd109-4d83-4a89-ac29-21bb8a47091c", "sighting--24f49df3-7b3a-4a31-a489-bf5937dd03ad", "sighting--27ac9a28-bb67-40d0-99ea-f60b3cd20174", "sighting--25e51cf1-8d7b-4459-b155-f13871751f3c", "sighting--96101932-e91a-4d65-ab7a-037dab510821", "sighting--8c5668f4-affc-4b02-87c4-8630199302fa", "sighting--ca0bcdd0-ab5c-4269-b37b-1737fad9fac9", "sighting--a9c56a28-1519-4225-bc0f-e73c9612a7d4", "sighting--b39ce84e-9c1e-4413-9d40-b125f5c40dc3", "sighting--f77fd112-59d9-48ac-b070-cdfc0fdb7d3c", "sighting--17627d43-bf0f-4126-9c5f-4a49dddf3493", "sighting--075b6c1e-a664-4f2a-bc17-9785164ff81b", "sighting--1c846cd8-6b6c-4fd3-9b62-8eb4921983f7", "sighting--7bce8dd8-2122-4ed4-867b-d31400242b23", "sighting--64ceac3a-65ff-4817-a774-667a17711be5", "sighting--3a911fb8-f0fc-4a62-afef-841d4302906c", "sighting--9d63243e-e7e0-40d0-b7fe-4afcaebd7c47", "sighting--dc6a9514-6e12-4d41-90bb-fa736d578545", "sighting--4c0f4d18-cb9c-4226-a9cc-dec828a9c3cd", "sighting--124d24fd-7b21-478b-ad10-0ddf668999cc", "sighting--8cb063be-cfd7-4e11-9007-3a0deb625645", "sighting--a7593686-c256-46f6-a2db-bc7c3d6bf44e", "sighting--7ca734ee-6877-484a-b9e9-148dd516e360", "sighting--be082055-99f0-4122-9582-62f272af6e25", "sighting--ca38eba5-5814-4ae5-9c34-6ec489d20f33", "sighting--7b8388bf-d17d-426b-a9f8-20191454f0b3", "sighting--f79c189f-8655-48b0-a7cd-f93375f6c5eb", "sighting--977b2326-7c06-4080-a329-8efa783d9fbe", "sighting--289d3486-b3fc-425e-bd82-ec963763844c", "sighting--5205cbfa-e4ac-4068-8e4f-c0afda4a37cb", "sighting--41aacedf-a508-4898-8925-56ecc0da7705", "sighting--945d73d5-29ce-4432-b9a2-c269b89be362", "sighting--5cf62461-4431-4474-9f31-abd577a244ef", "sighting--464f9ab5-9e98-45e6-b9c5-eeaa9ef67695", "sighting--4b0430c0-b5be-4805-8636-33cc1abd119e", "sighting--b5edcab5-10c7-4fc9-89ec-288a098744fe", "sighting--d9ddec29-9701-49f0-b338-fdeb4ce21ead", "sighting--8ca0c126-dc2a-4c90-8385-e7c446d37f02", "sighting--2e33b312-7d93-48a7-9e4b-d4dd3a4bb39d", "sighting--4b242e16-36e4-4981-86e8-f45248ddd59d", "sighting--33f7272b-903a-4b40-8192-84333b5420c9", "sighting--cb5c0c66-65d6-4b3a-b221-5124b6ac061c", "sighting--4ea14592-5c32-4e8a-a5b4-393bea082be3", "sighting--b581bd20-c590-474e-8d0e-03487b98fbc5", "sighting--476f2dad-53da-4e07-9d2e-4ae631a08f5d", "sighting--5d8ba412-0987-48fe-8b68-c31b97ec91b5", "sighting--163ba1da-699a-4fe1-85d6-db9df088c76b", "sighting--0b21a715-9779-4944-a3c5-11ee596f8b8f", "sighting--a264be8d-57db-4b96-b80e-d40e5d3a6eaf", "sighting--387f50b9-d305-42d4-928e-718d6d640119", "sighting--ab8df4cc-6639-4be6-bd6a-e57f49aa083c", "sighting--c9fe923a-44bc-4a47-9672-7ee9135bbfb7", "sighting--53b947ce-d860-40c2-9ef4-a9112eda1a1e", "sighting--e93240fa-a3e7-4582-bbe5-3b55b6309acb", "sighting--8032557e-a92c-4cb3-bc8f-ddfadad2a374", "sighting--3ea753a2-9cee-43e4-9ef2-1bf09352e876", "sighting--abe6c163-2e4e-47dd-af75-85f9a79dc475", "sighting--5c30550a-75fb-4549-945c-08ed6de6cf36", "sighting--d32eb099-5a62-4bef-a2e8-3600f1b496a0", "sighting--97d9624f-8432-42d8-ad54-a3162ad614c1", "sighting--f2becb1c-940a-487e-a2cf-018bbeac6c99", "sighting--43c4d07d-31ce-4202-8ee8-605172e75f12", "sighting--bee48852-32d5-4b53-adda-574ea82976a5", "sighting--bbd3345c-adc7-45d4-b1c8-e53126790f90", "sighting--0686c001-3255-4ce0-9438-5e3692007603", "sighting--36c6118b-d290-49c7-8296-a8b371b2df8a", "sighting--b5f8589b-c57a-4e50-9bc5-99068029131c", "sighting--28a291c0-72c2-4eac-bd45-10654f76ddf2", "sighting--64aaa98c-9a91-4133-8009-e0dd9e1fa11a", "sighting--7ff3315e-c614-425a-bfe5-c5ae747f9b6b", "sighting--713a4d8a-f61f-4bd2-b55e-e1806f413579", "sighting--c88b0f02-b12a-4e9b-bbfa-0578c44d196f", "sighting--3b73b963-a6d0-443e-9222-8548483257c2", "sighting--047d72e0-2aad-48d0-83fb-3cb8466107c5", "sighting--a1ad76e6-6cd2-4827-bc14-c6a05d2a4e1d", "sighting--fc9ba74b-d487-45d4-a133-c208af444bc3", "sighting--8944bdb2-0d20-4dac-b9e1-060f20674da3", "sighting--271a0980-b0db-4a6b-911a-1a1cc5799c60", "sighting--9ec2a066-fc5c-4987-a791-ba77fbea334e", "sighting--e182bdec-4516-4b8b-834a-f32624f5a4d2", "sighting--e5f8d58b-1611-424b-96bb-99b42e582a7b", "sighting--0d7e38b0-cffa-40ef-9196-f0f9f6ee1137", "sighting--373185f3-7370-486b-a62a-de773969b256", "sighting--bcda7449-aaf5-429c-97e3-5a12c841252e", "sighting--40654cee-4e5e-4739-be81-512fd54e7a76", "sighting--f2b9a8f4-4ccd-49fb-9bf1-c3f206f34935", "sighting--cbcb41e8-1f2b-4ca6-b790-cdd30305b574", "sighting--20220555-b090-47b0-8ffe-b888954a4dea", "sighting--e58d380c-4345-4b77-83e4-ca47180d4799", "sighting--6e4fe136-f698-4f75-9963-49a4b7e204a8", "sighting--bdd1603a-1291-4cd0-b53b-5776188348b9", "sighting--2b3c9114-d9f1-4846-8be9-0b7e24e871a5", "sighting--412aab3a-8089-4eca-b09b-d554bb4e14d8", "sighting--2f151cf1-e427-4639-b5d7-ffa5b4951568", "sighting--af293f43-052f-4e38-85fe-3e230bd6580f", "sighting--8f45fdc6-cddb-45de-9acb-f5acbd4b4c14", "sighting--c5128c4d-93a7-4315-b4a3-14057524d343", "sighting--4c29b80d-8d31-4bac-a0fe-f9bbdce67089", "sighting--623e1e58-dd58-4bca-9799-9a497fa65fe2", "sighting--124f4f80-bf2b-4829-a242-386f763af25c", "sighting--be9a09df-1ed9-407e-a23d-1e89fff39f51", "sighting--c301dcb9-8887-402f-b21b-0778652e3c5f", "sighting--0bf07444-ae11-4ad0-bff5-0d11494ebe4b", "sighting--6ae273e8-4600-402b-8a97-06b4b005054f", "sighting--b94cda5b-e964-4f06-8776-347d8f11017b", "sighting--65f779af-a5d3-4730-b514-0787ddf0bab2", "sighting--f17ce4fb-0289-4e57-b1e7-de3c5853ce39", "sighting--fc0d86fa-c443-4b1d-abfe-1cd6214f3a99", "sighting--751c20e6-1068-41bd-90c3-65366dff0672", "sighting--5ea43288-637a-40cf-8893-7c56a4b5244e", "sighting--451f4e1a-68be-450b-83d4-01c8437eb891", "sighting--5a786095-9d63-4803-88bd-1f4f53024a5b", "sighting--6e3ad316-03aa-4482-ba96-4a46f6bbba30", "sighting--8c2c4f2e-c361-4c3c-8177-f733878ca307", "sighting--d92e7b95-68c8-4693-9175-2e6c273181ef", "sighting--858dd647-fca7-4326-b279-846507d289c1", "sighting--be42c78f-a54d-41fa-ba21-de6192828982", "sighting--69bcc801-9a09-4373-bcc4-00c4b16c16a4", "sighting--114d9b9c-bccb-419f-bf24-b38029b5db23", "sighting--15ace1a1-25d2-4624-a94b-c0c2d177643e", "sighting--c1f04ac4-ffbb-4d23-8bf5-2d82a6e5e857", "sighting--0b985f80-e029-451b-ac1e-30f7ff5fcea7", "sighting--cefaeaf7-0267-421d-ab9f-503bc228406d", "sighting--55fcc7b2-ef4b-4b27-9e35-e7aa52b83425", "sighting--6e01b854-bfbd-48fc-a0c3-996978cd395e", "sighting--94c12470-b03d-47a0-91a4-e1216bf583b0", "sighting--718f0ad7-9074-46e8-ab84-7cbad0d9f86d", "sighting--0ebc7442-4922-4d2d-9a87-fb6a57e8fc64", "sighting--379b0920-4c6d-45a1-92cd-3795f9af602d", "sighting--2172fdc2-d1fd-42e7-87d7-0533f89fc371", "sighting--5cd540a5-01b8-492b-9bc2-eb32e07c2876", "sighting--9baff5bb-8d42-48bc-a387-93980a89381b", "sighting--667722c4-6665-4618-a569-5ab186fc126f", "sighting--140e2260-b398-43e1-9124-1efb3e388d0d", "sighting--ceb0834c-311b-43cc-89a5-35cc592eca29", "sighting--f978018d-a36f-4da4-9678-b314f2ef6839", "sighting--de0bdeeb-6fb5-4dab-aa6b-96e160d1d80f", "sighting--eb018b41-579c-4a1f-b33d-2ab5912ce08d", "sighting--eff8aeb0-c241-4bed-b719-3de149cbf0dc", "sighting--88ee1eae-390d-4608-9d7d-399cd1a50c56", "sighting--2e501d1e-b32b-488f-bb27-d181b7af3475", "sighting--f0597888-d55d-4127-89ae-bc914f074fc9", "sighting--14b6c994-5479-484c-9a82-6aef7eb71b29", "sighting--97ee0a61-82d8-47b2-a420-cbd1ca47ce1c", "sighting--398cde8b-98d6-4957-80dd-b34bfcfdba72", "sighting--f68b9e5c-3fba-4b65-96d0-d2c5ac9c1ad7", "sighting--5b745ff6-87fd-4b36-8092-1a857153ab32", "sighting--42613a97-5cc9-4cb6-a3f4-8e5f19a60010", "sighting--1c869c1d-e814-4faa-b7d7-eb9a7d68d049", "sighting--cee3d226-78bf-435b-936a-cc92b4217813", "sighting--c1ecd8ed-81ac-4f45-8ab8-60acb6dbf5d7", "sighting--50d3c2cf-43a3-4d55-bd02-69f03551bc70", "sighting--0f6cc77e-9da5-4670-aa76-cb19a0f23147", "sighting--0e25c37d-b7a9-4d86-bfd8-e736c8d2935a", "sighting--fb8ff82e-ba6a-478d-9cec-1fe170b45a3d", "sighting--32264a9a-c696-449e-9357-7d4a026d00dd", "sighting--5b6f7e96-b9ce-4d47-9b69-9656b1d7b206", "sighting--5bb74247-5789-4207-9c9b-efad10f01b46", "sighting--b27227d7-6b6c-4a01-b809-c5fbe3a36d77", "sighting--bccbb7eb-bad6-4523-9592-46e284292abe", "sighting--a5bf694c-7e7f-40bb-9773-9987db9ac8d4", "sighting--1a00d405-cc13-4c2f-a3a4-5a5152d7a662", "sighting--f31cfc1b-95cd-4ee6-becf-ad013c27ccf4", "sighting--a5bfdf21-bd08-4c10-bcb9-89ec7d6e2913", "sighting--5423f67f-95b5-4532-a63c-9c0c5c6bdcdf", "sighting--e7825922-7937-47e7-80fb-016af80b0b83", "sighting--1e7d9505-d15b-4c64-b01f-392d89260f4a", "sighting--dee8c15f-c11d-49d8-bc82-9299011c9a1a", "sighting--a7c2f1c8-a9bc-4cf6-a336-86b19483f108", "sighting--f11fc2ac-34d9-4f4b-a4ce-8c34a1ddf566", "sighting--7541b464-8a51-4513-9682-f3eedda2c51e", "sighting--dde7c038-bfe8-40b4-a3eb-c090b68fefef", "sighting--03140511-6a69-480a-92cd-1b8fe3039634", "sighting--0a6bcc50-0fbf-4e0c-8e73-16f0c079d5d3", "sighting--d19487f7-900f-4b33-a47b-0a11ec6cee56", "sighting--17d41fc3-0270-494a-b943-a3447bb7a63a", "sighting--a11423f5-cee3-4c1d-bc0c-23169fd55dc0", "sighting--bfb37cc6-eed4-4727-b96f-e5f90cafa169", "sighting--2dab08d5-f139-4cd9-a54d-743efb91fed0", "sighting--851de4ca-229e-478e-b197-6a5b12a41cb6", "sighting--18edc630-d269-4484-b60d-a7215663dc6a", "sighting--c70740e1-e927-40d2-95f1-94e579e2c3d5", "sighting--3a7d0a2e-7ec8-4b93-b2cc-83270ae92429", "sighting--5e75e7e2-592c-4a8e-b1fd-ccacd85f628c", "sighting--eda08feb-4c9d-41ed-8999-91669979a153", "sighting--a9efeff2-907f-4740-9584-faede222c508", "sighting--e4a10a3b-532c-4bf4-8ece-7541dd6032c7", "sighting--317e9a39-d28d-4393-8e08-ace1039c7f15", "sighting--d11f33dc-48de-4cdf-9fa7-980fe7011c34", "sighting--6aadf60a-fd03-40af-be1e-b3864601451d", "sighting--484f9e9d-34a0-4301-a5ac-7156a2a569a3", "sighting--eeff6237-86a5-48bc-a42e-245e20c66d4f", "sighting--8013e67b-41ef-4efd-9a2d-ec1ea26bb836", "sighting--99717338-37b7-4eb4-94aa-60ff5aa92529", "sighting--a9bbf887-895b-4c89-943a-fc168fb2d0b9", "sighting--4b57bf62-a60c-4da3-8d82-c1fe02bc780a", "sighting--8eb31295-ec8c-4a9c-8f36-746417aa3783", "sighting--64bf298d-44a9-4f9a-8953-dc7c7aab2f0d", "sighting--21209bbe-3823-4c22-9e4a-fdf3f7f8294c", "sighting--bb2d2a52-4f0c-4ab1-92b7-bf9d607d36d0", "sighting--c376da7f-78a0-4cf7-96d1-ba358048861f", "sighting--34d0e738-8240-45de-a3d4-c2146a552af1", "sighting--2e096b63-79bb-44fb-9f2a-e4589e3a1d25", "sighting--daea0eee-6125-45c4-96ff-d684ee6fb8c2", "sighting--2760b072-6585-4c92-9e54-33c105480006", "sighting--7113d090-565f-4062-8ce0-635b7f922b18", "sighting--301ad785-799a-4c10-8712-a528a21d0cba", "sighting--62325350-cf70-45f6-9d46-37c1b1e431e6", "sighting--ae654a1e-bd0d-448b-abec-0bd73acecead", "sighting--f5b6c05d-6f0f-4d59-bb26-bad45cb65931", "sighting--9dd97e43-9d8f-4840-a25d-d61a64e539bb", "sighting--842b804e-c2ba-4a20-9307-33a750cc53f6", "sighting--0bd54e14-bd50-44cd-819a-116ce116670d", "sighting--1e822380-fe03-4bdf-8fa5-9417995609be", "sighting--78e81aae-366a-47a9-99a1-2e86716128e2", "sighting--e52d3b02-2aa3-4360-8c4b-ace3b6876e65", "sighting--8e7b506c-8ea1-470b-b7f5-820eb9451745", "sighting--cd8a9510-09e2-4934-8adc-bd377c9418b1", "sighting--95b85cc8-6adf-4a2e-af15-bd7937a2ffe3", "sighting--75fdd490-e404-465b-8ad8-b51ec8dd76ae", "sighting--7348968f-11f1-4f66-8c67-33469c6cdb59", "sighting--dbe0638a-1158-4492-9338-b50a2ba1edf0", "sighting--a61495ab-d85b-45f7-bd18-f23ce2c58887", "sighting--b1b012de-4af6-41f6-9659-ffef90a03f82", "sighting--966de17c-69db-48bd-921e-4da7aea48e90", "sighting--9cddb09a-8178-4467-a587-91e45108d4b5", "sighting--6f30231d-99b3-44e1-b572-9edbee468461", "sighting--ae54b4f2-0aa9-455f-b03f-63b19dedfbab", "sighting--a60e9cfe-bfde-4f00-9e00-9136fdc5d586", "sighting--95bd403e-aeb4-4eb8-bdb9-12fbd73426a4", "sighting--ce99ddf0-8600-43a8-9fba-44316324142e", "sighting--8f7dfbde-845c-4829-be6b-2a9cd914d475", "sighting--dc8f7c83-d060-45b7-bee0-8f35f074ea87", "sighting--f22b6420-1a90-421b-80e1-8411a9390911", "sighting--c65f3059-cc99-4fb9-9931-7a26c0866d71", "sighting--609b5a70-d349-4f74-8794-2f98d5b916a9", "sighting--16a84b51-a39d-432e-864f-6ed7064ae403", "sighting--54741c5f-a3c6-4297-986a-be35f7cfceda", "sighting--4d6f6336-6a98-456c-9869-14dacaab0458", "sighting--3478e193-9635-4e64-92ad-315298318bb5", "sighting--e7e8546c-c743-4166-bba5-4a3d68751d16", "sighting--41b35df9-63b7-4c93-ab30-f22cf6489db5", "sighting--f6fe75e2-417d-4541-ae34-7e5213423832", "sighting--c1976c12-d1e7-4521-b7d7-bded6720c330", "sighting--56ca6db8-6a4b-496f-bc4a-9cb844dadf57", "sighting--19214a51-8e97-431b-85b9-5d1bc7dc3267", "sighting--d8ef50c0-24e6-452d-b64d-217ef99eb29d", "sighting--69616a65-1ba5-456f-a224-2c6044cc4775", "sighting--d6a2b053-ff12-4cea-acde-8937dd801cbb", "sighting--04cda421-5ac4-41ef-95a7-a74604b036f9", "sighting--2b56f6a0-e8d2-4a16-9fdc-f5445b067197", "sighting--d7c5bd96-78d1-422f-93a1-167d4efc7ef0", "sighting--9bd828f6-8c9c-4413-a99f-a5e8e3f5a518", "sighting--8acd704f-c7d7-4fa0-ac8b-eb782876e782", "sighting--f9e5d4fa-89b3-4ce1-8a84-d48385285de0", "sighting--f60a0302-ef22-451e-aec0-749b682b5e79", "sighting--cad9014e-f9b0-40d2-b514-8a5d7dbf9f77", "sighting--666e9eb3-3fdb-4d3b-bae8-bdbe7b4247a7", "sighting--c8e79a20-cefe-4389-9037-99d4b3b6a0a1", "sighting--9b25c740-291d-4763-b1b4-57e3888170a3", "sighting--82cd16f8-e2b2-4272-b3da-40374516966c", "sighting--a8e161e3-4f5a-4f19-8413-7e9c56675052", "sighting--c9627c9c-17e0-4e87-ab51-5c4922d07a44", "sighting--01047572-9246-44d9-8c85-db41df841f2d", "sighting--1a71f144-40b3-488d-88a0-601fd6190190", "sighting--2715df4f-fbdf-4359-a804-ede010cf63ea", "sighting--5218d890-f97f-4edb-8013-f25b29af53b9", "sighting--4cb9ca18-d4e9-4dde-ac19-a57e3b5597fb", "sighting--c307b799-8dbe-4a90-a195-026f29586ae1", "sighting--c7e56e24-95f9-42dc-a102-baa8fe0242e5", "sighting--e4ba14cc-8199-441b-83ba-3f86dc603f3b", "sighting--15bd5622-de81-4547-a408-865928560ede", "sighting--7a55d46f-a30a-419e-94e6-3b02f86c226e", "sighting--9abf99bd-bff4-4f61-919b-b516bf54d741", "sighting--1b23045a-5800-4539-91dd-85b74911a93d", "sighting--6c93ff09-cecd-4cf4-90be-12151a7481fe", "sighting--4c02f18e-9a26-4419-8416-acb894f1122c", "sighting--6dafa19f-62c4-4788-8b7c-42aff25837b7", "sighting--8f61f022-0d55-4110-a3c0-bd23f3ba26a5", "sighting--dbcf8f7b-d69d-42ec-ad66-d179db232357", "sighting--fa8cb39e-6067-45f9-9bbb-55e63c64ff01", "sighting--085b61de-ce33-4fc7-877f-f657896d0177", "sighting--ef112b2f-a1be-4959-afa3-858b7e3ad6a8", "sighting--fe93b0ae-4945-461d-85d3-2690b6e0de75", "sighting--3eb73a72-b94d-44ba-aab2-b225a53706ca", "sighting--f7f7f3eb-626a-4594-8126-1db77578f90d", "sighting--8c506c55-95df-4d98-a619-b8edc86052c0", "sighting--f82cca60-d8e9-49ec-9432-bd440aedc4aa", "sighting--fc98fa37-a417-4729-8e8f-cebb3384e69f", "sighting--11294f81-756b-4eb9-8570-3a0c64d3b8c6", "sighting--eb0905d9-703d-49e0-9b14-afe4c19c1d88", "sighting--c899141d-bc28-45e8-9851-d5e116f2a1ea", "sighting--f80beb7a-e186-4793-bcd4-48b784b45033", "sighting--ecc333a5-f10c-4e48-8103-3da0cd37b3c8", "sighting--3da210e9-0f07-4c43-ab34-6cf9825f51bd", "sighting--0f31d374-4ebd-461b-8916-2ffae258f7df", "sighting--262f542a-7ac5-4fe1-b141-8247deaab25e", "sighting--ab27247f-6ba5-4615-a3a3-1702a662475b", "sighting--eb0bd5e6-df96-47f1-98ab-fda728a30491", "sighting--c2a05345-f8ce-4b7b-8788-32053fc41346", "sighting--64da8b5a-5ff6-462e-a21e-bc9a2f308038", "sighting--afbf46fd-fa16-466b-8aba-b8cbf12ed1b7", "sighting--ef695d56-ee74-456a-96dc-3cad813034ef", "sighting--958c66ea-856e-4878-80b2-bde714d9ffdc", "sighting--63054137-469f-46c5-b462-1bd0b527ff18", "sighting--000ac4ba-3996-4f0d-8f45-15da8c5a7569", "sighting--eb36b92a-1af8-4482-a447-73bca597e278", "sighting--a7071c97-d440-4764-ade9-af36c7a9e184", "sighting--919d85d6-0cfa-49ba-b619-b7bff9f9bb29", "sighting--cdf28e65-5945-4746-b029-35f933641f84", "sighting--1ad041d4-8a0b-4731-955f-cc8c4f102b49", "sighting--df69c314-8e8f-48b3-a3ee-82142792d669", "sighting--be84dc4d-edc1-4422-a017-fbbeeda39d12", "sighting--141e599d-1dfb-42c8-a43a-e1f8b2bb3ad2", "sighting--4cc1a62e-ef66-4aa5-acd7-70d4530a3ff1", "sighting--cd8bc252-fbb1-4b89-a2b8-b89be97650f6", "sighting--042e9639-d62c-4fdc-8247-2fa68b57ac8d", "sighting--8a9bb4bb-fc09-4891-808f-ee7694df2755", "sighting--dff39881-e1c2-4c0e-bfe0-312f0b61d8ee", "sighting--2c1314f0-b30a-48c9-9fd3-7298e949e753", "sighting--bdcc50b4-258f-4f5d-95ce-22b70c1dcdaf", "sighting--0bf6d244-a766-408a-b51d-768801633d05", "sighting--a20696b7-126d-48e3-a633-1dae7cbe4a1b", "sighting--56f8616b-c36b-474f-82dd-73eac5c2acc0", "sighting--ea338e4a-1100-4af5-bbd9-b308ce1fb363", "sighting--a6858d36-8f26-4706-907c-f4cf29593a4a", "sighting--1e683236-d334-4947-8763-a72b52d3b929", "sighting--236aa758-79fe-46a2-aeb9-0927033b1db7", "sighting--0c9cfc65-4656-48a6-be00-7c7cf8d1bae2", "sighting--d1ae27c7-8766-4854-bd1d-95738a2a092f", "sighting--66637915-a621-4f04-bea3-77bd2648d065", "sighting--dfded9ae-9e4f-4cc8-a830-d07a4469cc02", "sighting--3fc47cea-faab-419c-9d06-9b45ba602a01", "sighting--9ee6506f-944e-4100-8aea-96b69067aa1a", "sighting--84151650-f20c-4a2f-a6a3-eee2b634acfa", "sighting--b0cd93e9-d243-45e9-a0a1-fca08e2c3c95", "sighting--1dc0857d-2dd2-42a9-9c29-ccd165cd92c5", "sighting--06c8ea1f-5e6a-4f32-b7e0-ae3bb57d90fc", "sighting--7847c27f-d2eb-4f08-89ac-c8949dfb767b", "sighting--cdf04a47-5e28-458a-8dcf-21046c1e76a0", "sighting--eb41afdb-285e-4a99-9352-89cb635a98e6", "sighting--dc48cf09-32c2-4073-aaed-ccfb39aa5d4c", "sighting--d3e992e4-c54f-4c0f-9042-1ae3000bb361", "sighting--212a6a01-c286-49f4-8452-e89fce7ca4ff", "sighting--623e8018-3c9d-45a5-a250-1b0e4c1b37b4", "sighting--c16dd20f-3ebf-4e9f-ae0b-186e471e37d9", "sighting--14c6c8d4-0024-41f3-a1c6-4567b121c7fd", "sighting--d4286377-5d68-4db1-ba63-6141bffec2d3", "sighting--4e317871-8cb6-4373-9f98-d068634297f1", "sighting--cffdcd32-2c35-4908-98b5-7cc88bc7f8b1", "sighting--23017867-c233-4052-8e54-d75936e6275e", "sighting--2743021c-de2a-4c44-84ca-639b4a62394e", "sighting--ed91fbca-f4a9-4117-aae7-2447e20c2492", "sighting--0640f1d5-fc53-4245-97d4-0884d8731ecc", "sighting--4ad3f7cb-cf15-4bc0-bf7b-ad3c9f9d0af9", "sighting--0d716b78-b3d7-4606-8736-57ea9a689e11", "sighting--05224205-720b-4250-a18e-dd8d62fb83b2", "sighting--8e10120d-892e-4f99-871f-ca7744cf8733", "sighting--b37723c0-af18-4502-9aa5-500cbaac2bc0", "sighting--144c28a5-3878-4e89-b30b-8a5d2a13d42b", "sighting--09c1556e-96b8-4fe3-87d0-0c3fd03dea99", "sighting--1662e6f4-3b4d-47de-bb31-7288e8518b94", "sighting--8c1d77cb-6d68-4aec-8861-e386df0e2fd3", "sighting--13aa75ac-f460-451f-9860-c151ce0fbb3c", "sighting--4b74cbab-7b8c-4d66-9c51-c8e1d3f7f5aa", "sighting--672f6626-1b8a-4f27-b04b-f9a038c1b733", "sighting--d9cf37bd-97c6-4f6d-8799-e75d9049d665", "sighting--4a6001d5-e1fc-4230-a722-babc59dfb57f", "sighting--f5427a29-f2b8-4943-a331-607414bf183a", "sighting--58f7dcda-b2cc-4500-ad42-c0ec587ffd8a", "sighting--dc54b1ff-825f-4997-a80b-b0542b39d632", "sighting--902fb70f-580c-4c7a-b5b9-b535c9e1c33b", "sighting--234b3872-bd50-42b2-8223-a858c2537e3c", "sighting--0e396e49-56a9-42f8-95c1-89bc16cf2566", "sighting--133bdeb3-400d-43b8-80ad-3733f182139f", "sighting--d98cd6c5-e8eb-4e68-99b3-b0852c2678e6", "sighting--2b88dc00-572c-446c-8cca-81134c5972e9", "sighting--f95c8f9f-6a67-44a4-80a5-f0218a33a3fd", "sighting--747a1ec7-0bf0-43b3-8ab3-0e1716ab79de", "sighting--ee002d3e-a8c2-41ad-9504-8d31891f2651", "sighting--5c0293f5-77a3-43e3-9fa4-bc78e9ed3656", "sighting--587631ce-c0ef-4f9e-9afb-d9eb960f2f4a", "sighting--08a59148-27b1-458c-91d1-8800d2fd5805", "sighting--9f7f66ae-1706-466c-b3c7-9a626be045ca", "sighting--175df37b-c072-4c54-bf6e-531ab9e1635e", "sighting--55630fe8-bb40-4b9e-95f2-c7c594a41ede", "sighting--8f7d2ac7-1cd8-48b0-9ae8-5a02652cc2ac", "sighting--1b5bcf6f-5e53-401f-9253-df57cd4a8166", "sighting--28edd1ac-a332-4650-9c35-bc2b6781c2c8", "sighting--1f51994a-d53f-4cfb-bd80-8d7d8724766f", "sighting--4c0108ad-6943-4368-84a4-15b5e7978730", "sighting--85f4b24a-4836-4dbf-ab09-f6fb2c846526", "sighting--067ba8a7-351c-44dd-985a-02ecef168d2d", "sighting--b00747f7-6976-474a-b211-1ad1e65a5518", "sighting--b12ab8d7-10a8-4c56-b580-7f491eb087a4", "sighting--80b913a3-afa2-420c-b1b8-5bc6c5b93a67", "sighting--de3c047f-82c6-4dfa-ae2a-21e8f95d55f3", "sighting--17643567-7c44-4a48-9a02-b4e6d02c9377", "sighting--8dba2bca-23ed-4ef7-bf29-fe099efdcc39", "sighting--c203c043-d151-43b6-adfe-c8a678ccd6c6", "sighting--7ed8dda4-ae3e-4374-9835-aac929be4c94", "sighting--3c7383ca-d579-43b4-98ee-c5c2d3dfc2b0", "sighting--2a3e2ef9-e73c-432d-8c98-f2827b040c47", "sighting--d8cf64d3-f955-4e50-8597-60cb7f8bbcb3", "sighting--eeb3aad5-7a54-4e1e-836f-132ae2cde771", "sighting--3be6efdc-a06d-4a34-9be3-f96a6ad0471e", "sighting--d265eb08-e0f1-448e-9063-0f31d1247593", "sighting--ce02ddb2-459b-48d8-b3dc-3d67bf721c3a", "sighting--26660ccb-eb32-41b2-b8a9-a3dff3aa0b2d", "sighting--daabc339-96a9-4416-a960-d0d210459231", "sighting--56888834-67e9-4229-a042-ca6beed2fb0b", "sighting--918e4f1d-c485-48e7-9750-f35f46aaad52", "sighting--28c17bdd-6b7b-4a18-8d38-5f250b78720d", "sighting--a2117c18-b8d7-4eb9-ac7a-8f5005a57a3d", "sighting--7515973f-6e58-4c5c-b7f4-cf3a665705f1", "sighting--faa2250b-d2fc-4d90-8d76-cb000628bc0f", "sighting--fb074fc4-1dee-4f4c-a57d-dab8b704583b", "sighting--c4b89ab1-9770-480a-83b7-b21615b81b35", "sighting--e1a27bbc-92b2-4f25-affb-c9b559c9b28f", "sighting--11de122c-1992-441d-999f-2ed079065805", "sighting--baad9e83-8a96-49d0-af23-44264c451cd2", "sighting--555b8268-121c-4fa4-9b0a-f8e71e594cf1", "sighting--f0b78613-bccf-4733-aa9f-7f9258d6691b", "sighting--72abdc07-4f70-488a-b648-0d53a02c18b8", "sighting--1c4c5bdc-ebd0-4beb-ab43-c4564cec1377", "sighting--5de89b66-a2ed-47c0-803f-8dc204767b7b", "sighting--ca6a6acb-9e35-46cf-82c2-b39d7ba96700", "sighting--9ea8ac32-5e20-4bce-9598-7b78ea646ec0", "sighting--ba3b37e7-2334-440d-927f-a03f191a8254", "sighting--572b218c-d53a-443f-bb04-38044487b614", "sighting--7e8e0b3d-dfbf-4ee6-8089-90387593a641", "sighting--55eb602f-c3f2-42e3-b067-53b5b218e8d9", "sighting--21acf7f0-bdf2-4fc3-8b96-1e01dc7105fc", "sighting--7029cb53-241d-4e42-8f4e-3751cb372355", "sighting--95d769ec-d849-419f-b2d4-1a893480411a", "sighting--02dbfa18-2af1-4f60-bbd7-4168c11691c2", "sighting--0c18f093-de91-4e9d-adc8-23904ca94334", "sighting--10164cf2-519a-4944-b189-2c992ad9275a", "sighting--9ff4325b-4284-4315-a7f7-9cba627a60d2", "sighting--73468613-97b3-4c36-b8fc-1f601221ae85", "sighting--56e118f8-158f-4c09-9fe9-6fd27bf2dadc", "sighting--796a11b7-ba73-49ca-a512-97e61bc36ad3", "sighting--65b4f893-d925-4f65-b04c-b5431ba821b5", "sighting--a3362c56-ea61-47a3-84f6-c6417ab7b7d6", "sighting--adc8a5e3-a441-457f-95ad-2f20bce18271", "sighting--24a93b07-cced-4ad7-8df3-5a7bc7d231f3", "sighting--375566a9-0ef6-42e4-88fb-f4b060a541f3", "sighting--04b952e0-3867-45a5-94dd-02984b6043b1", "sighting--5c44c7b7-a19c-49a0-a810-658616347513", "sighting--ed99be0b-6af4-4c98-a011-ea0b087f6fdd", "sighting--2ef5ff6e-19a6-4d46-98d0-d2c9fea7e3e1", "sighting--6b7835ce-c349-43d9-a5db-a5dd720913ea", "sighting--4119b635-da82-48b5-8e3d-12e9a4187126", "sighting--192a39b9-568a-4e6d-ac7d-f64d0bafdc56", "sighting--33eee6e5-abde-414e-915a-f441990a66cc", "sighting--d96fc9b0-58ea-47b0-9bfb-5eca56b5ba34", "sighting--f083b8c6-51e5-4cd4-b1eb-1d63cb8d01dc", "sighting--62322ad9-7a3b-4f52-9839-46b2f251af61", "sighting--ac96c542-684f-4473-802e-bdcd2887a4e5", "sighting--bfdaa7da-39fd-4d8f-8168-c96ed9ae105d", "sighting--39046f50-1e43-4eb6-9c0e-dc617e1c0a94", "sighting--0e304d3f-79bd-444a-aec8-8b1a24890b0b", "sighting--205bc236-5682-4928-8726-89a481ef8536", "sighting--0e610e80-ea2c-4c97-ad70-a28d7e516b16", "sighting--9ccc22d4-ef8a-40a1-ac57-146dcb64025b", "sighting--86fc6d94-6e32-46a2-85bb-5f4c9cb28b27", "sighting--efccc9ae-c9dc-4f16-858e-e3a051f8b948", "sighting--4df604b9-8912-4e73-99bc-7b20d43f2572", "sighting--21a388d5-2845-417e-ba30-7ad3373a0a42", "sighting--e26e65ec-c933-4fc5-9750-6b410b1f91ee", "sighting--2ef4d66b-9b6d-40af-b2b8-49be857cf46b", "sighting--69631e18-33d9-4f8a-8139-7e9e7d9fb191", "sighting--da673274-95c9-4739-875c-4444af9352d9", "sighting--a9163059-a5b1-4b1e-9ad7-01b928220b60", "sighting--770d6dd0-87b3-4340-886c-567eee657165", "sighting--72273744-b596-4d7c-8db8-5ae7afbbe3cd", "sighting--aebb0c57-02aa-4cdb-b83a-f187d152a126", "sighting--d5515f53-8316-4de7-a3b4-93dd8f172516", "sighting--8d90de48-306a-4bf1-96cd-161ad35c2924", "sighting--b9a04655-138c-4d4f-bd1a-8b54e8857340", "sighting--b7f03c84-c505-4670-98f9-e712df2bc5d3", "sighting--cb1066dd-3cb1-448f-a61f-e7fa25a92461", "sighting--1d51f3a5-07a8-4855-ad52-1eb7a22b2c55", "sighting--274663d8-a4fc-4420-bb61-a5244d39e5df", "sighting--4504d797-f4d1-4cfa-8ee4-efc5e132a8ca", "sighting--666cde13-bbab-4ef5-b73e-b7b9148453cd", "sighting--847b38b0-3538-43aa-b5b0-5ea8eed0eb1b", "sighting--d2744b89-0671-478a-875c-2e7f3ff49fae", "sighting--39a5f03f-0d44-4b70-9dc4-6a389d35d796", "sighting--e83a2040-9733-46f1-818a-ed973ba9faa5", "sighting--bb219dfb-6a02-4b09-b936-32760aee815b", "sighting--2318482a-cde0-4241-bb2c-bf714b07cd8f", "sighting--ff4e5ade-a610-4c06-91f9-00ac658f4f89", "sighting--95acf9f8-6aeb-4e88-8cc2-c74d9af968a8", "sighting--0dbe4993-b7f5-4085-a485-cea2f3892dd0", "sighting--6ec8e2e7-75d4-465d-95a7-2384106856b3", "sighting--cad5a675-da01-4f86-b9ba-3af05aca1fd1", "sighting--09726338-223d-49a5-814c-4f267b3c5749", "sighting--65152f85-2aa1-4d67-8394-ec44a1e70cb1", "sighting--74d9f525-9a9e-4fb4-87b2-65571fc89ae3", "sighting--adefdfe9-4eab-4112-83d1-2a829f914b57", "sighting--57c4bf2f-4b7a-4f4d-85c2-92d5a01b17ea", "sighting--67981d16-e7c2-41f6-bf0b-621b4f9d42b9", "sighting--cce338e8-77a8-4d83-a175-93a0dc8ffe2b", "sighting--55083394-ef85-4b0e-bb45-3cade3a025cf", "sighting--c8ac303d-4fe2-4dc0-bb65-62891211ad2b", "sighting--52753974-4185-43d6-ac0b-6d8cc30a1ccd", "sighting--2c9b3b39-cc69-4bd5-8ef1-0cd5d8e7bb69", "sighting--04401ad8-078e-4300-92c3-d31b93e94e29", "sighting--8024ab99-ecc3-482c-9d13-ae9c3fc133c1", "sighting--b0d68e33-0e0a-46a8-9099-7768c1058711", "sighting--34cf2802-3d1c-4a90-b656-0536e5d1cad9", "sighting--63109f3f-9108-4b1f-ae57-69d2dcfc261a", "sighting--76aad0da-c0df-4cf1-aeb9-a37e6129f8a2", "sighting--8b8c7340-0f02-426b-a921-ee8cdf668d81", "sighting--92948d16-1a2e-4ce7-be9b-6f9bbe255bcc", "sighting--0c940583-5756-4ce2-9cee-df50b580e9ba", "sighting--ad02ac10-d35a-4959-8c1a-5790292bdbd5", "sighting--b7259f78-01c3-4d49-a1ac-ed5630cd154f", "sighting--6a3aad58-4365-4a30-a2ff-b82cdffdb56d", "sighting--d3ab3619-f6d0-46b6-a606-20e5abd67d39", "sighting--73e9ab8d-ea55-432b-befa-be257f17084a", "sighting--f516549e-9609-41ef-97a7-ffddb8ba07fb", "sighting--fc173fbc-e83b-4a3e-bda5-2fa2e8c00edf", "sighting--119be87b-69bc-4bc4-aeda-7c000168a0b0", "sighting--cd97a9bb-e950-41da-a292-38459c7ebb4f", "sighting--6a05712e-d8e3-4584-bcaa-7664e6e458ea", "sighting--ff0a1a89-e3d2-460c-be0e-2336686654c7", "sighting--5b1b8372-d8f3-4a5a-8dce-63c9af0ef192", "sighting--5a789cce-a4e2-4e36-a259-4e71c6fabc61", "sighting--b7c61328-ab74-45ed-a653-ca9752338341", "sighting--8498fa96-9bda-4af1-ac55-c8dbee07e12b", "sighting--abce8b3d-8191-4e48-9d3d-b74bcca8a511", "sighting--585dee64-6dd9-4bc1-8bd6-e08ac6ac0fbb", "sighting--7e309ba3-a676-43d7-9332-78c8fefbc092", "sighting--a8767040-1142-40a5-97fc-ebe61942f7d5", "sighting--c1038d1c-7dbf-40c3-afbd-b85dc89bff23", "sighting--357f532c-59e9-40b8-a99d-b10a40e4e951", "sighting--80969978-ee1b-4f49-9338-70e641d75110", "sighting--98084959-37ed-4102-a850-da5560823dc2", "sighting--139d3a03-961a-4f97-8e46-3789f20824d4", "sighting--4725e055-d2ff-40d1-b33f-81ceb385f7e8", "sighting--173ae57e-90ab-4ad4-a40e-d4df829633e9", "sighting--a6c142b4-3dad-4b19-92ae-7d438f6fdc44", "sighting--3b04f818-171c-4b7a-805c-37a1567fa916", "sighting--4d6bfbcb-36b9-4c2b-b48b-7c46451aeb5f", "sighting--439cc83e-bcf4-4d27-ad74-2bc9d079cf20", "sighting--fde07504-72ef-425b-9aa7-61fbf9618b37", "sighting--7953cb17-d732-44b5-8088-67b5b6a5e055", "sighting--64c7adb8-5319-4474-90b4-52d8801d9eff", "sighting--bed440fb-9356-4cac-b081-81689cb73562", "sighting--2f328153-1766-4cb2-a41e-bdf123470865", "sighting--4a616933-819e-4f4e-92cb-a74e3cfbea55", "sighting--72f6cef8-bccf-48ae-a334-ad520a57d7a8", "sighting--3040f375-98e0-44be-a639-5c72cf2cc9b5", "sighting--f0e979de-661e-473d-9c47-fd852da4d8fb", "sighting--2e7db7c4-2256-4d78-8f29-05b70d4e7a8a", "sighting--abf2d6c0-0192-442e-a854-f8a823f82ead", "sighting--27276fd4-503a-42a0-ab5b-73a73407b894", "sighting--c18f0f25-2121-4840-9636-19966f2eae81", "sighting--dae6097c-f7dd-476d-9ac1-932a7dabd6ca", "sighting--32946a62-49ff-4f3e-8e7f-67739da72886", "sighting--d87ca090-07d1-4209-9acd-0c7a447ca003", "sighting--8dc752a0-dda7-4ecd-8c74-96d2e73780aa", "sighting--d7f57402-0055-4da8-8134-2ab685aae0d9", "sighting--a44edd25-6c67-4701-8028-c2bdb3cbeac0", "sighting--ebd79b00-294b-4733-bd93-84153dee56fa", "sighting--99312de3-8b6e-40f8-8e29-fc8d8e34c506", "sighting--f0b978b6-116e-4514-9255-9972d8b35264", "sighting--8dfc8e3a-403b-4b5b-a759-f8260b9578f0", "sighting--8b4447d2-50cd-4e26-892c-9f17d8dcabef", "sighting--42ca1bfd-f811-4aa0-bbf8-65174bb613c1", "sighting--8ece3b4e-dd97-448e-9da3-f0ff39c56b02", "sighting--379b5a96-1766-4a63-8467-7c2ff1ddba60", "sighting--c5fa61da-0ad5-4419-b838-7f2cde942fb6", "sighting--5984617a-4ed0-4ede-bbd9-41d71fa8b8c2", "sighting--28a9432d-2b8e-4cf6-b9ff-4d8f3bd712b9", "sighting--07f259f7-cc04-4ccb-b917-1f3ff8f42c92", "sighting--491dd9e1-4824-45c5-9ccc-84a6be3f0f1d", "sighting--71c79230-341c-4cb3-825a-0f0dcb727588", "sighting--3b9108aa-137c-4d4d-a7f3-7b97e6c55ce1", "sighting--5e59e844-ead5-4b91-9315-b37726721aae", "sighting--cba05e88-7d6d-43e8-99b4-136eb901594e", "sighting--53066568-414d-4d88-a825-b1ee3d36289d", "sighting--87b64d3a-8c52-4cb8-9c9c-e901a0e42cc4", "sighting--de3b3a1a-f93c-46ea-9fbf-c9110f9d3042", "sighting--77a226fa-9e21-470e-8461-05c8e90b26a4", "sighting--6165cb99-7294-44d6-9cf2-b2e33fea2e4d", "sighting--94e61ee3-032b-4784-b4c9-c602b10cc4da", "sighting--b2247b79-d865-4214-8002-246fa5ae980a", "sighting--2b484487-75b3-4164-8fdf-bf8a3942fe09", "sighting--cf7fb399-3bbb-4631-896a-cf57d3753aa8", "sighting--64e4a47e-195f-4509-ac07-b863d7e5de9a", "sighting--172bc7be-d65a-4c65-b9c7-52ca26afb638", "sighting--9a09f8e7-0441-40da-9f18-3d5169b833e0", "sighting--5694cddc-8aa4-4b56-8b2f-e30a8181b811", "sighting--bad03d87-9cd3-4662-89c7-877aba699528", "sighting--ba9a9391-08c2-4a4b-b619-bbe6964372e5", "sighting--e640f9eb-4ef4-4ca8-80f0-898ec864e7bc", "sighting--df265873-61de-4c80-8ce7-4f98752d35d0", "sighting--9482aec6-3f93-4f27-8032-7872a54298d3", "sighting--fe38218a-cbf2-4357-9f88-811556d89d45", "sighting--81a5aded-d35f-40c7-aa93-195241b8b8d4", "sighting--38e52296-c5cb-412c-ad0b-3a4d1e04c873", "sighting--54e0ab5a-3fc8-480d-b0de-79f5a90de0e7", "sighting--1f992b53-6134-4d60-a47a-6af3073e80fb", "sighting--b75a369a-c16a-4444-9b03-f859734ac053", "sighting--a92b5227-01d1-4ccc-91c5-81ecc708d65f", "sighting--90807dcd-3da5-471d-b1bf-b6c608b0699c", "sighting--7d4e2159-9cc0-4bd1-8d07-5d36cd1928b4", "sighting--a6eb038e-0027-458f-b6a6-eb8590c37e98", "sighting--7cf3969c-3d70-4c0d-a038-c4ce583173a6", "sighting--a942e161-6de1-498d-8a07-def10d44b428", "sighting--80b0f548-3241-40b5-b4e0-c9c0bd355c75", "sighting--131ba523-7547-4af3-80cc-54f64888b3b7", "sighting--9d2922da-bbb4-4269-a8d9-7b71de5a1fa8", "sighting--7b3d4f76-9319-4738-83ec-81387653406a", "sighting--b4c0d637-1be3-4b63-9a3a-f6e63c03848e", "sighting--bfc68bee-db23-4f86-bc95-736c8bcd7b6d", "sighting--9b2dc674-2eaa-45be-8674-830e20885396", "sighting--26906059-f226-46cf-ac30-52ff5f41a7ff", "sighting--bb938d1f-04c2-4b18-a4bd-555a2cb0de67", "sighting--9561da9d-c4a5-4b7a-9363-280f7a6343ba", "sighting--06d7d1d4-77ea-4a10-a3e4-e314b7b608c9", "sighting--2e000eb7-f094-442e-b738-c0a52866b739", "sighting--0fe71873-f6be-4858-afd1-a22850c46176", "sighting--63562759-4303-41e3-91d1-ecdc2a74faf0", "sighting--2adaa82a-50e8-468b-b827-0339643fdb0a", "sighting--ed7ced9f-5326-4a7e-bcf8-08415d98369b", "sighting--d1066d45-e7ad-4868-a25a-cae73bd3b1b0", "sighting--30396d50-0e66-4322-b66b-4459609c59f2", "sighting--40d6224a-bf20-4b8e-a3e3-749c0ccfa687", "sighting--c12b4a2c-9a65-4abb-a2d4-248820c3cfdc", "sighting--197d6009-222b-423b-b286-919947d9577b", "sighting--b7505072-d361-455b-8428-b615329011c0", "sighting--42232cf9-aba5-4f92-ba4b-d8ea540a1978", "sighting--65c25404-b2c4-4b26-82db-91327ca24ce2", "sighting--47907951-79a6-443b-9766-6ef57e44e4cb", "sighting--36abfff3-d80b-4244-92ce-abf03fd12cae", "sighting--c46fae64-645c-4d87-ae4a-342254e0b509", "sighting--5403de64-2ea8-4c7f-b7e7-57b949d37a92", "sighting--6d11fd6f-f327-4fee-b68a-1455bd24f5f9", "sighting--d17d2ee3-483e-412e-a321-5a397c234ad8", "sighting--8b5f4be1-efcc-496a-ae63-cce56acab34b", "sighting--9ef0f168-898b-4942-82cb-ee8f5077b637", "sighting--6fbf5aa1-efab-43e2-9396-fee7623000fb", "sighting--3b0005b9-4e97-48c7-bfd9-91bc4cc213f3", "sighting--c3de1088-4909-4a11-9b1a-7729d73c325e", "sighting--79241a62-488b-4ced-9f44-9b147d30679c", "sighting--6cef78ed-122f-40ff-9c86-c5ca59fe4c3b", "sighting--c5dbe0e9-aa33-42d7-b1d8-bc995c7b0cc7", "sighting--797f5dbe-3702-4b6b-9f64-57fc04633a4e", "sighting--e8b56e95-eb25-4444-903e-15d72208369c", "sighting--a870e77f-fa69-4c0c-b727-16ea88ab2657", "sighting--fbeb5531-eb66-4ca7-8b81-af9497d39bb9", "sighting--450c1e66-2983-4545-a3a1-8a386e45624a", "sighting--5f71cbb8-2490-482f-b278-e3d558645798", "sighting--3572f0d3-9567-4c9e-b2e0-181714cda0c8", "sighting--6959208c-64df-4e05-857c-fd25f307aa2c", "sighting--a5ebee78-3ca3-40c6-8ab4-44c711b277b9", "sighting--e07f3152-7751-44d7-8397-4b8c2eead4f7", "sighting--21857ccd-3485-4deb-ac61-792b6b49af11", "sighting--564d28c1-2983-4752-bd95-14e50757d47d", "sighting--0990c895-7d97-49b8-a009-63cb96603fe6", "sighting--c3ae12e2-c763-42fb-aa4f-ecb67fd26ee9", "sighting--e26acc98-9491-429a-9ef3-d596b1b35ac3", "sighting--2600e9bc-51fb-4ef6-b92b-d865e57e4b0c", "sighting--e1522ba5-02fc-42e6-9811-443f66f16ef9", "sighting--8515af55-7684-4f58-9047-d11fd76a5c18", "sighting--5dabd7d8-e57e-4666-924a-7e5d347be43a", "sighting--fd38eab5-4c3e-40f9-b7ff-a31bd17a24f8", "sighting--174f778b-c62c-4fba-a917-5c160efc612d", "sighting--98d95a09-1f45-490d-a575-30ac7b6bfed3", "sighting--45c57c3a-78b7-4e78-8b45-82cb6559ac00", "sighting--fc279a4e-e91d-4fed-af9a-282beb72a868", "sighting--4a40d4c6-93b4-4bd5-949f-3aaedb8d771d", "sighting--06b558bb-77af-441a-9041-cbf73108cdbe", "sighting--d4043d8f-b216-44d0-a210-feabf82c81da", "sighting--95ab1fe8-73fa-4a34-86a0-4e019549d24a", "sighting--29cc2d6c-9563-4121-90c8-aa4d63950358", "sighting--bc94da42-1328-4c9a-94a5-810ab13ade39", "sighting--ff2e388c-2fb7-48ff-88ec-be5d8547d001", "sighting--b48f4f73-17a6-4b9f-adf7-dd5d80411071", "sighting--bac8bfd5-f215-49f0-8a26-b089161012a3", "sighting--1de3bb6e-223b-4b4d-830f-ceba9ec6332a", "sighting--d0153874-c63a-4456-9255-c41d1747b272", "sighting--4e055319-95bf-41e2-92af-97d700236012", "sighting--e3a442c8-f72a-4eba-bd0c-ba1acc0571ab", "sighting--79cc4dac-ee9a-491f-9736-a7db8314281f", "sighting--d79c6b39-e53d-4df1-8089-7e106a71abab", "sighting--8b9fd65e-7ca4-4bf7-a377-97555427e35d", "sighting--b383e1d1-78bb-4b24-b1b1-649f68246086", "sighting--259d56ef-585c-434b-a711-a86d989511c5", "sighting--bc8a131b-34a5-49d8-bbee-3b89ec467de1", "sighting--2d7936b6-c250-4e24-928f-b05cd94570b2", "sighting--978564bf-1122-4d4a-825d-9dca10a6f50e", "sighting--2d8073dc-1ce4-4430-be0e-a27aabdd9887", "sighting--58c96b0f-9d94-45e2-a191-399230cc050b", "sighting--c7af5edf-0467-4a57-8fb6-6ec657fb074f", "sighting--a2ee038f-09a3-4fe7-b046-904f462b9007", "sighting--766b92ab-0ef0-4854-8316-fad50f9c05b3", "sighting--eee0a792-b8f4-4043-884f-14e54e253031", "sighting--76562094-6ab5-4a33-8122-ccfc8d902312", "sighting--92e00541-309c-44ce-8bd6-4b3b816596f5", "sighting--c3fb4e37-7c22-4a33-bb6f-efad515f30c9", "sighting--14711134-01b3-4c9b-8c38-8896c5d19598", "sighting--fa6d331e-e0c1-4363-926c-58499e4f3237", "sighting--4abf856c-6d4c-4cd2-bde3-7e788631e57f", "sighting--7ab5eba4-0ea9-4cea-85db-ad240b871b18", "sighting--b7d77767-68c1-4324-bd8d-2765507e4f2a", "sighting--c412957f-7018-4390-a76b-9b7232d4c8e1", "sighting--e00a82f6-ae94-44cb-a7f7-08256003c6f2", "sighting--08c3f39e-6148-417f-9612-d71ad697d23d", "sighting--2a2cdde3-c014-4f07-af5d-54c446314d21", "sighting--34c1ec08-ca47-4b03-bd50-d42a6f164ccc", "sighting--648379b2-bcfa-4854-8f54-6af105ec413c", "sighting--bdb8f551-dbaa-438a-9b41-5ad8e69004be", "sighting--361a1dd1-cb5a-4b44-abc3-4478cf258775", "sighting--0aecfcea-6b38-4fa7-9e7f-0da8ee631591", "sighting--a7614923-f29c-4ad9-916d-c44493440966", "sighting--13af8f86-30b6-40f1-93ff-fad54a6b4b44", "sighting--d09db641-e54b-486c-8558-240be10f5646", "sighting--0a97cdf7-fb38-4dd7-85bf-9ecdba26b57c", "sighting--53e6335d-193a-4e15-ac3d-20fd33db6b4b", "sighting--0aea4dc8-75fc-4ddf-927f-02784d2e54c1", "sighting--c75720c4-49db-49ff-bf1c-b1a8b0aaee04", "sighting--ef9b3230-b62d-426a-ac6c-d41902bd7875", "sighting--69e358c5-0971-46a2-aa6a-c904cf281b4d", "sighting--151d11c4-49bf-457d-89a1-61ccb46e4a41", "sighting--d0ed44ec-aa47-4ab5-89cf-5d690adfbc5e", "sighting--b16f6262-1210-4dcb-8aa3-67a0f0c08d79", "sighting--f40ee178-5862-4243-9397-29d1d0e82518", "sighting--dcec4212-cc2c-4655-bbf7-09247c750ff3", "sighting--1d98c17a-fb4a-4d4a-911c-5eaa9c740ecd", "sighting--902848cf-48fe-4101-be15-cf3af191875f", "sighting--5f3be027-34d2-4d0e-8ca6-6653ba4ff637", "sighting--f7ca5b6d-cfda-4d12-ae18-148711a3c404", "sighting--835557fb-b029-4c0d-bff1-f761026e80a6", "sighting--52300379-c8f5-4ffd-b3f0-4d47c12cfc7c", "sighting--50805105-7fd7-494e-b11c-bfa69531caa1", "sighting--46044ff7-caed-4a10-ba24-bc07840ac848", "sighting--456c78d9-f272-412c-9230-83086615378d", "sighting--4b7ca8a0-f019-42b5-a6bc-83016cd1ebf4", "sighting--c1cb9a57-6a5b-4a5d-89cd-26d965b1626c", "sighting--c7cc063a-47ea-4ebd-acd9-face16cf8b8c", "sighting--997c4c35-b587-49fc-ad5d-137a98713d47", "sighting--dabd61b0-7acf-4514-8948-0a5ffee169ca", "sighting--14cbd887-db74-4b28-aa5c-1b7678f69550", "sighting--7d16269c-68a9-4e27-9f0d-4d91ab34472a", "sighting--759b7c7d-3d26-4a3b-a51c-ef54165851d1", "sighting--bab49281-5f8c-4983-92f7-322cfe228211", "sighting--e4eb02ad-0bac-41bf-a6c5-d3bab65518ee", "sighting--acbca089-0097-4009-9322-cb598b39d423", "sighting--38314e1e-0aab-47c0-9c1a-9b89e8b780e3", "sighting--71adb174-9f74-410c-b22e-f68c97a62071", "sighting--450d84c4-b0d3-449c-999b-b4fdca3d59d7", "sighting--70bb2321-429b-404a-8916-b73bf0bad3da", "sighting--dc453f39-4a11-4b21-a7e4-7ad47ce3849e", "sighting--e5fa5146-2e37-441d-ad52-0610c4c9053b", "sighting--577229f0-6af1-4d73-9f51-6c7185edce46", "sighting--5f7a0f76-0d57-4617-bd2b-9f30ac3ec925", "sighting--84f1dff5-2d9d-45dd-a832-34cf5c25e92e", "sighting--6fd69d7c-bebd-4c2a-ba8a-9961543165ee", "sighting--b16842ac-4013-407b-9a67-6d27ffe4b251", "sighting--bac997fb-16bb-4a74-8c86-364bbe09459e", "sighting--d8283bf9-3b3d-438b-a035-12078253eba8", "sighting--7da3ac23-11e8-4829-88f2-f3d4e314b5d2", "sighting--10d855a2-837b-40b5-bc41-fa2723c4a53e", "sighting--4343f01a-8a7b-4980-9a28-0b94f842e25e", "sighting--5fd1fdce-3d86-4116-9ecc-074ba7b06370", "sighting--c230f4a1-dba4-48f4-84c6-8baaaa2c8127", "sighting--a726265c-522c-407a-89bb-c17c6386b2a3", "sighting--6068ef4e-e32f-4573-80db-3a4b0e47b0ab", "sighting--30447941-efda-4fbf-88f1-ea9778ef4e2d", "sighting--3a6447ce-e6f4-4076-b7e7-1002233e2795", "sighting--2b74fe9c-ad06-4341-abc3-fd3f639d3d2c", "sighting--8df772f1-45bb-4a99-b2a3-74d2b4f631b3", "sighting--e0dea12f-f123-4867-8f65-4d5942057f9d", "sighting--be57489c-5706-4ede-adf8-1b4874f51a2c", "sighting--60f703e0-251f-4d5a-847f-a11b73fb0ce9", "sighting--935e6f95-8ed9-4e21-9ed1-c799b99b0020", "sighting--b8a51db2-4f11-4bf7-8b49-c7f397298f92", "sighting--f5f789de-9183-427b-8bb7-8a5439cf7a8f", "sighting--1ff05401-dc37-44b1-974f-02e360c2627a", "sighting--acd483b9-72aa-4e32-8cf0-490a42d79656", "sighting--d3ed775b-9f78-48f9-980d-96d54b3d8860", "sighting--b03e06f2-211d-48ae-befb-28d3c149036c", "sighting--2b3cfc21-6e35-49e1-9e31-c4b1b6538e70", "sighting--025f0f9b-fc72-4c68-b521-ecb56d5d2832", "sighting--141fa81a-32e2-444f-9dc9-b9c9dee7ce8a", "sighting--84de3fee-a3ed-42bb-91c0-5a5c0de4ecf7", "sighting--9db5c0c4-a308-4d3d-bcfa-1aa9e32969a3", "sighting--136cf32d-b24f-434e-8930-91a80529e19f", "sighting--161039a6-09d5-4100-b601-4d09bac293cf", "sighting--bae70130-f644-4a2f-a026-f5e92811e858", "sighting--77304ef3-2438-4274-9c7c-b696ca59da9e", "sighting--fee1060c-71ef-41d1-b2bb-ead5c1818cae", "sighting--f97ab453-ee7c-414f-a5bb-d30828e8b515", "sighting--06674e69-2654-4780-8e05-e40dd728444d", "sighting--30efbaee-9b97-4149-90f1-50577c23e5a9", "sighting--d1a419ca-e603-4be8-824e-6d059bac80e8", "sighting--5256bd7d-869b-4de8-b9b1-56fc26350159", "sighting--c5f53770-19a7-47f3-b061-ed63e744d102", "sighting--e598de9f-3a4a-4898-b46d-b21d6e8193dd", "sighting--f048ecaf-e548-41ac-8f53-ec6c5236920c", "sighting--dc4ce92d-ab40-47aa-94ca-43b23a4aef2d", "sighting--3c8d45b4-6606-418a-ad3b-fe1ee8a4dc68", "sighting--68578492-5fde-4d5d-95d7-2ccd0ff19fd1", "sighting--f52a8021-b0ce-49a3-9e82-5e2281415f81", "sighting--bc150ff2-b094-4b9b-87fb-55be2a81bef4", "sighting--492d634e-3e7e-451d-bf48-3098fcbf40c6", "sighting--f78c4dc1-0f8d-4c52-963d-6f35b3bd3109", "sighting--37ed727b-3c38-498c-874c-ef021f1f4ff4", "sighting--107394bc-2e62-4cba-aad1-ff866c72c88b", "sighting--b424d859-8135-44a4-a4ed-6fafabd95cc1", "sighting--6e78f8e1-5e9e-4885-ac5c-f87006e113c8", "sighting--3d3a4740-c3da-49df-b5e9-01db6b4c839b", "sighting--d5f1d096-fce2-4ffd-9d2b-ee2d4b4eb26c", "sighting--3bab823d-0ad3-43fd-ae9b-3a435b948bc9", "sighting--70952296-537d-4b38-8c91-ce65337012c7", "sighting--a07ee504-d867-4ef5-99c9-9f5d884132cd", "sighting--8ce6bfd7-f12e-4046-8d77-bf9d3693ffe4", "sighting--69dafe56-2993-4d70-99cb-923912099ca3", "sighting--cc8dd450-3dcb-4397-bc0c-34e87dfc4d16", "sighting--b4d73e4c-7643-4bf8-b557-b8a601a33652", "sighting--7256f221-ba16-41aa-9d16-bb0d220f22e4", "sighting--85de904d-729e-4644-b30e-1333b9d11ba3", "sighting--71abe352-4de4-420e-b47a-e96b687e90f6", "sighting--5c1815c0-7466-4efd-930a-758a65429d1d", "sighting--687308d6-cd2e-4e6a-8192-01390bd81373", "sighting--b9a8b0be-6459-4840-96f8-cfd2daf3bec6", "sighting--44fc91e4-757c-4dfb-a512-32bf839d0d95", "sighting--93c8fcf8-36ec-4968-8ee8-3309a5263eb6", "sighting--c88c8cac-0254-487c-a7de-f87585239342", "sighting--4f435d3d-c5db-4a44-b4aa-f1c4c1101cc6", "sighting--e9c546b8-60ea-43ba-9b93-2a97af88a739", "sighting--9dc7ffa1-5eb2-4002-bf11-d658c61b4709", "sighting--625ef22a-d08e-461f-9492-c6c113bda0f0", "sighting--63a7bde1-902d-490e-af08-10d01f833843", "sighting--77c85331-3588-48e0-9477-4e4edae9f54b", "sighting--2b8af427-7125-45d7-a973-8159654e0379", "sighting--b99a8faf-8054-45ce-b67a-33eea0141144", "sighting--b84d3d57-bbc8-4022-8f70-24c19115a58f", "sighting--1e1bce4a-85b3-41e8-87ed-820876b68ef4", "sighting--e6490698-670c-4311-920e-50bbd2e17819", "sighting--900d9114-9a8c-4878-b1f1-d053f58f9a1e", "sighting--07af063f-d4f5-4198-b403-b21ccdb7d867", "sighting--9aee29e3-52d9-45b7-9c52-34ebe194a416", "sighting--ba046a78-dce1-45d1-9f1e-110de0691629", "sighting--9c9133b7-428e-407c-8082-443dd0dd5f55", "sighting--85fda91c-684c-446c-80a8-caa2661f0a59", "sighting--d3a2da9a-6cfa-4d6c-a349-44c851fcf4e7", "sighting--31906a78-932a-49d7-808b-31087a4998a0", "sighting--308cfe5f-e2a4-488c-b99e-057874d3fd2d", "sighting--a8bff578-0183-44a0-a678-29e30932df7f", "sighting--1df195bd-d768-48aa-9bc4-fc0af87891c7", "sighting--59e27a17-a815-4daa-b276-16dd533af598", "sighting--30050f6b-db45-4bea-b26e-e0dfc8d0cf78", "sighting--5c98a58d-a689-48c3-b7d2-80824af76762", "sighting--08ea39d8-0fd4-41df-aedd-9561e75790ea", "sighting--2755edc4-9554-4b33-aa6a-29abcec0622d", "sighting--433218ad-35a2-4d4f-ba92-5d0489a0d4af", "sighting--24c7ecec-2997-4348-ade7-89cbd7e3aac0", "sighting--df19e421-07fd-427a-9b87-cc285c2e7ba7", "sighting--8882a52f-81c4-4555-b116-11188dca52bd", "sighting--5d812f97-1d49-4565-9dc7-a1846249e738", "sighting--2e9c7495-101c-43f7-be4f-5fa96eb6c525", "sighting--28bc4681-c7d6-400c-a843-14c29657e4a5", "sighting--c3a21ad5-15b0-46da-8047-d02b38b4039c", "sighting--c35f2536-9b47-4253-9505-18d0a989b689", "sighting--d646f318-8134-4e17-a581-f92817710a16", "sighting--17f20ff1-9bd2-496c-a282-9587148a2873", "sighting--51e0e444-8408-43b5-be66-49b5c841a333", "sighting--27c19458-8ca1-4e20-add7-4b74d1666f4b", "sighting--8716dd6e-7758-41cc-aab2-b3365eda5006", "sighting--c194d938-f7ba-4316-bebd-f2f88ec45db8", "sighting--4641af68-6c7a-4c24-b2d1-16537247a0e1", "sighting--4f94d6a3-f0d1-4454-9a6d-d33605aec9ed", "sighting--b117d97e-4146-4863-9ed7-92fd4fe8270c", "sighting--33f90cea-f305-4c88-a3f5-916a2ad10446", "sighting--e0d006c8-6ed2-4c1d-bf00-5108f5f66704", "sighting--b8153b92-ac26-4521-b9c2-15edad2bc00e", "sighting--916ea1fa-a298-42a9-8cd1-9d3ee4e5c9f5", "sighting--0555ba11-06b3-406d-b75f-c350e0bb22a9", "sighting--8b083423-0ca4-463e-85a6-89e09910ffa6", "sighting--2a6fdaf9-8347-46f2-b006-db316132af78", "sighting--e016ff31-060e-4939-bb0c-f8cb60261b97", "sighting--75513eee-52e8-4655-b6d0-171415e7038c", "sighting--eac1257a-520c-46f0-a370-ec14f901dc3e", "sighting--5ca24f5c-732c-40df-9666-d172e1aa2e2b", "sighting--632256db-17f3-4ab5-a7b2-3b7dd0aace9a", "sighting--999902fd-36d5-4479-a1aa-79ed601be3d7", "sighting--e1f3aabc-d58b-49e0-9397-9ad5a62c34c3", "sighting--cef237b0-ed97-43e2-8d51-b617a405c749", "sighting--1dedf60f-2ded-48c7-a8b9-11b191e5cdf9", "sighting--f1eba7ec-e681-4d88-be27-5798759d33b6", "sighting--66fbc6b6-83cc-4422-a861-dfdf35c97a5a", "sighting--bf76c8da-a8cb-4cfc-950c-cf7cfa3e78fe", "sighting--ea6edd3e-d59d-4cb1-9e38-94c44687e68e", "sighting--f2c3ab1a-57fc-41c7-8f77-42c39b32b743", "sighting--7348569c-a50b-44a5-83af-0e38f8729cb5", "sighting--cbd62411-4143-44b5-95d8-0667175fb472", "sighting--8b6b5cec-71b1-48c4-9a6c-2f5d3bdb3f95", "sighting--45986b83-3251-41be-af1f-d61468f6e35f", "sighting--50e41129-5ca6-47eb-9749-a8cd2848aa4a", "sighting--c88b753b-1198-4f3e-b410-f349dd77fd8c", "sighting--dc7ce0bd-09d6-471d-853b-0eca75285e12", "sighting--6ef052d7-7604-405b-8bac-dfd4f94d7aeb", "sighting--26217c72-14d2-453a-b097-a61188c94a57", "sighting--cc6f1696-7331-4e6d-bfb9-464cc9c2d7bb", "sighting--f8036826-723e-4cf0-a781-b84f77514f95", "sighting--aaf274ef-2f6c-41d5-81f4-0c753eece90a", "sighting--68a6d3de-eb5b-4a79-ae48-c4fc600cd59d", "sighting--2bf6c438-7fad-43f8-a69a-45003276c510", "sighting--4ad49bec-dc22-4a9e-8428-d1dc482c206f", "sighting--600e7223-eeb8-42d2-a711-2e0f5d0b0f61", "sighting--e7f09038-d161-46b7-9b79-9da62ac04ed0", "sighting--14593a32-eb55-4ce3-b66d-26e460dea6d6", "sighting--8b672164-128f-4b92-a8e3-f67cd31dbb1b", "sighting--e236a9f5-07e1-4823-9ea5-6697a2b3aa22", "sighting--6937c95d-52f2-44f8-a57a-e78276c8586e", "sighting--2282d11a-e49c-44ed-bee3-979bb84d9b25", "sighting--fa45b6c1-78e8-4c50-b8b6-1a4abec3f791", "sighting--a9ecb94c-e0b6-4973-8ba4-f424c4b74421", "sighting--20768d8e-edb2-4ec5-bc2f-e77b386cd98b", "sighting--acdd935a-3ee0-4c7f-95d5-9d7d0c602e47", "sighting--8db7da41-2c94-49af-aa1f-48e14025b503", "sighting--2783f11f-663e-4dd6-852d-dd268ee0ddf3", "sighting--e7580855-aa65-44c2-b9a1-84413beacf4d", "sighting--73579b11-1a25-4455-b347-4718d6ecc7d2", "sighting--0782844d-8414-49ef-9990-4fcbb2c605c9", "sighting--ce0f1c20-5094-4840-a819-e0d5adce2d8c", "sighting--f19f13ca-14d9-4ee9-af69-9633bd709947", "sighting--f102e1a9-ae41-4c2a-aa86-d836097f119f", "sighting--fafbf739-2c82-4135-977d-9dd2b3d669ef", "sighting--ad238190-47a5-437f-a567-4e21b6ae1699", "sighting--772c1703-036f-46cc-89cb-77227345de7a", "sighting--39db650d-5adc-4381-93c5-72ee2867b4d5", "sighting--7f6d73da-a8f8-4862-bacb-70c15f946b9b", "sighting--e1f22265-8f87-4e53-8edb-c0c88b4dba86", "sighting--7c40fcc2-f12f-4019-9cc5-23c659a347c0", "sighting--296ea19e-e3fb-46e9-a9ec-d43b88a7bb46", "sighting--9e51367b-ae25-4d33-bde7-b93e99d12107", "sighting--f4514d5b-45b9-42dc-8f06-da5c3e496eca", "sighting--679f9830-85be-4fdf-9297-3d1c21c02217", "sighting--9b416ac5-e75d-4ff2-b40c-a2cc44744c45", "sighting--efe912b0-f94f-4a23-8988-283658869739", "sighting--4cfa6c58-51ab-434e-8601-7605a0e1e3bd", "sighting--f6a5de81-832e-45c7-aac2-fe93e1c72b18", "sighting--b68356b1-e86a-47b5-8d88-74951115dc56", "sighting--a363689b-5fdb-4896-aacc-e3a0e453686b", "sighting--b9fc22cd-f46d-46ac-af7b-f1053de5d065", "sighting--63f82401-c753-4cd3-a923-7ed29952c18b", "sighting--02edcec1-88b0-4709-a053-1c089ec462e5", "sighting--a34fb8af-7f30-452e-87ef-9551ceb2f6ba", "sighting--27aa10a3-5057-45da-abcf-c67f33f09d82", "sighting--9f3669fc-ea21-478a-acbb-2ae353964e9c", "sighting--045af6a4-26cf-4b14-ba7f-5c227fb71301", "sighting--a90e728c-9402-40ea-be3a-67b19d7d3b80", "sighting--9c7dfe1a-8b58-4ce5-acb5-20d6729e5896", "sighting--d7c7e50a-fb31-4dcd-a9e0-1b19ae5e46d4", "sighting--b81fe648-363d-479c-82d7-124906f429ff", "sighting--4941984c-d532-4c9f-96aa-be5af2699d08", "sighting--650aa6e6-bb3e-4919-a065-3695f24f40d3", "sighting--a9b99dbc-fd15-43ad-b797-1acf2067be21", "sighting--7a15d4d3-4c76-4ba9-831f-2bab5871ab96", "sighting--cbc7e14e-4e71-4d80-b026-68931589dc9e", "sighting--58df246e-5db5-49d8-add4-41c6f5f2c48a", "sighting--7cfd9503-9cca-4f21-9652-6d1f0827e699", "sighting--ae1da27a-3876-4396-842d-4a45ff75d955", "sighting--a9cc46e1-cb15-4d66-8aab-3f8353e12f44", "sighting--6029fc2d-9c35-4e81-baa6-15a1066725f8", "sighting--3baa7e6d-c753-4516-ad81-e939206b0d2e", "sighting--4636179f-9586-44f4-8095-d9f0299576f9", "sighting--b6168378-6cc4-4d45-915f-8ccdd0808d4d", "sighting--b58bd414-536b-4a75-82e5-8e9ce678fbb5", "sighting--3eb354a9-a46d-4332-9429-ac4086c70a9d", "sighting--ace961da-e8b8-4c75-8199-23e240c10f53", "sighting--ecbf6cdf-cb46-4007-aaf5-6a588eb0d908", "sighting--283f6981-8e86-4dba-9a7b-d6064d39ec43", "sighting--8ea3126d-c2f7-4f6d-a416-f2a40effaedb", "sighting--5ce5ed94-3708-41ef-a584-fae6447d0f5b", "sighting--5d23c510-701e-4ca4-b1cc-6a708bb04a4e", "sighting--cd01840e-cb0b-47ab-b037-a75bac7c22e6", "sighting--5ac3928c-a105-4408-8857-e8e2edffab8d", "sighting--52374787-b75d-4914-b596-538bc397a6b5", "sighting--d0ed6595-55f4-44ea-bcd4-0478e99f541a", "sighting--0b8b30a7-2332-4e07-99d6-91d0d91d7a12", "sighting--1a4b10c1-0e17-414e-afec-f812ee1e577b", "sighting--b4ac951a-9063-4fa5-8150-5a54fd88145e", "sighting--d81540bb-bdc4-4288-b984-08c95c7b61e6", "sighting--b9f028d7-e6ac-4584-a09e-96aabf0c30b6", "sighting--d00343c3-3acf-42e7-9b1d-3a4aaf14939a", "sighting--60173c0e-d04f-475d-b6f0-0dd0d300f0f3", "sighting--a3a6dcba-4544-44a6-8943-f7398c4c0961", "sighting--50d0955e-a76c-4eb4-b03d-de767634bd7f", "sighting--58bf16f9-6cf4-4183-b62a-eac0a96a4a72", "sighting--7201d286-11d5-4663-9eaf-4e8fea508cdc", "sighting--87be7148-5e8e-4458-a6fb-a0742da8142f", "sighting--bcc37d02-91ec-4658-a586-69c3913b5025", "sighting--fee4a96f-0378-47bc-b6c4-d06384f39867", "sighting--240044a8-ad32-4cdb-8d34-bad1ed7266fa", "sighting--dbffe0af-f273-4f4b-853d-1626f76a8bf3", "sighting--1d6bb88c-01d1-4922-9f42-35fba1d0585d", "sighting--0ae6f3c5-50d6-4ecf-9a6e-c96b42a8057b", "sighting--9e1cb459-56e2-4dda-a92f-5873f74a3282", "sighting--bfdb4afa-d194-4079-83d2-578a5131e4e1", "sighting--bec7bfab-6ab9-4feb-ada6-936633adc699", "sighting--bb03b565-047e-4580-b8e2-98c27ae59a29", "sighting--a9a16ab7-8b08-4b0d-abc5-a74b4b5c468a", "sighting--6c0a5a19-077e-4708-a7d6-02ca1cf5f213", "sighting--1f423841-dc53-4312-81d9-3e8878ccd082", "sighting--8c822445-baf5-4ffd-9a86-8602af661eeb", "sighting--5d29f6c6-68c3-4d68-bda3-9111de23add8", "sighting--16b90af2-9c6e-4698-82fe-ca40e53e1659", "sighting--4c7ca426-c958-492f-951c-46d2943c6637", "sighting--01682651-d75c-4e38-a295-bfbc8790d3c0", "sighting--9b5fb661-b081-4830-a6a7-67c765c07e37", "sighting--02274c44-85c9-4d5c-95fc-c414647de72e", "sighting--e6eba7cf-710d-4c85-a34c-3346abfe5e56", "sighting--073ce4ef-9320-4aa8-b153-763ffed33578", "sighting--2eb679da-684d-429f-86e4-b02253f0723a", "sighting--19accb69-4d0a-485f-97ef-d4a5411f36de", "sighting--344d8be1-3835-43f2-af07-736b00e7f842", "sighting--47eeff67-dec1-4376-8d69-cbc84fb6ebfa", "sighting--87debf8c-2f6b-4a69-9095-3a4461b020b0", "sighting--e5b3afbc-bd48-4a21-ab0a-6cdd225318e9", "sighting--bcdf17ae-4a93-4ad4-babc-d17233f1fac1", "sighting--6ca56b3e-e10e-494a-a903-8c11c79764f2", "sighting--e70646df-61ed-46f4-8306-d24d2afbccb9", "sighting--bae8de93-bc25-4ac8-bfa0-d57b9959931c", "sighting--f27cf671-68c6-4e84-9885-5cabe9eec86d", "sighting--716f07d4-421d-4fb7-8dcf-717bdca6ddc4", "sighting--0a59a8a6-2ebc-473f-815e-9b8d4ed98a98", "sighting--7c4e8cb7-3216-408b-8e9e-f01c1c601da7", "sighting--80c7d170-bc84-4d31-917f-4176b3776b1b", "sighting--0d678cbb-b1f1-4f41-a253-bfcd780690b9", "sighting--5d854ee4-72be-4865-ab87-1acbbfd175fb", "sighting--bd24974e-211a-40cd-90af-3669cf570f54", "sighting--de4eef9f-4426-4a61-bc1c-1ef63a9c61ce", "sighting--203d6ec0-540c-4792-b427-34052251bae7", "sighting--8fc4a03e-d719-4584-88cc-35ab60bfec1c", "sighting--49e746fa-67e3-4948-8ef7-e7250181ea10", "sighting--d7985592-b618-4b92-85d2-2a1aec738c7d", "sighting--46795a47-7ef3-4ccc-b354-fcc701016621", "sighting--00918ed4-3453-45f5-b494-74ad5c969a21", "sighting--c6946390-be8a-452e-8966-edbc2e4a60f7", "sighting--434d36be-666d-4f84-9384-3402bccaa2b8", "sighting--21a21d35-37ea-4f02-a333-d4b0ce4e9903", "sighting--26d4bbef-48d4-48fe-86a9-e5672f3da4d8", "sighting--5d27aac7-c137-472f-90e9-90c015311f0b", "sighting--db95e3c8-4262-4377-bc4a-3f078a693c1e", "sighting--912cb2f9-e84a-40b3-84c2-804cc05abb87", "sighting--35658674-0e95-4989-94fc-1b4f713f9e96", "sighting--510e81ac-b086-4617-804e-8a5da673e6e9", "sighting--4f3b3d05-55a4-4e24-8c59-7d354fcbc059", "sighting--1031b54d-4c88-4285-addb-68f89ab5d210", "sighting--c3f82c61-9873-4f97-963a-1200e5a4c08d", "sighting--98ab35e1-63cb-4e07-a2dd-4988931e7d11", "sighting--5e997ee6-9fb6-4235-b25e-7c12c32eb3e9", "sighting--18a71de8-f164-4d20-9f76-dc7a5d0b4c96", "sighting--bbba6da0-e4b6-49ac-a2a8-9c5762401234", "sighting--9e2e2a22-47d4-4fc8-909d-04c45cef7807", "sighting--790d519a-d62f-4eba-8615-62c7f3ec8f60", "sighting--d7a46e27-bf18-4d81-9e2d-e5a47f3e44cd", "sighting--c926ee03-d7f1-48c4-84b3-857dc6711569", "sighting--d2ec2f52-016f-4334-a833-5827f94b403a", "sighting--1ecd716d-850b-444f-80cf-03fc17092777", "sighting--55b5917f-2869-4157-a11c-5876c707f9f9", "sighting--bfe862e4-0251-4ede-b1f2-3412f5780097", "sighting--54ed1eae-ac42-432c-bfb3-00f1b4547eb4", "sighting--6e52d3d0-9204-49b4-9e13-eb11986c041b", "sighting--f063586d-74d4-4f38-9630-43edff1e7751", "sighting--89aef053-1a8e-46b5-a322-a40c4d8674ea", "sighting--808fa582-7ce4-4d52-8be2-8786ec74ca44", "sighting--8c754139-ca0f-431c-a157-1bf31f273b4e", "sighting--8f117f12-f063-4ea2-a0a0-886b4414f39f", "sighting--6508c7e7-f9b2-4a38-9624-367209404565", "sighting--e3745e46-9f6d-4273-b606-88ec133eb206", "sighting--0a572c45-35b9-49bc-ad1d-c6c2a801ef9e", "sighting--1df2e3bb-7714-42e7-a0bf-0a9baab5f3d9", "sighting--283c2267-38be-49fa-9feb-1151cfef35d4", "sighting--183813f2-2637-4b63-9a61-987978fbfee4", "sighting--129ae68e-fe71-422c-880f-907df6ca763d", "sighting--f886bbb2-4581-4dc2-ae26-ec77126ae949", "sighting--4bc11b8c-952c-4c8b-bff7-1138912d4e1f", "sighting--e4e8e944-a1cd-4620-a38f-ac034293f9ae", "sighting--9cecc108-4f2b-4c25-8379-15d6c2c57d88", "sighting--1ed20729-2cbc-448c-a93d-d44e9200b1ee", "sighting--67278566-9a36-4c8b-915d-b479b9d46725", "sighting--74020313-7cc7-4234-8268-1681fc63e72a", "sighting--ef092813-8b38-45ac-b7f7-16635dc7fd4e", "sighting--4c2ed25a-c98b-4b88-b2e1-4a6220d1b9e5", "sighting--eef0b1bb-6f5d-4324-82a8-f2f3c2224d62", "sighting--a8f331b7-03c7-470b-af0c-25bc27b79dd7", "sighting--58c5084e-e218-48e3-a1cb-9170c5555d69", "sighting--684078ea-f828-44fa-865e-a6ace17442db", "sighting--6e74395c-d3c4-43da-9180-085e2a22e585", "sighting--09c2195a-670f-40ba-8f7e-cf2c4524a3ba", "sighting--2ad2190f-6715-44a5-b90d-39f56bc85328", "sighting--0da26202-541f-4977-9d46-58cfe284c031", "sighting--ae8fda44-9b8b-4dd5-ad10-518ba90ec66e", "sighting--0a3744f5-38b8-4085-9f02-204b8a9519cc", "sighting--ffed74fd-01b9-4493-970f-17461c849035", "sighting--a4daa5c8-f655-4f24-b96c-224e8c387923", "sighting--1a10f6e3-df14-4086-b311-68c88092bdc6", "sighting--bd4fc8c5-e065-47f8-8468-c62d3e678a52", "sighting--2592889f-b06d-4db2-8036-6f39e4299bd5", "sighting--40c62071-bfa3-4820-8588-38052d9f78de", "sighting--0ee802cb-46b4-4402-bc20-a153939c3df3", "sighting--1852a636-2b90-455a-bfc2-c1270cfff477", "sighting--8645ab1f-83de-4e1a-809e-a5212a88d7d9", "sighting--a1fbd1f1-fc40-4db6-b29e-f942a26e6774", "sighting--4e9bf9d4-c0fa-4d2f-af85-2b4b703f51f0", "sighting--d12fba17-a408-43aa-bf29-2ee2103bc0ec", "sighting--dece10dc-aca3-4b39-84a8-3913a27f3a7d", "sighting--f344e3f9-6405-4198-895f-54ee3a1f4748", "sighting--cc2e7ee2-76bf-4060-a98e-faa96961c7f6", "sighting--444ac826-c1bf-4d7a-9382-a961c7d6413f", "sighting--61a319f9-86d1-4683-8533-7f8570a00ce0", "sighting--21604c23-87cc-40b7-a936-ecebd5336c5b", "sighting--a125beef-0f1f-451b-a913-c93ddea1d616", "sighting--4e47b8db-dd44-494c-a821-e9f29a1548c4", "sighting--27f61d93-1a5a-471a-8b86-44e31c567a88", "sighting--e2ab40cb-bb04-4e18-9f13-0529ebb4d8b0", "sighting--af26ad8e-44f1-47b8-84fb-11cc04acf685", "sighting--02d18584-c7be-4601-a6d2-fee16970a816", "sighting--0a8d5af2-0eaf-4253-8215-2551e098adb1", "sighting--560f9478-fba8-4fcf-adf6-97106efe10e9", "sighting--865735c4-6f52-4350-bb82-74426c3dfde3", "sighting--e455d274-5790-4c86-92ff-ac83df2cdbb9", "sighting--7d258613-feba-4eba-9672-e4d50607f05a", "sighting--df855607-64cd-4086-b512-a208b974e453", "sighting--c44fd5d7-a711-4857-bf56-e524bca3272c", "sighting--8fee9ffa-a124-4b6d-a3de-e08683e636f0", "sighting--a4ead981-edc9-44ff-9d49-3c25385fb291", "sighting--90c03126-c36a-43a6-8bba-b7bae142f999", "sighting--af9d3d08-c5cc-4055-aa20-bc9c275e772f", "sighting--c3634ac6-261d-4e36-940c-6855fca01852", "sighting--3384ce1e-dab4-4805-ab95-9e8c1147b2d6", "sighting--39cea973-9fae-4a54-95d4-48748f5f8c95", "sighting--fdb68663-4217-413d-8a9e-a7966b896238", "sighting--03435211-7364-4b98-bea9-3d751801c59b", "sighting--4595568d-9a7a-40be-832b-462d321c9b7a", "sighting--c2f49569-0916-4f82-b6ca-de9def156c8b", "sighting--89289341-460b-42e4-b3be-9811ea53147d", "sighting--aa5dc065-01ea-4b27-98a0-689b51b11bc4", "sighting--93b53cb1-f030-4eb6-8fb1-e5a08ea328ff", "sighting--a2d537a9-1dd5-4352-b708-e65e60f9c68a", "sighting--3e7737a6-8263-476d-a3e5-2106dc1ad721", "sighting--1062a9d2-abf2-4ddb-972d-53c5376bc5f2", "sighting--4f4a19c3-5b30-43de-ad91-d690dd19baa5", "sighting--c2a0d3b5-bb52-4294-a752-8d4f1a98d0c4", "sighting--f39733fb-24e3-4781-bfe4-227704405132", "sighting--9c3cda20-91ea-49d2-8f72-08aebe708567", "sighting--7e370c38-01a5-4bc3-b9c6-a4815256f640", "sighting--b003eb0b-cc2d-46f9-a4fb-74e74303b8b9", "sighting--6abd2e61-6dbb-4825-b4c6-11cd719448c0", "sighting--85ba0cf2-b7e4-4d4f-b84e-fc4f587a2351", "sighting--2e425a40-f4e0-48c8-b5c2-f817b039ab7a", "sighting--2df5890d-e4b7-477d-9db8-8faddda095cc", "sighting--b7d92b55-9e98-49cb-a7c4-c577399ea036", "sighting--543d37e0-8e71-4fcd-8be5-0a8daada947b", "sighting--d38efaf9-ea83-4e0a-ba92-e5e601a7b70c", "sighting--590f368e-564d-4058-b4b6-1e9e7d690741", "sighting--04e07953-dd8d-4214-a2a9-8b077bcb65a8", "sighting--c18ff47b-be1c-4508-a1cf-7162c9df15b2", "sighting--bdfb05c4-d9e9-4c94-9c92-a2b8402acf84", "sighting--55180736-9a88-41f7-9ca6-1a420771f31a", "sighting--5229dfb5-f971-42c3-bf0e-c1dcec47754e", "sighting--77b21ee3-e663-43df-8106-184b089a216b", "sighting--ed3d5028-e411-49fa-91d0-12d39da3004b", "sighting--33595645-5b27-4e26-a29c-d80b446f01a0", "sighting--24e0e55d-6e9a-45bf-966e-cb40f793095a", "sighting--212ace00-015e-4ae6-9059-a95be623c8e6", "sighting--5640e9e0-839b-444d-b158-780c6630b107", "sighting--0df16e01-dd4f-4a58-a490-f477dfdf2ba9", "sighting--77dba04a-0a91-411f-a368-5799b0ee61bb", "sighting--efa9b758-5a77-4f7f-9a7b-b39c8ef3fb5b", "sighting--9f4425c1-85f7-4251-8f42-d239f3c35bd8", "sighting--d14f88e6-1376-499d-bddd-b7aa9876fdb4", "sighting--ba194013-615d-4fdd-bb97-f5cc1edb9c86", "sighting--ff4d4850-d0b7-4ad8-a983-7ec3cd466ca3", "sighting--317c7821-fe12-4750-8c3d-c1598a3dd575", "sighting--d85699e5-b14b-41cc-b313-c76fee082929", "sighting--738a71d6-b71b-48ee-8f14-33a9e0e16262", "sighting--2d8c4807-7111-4b99-88f0-521329b4f021", "sighting--efd4be61-aaac-47c1-afb0-628f279cce25", "sighting--94f3e95f-694a-41e6-99b5-b6614e405c83", "sighting--23421f07-7221-4669-ad30-6993d85db3bf", "sighting--e493b9f4-df2f-48fb-92ff-7b29eb637be8", "sighting--5c419a1d-7ca3-418d-b826-ae74f4a48fe7", "sighting--fe6cdcc3-81b0-4e0f-8b20-c234c4d5bb02", "sighting--46395a42-d9a9-4a17-a444-614272277b17", "sighting--c18bf1ff-a399-4c20-a36f-f54c4ddca15b", "sighting--60e3861f-8679-4d90-b1fb-21a8ae49b178", "sighting--b3ea769c-d946-484c-b766-d33a93f33fcb", "sighting--c183905e-83c3-4a5c-aa74-2b573ef8ed1c", "sighting--08dbb16b-a5ab-4b42-a98b-1a6ac8686507", "sighting--840e631f-9500-4d0d-a859-52195cfcd885", "sighting--b14a118c-65d0-43d7-8cd7-1f5a21d8f5df", "sighting--7b1ae309-0999-4a78-858a-f5cf11c27536", "sighting--60bdccbb-31da-4e1f-a471-7beff54c1653", "sighting--77f748b3-8c41-4b02-b1de-189ef7a9afa1", "sighting--7baefcfa-f0f0-4780-803d-79c3150adc80", "sighting--e646c95e-51c3-497b-8f7c-93db86692171", "sighting--fd7b157c-5a30-4793-a839-cf68bd03f0ff", "sighting--faf43af6-92ac-4ad2-9afa-202e17a86915", "sighting--39bd00d7-3944-4193-afa3-617c8884777b", "sighting--ced8d216-6f8f-45ea-82a4-c3076ef854a7", "sighting--af9193b6-d622-48ca-8047-4db6dac132d0", "sighting--9d93eb63-89ce-4645-8f68-adee1d2c7efa", "sighting--0b96ffc0-dd72-4405-b9ce-3eac4a3e435c", "sighting--3d018317-2bae-4895-b47c-abd8dac6f45a", "sighting--c16172ca-c256-47e9-8aef-fb4b40758b80", "sighting--02942168-b453-458c-8938-786d045a91b8", "sighting--1f13cf7a-c50e-450d-8ad5-16840ef5e4b0", "sighting--cd3b7664-f7e3-4afc-bee6-24c68056abd2", "sighting--9a774834-14c6-4e02-bb7e-ba6bbbc35442", "sighting--e6e1db60-fa1a-445f-aff2-03c3c54f9266", "sighting--f7a1b7fc-8416-4228-b621-b5612176555f", "sighting--418602fc-6573-489f-a624-7f97dc76f497", "sighting--fdf17a5f-9778-40d5-a402-2d73e09ece23", "sighting--0dbfaf93-4fbc-4442-a1ce-6e75672eb839", "sighting--61c4dc2e-a791-4b43-a2f7-488d4f6026c8", "sighting--fcff5795-f6c7-40b0-b9b0-363c0fa229b0", "sighting--df6ce1b8-da55-4bb5-99ad-bd5285727030", "sighting--941197f8-3325-4e3c-90eb-f3951bc5bcbe", "sighting--da9f5d36-3775-47be-9cf2-cdc820a5cdef", "sighting--efa274eb-d041-4649-9483-e4f83d3c73ef", "sighting--4e48cff4-17a4-4b7e-a246-76585191534a", "sighting--5aed04f7-9754-4549-b6eb-862a62c445bf", "sighting--be63a2ca-b3e6-41b1-93eb-1b405e52e485", "sighting--97255bac-9826-4235-bec8-75220c43c1f8", "sighting--f5c11eeb-9d45-4c27-8089-f8e8a8adbb6b", "sighting--71f370f3-9664-4fe7-8421-2f4243feafac", "sighting--40359451-5725-48ca-a366-c9826e680c23", "sighting--0d414369-edc2-4b92-a12c-de930bd74110", "sighting--3e92dd1e-e47f-4ac2-90ec-8d3739aeefe0", "sighting--e743bb60-c31e-47b4-82e9-7cb53d8a8067", "sighting--e8862ecb-b6a5-445a-84ef-d934eace533e", "sighting--a8736a31-4b39-43b3-b31e-ecd6b7e52230", "sighting--7aa683b1-dbc3-4c8e-b7b8-513f180df9e7", "sighting--3772ea7e-e1f0-4dbf-88aa-62c1ea9e6eb6", "sighting--3b9d1b78-9431-4331-9a5b-a444fb2dbf3f", "sighting--0a58f910-02d6-4bf5-a4f0-7f56e1c8228b", "sighting--7a19d4ba-55a6-4c8b-b4db-4ed96547eb97", "sighting--d6e84bb7-d3ee-4068-a654-8be42b5c4438", "sighting--4dce85ee-2506-4db4-91a5-3acb0db795d7", "sighting--43f80c9f-dfcb-49cc-bbdd-b08d6c2abbba", "sighting--51d6d7b3-1ba0-46b3-94e7-524933bd4075", "sighting--69c6523f-f598-4435-8268-fbbd518d355b", "sighting--eb64a4cb-19ce-4895-adf9-eab6bd8bac48", "sighting--3c6a5bd4-9b11-457f-9c3f-af794fbe0182", "sighting--73659429-a9d0-4675-a953-cc12f49e5a80", "sighting--777f3dbc-e78c-4699-9fcb-124a19c6c085", "sighting--139dd58e-ee11-43dc-8795-27222d945668", "sighting--d2c85053-6cf5-4eac-ac86-2e6e0e9fb7d6", "sighting--09d706e8-e20c-44b0-9a39-50425d1102b8", "sighting--1476e633-047c-42cf-af91-47de77ec212d", "sighting--9dc1326b-4ba0-45c6-a82d-834fc5a0906e", "sighting--45acc585-0093-4037-b04c-7975bc429190", "sighting--855072b0-a6ae-4590-8d10-00a87345e247", "sighting--80463deb-0d90-45e9-94c8-69e1b9ec355e", "sighting--8fb06f85-2092-48bd-8e86-88181219a29e", "sighting--24c310e8-11bb-416f-b416-19bd776b24ba", "sighting--6f0dc8b4-53b9-4a57-8b5a-afbd1de06452", "sighting--8170a7ea-a574-469a-b32c-9db0a6f76176", "sighting--484ba4c3-7f91-4cf3-9edb-a49b90a58d6e", "sighting--b978ee93-0f22-4770-8bf6-533d2d678088", "sighting--f60f5cb5-f138-462a-81d9-cc64108be9c0", "sighting--ea0f4be8-50c3-4854-9a64-810c563c1b56", "sighting--ae2722c3-6902-4160-9568-6881e8606ecf", "sighting--ef8dfec7-0abb-492c-85af-2261d0c0d29e", "sighting--7b930fa2-5a82-4607-9743-d5362c61f7eb", "sighting--27f0b0d5-d172-4019-b164-efb7b6ff9e97", "sighting--c89933ad-1281-4b94-99c9-2e0bcb051c96", "sighting--e980b8c0-afb0-40cd-9e64-bb8a78004cc2", "sighting--6d846783-c248-416a-b92c-2c07a195af30", "sighting--1f3860cf-1e85-4bce-8a3c-8b828f530622", "sighting--c2c2cb46-6c50-4cf9-b52c-0be940f72f57", "sighting--3dd1d07c-3b17-4551-8e78-d4c6dd26fe53", "sighting--4a45528a-5cfb-4ca2-bfad-54d6b550d3f7", "sighting--585e6b54-4b3c-438d-837e-bbef5bbd30a3", "sighting--1371fa25-d998-4cbc-b117-5ff7c7abd298", "sighting--9fdb6f59-1464-4d4a-a05f-31e9d01fe1eb", "sighting--119a2c8f-37c2-4c00-a036-469652244157", "sighting--ff81e1ea-6d66-4c6b-911e-089a0de01629", "sighting--9c8b6552-5d44-43e0-a43e-6e585fb4c66c", "sighting--df1c4ecd-a082-4f02-b9ac-e36d0e39238c", "sighting--7797031b-b060-45c2-9081-aa39243f3792", "sighting--53369192-2110-4a59-ac40-76cb37ef6253", "sighting--0a185397-ba3e-45f3-a450-90e8c9d18a8c", "sighting--494426d7-bd7d-4044-9f24-dc91ef661925", "sighting--bd3844bf-e422-43cb-98c9-0461e8d32ae0", "sighting--842904e2-3e02-4b22-a137-69990237559c", "sighting--cf440051-dd0d-4764-831a-5d80f55ae96c", "sighting--cdcda188-af4a-4aa5-b617-940117f2f6b5", "sighting--742a8b9f-167b-4237-bb61-56b47b8064e1", "sighting--3e7fe728-c4bf-4162-9e5f-e626090f561d", "sighting--f4ee0c89-ae05-418e-b862-988a0876e765", "sighting--a8b656b4-7dc8-4149-af7d-81ed37ab024e", "sighting--88c6bda1-6b08-4dfa-9d10-a1ccf397eba1", "sighting--ab5dcf06-725d-450c-87cd-99412be3283e", "sighting--b4cbe28d-98d8-4f64-ba5b-f7b938ae3e9a", "sighting--7d1365e6-f2e3-4a20-a855-3d55b1560556", "sighting--0212bbec-9236-4689-b34b-4b70b24ca98a", "sighting--0dd65759-9466-45d4-bd42-d82748ba0e7d", "sighting--725fd031-4b99-4fc0-85fc-d4e9539aefa6", "sighting--e042e669-1ee0-4c5c-86f5-f7db91c00439", "sighting--c8655daa-4b1e-482b-9033-dd556a7a43f6", "sighting--1bde3881-cca7-4848-8c9f-59dd3011e32d", "sighting--52d887d7-c764-4e00-9b46-362f4d6f808e", "sighting--d990b09a-57ed-406a-9ab8-60dcabbc37d8", "sighting--4348caa4-310a-4fa8-bd10-a06cc23ff20e", "sighting--d420194b-dcbf-4322-8325-c7fc38baebcb", "sighting--33d1ad46-2fc2-4a4e-858f-d08302562dea", "sighting--afd94deb-c936-482c-a779-b298313afd2a", "sighting--785b03ac-d9d6-4e28-b3e1-82d8a6c95aec", "sighting--778a06d3-7653-4777-a921-c7d5126d19e7", "sighting--b5c54cc5-a251-4586-8bc7-66054dcba61f", "sighting--b15e95e4-4995-443b-a3de-2473d3abd500", "sighting--ae281c31-b033-4510-b94b-64f7db8a0d9d", "sighting--14d29896-b10a-4109-8be8-53c93df0de86", "sighting--011eb08e-22b7-45c6-8fdb-2898bb1db632", "sighting--cc2e5998-ec30-42b2-87f8-67866e77e309", "sighting--126fccaa-ed13-4fc5-9f67-8f0b5fa53ab2", "sighting--4d85d933-e1ed-4ebd-9730-aa91bc8460f0", "sighting--65c5b6fa-c5e4-4865-b8f5-e2e8e35c75ce", "sighting--8232ef0b-3956-471e-aaa6-d0b11361bae8", "sighting--7a977a78-7540-409c-b860-f2f171bb20ce", "sighting--adc70446-d069-4463-8501-450c0b862f6a", "sighting--1bc588b8-72a9-4dbf-9ecd-370b112222d7", "sighting--3887e494-644a-480c-bd22-f72b98433da3", "sighting--c599b47f-cac6-47ec-a6c6-cd17bd587bc6", "sighting--e87622a0-3aee-4c15-9b31-85e4a5d244d4", "sighting--9bbb3d6e-940a-4321-aa8d-608c6d045807", "sighting--edd96505-b553-4f01-bb27-711c118d248e", "sighting--406e3de9-1b47-4c40-9f27-a138a44ea5a1", "sighting--de3c7ed5-0e56-4467-8ae1-f0934e04d59d", "sighting--cc43fe2b-33f7-4062-8d96-b8216831d926", "sighting--9f613471-72f0-4aba-95dc-f054a42cf5c8", "sighting--e92b1936-eead-46f9-bf64-84d61678aab8", "sighting--638535e1-e1c8-4793-a7b6-022b85328b9c", "sighting--ab8e3a0d-e585-40c4-94f0-29cddabf6252", "sighting--e6ffde24-56d2-4bd7-95fd-0e122cdece8f", "sighting--dd11b10f-2a19-4edd-befa-d6c7ef2ab74a", "sighting--b678c182-b17f-41f4-ba94-d01c4cbe2871", "sighting--d8dab3c6-e950-43f8-b641-26c8dcb43a98", "sighting--67c68e44-8a3c-4d6a-b1a9-63bd19a252f4", "sighting--f558702f-70d0-4c7d-aa3d-ae0063a91547", "sighting--e4d60d58-ddbd-4815-b801-32486133628b", "sighting--8627bdde-033b-4d25-99cb-75317529ba54", "sighting--8727b5ad-fdfa-45c4-aa89-01006de77758", "sighting--a4d0aede-858d-48e2-b1ff-84d6033be290", "sighting--308b1d0f-e056-41b6-84c9-07b34f84b0d6", "sighting--3edbf686-2c9c-4512-9a52-8667810dbd0b", "sighting--94c2a64e-7d34-4a23-8ab0-efa76a2fb603", "sighting--cda97162-a414-4cd8-a251-dbdc1c5a3eb1", "sighting--c36a2ff8-f52e-45b0-b7f4-ebb8362fb7e3", "sighting--b73f1fb8-18f6-4154-9b4e-2b629ef45b04", "sighting--fcdedd76-d446-4f8e-8ca3-09a5236c0ef9", "sighting--268d1664-6a29-4456-86c6-8802c7024100", "sighting--dd5e40fb-8801-47b7-997c-0aa1eb1a01c5", "sighting--166e9154-1ad1-4239-980b-515e986d3248", "sighting--fa2a4961-ee34-4e84-b653-b2d17081889d", "sighting--eeec947e-8d32-4363-97ea-3e033acb0d51", "sighting--34d57c50-c45a-48f3-b937-f70f3932765c", "sighting--62809e6f-64b6-4796-a72c-71f9eb0e82b0", "sighting--db692a05-852e-4fb8-9cd6-8291f018fd46", "sighting--420401d8-8b9e-4f01-9335-3f7d1d8685c5", "sighting--bc15cb70-db87-4c44-b2bf-b65e39485ddc", "sighting--7fc23e9b-a767-4819-a232-898681073f2c", "sighting--78d7b54f-ca5a-4b0b-abca-22381a89c57c", "sighting--26fa1bde-dfff-4cbf-b9e1-e341e778208e", "sighting--cc821d56-9e8c-4785-82f1-320e15bfd285", "sighting--a97ff758-801e-4ac0-ae7c-d89bf8b3676e", "sighting--35a0d9f0-0ae3-4316-9f86-f1b1285b415d", "sighting--50b0a248-ee48-48c1-a690-051258f4d7a6", "sighting--69a2525f-862d-4574-b552-bc80effa5bb3", "sighting--5d7cdfb7-bfbb-42b0-ab1d-dbef685c9255", "sighting--e786358a-0423-4e44-b670-16ca6767fde0", "sighting--a62197a1-f048-464d-92a3-0ba008f9e0fd", "sighting--e21ec4df-6dde-46c8-bb4b-d9aabb2cd0ac", "sighting--582e6b59-e6bc-4264-b7bd-2e50b15410b8", "sighting--f43fdc17-6bb3-4b3d-a435-e6050dea19d9", "sighting--5ebb9c60-d7b9-443a-8a81-f03ef1be8b25", "sighting--afd08130-9ba0-4282-8f5a-3ac0eaf0309a", "sighting--6ba89ef0-397b-463f-8731-f7efdff3e26b", "sighting--453cf305-9131-4c22-8f88-f03cfdb2883a", "sighting--6e84d852-0ca5-47ac-80fa-763f2f564404", "sighting--5ba17362-8392-4175-abde-db616911eadf", "sighting--6fad77ab-badb-4d7a-99b2-69a4204b0810", "sighting--59a795b6-17eb-43eb-8696-d1b1d0ee59c7", "sighting--080c0046-dbea-4af6-84ce-377217392aad", "sighting--24b1bd03-786b-4ee6-9364-d977f8ce08e4", "sighting--1fa33d09-0323-4482-8b47-044f1aa3a65d", "sighting--ad424134-72f1-419a-8979-e697e88ab0a1", "sighting--60b48602-325d-4b25-bdb7-94e616f27b5c", "sighting--28d82d1a-d987-4bae-9a25-90c09c744945", "sighting--23d57187-d8b1-4309-a30f-02dd6c093d6e", "sighting--9f739fc7-8bae-4bc4-9cc1-c5813267ead8", "sighting--51f85a02-588c-4e8b-a1ba-6bf0cd9ee738", "sighting--b0d32ff1-6722-4342-a44e-5449407908f0", "sighting--53fb6ca1-d1ca-4252-aa6f-1c879a8bfdc0", "sighting--153ee1c6-4dde-4241-944a-3eae99d0bdc9", "sighting--58e5b2df-cab3-4233-95d6-bc3a3f8055ae", "sighting--c015ebee-28d1-4901-99f9-08a2953486ed", "sighting--28c5405c-9854-46f7-bfbb-0431e53138f5", "sighting--1d712fc5-4510-4406-95ed-4af3f11b47bb", "sighting--f568ae4d-a963-4ac5-b74e-78d18069dda3", "sighting--f6776ca2-8069-4a5a-94f7-fb303f973740", "sighting--eb823a65-c823-4dd1-bf0c-462964d898f6", "sighting--fb66f0c1-0ff8-463b-9491-40276e42041a", "sighting--7e7cd96b-0c3d-48ca-90d6-7dcad97b8fac", "sighting--fadfad4d-9502-411f-b492-3df998def3d3", "sighting--07c295b9-e58b-4032-acd4-59f4fb074268", "sighting--1e3cb509-f10e-4466-a09a-64cc7388ece6", "sighting--3100c26d-4170-4a87-99a1-b217adb307cd", "sighting--fe6b4d3b-3d26-4e13-83cd-5f2fd571527f", "sighting--ab4161bb-2279-4203-aa8e-4fe63ecbf313", "sighting--a1d0b027-3878-4cc5-924e-7876bfde379e", "sighting--1f895e62-1c6d-445e-b711-8ad27876bf53", "sighting--5fdbf788-a5db-4cd7-a133-71f38d837686", "sighting--02e5d7ae-2d6f-478c-8ed2-05869dedf88f", "sighting--0959a23e-818f-495a-99da-60f45de514c4", "sighting--f3849f94-cdee-4f9c-abd6-8b4e4369c07f", "sighting--f0832990-9dcd-4b3f-8604-0cfe404079a8", "sighting--4d79d316-c463-4d5e-a8ee-64651a8516fb", "sighting--c15cbe97-5d38-43b2-a395-e2b3678999ac", "sighting--3e8ff89a-4fb1-4142-995f-0c3bc6d82bc0", "sighting--67fb3310-9c2a-4994-9a98-a3fa27fcaac9", "sighting--85f871b5-9a1d-486a-b124-07c6212b8011", "sighting--60fecb0b-2d03-48c0-aa68-ea422124a6c2", "sighting--e9c7e124-61bd-4b45-8660-47b750545418", "sighting--4b99d614-46a3-4fe6-8a9a-f61c55c63f45", "sighting--bac8d4d6-0062-476d-a836-f029e7bb13cf", "sighting--7ef6b10d-c9e9-4376-b1dc-3fc8394bd73c", "sighting--e24e860c-3e13-4c43-8a20-fa958721146c", "sighting--617abefc-6212-474c-9d7a-a994b00a246d", "sighting--bc7e045e-036e-44cf-87f7-510487b6dd6b", "sighting--7978208e-3254-4ab2-a54d-887a8c2bed31", "sighting--e793de79-c0a5-420f-b4f3-f43395b40721", "sighting--444902d8-ff25-4eff-b744-eb43d68ddb4b", "sighting--153a3d4c-d121-40d6-9016-591641671b10", "sighting--9f6cc26f-963f-4621-9c18-f43fe3156571", "sighting--bc78bd85-99f0-493d-821e-0056fe46126e", "sighting--8b5126e4-9b80-403a-bd7d-21c74b01d674", "sighting--52864db9-4861-4d98-ac70-bc3b11d871cd", "sighting--f1cac8fa-2f86-4bec-8cea-510246ee6bc4", "sighting--7c705f12-c3ac-4957-875b-9129b0e9ad4b", "sighting--54b42d52-4203-48e1-a77d-d40077010d52", "sighting--d73c1ff2-ed8d-429c-918e-b1bc68668eb6", "sighting--05a63130-27e0-4164-b7ec-863ad00262c8", "sighting--3df0c748-c2ac-4dba-bc19-555d6b5c830b", "sighting--e55e0de4-63eb-47ca-86d1-153862a6d142", "sighting--0b75d56e-eaf4-4613-a241-ab75570a1939", "sighting--6c06c9ec-aac6-48f2-a378-1e210089ea87", "sighting--785049fa-2bf0-4989-b32e-127ec9d87069", "sighting--c3d3b394-416b-4b3d-96ce-381dfbfc6745", "sighting--6fea043b-35fd-44f7-89a3-1b7bbecd3924", "sighting--b0c269e1-4f4f-4c7c-90be-66d25f72ccf3", "sighting--edcaf5b5-4a39-4064-a7eb-e0b631818229", "sighting--f8746a8c-3dbb-48a5-8976-b14f6e21afc7", "sighting--0a1ce423-1d86-403d-89d7-77c7498822d9", "sighting--7361cbd7-d566-4007-93fe-5febadb5406f", "sighting--d0bb4ea4-931f-4e1a-81f6-4a38f101d70c", "sighting--954aa9ff-8105-4f1f-806a-d2da66334231", "sighting--696be728-045b-424b-8881-deaa46132b1d", "sighting--afb3e27e-e739-49e6-a710-e2b93216dbc9", "sighting--fbd4ffed-e3b6-4aa1-aeb8-450e58d1ee2b", "sighting--6eebcdd9-b356-4808-ae52-2aa40e3b87ab", "sighting--72246b90-4e80-48ee-a8bc-d42027deb842", "sighting--820d3c3d-a720-47d4-a779-26688cc2c0c5", "sighting--0f6c0e12-1cd0-4ef9-b26d-ca7f6c01bb22", "sighting--c0459740-2803-4a48-85dc-685de0e22425", "sighting--e408f33f-7d91-42d3-91ba-87164ab8c771", "sighting--8192876c-b931-4be5-b114-edf48cb066ac", "sighting--d17a2415-79b8-4a6c-abe0-6a66245bf111", "sighting--2a4bb5a0-8a0e-4ace-a369-56141ad1e06a", "sighting--7bf37513-f74e-4922-ba5c-60d37573fdfb", "sighting--20d7e76e-cfc2-4e9a-81d0-d7e6b94772ae", "sighting--552a9410-1898-4cad-96b4-1b5bb0fb8513", "sighting--521a58e5-8642-48d7-b44b-dd6994bb9e2d", "sighting--14e602b0-8a1b-49e4-b97d-d600216b45f3", "sighting--60c4d1c0-b656-4fa4-889c-fa9ca6f61224", "sighting--002a0d37-9ceb-467f-b867-99f68a25e3b9", "sighting--df92263b-f8ad-49d1-af69-6cd9d4fc9055", "sighting--37ff0f7e-4977-4150-8aa7-f30fbb19c5a1", "sighting--3bb94644-39fc-4247-9111-bf372ab7da6b", "sighting--fb0d50d0-d833-45a0-997f-38bcfa61cc3e", "sighting--4f2f6ce6-17c3-4683-a9c1-ffd511a27499", "sighting--6281f24d-f8ff-4e7b-b2d6-119f114a5978", "sighting--d8dafe95-f347-4767-9bfe-e8a623f876bd", "sighting--f01691bb-7ce6-4fd8-b1bf-735324d45cc1", "sighting--6f03b1ef-6021-45de-a93d-665f11af5f0f", "sighting--bcc987d4-bd25-4b8c-99b6-95d2bf7da79b", "sighting--40c9093e-0e98-4b30-84e0-7fb16ed8bce6", "sighting--44a131b6-e282-4cfa-914e-2920f76812b4", "sighting--f8fc0499-cfe1-4e65-9b24-09f9fbf28ed9", "sighting--13902310-aa76-43c4-9d02-0595c1d9b548", "sighting--af4eede8-7e2b-4423-8c22-7548ad23cb81", "sighting--33fd08e9-b3b5-409d-ab51-e986e3b038e0", "sighting--fdb7288b-715f-45ba-b1f9-6bfc2509483d", "sighting--52344548-f6da-48ef-948e-589498ec414c", "sighting--8097a999-aa64-4a1e-b7ef-3cd11b8494c2", "sighting--d4f1a47a-4dd0-45cd-9210-82b68b409ded", "sighting--6a5552f8-3250-4206-9a65-c36636374a6b", "sighting--37f9c74c-3dcc-4077-9742-ab320a9e980f", "sighting--7d978788-02ee-47de-a113-0a7d123fadd2", "sighting--fbf7cce2-862c-4d1d-9256-61c8c1bff1b7", "sighting--ae52057e-e90f-4ef8-814f-d4ff3a8719f5", "sighting--f35247b4-598f-43b1-8890-b0d8be6bf62e", "sighting--3d707cd0-0bf0-42c9-9169-4e2fc10aaa11", "sighting--c1aadbce-8f40-4396-a9cd-6c9f6024eafe", "sighting--6e0335a8-305d-4b0a-99f1-0753da7b46bd", "sighting--6988bf85-fe64-4964-bbbf-f2095048cacd", "sighting--7c79ca8b-7dcf-44ba-a416-f58852829119", "sighting--17649fe7-81d8-46e1-b7bb-dc9422afd9e6", "sighting--0958bbad-df37-452f-8287-33901fd67269", "sighting--37b5723b-48c8-4533-af4f-bb3a961560d9", "sighting--c7ed4615-6f1e-4943-9504-bdfa106dfbd9", "sighting--4211cf86-a5bc-4658-b632-b4e20ae80138", "sighting--d06a4848-97d9-4fcc-b193-5166ded28756", "sighting--ee36823d-aa75-44c9-aa6c-4a5b76a8c8da", "sighting--0c9ac5f0-871b-4257-a2db-bc26c70cb15a", "sighting--df460cdd-fbc3-4a69-9c15-79235a0deaa8", "sighting--bf21a840-222d-49ee-918c-4713fbc38c69", "sighting--afea56a8-f577-4d9a-9a9e-84ec745265e8", "sighting--d85cd5bb-6a30-4c6f-b47e-3027bfa4d7e8", "sighting--54fde651-f657-4c32-9db6-546db702e370", "sighting--cb8543b8-3acb-4154-ba20-a476e543f056", "sighting--c8d03927-b740-42e5-aa66-3459d143a73c", "sighting--30ee30e6-017d-47cd-b522-d3fc7a3522a6", "sighting--a292810e-10f4-46a9-bdb5-3dc067c1a78c", "sighting--052d4e7a-1987-4b77-8f1c-6e05726aea5a", "sighting--348cc954-fb02-4a46-96e5-0ba84bf35340", "sighting--294989f4-3587-4274-9618-ee7167a580d4", "sighting--f2fb281e-8445-4d92-b40d-ee235c6ca414", "sighting--e03280b8-6c3c-430c-9d72-8c2c476f50f8", "sighting--d850f6f3-a604-42c2-8c54-2ee0f8eee6ac", "sighting--1e8ecdc2-18e6-4e2e-b594-5ed2ea4f20c5", "sighting--ed809214-dac7-4078-9b2e-e3f1988f6f69", "sighting--a34c5a52-ed0c-485e-b498-645e9898feec", "sighting--8f911d0b-dd6c-46be-aa51-2d494e85f855", "sighting--464cfea7-2fdf-48b6-9f36-e5123adc7caa", "sighting--6427b424-f1ec-4822-b10a-f1e4cc3996c1", "sighting--e65becea-07db-47cb-a3e0-017a964a7d99", "sighting--c64baa3f-6c1a-4070-9a12-7413fe37753a", "sighting--fdfce098-6582-4869-98e8-ff6c1edc6c70", "sighting--fe80e591-4496-435e-b3c3-23b91f2bc3a0", "sighting--7c512d75-d35c-4dd0-83d8-d3e60342f60e", "sighting--f7252657-b0ae-43e3-abf2-b8b84763e372", "sighting--3a47ffe4-ef08-461d-8662-4daa673be979", "sighting--647ccd8b-82e9-4641-a525-b2bd57b4058c", "sighting--0472f68f-05b8-4262-952a-412f7a1f1578", "sighting--de656184-d416-412e-8783-0fd3513a1d29", "sighting--42485a85-2242-4aff-82a4-3f30186f4e0c", "sighting--c89cd0fa-658f-4673-86a1-c1054aeadf1a", "sighting--7ec76921-f399-4f85-8637-33fa552b8204", "sighting--a6603eee-0355-4b9b-a6a8-43ad0e72f81e", "sighting--a67f4442-f579-4d8d-9143-be2b4cd71622", "sighting--50a4c912-1cd7-429e-ab0c-24f747f89c1c", "sighting--2380fa0d-2bc1-477f-b6ac-7eae6f0c1c9d", "sighting--f9270e95-4757-41a8-9014-8fc183a3b790", "sighting--05dceb8b-db96-4a18-a3db-f287081194b9", "sighting--2d9cc7ba-aeba-45ae-b29f-7a8ec2e1ac81", "sighting--d57a2dcc-180b-48b8-a378-e2703cd5dc98", "sighting--0862210d-ac97-4d64-b883-de027b52566b", "sighting--5ebdd49c-5f79-4f8b-9479-e8a778222a6b", "sighting--abd9f93b-df60-471e-9ab5-fb657ad7b7a0", "sighting--378653e1-7e59-4877-823f-4f559be5ce0d", "sighting--5558c19b-d8d9-49c9-ad59-9088992de3fa", "sighting--45a153fd-e411-4f4e-ac3a-ed5e9a1a98d7", "sighting--22327725-cc80-48bf-aded-561e91d6159f", "sighting--3f0503d6-3e9d-47bc-9108-0e31b5997e29", "sighting--1abfde4f-5352-412a-b4c4-33cb95fe6aaa", "sighting--cf2a0d5c-4781-4b8f-bfd1-e712d92a8368", "sighting--8dd23ac3-b4ff-45d6-bc2a-1c1e012cbd49", "sighting--ff258afc-3587-45f5-8e55-3b85d10af613", "sighting--3a79419e-9aad-4913-a98e-caa9bf4b8e10", "sighting--d0e930eb-1548-4fc1-bfcb-56d6cf0caa75", "sighting--970bc81f-6723-41d8-b9b2-190e2d277b21", "sighting--6892d505-60d5-4bd2-89e3-bb25b4ce8b4c", "sighting--117e76e8-9c8f-4a52-abfa-f77f1a16f7e6", "sighting--b3898810-d267-419b-a2f7-dd45848b9cee", "sighting--8353a72f-922a-4403-8add-4a261c21dfc2", "sighting--636f8229-b37d-4d43-af44-e495ae3b7528", "sighting--2a77d115-9816-4b89-8c40-5735527557eb", "sighting--5a7a55c4-4d41-4193-9abf-bf40d0f57e7a", "sighting--58d53dcf-4a72-44b5-8421-a4fa1856a880", "sighting--fe47a32f-9ab9-4ec9-a056-5eae467413a0", "sighting--3b04a45d-608f-4c77-b4b4-e73932b1a989", "sighting--218e7e3c-5aeb-4b87-91fc-abdba3f467b2", "sighting--e80d0919-fa6c-4b1e-9508-dc3bc0fa74f9", "sighting--91958053-b866-401c-ba06-7c763aa5b7e8", "sighting--38fa7fa1-14ac-4610-a444-943934dca714", "sighting--8976e00e-5d8a-4236-b6e3-cc21f693f235", "sighting--e60023c6-ef33-42a0-8eee-43950ab376ce", "sighting--3fa45edc-fa5c-473e-920b-ce0f9d6840ab", "sighting--7c544f8b-4128-428f-b1e1-177799ac98fb", "sighting--6449e2ba-a399-4b4f-a385-55b340d8c86f", "sighting--9ffd986f-6ab8-41b3-aaf3-a381fe352fbe", "sighting--76a5eb9f-5a34-40b5-96df-a0a7a03ba428", "sighting--84b0bbd0-bca8-4816-8664-a48b6f19de1e", "sighting--6763150b-87ad-4f9e-97c7-98cc38a05dc1", "sighting--16b7a00c-2ec4-4c50-adec-e3c7857edb31", "sighting--ff9b7d08-5fcd-463f-865d-1a49d06ea451", "sighting--a0a24fed-833e-4157-97cf-fa9267d19744", "sighting--b0a3b353-fb9e-40bd-863f-f16568f357a7", "sighting--89748594-1c8c-4a65-9079-7519046a985a", "sighting--681fb907-71ab-438b-b92e-1ebb1d6f4013", "sighting--53750293-487c-47be-be3d-e224aab34cb3", "sighting--448f464c-930f-44f0-bb14-56f9b2e64f90", "sighting--55222cd8-9810-41b4-87a8-a54f51cd50e4", "sighting--0888fb56-a640-470d-9982-b559f6a35648", "sighting--4c066ec1-8053-4c6c-bc3b-25e38010d1f0", "sighting--97cfbe73-eb74-4154-8335-4f0fee95038e", "sighting--3847f2f0-764a-4d4d-878e-0017f178ba54", "sighting--68b49c82-2291-4422-9a66-1e373bf6da03", "sighting--20c36c84-0e93-4502-8fbb-2a07e4b354b4", "sighting--c809d8f8-1dac-4990-9994-b189a88761c2", "sighting--a42c8f3b-615d-4d8d-aa6d-68924ebbbff1", "sighting--06463af9-a450-4e94-b48d-fbb0764263a9", "sighting--8bbafc1e-61d4-4230-bb7a-d6b313d12aaa", "sighting--46b64795-1c6f-4910-bae8-157cd203d665", "sighting--06dc05e5-4e62-4cc1-8f5e-061e0ac0e358", "sighting--9a551887-47ae-4b44-92b0-35c89b5cf81a", "sighting--3b51e11f-7ba7-4f1f-ba7f-8f671fb9ba45", "sighting--0df7c690-8494-4067-9073-5f34ccce68ce", "sighting--7333eeb8-06a3-4c21-9806-4641b2d84b34", "sighting--a052da71-d0ab-483b-a766-277c36508adc", "sighting--4b5506c6-d47e-4f0a-8425-da3a1da6d5cb", "sighting--e8083311-c073-4f15-99a6-d775a2541f5e", "sighting--cb165936-ede8-472a-870b-82afaa3a5df9", "sighting--06882f69-5007-4622-84c9-0ce6c38f13db", "sighting--9832141f-14dd-4dc4-947e-b1761af532ed", "sighting--bf432ae3-af1c-4233-bbe4-8bb862d81633", "sighting--fe4d0387-11f6-4ad7-9a2e-8dc8ae7bfd0b", "sighting--ed425d7a-151b-4865-8e9d-6f2d1bcff7ae", "sighting--36297a00-48c6-4997-b6bd-60570ee5456e", "sighting--852e28b4-9022-464d-bb37-16429617c5b3", "sighting--887da769-8614-43b3-b1f6-06931f362fe1", "sighting--cf260a11-c9ef-42a7-9e16-8c4dca2a1021", "sighting--c8bcf41a-3523-4891-9de3-d6c58679ea20", "sighting--aa20b6a8-b027-45ed-bc41-c8b647ca6624", "sighting--9b319ca8-4de1-495f-bf94-ac00ab3aac19", "sighting--073c6bad-380b-4b35-badb-f26006a78b6e", "sighting--cb8faad4-227c-44f1-a47e-f25610708f79", "sighting--719fd095-5584-4d57-ba9f-4d91653ddaeb", "sighting--64ebe854-a7fa-496c-a3b8-1a27da428958", "sighting--65dc4d88-e607-4f5b-bd8a-9238ea51c360", "sighting--7cf690c6-79d7-409b-836c-41d9e42a1da2", "sighting--64bce3ce-7a7e-4692-880d-2a5e5b59ef21", "sighting--edd77c8e-1872-43e6-8e8a-26ef7a3c5474", "sighting--58050dbc-f1c1-41e1-bf1d-24c885928c8a", "sighting--a657f80c-be3f-40ec-82e6-0bef2e9cc60b", "sighting--c88b6efb-64e9-4936-a708-102aa84d4eef", "sighting--bf50333e-d547-4fc4-9500-e73565355c8c", "sighting--4129373a-2cf9-4e01-b80f-1140034951e6", "sighting--65b2cd07-4e6b-4622-98cb-21481e6ee0ef", "sighting--8df8826e-e00a-48fc-ab21-e6a448f299bf", "sighting--95e5672a-88d1-4a9f-884e-645cc2df3140", "sighting--7186ad6c-e45f-4dad-b691-da4600746a1e", "sighting--09665447-4037-41b8-97e8-931290e94212", "sighting--9400b835-1307-45cc-ac0d-068b907ac109", "sighting--27b14116-c55f-467c-8d39-1b0c271d1a42", "sighting--73ed281b-4179-41c4-b623-287f22cb9842", "sighting--e4310526-1412-4c87-be93-d95dbb80be64", "sighting--85744522-05cc-43e4-a520-c5ec75d469e9", "sighting--28853ffb-b64e-4939-a0ce-091c00675865", "sighting--facc2ed3-ed80-44ad-8112-2ce693587b28", "sighting--6c467f8c-d6c5-4c93-b311-82092d1da587", "sighting--ea33efae-8d5f-42d7-94d1-7d29319935d7", "sighting--b0158d3a-8c58-4051-a8be-3bab9a532150", "sighting--0f3a4d5a-5981-483c-98f7-990fab0ece83", "sighting--863f1d14-e12d-4e36-88c1-ac86288c30cd", "sighting--11c0ec98-28a8-4b33-8971-4c4ccb8d016a", "sighting--db8c846d-4488-459f-9541-8268d1a21910", "sighting--3297d067-5967-4ec1-93c0-0ae799da07d4", "sighting--e64a1027-e600-4d32-a163-9e0267ee5ef9", "sighting--7d4332bd-6339-4c43-bdd6-aeaa46daa290", "sighting--05807cdd-9a37-48b3-9367-2df1ea6038bc", "sighting--e78a80ed-872b-448d-8565-062158f09d55", "sighting--5f51ef96-2360-49a8-99a6-d8af419ad149", "sighting--b4c4c5bd-bcf6-4c1f-97fb-ed93a83f546f", "sighting--2e7e3489-5ae9-42c0-b7c6-ab3712c5675b", "sighting--b0726ffc-fa83-4407-95a5-8df3e7e0b256", "sighting--68ce6a84-e6cd-4148-8b93-3574d8ecdb16", "sighting--48b152eb-6cf1-4e82-97dc-fb1bc03c4cde", "sighting--cccad1c4-81cb-43df-b05f-e81242042578", "sighting--8e24f9c3-ba3f-43f5-a849-2da40cf99a43", "sighting--38396461-bd1d-408c-84f6-67e94a05672f", "sighting--6cea495e-ccfe-45df-b83e-ce44b5b5499a", "sighting--9e52c81d-0a5b-4824-88c1-7fdd40ed3345", "sighting--6460216b-63d9-430a-a37c-526296a17a15", "sighting--cb6b66ee-4368-4caa-8c7d-716af8fe959b", "sighting--3ba07595-94a4-4dc6-a970-bef56356ce8a", "sighting--cf2c63b5-6119-4e2f-a4d9-ca6c032cc9f1", "sighting--0da38de6-b597-411f-91d1-c1762d7567f1", "sighting--c02ba4b8-79fd-4a84-9b64-e08d6ef7ca21", "sighting--b881bf6d-e556-42ef-b8fe-5e93f12d994f", "sighting--2a6626ab-1c2e-455f-9933-31e22ea525ae", "sighting--c248e421-3919-478d-8442-a9dc927eb50a", "sighting--19daba72-0edc-48a1-95e1-3ec4f5ad58ee", "sighting--6665a0bd-3a23-4276-b766-4f473668e124", "sighting--baa00a28-41d2-4782-ada8-e95f8f7e9f5d", "sighting--7e9566c9-7d32-4d78-beb0-733417ff0948", "sighting--369d94d8-f868-4748-8f91-fcc72639a224", "sighting--84a64d91-1d21-4fd3-9b8b-62f56c1a0393", "sighting--57977fbd-0eb4-4f2d-9fa7-42132c438ad5", "sighting--8ddfa1af-d32f-4075-9c24-5c466dc397c7", "sighting--22ba5e93-54b1-4df0-92f9-29974fce4037", "sighting--490cb9ec-07d2-4530-8154-2dcc1ddeee97", "sighting--9f9c6b7c-51f0-4bd8-a1ab-eb7bb899fa35", "sighting--a8dfe9b9-ee30-4f3a-b452-5335e8b36722", "sighting--5368bdfd-f28a-48f8-9230-d605c921355e", "sighting--78defc4c-deaf-4ba7-96e6-a88e85e096d5", "sighting--bac19719-cd72-486c-96e4-421a7c4ddf28", "sighting--10db07e6-4cdd-47d7-a466-dcded943db9d", "sighting--cc5e0228-9456-4c20-b04f-96c3237409fb", "sighting--61afb10f-1be3-419d-b131-8c9e3d27b086", "sighting--0d8bd4e1-21c1-4d30-ae6a-9779f49e83a8", "sighting--98849af7-4297-47b2-b72f-1b58dc969493", "sighting--46bc5c57-1cd2-4605-850f-86ec2d5a70ec", "sighting--4e51a23c-c0d7-4521-82e2-5d1c3e3181e5", "sighting--cec35b06-e619-4ca1-a2db-d239bbf99312", "sighting--bd3c688f-5544-41a6-b4e7-064e952a06c7", "sighting--47803261-5781-4635-8a77-d038a25d3add", "sighting--6b279746-248c-45a5-844e-1a8c2de1af0b", "sighting--9c307352-fdc7-49dc-9335-a77bd55028d0", "sighting--2c0128cd-aa5a-4e6b-ae06-cb46dc1847e6", "sighting--93ee456d-438c-476b-8e55-e20e836fb09d", "sighting--1c8d6125-f281-41e3-8768-c16161453fa8", "sighting--abf3d6e2-118d-4921-90e1-4c561537a204", "sighting--92fe3f90-9683-4ad0-9f32-ab8cc126650d", "sighting--63d63d02-1094-4b44-86eb-4be8ba254a50", "sighting--725fa173-56d2-4b97-945b-a6ec0e8fc1fd", "sighting--67093625-09a3-4a67-81ec-0d71403f89dc", "sighting--87ad8718-7f81-448a-908f-9c07284ccba2", "sighting--9938f20a-80c7-4d5f-a341-7755dca468c5", "sighting--949877df-7787-4db3-8f5b-d0e9a6aaa4c2", "sighting--bba7dd51-0e0c-48c5-afc2-69fd43e5706d", "sighting--dd4037e4-3a74-47bd-9b90-2cf77360d602", "sighting--ff625823-48db-4eb5-b4dc-fb44e478cd61", "sighting--ff150e2d-f13b-4a67-bf17-39b10bae3b3d", "sighting--575964fb-3d93-45c5-a802-b7929c20115a", "sighting--d8ffdcce-6fa5-40e8-bf8c-609127115ef9", "sighting--f2f47cd6-506b-4932-89f6-b990d81ef251", "sighting--a0b5ea81-72ef-46be-a2f7-a54d26713674", "sighting--b2d15661-417f-4a6a-a5d4-8cac99b33aee", "sighting--453a5b75-04dd-4b61-8bb5-2bd997f32f49", "sighting--70e982ab-ca5e-4b92-9c18-907ca0220f9e", "sighting--771b2ecb-9951-45dd-a5a6-bdd18d42868c", "sighting--77968db0-e0a0-49cd-8e9e-839ac3719a9f", "sighting--774e495d-9599-4ac3-a71e-9f2de12ec3b8", "sighting--6e648e0c-11d2-4088-b767-bb8073831b29", "sighting--659bbef1-29ab-4b6f-90d3-6d291093b8ca", "sighting--5368968e-0e6c-4651-bfcb-e4acfdc9d0ff", "sighting--f288d823-e9cd-4355-be6e-d20df6c4aeb9", "sighting--998d6d9c-4d57-45c3-852e-109cdfefb1cb", "sighting--e39f253b-4611-4e56-a71e-231db457b447", "sighting--13702821-fc52-4e53-aa7a-0ed8da4c8cb5", "sighting--abba4e42-b75a-40c1-8b00-884c10db9206", "sighting--5cf7f294-462e-4655-b52f-c0f0011a84a0", "sighting--ad45e451-18f2-445d-88e4-f5055a36e57e", "sighting--f0b6504e-9029-4dd4-97df-978985765bd4", "sighting--0eee0d3e-0eed-4c98-98a9-bf56a600f375", "sighting--12ab11b5-ebcf-45d7-abe9-2bd16e95e61a", "sighting--e7213ca7-9e74-4e64-aeba-26f81b250836", "sighting--29e842b8-59d3-4e91-8010-3080c39b72f7", "sighting--aa317e72-048f-45eb-8aba-2d6fce476d3b", "sighting--a37bc7ee-bf57-4917-b80f-52c144ecedc1", "sighting--9be56947-8691-4cba-ab82-482b6e65aed4", "sighting--a1405364-bc3c-4cc1-8611-d1cce180e39e", "sighting--f8fa477a-603f-42bb-8413-d24abeaf67e0", "sighting--a43a9adf-1850-4baf-a00d-9dd69235c5d8", "sighting--b219d6e5-c7fa-4643-848c-3994d4d4dd53", "sighting--1eab1eca-e730-4c73-9497-fe55435dc87b", "sighting--7821e925-be1a-4ff8-9905-edee17fb6117", "sighting--c7f71db3-7cfd-4a8a-a9d9-55d93ea4fcc2", "sighting--20f896e9-dc2a-4115-9e53-263d9a46aa18", "sighting--c69051fe-324f-4c4a-9cce-6ec98bca889f", "sighting--36b17d95-29a5-4157-8a2b-6a0e6a80758f", "sighting--cd8f2ac6-6885-48d3-89f9-57f42163aaa9", "sighting--371e86ee-6df5-467a-b1c0-b5b7f85aea81", "sighting--ab470ad2-fd30-44a8-b0c2-1c376b286b91", "sighting--870dd662-2bbc-49fb-8339-d20faed1eb9f", "sighting--189f0aad-cb0a-4b92-b6a9-bb3262395618", "sighting--71dd8060-1ed9-406d-96f0-a3e90a2268b4", "sighting--9e6f8f21-076e-43f3-9162-c795caa7dc58", "sighting--a39893ab-098f-4ca3-ae3a-58d553667d68", "sighting--8a177d5c-6872-411c-9949-e271680e6abf", "sighting--379dc6ba-e03d-43c4-bac4-3aa6e23b3fd8", "sighting--27425328-7dae-439e-bebb-43d3839d8ba3", "sighting--08834e0a-b83e-4281-9a2d-5d0b655d6982", "sighting--9085cb31-b7b5-4544-b320-37869a45bd66", "sighting--84c3d48c-78dc-4dc9-a0a4-4aa0f57d772c", "sighting--468533da-84b1-4bad-9b19-d7ea05047bab", "sighting--4c09aece-2743-42c0-8da1-5c168554cbf8", "sighting--4043546e-820b-4222-a706-e303d2165759", "sighting--ab57ea2b-c749-4f92-8f0e-0c8dc6a73e01", "sighting--ed6f74eb-a66a-445d-89bf-e038396ecfca", "sighting--4a854192-dd43-4a85-a211-d2da10b7f2fb", "sighting--0d16b300-6988-4c0d-9186-e7f0bee58a0f", "sighting--6c827d2a-4f76-405a-811c-d40f8db79bdb", "sighting--4bfb79b1-818d-4dc1-a20c-32b52100f5b3", "sighting--1f3f6809-e4b7-4e3f-8f98-014073c94d90", "sighting--4e7dc448-e87f-425d-95eb-977879a033b6", "sighting--82469119-6090-421d-b232-f1dc69d4fb6b", "sighting--ea215141-cbb0-4602-8a53-40d9b1e15be6", "sighting--e269827d-3909-4268-a6e6-bb2b7c00b254", "sighting--6e499752-0971-4cc9-990a-abc912988cd8", "sighting--45de32fd-178a-40d6-9d58-c8d793d90506", "sighting--e5800d65-5f27-4c65-9f18-c4c898c66f1d", "sighting--267c871d-73c3-4b1a-873b-ee00c23e4891", "sighting--e1a216b8-2af9-4468-8f35-b4d37498ea7b", "sighting--9de8c8c2-34c2-4f6d-829a-a7dda8d291cf", "sighting--b0c848dc-acf9-4f0c-897e-bf107ed639c7", "sighting--f38c37e7-0653-4292-9d3e-70b376013e18", "sighting--97f3b944-97c5-42a5-a835-2e46ca452e30", "sighting--7ffda905-5611-4387-b699-2ab4076ffb39", "sighting--4811ca7e-63ac-40f4-9d12-2c39a1696cb5", "sighting--845d7759-b3fa-4560-bc7e-88c6dbfd742d", "sighting--ab0fbf68-f5f3-44ca-be87-b52dda59728a", "sighting--a9ecf37c-aaaa-4bb5-80a5-5cb9f6afba5e", "sighting--5965a324-573d-480b-83f4-155e55048d8b", "sighting--abb2e5a8-a4bc-489c-b815-43a82afd2aa8", "sighting--2e5c527f-58ab-4bf8-9f46-30d7e00d599d", "sighting--6b535df7-cf77-46cd-84f6-cc46aa12be15", "sighting--fe873f4a-94fc-44ec-ab28-5e8fe728a393", "sighting--85972884-ac47-45d3-8a6e-1c293a9cc067", "sighting--3d5c4478-b028-4b24-905f-9b1b67b7c95f", "sighting--ad02bcc9-241b-4ec1-afe7-23284e9e07b9", "sighting--7b48b1de-8ab5-44b9-ae2b-7bcc9e9e617d", "sighting--ae71fe40-ddec-4dc4-b366-6a71a905658b", "sighting--b9f2c728-839a-44fe-84b3-114eebd9f001", "sighting--277e29a4-47ed-4670-a9c0-645b5e04d559", "sighting--5183346b-cf15-4542-9c86-392e413a30f5", "sighting--c6cef4b0-36cc-43f9-833a-eab8f7ce9a49", "sighting--d370a131-4e5b-45f8-963a-478fa6cb1d7b", "sighting--c98bcf92-3147-4f28-9cbf-aa4b9c728bf6", "sighting--22de31f4-f74f-471f-97a2-62f17ad35ce3", "sighting--5b5d063a-9087-4835-9620-ba66f2083560", "sighting--7bf12a64-6a87-40db-9c4e-b5b016301bde", "sighting--68119216-36b1-4599-910b-e2913dce8fab", "sighting--eacb5997-e870-4b3a-b2d5-350fd84ae824", "sighting--07816de8-7b4b-415a-96aa-54ce1a0d9707", "sighting--2f83d870-3324-4149-937a-94d53084cca6", "sighting--87864cfc-d724-4bae-b992-38780fed1f43", "sighting--e3502faa-619c-4ff8-b169-29622b9b2735", "sighting--9ef84ad9-d103-49c3-8d96-dec833959ce2", "sighting--34947164-51ec-4f00-ba9d-6347d9eff2fd", "sighting--c54cd25f-86b8-4572-92fb-152af00be3ca", "sighting--06bb2e76-83d8-45d8-8b1c-473ffeccb561", "sighting--2921605e-1b20-418a-adfc-f14a5b16be96", "sighting--f411b4ef-c730-4496-9755-675a4cab7da0", "sighting--8c7a0ccb-f1d4-4b3f-a3e3-f28bc41e9c93", "sighting--90a34084-037a-40d5-a699-6be48ad6ae54", "sighting--e97630c7-61e2-41e1-a46d-0a3e2cd62bc7", "sighting--9d490541-5b79-4aea-8ab6-c78c33ab6cd2", "sighting--a09ab00c-91a9-4efb-ac97-1ba7d195b251", "sighting--537f7044-d35a-4bda-a78d-e2bc8aa2d1e5", "sighting--2adbb303-0d32-4815-8cb7-638d3786d78d", "sighting--e6ddc1ce-d54c-444c-8897-20afa51b14be", "sighting--70cf16cf-8d1f-4e54-9ad2-0548444c5fc3", "sighting--2cf3e443-d057-4b0e-a04d-00425d705a67", "sighting--e6365efc-1fae-4a3a-ab2e-62a588561aa5", "sighting--f0a147e9-cc3a-4a8f-a04d-00a2421f4f11", "sighting--d4f30993-733c-4e87-b2a8-3c1754aea745", "sighting--ccf8868e-b90b-450d-b1ad-3388c3f2efc1", "sighting--3404c163-e8e4-4062-b9f3-ffecd33b9f5a", "sighting--8961865c-30c7-4800-ab4b-7878d22bb067", "sighting--71854c14-bc47-451d-ab3a-d4e816200edd", "sighting--f36714fd-6b55-4b86-9808-e0bb17c091f8", "sighting--c1797f06-7e99-42c4-9134-ead9d0927559", "sighting--13f5c2ee-d7a6-4fe8-b14c-4494b480f89e", "sighting--bf4b0c6d-52dd-4462-9b3d-bb0d5c06eb4f", "sighting--c4a224d0-e705-42f4-809a-1d4c0dfae694", "sighting--1693d26e-2375-47d9-82bb-20d202824c0d", "sighting--5915d2c6-518c-4e11-8f3c-5495cf599773", "sighting--11d9b5aa-8d56-477d-a5f9-207fc356bf5d", "sighting--9c87d9dd-778a-420d-9157-406759527de4", "sighting--f2913204-0077-4961-aafb-8b3266668ced", "sighting--917d5868-b6f0-4a95-8d97-f21f88932243", "sighting--4943261e-3ec4-4243-9bf7-18d630915512", "sighting--9baebaf6-7a03-4b54-86dc-59dc5a09b13d", "sighting--a10256c0-3bfc-4f7f-bc0d-332359998a5b", "sighting--261a8bcc-ca66-42b6-8666-5839dd0aa983", "sighting--4a185854-9cd0-452d-84a1-45a7671e3e19", "sighting--e2df1172-03d7-4923-a837-c410e042b044", "sighting--ba150d60-cf3d-4d50-a4eb-2cafa16fc8a1", "sighting--1daca797-8f93-4370-a7cb-6347707e81d4", "sighting--ed24208b-a340-4ac5-8595-6f57ee14912c", "sighting--6cfd71f3-6e09-4ee9-9dd0-4abe2ed36829", "sighting--0d60d708-440c-487b-a1fb-78498d225733", "sighting--ee4fc278-b39a-493a-ba97-7b7125572328", "sighting--d0558219-6c6d-4a39-b084-877ba19fe3dd", "sighting--b4581816-7e8b-4ab4-aeaf-5e09d0ec70c3", "sighting--72e404e8-c664-4679-b2c9-a9e8ac4e449d", "sighting--8969ab0b-5346-4323-8a45-803e40f51a3d", "sighting--56382fd3-5494-4135-b4fb-732430163293", "sighting--6a10497d-f6b8-49b7-a1b0-a061fe81f828", "sighting--732bf53b-d1dc-41bf-9508-2850b788de15", "sighting--bc79882e-7551-4e74-b052-91fe585b07c9", "sighting--1adf263c-d8df-4841-817d-300e8e65db41", "sighting--7f9e7b06-6041-4ccf-8074-37c012a75c76", "sighting--43a11fc3-7e50-4aeb-94df-20d5ce8bc50f", "sighting--81567f4a-0cb9-4e29-9300-e973b6b12330", "sighting--2735b936-b571-4971-8bc9-13a9b1cd5c5d", "sighting--aa36770f-39b6-453a-9b90-652174bb6244", "sighting--5b6f48e7-1d89-4ffb-a13b-447572d034eb", "sighting--cd6717ce-4c95-49ba-ab00-80d1c8409b24", "sighting--9b2d4261-a01c-47bf-ae16-497b91356747", "sighting--6ec0fe0f-e76c-4585-b18a-fa9dadc9a1f1", "sighting--1abfbe6b-b917-4979-932b-d4f4f19d1115", "sighting--764f8426-b930-4d47-ac0d-20a680b1f72b", "sighting--008d9f72-98c8-4db4-b9a3-adc2e17a6357", "sighting--921b33a4-6ba8-49ff-b9b5-fc1f50711763", "sighting--4d53e39d-de8d-4086-9125-d1e843dce867", "sighting--dc3dd1c0-7be2-464c-88b1-f3cbc27dd9a6", "sighting--8d1bc7c6-49b2-427b-9cbe-3faf73a94691", "sighting--fbca93ba-7566-4c43-95a5-cfc07308527e", "sighting--cdda283e-cfdf-4949-9eff-897da17cb366", "sighting--deb832c8-678b-4afa-9af7-928968cde296", "sighting--31223ccc-de04-42e8-bada-e75619d547b4", "sighting--1d4a568e-affa-411f-b95d-f345f1650b90", "sighting--19faaaf9-7dc5-4eb2-bbef-f1e86e40aef8", "sighting--5f5e928d-8f44-4180-945e-02e4152c58fd", "sighting--f8b1ea76-3d6e-453e-adaa-f3af019ee02c", "sighting--93e3ebba-083b-4272-a732-9092ef8b6686", "sighting--c617c0c9-00d8-48eb-a0c0-8d91ae2dad88", "sighting--08d7f2d2-a83f-4061-a72a-ff36d2823570", "sighting--e7e8a9d4-65fa-459f-be84-cb5b51aa569c", "sighting--0ac11e9d-a7d3-4bcf-8ed0-797e3192bb83", "sighting--7fd8801a-476a-42ab-9f4a-56efb5ca8b14", "sighting--d047f80a-d91b-4df3-b1d7-79ff8cfdf77d", "sighting--903f618e-41e7-4660-b344-47d22ca12993", "sighting--4490f283-2708-40ec-aad7-78c995a942b9", "sighting--9ed5112b-4f5a-4240-b08d-61179422d2c9", "sighting--1e6a433a-d592-4ec9-9da8-685c1601170c", "sighting--0838be89-7b1a-401c-8af6-94af25db3937", "sighting--54ca0103-eadd-4ab1-9130-a683bc0eaa82", "sighting--910e97ec-d65d-4117-a95b-dbd8269d5f02", "sighting--44ec340b-bf45-479d-92e4-e6c4bd27c00c", "sighting--44ff22a0-bc72-44de-ae01-793d2acfa1c0", "sighting--5e371056-8b22-48d1-b43f-e9ef8d18e0ad", "sighting--fec462cc-b9d0-4dbc-a9f5-fb8bbe20acad", "sighting--23a54aac-3b6b-4e0a-9d50-62f3c17ab659", "sighting--1f9174c2-53cc-4498-a92c-77713a44514b", "sighting--e90a3394-c90f-4e2a-9a92-87ebdc8c5198", "sighting--9f1aa20a-e152-40e7-abad-2e0e14155b87", "sighting--c5095e79-c610-4937-b6be-df3a2ed22557", "sighting--4d66ad43-1af1-4692-ab59-62e4b62c47cf", "sighting--14eb41b7-230d-435b-9d1c-0acb3ece4f49", "sighting--f5bab285-71cb-4a0f-8b02-3e33f8ff5295", "sighting--cf1e0959-38c5-46c4-bb38-dcd24ed57f61", "sighting--932f8c5e-a026-464a-9842-860bda77819b", "sighting--001fb01c-913a-4792-a472-b5e2fd065d8d", "sighting--79109e50-8260-49a2-a044-76b1f3f7f4bf", "sighting--4c806e95-d1fa-4bfd-a979-d33c0bbd5df7", "sighting--df0a2383-8afc-41b5-9c36-ed57e8d2838a", "sighting--af4ebf64-eae1-4eee-8c70-49748c327457", "sighting--6ae140f7-91f5-46b6-8a0c-ed30d5c39aa4", "sighting--99b88859-665f-4a4e-add7-c62f31e36803", "sighting--8042d345-6f6c-4a4e-887e-2a62066d4e8c", "sighting--89892bc3-1ba6-4dff-b377-12ed6f2d301f", "sighting--9438374d-da5a-43af-82ac-f37324e4c0d1", "sighting--c606c4a9-e477-4119-93c9-fa61766e3984", "sighting--7cf68819-fc51-4a3d-b642-1483467678e8", "sighting--43a48ac2-a067-43fd-9828-597183811bef", "sighting--3f94ef86-e8f3-4b19-a51d-6d13ffe0d42a", "sighting--67d6eca5-ee94-4b02-9dcc-2e6c6264188f", "sighting--fe0d6920-503a-4ab5-bf37-4cb384f96433", "sighting--c3242614-a0b1-4ba5-a082-0de712c93b98", "sighting--cd7abf93-df9c-4143-a695-d67df4edb505", "sighting--97fedc9f-2fe7-447d-8440-e55bfbde72c9", "sighting--5fec42bd-0d87-4410-8eea-d13926eb85e7", "sighting--18ec385f-760f-4f09-a35d-43aee2b144c9", "sighting--1eee9bfc-0367-4af4-abf8-4611e1333295", "sighting--bec8574f-1029-40a6-968a-438b7133b070", "sighting--b5ca64e8-e7c6-48c3-b699-584270876215", "sighting--0e567d19-a31a-4eda-af27-de0486e8dcbc", "sighting--4d40c3b6-19e9-40b4-a6c8-739c5e8edf6a", "sighting--e3941a81-65b0-4caa-bc5a-ab62fb46ec8e", "sighting--0db131e6-03e9-475c-9bd9-f96e3145a933", "sighting--258950bc-2505-40ce-9213-7b879510369b", "sighting--68690f2e-15aa-4af1-b6aa-297579816c9b", "sighting--0db6fbc7-b62f-495c-ba1a-d7d1a2fa0ddc", "sighting--aeb8d022-cf49-45d9-a752-7a8b30c01ee6", "sighting--0d427797-2cc5-4756-b46f-b09f2b5aa89b", "sighting--179deefd-627a-41e4-9aab-2caa174b67b0", "sighting--5c17ffab-d796-474f-8975-a7039f6aa88b", "sighting--619de044-46b0-4f9d-8d21-93086a884cd9", "sighting--249b9f1d-cd8e-4689-afe7-b2054781b70b", "sighting--2d13ae5d-7465-4d94-b8d0-0a303124cbed", "sighting--e25e4517-bdf7-41e8-8164-4f05a2d5faa6", "sighting--68c0f041-4ea0-45a0-aad9-0dfae0317b20", "sighting--e55939fc-c0d7-46ec-b321-cea34eb61631", "sighting--5e43c6e4-6e9b-4af9-81f5-19b94071b10d", "sighting--eb29e04d-8c87-4d77-90e1-a9f433162e07", "sighting--ea2c338e-c75a-4e5c-b5d3-853cbcbfec50", "sighting--bd50376a-4a63-4138-8745-e3d561e8771c", "sighting--5599b8d4-5e68-41a1-aeec-788ddcaa7f12", "sighting--dbd7ed16-d877-4d94-81e6-98e071e28979", "sighting--93998219-0bb2-4370-85d9-06aa9a3b56a1", "sighting--2fa0246b-2f42-498a-a639-08a13c8f0f8f", "sighting--00ca1b06-6d3f-4c09-95a0-b89af3550a35", "sighting--d490047d-38c2-4ed9-9fe8-26ca6c65c70d", "sighting--6b01a791-db33-4682-8fcb-d293c74607b7", "sighting--bb213cb9-38c3-4635-828d-0ebbf3015a2a", "sighting--6a81e852-7167-4eb9-bacc-6c451c9f343a", "sighting--9d17f130-0308-4229-8928-4f924980548f", "sighting--24b093c6-0328-4221-8b3a-d488061cd38f", "sighting--b749532b-be2b-45de-ba6c-38059d25fbc8", "sighting--d1489ffe-47bb-415f-bfcd-fc908b80ebab", "sighting--c0c7ec28-5f2b-4401-aea1-0efb6eef3fe2", "sighting--2714a39d-17bb-4006-b8e8-930ee4da9fd9", "sighting--da6cf593-96dd-44b8-8418-c621231d15eb", "sighting--56c7c54a-45c0-4ebd-b604-135528952b01", "sighting--6770c019-f6e4-4707-89d4-08435491e500", "sighting--d716b0f3-a11c-46bd-9e68-76652876d441", "sighting--348453d2-7c89-46a5-97ec-057c5371566e", "sighting--82b2166e-8208-4735-87e8-a6916c45f18b", "sighting--d4d8058e-6a74-4d21-bcea-67dfbd38035e", "sighting--ec19f736-439e-4c4b-b9ea-4861f120654f", "sighting--4da85b24-0205-4eed-8cef-c3d3c30d7dcb", "sighting--e4831c24-1666-4c85-942a-50d8c547e9d0", "sighting--29a469ff-ce57-48bf-8d19-da637252ccad", "sighting--7e44d3c6-19f2-4d8e-b946-37bac80f5716", "sighting--a0aab490-b2fd-4e6c-8c61-841d6067cc06", "sighting--ce6c4060-2947-4c67-b680-24018c1ed703", "sighting--657b73ad-0daf-42c0-a3bf-82b7565077ca", "sighting--5dc7b82e-d46c-48ac-b706-c0e33411bc08", "sighting--c4828c79-ede1-4275-88d9-eace852c219a", "sighting--03e4b255-73ce-4a4d-98fc-a643f163920b", "sighting--c300bc28-df5b-4a29-b2e7-6e1b93f73fe4", "sighting--9b2091da-88ab-450f-9c5d-b6978bd26920", "sighting--b5c4faf9-d098-4a53-be05-a3763c611f5b", "sighting--14c302fe-6422-4cba-91e0-25ab425404f3", "sighting--e7eafcde-1dd6-43f8-b4a7-3b5924c1581b", "sighting--ee4303c0-384d-4ce2-bb0a-c7026aa30265", "sighting--4cccca95-eea6-42b0-bde0-d10ac0837fe8", "sighting--834875ba-3207-46fe-843b-ffae48732c4a", "sighting--1f51762b-aecf-4f02-a7b8-09299b9aa63b", "sighting--87acd335-2c89-4b14-8033-4ca3a3a9e48f", "sighting--871c4047-881c-453b-bec4-f4ccb2ffc73e", "sighting--54b3eabc-9ddd-43cf-98c6-c8cfe9b2d77b", "sighting--ca6a2705-c9e3-4598-9a09-c5c9cb9fc159", "sighting--bde0105d-dbf2-424d-a35a-5e9a24a01ad2", "sighting--4855d526-c850-4962-a604-add62f7db7e3", "sighting--130b59ed-8041-449c-bf37-d3e74abcbce9", "sighting--3a4cc3cd-48b0-4994-945c-3f611ca15a58", "sighting--032ea07f-45b6-4691-964c-16830be9d429", "sighting--ec5f2649-2729-4c84-8b24-c6a3a3cca0a9", "sighting--41cfeaf4-cd43-4507-955d-ce594e3ac52a", "sighting--068d4956-94ae-4f3b-8a83-5acecae82800", "sighting--fed0a2a3-b3c0-4948-a654-05c9d0ca791e", "sighting--5ff67427-7bd4-457c-888b-ec76514d4006", "sighting--035f6d6e-214c-4c18-ac05-3a494919c164", "sighting--3b740c90-3e76-41e6-8c88-b1c2caebdd3a", "sighting--08c56861-36a0-4da2-8c3f-7c19bfc13709", "sighting--fd8e4e77-e4bb-4c83-a772-8679356cd267", "sighting--640ac69d-4a1e-4097-9059-507bea58dfdb", "sighting--97aa6645-028c-475e-9b06-8b063f35f4b3", "sighting--6dbda463-cb61-4cbf-90f3-52eee5ea1263", "sighting--fe5f05ff-146b-4277-921e-eeeea68a5df0", "sighting--15d1167f-d101-447a-b36d-1f635e54a38c", "sighting--00386d91-7661-4a14-9eb7-6e48cc525ac3", "sighting--aec0241e-5b9f-4747-be40-118543e188b3", "sighting--d024d860-51cd-4ca0-80fb-5b4e474f6da5", "sighting--4e2e5980-386a-4e0a-b12a-4208b40a0c5d", "sighting--27124df2-b02f-42f2-86d4-024ffd980842", "sighting--85e552b4-ee6d-4b70-824e-50ae538e3a52", "sighting--d8b41253-ddc1-4c52-a531-74fc342bf412", "sighting--564b25a5-73a7-4b4b-90dd-c7cc0669ce58", "sighting--a65701ee-d7d5-4973-8eb9-1385e26e151a", "sighting--5acf9dc6-5203-4513-b9a0-3f268471d5bb", "sighting--251d0c8c-3c3e-4ee4-9f8a-9c9bf74b9a2e", "sighting--9d0ed680-e620-4996-bbb0-bafc3ad5bf26", "sighting--c892121f-c2d3-47bb-bb30-ccc91dcb5971", "sighting--6fa70790-95af-4b1e-a198-6b0b76486638", "sighting--17dcb3af-e22e-40be-9fe3-cb5be3db3f46", "sighting--499d259f-ca28-4279-826e-8590e13f1baa", "sighting--09c02428-cb2d-4e06-b002-585a36ba015c", "sighting--0ae6398c-b0bb-40c0-86f0-953d1feb36d5", "sighting--15ab8e23-adba-494b-a583-34cf6e28c5ee", "sighting--b7e3454b-d9a0-4303-b2c6-ace37829a6c8", "sighting--0f9a938d-62ea-4431-8b43-fa61347ab98a", "sighting--d320bfbb-3734-48e4-9c98-becadf4281f6", "sighting--cee79bac-9d28-4636-8b5d-abd24e9175fd", "sighting--e1e355df-cf97-492d-b5a2-5c764d48190c", "sighting--f61876db-4a6f-42f5-952d-1c0969547564", "sighting--1a87391e-8748-4ee6-bf50-9754bd5539bb", "sighting--8f32d554-7413-428a-b5a1-e5de561a80ba", "sighting--b601ba0c-adc5-46f5-8ac3-40cf9c70b904", "sighting--4cc6c62c-5bd5-49d1-be0f-a9bbc9bed10a", "sighting--59cb43a6-a60a-43ea-b547-f787c398e080", "sighting--c37b483d-b5f8-4250-bc75-6a20a17c1869", "sighting--acdd9394-ee9c-4a6d-a124-7907928e251d", "sighting--a61ee6c5-bcb4-412b-b82c-dfe3f6eb5788", "sighting--9f2cdac3-3ba1-45aa-93b4-7dc7510a1448", "sighting--e66dbbe2-92b6-4aae-b77c-cfeb5a57bc89", "sighting--c8efda5e-76ea-48e1-878c-4549a66644b5", "sighting--fb05d065-2bd8-445f-adad-0c11a5a701f4", "sighting--b128a632-1701-4fe8-b435-b928dd88357f", "sighting--5626d34d-84cc-4aad-a2ac-8bd9dbb7494f", "sighting--d937ed83-c5ef-4c2d-9a30-f8da9f2576e3", "sighting--ee1d5142-f72a-49f5-a672-a6f5e0819e72", "sighting--b0091b93-7dd6-4653-b340-27fe467668d0", "sighting--25714cb9-c5ef-4d1d-90a6-1421a3b584af", "sighting--d02a2926-0887-4032-9e1e-e22a2a8975d7", "sighting--38d65bf7-ed84-48e2-ad38-70b25e32eef5", "sighting--06374af1-c73d-4f4f-8165-66649faa49e8", "sighting--a9d77b6f-0fa4-4021-9323-052fbc9f04c7", "sighting--49ea724c-b122-4f80-af34-ceb70f46b233", "sighting--3fcb8111-9921-42fa-9b01-b533884847b5", "sighting--9e4c745d-5cd3-4189-a4e7-3264431bf9df", "sighting--64284f26-c1a0-4502-a10f-7240a2549904", "sighting--b009ccdb-bfa8-488e-a8bc-076e479a0cbb", "sighting--b851a07f-a8c6-4f3f-860d-bcc4be96265a", "sighting--ec8488d9-d3a0-4758-9fac-42407aebb969", "sighting--353b2c58-ae15-40c0-a031-6418b715e2e5", "sighting--a6f01f7f-86aa-4215-ba14-96f3615a04d8", "sighting--3becedac-8193-4960-8326-b458eda37353", "sighting--9f7cd6ac-cc8d-4439-b11c-a753cd6af415", "sighting--11c63c68-d73e-43b7-99ab-3156618a0aa1", "sighting--865bb563-428c-40e0-9eed-eea6e568c081", "sighting--53698811-a978-4ec6-a833-8edc17c49a29", "sighting--40c586a6-1879-4e20-bc27-bb093fc80487", "sighting--bb14f966-1184-4e59-9197-7858ae3cfcf0", "sighting--4999d31f-8fe9-4ded-94bf-8afa8e7ecd5d", "sighting--7062193f-4678-4221-9f8e-74f9505693fe", "sighting--f762ad16-0b74-4ed2-8070-26305ee5516d", "sighting--88c29024-12c9-46ea-9778-cb8c5650f31c", "sighting--53b296c5-9917-41f6-8b26-e46aef878451", "sighting--881db4de-fab8-44b4-bf55-ac59a3f68181", "sighting--232964ff-6ef9-42eb-9b6e-b970692c1870", "sighting--b743c3f0-22f3-4ea6-9034-9ab95696c8a4", "sighting--332cbd96-9f58-4652-b79d-6e56b542fe8b", "sighting--9ff8d500-a9be-471f-b9bf-ba1e8ed36cb4", "sighting--5d93b6db-b36e-4cb0-a575-90a67c07795e", "sighting--3a886712-e12c-46fb-929b-6f47ac63b7bc", "sighting--e09dfacc-41c3-4c65-bdb2-6d629e059054", "sighting--b02484d7-75bc-4ec4-866c-03f832691d71", "sighting--7e352f71-2f4d-438e-964a-f9bd7b0df36e", "sighting--459c85fb-482b-4cdc-9504-19a7b448c77b", "sighting--247ed9d2-4424-47c7-9e03-78273f00ca4b", "sighting--ba7c4b88-5196-440d-8789-32ac71fd1b23", "sighting--75e2ae54-bfbf-4654-84b3-19e22c50a261", "sighting--ea1dac71-d9f5-4338-82c6-d953f0f194e5", "sighting--3c0f8df0-2936-4c5e-b114-93c4d9a5987c", "sighting--1a9f9b00-45cc-4c3f-99e6-95c37da85674", "sighting--bcd00472-ea0c-41dc-bb5f-89a0f38352ca", "sighting--215712a3-db39-4245-a4ce-707889a2f99c", "sighting--7b9ca95a-c380-4e8f-8deb-80d9a56ce317", "sighting--d5a93de3-e86b-4fe3-9971-5962c374abeb", "sighting--b2c5a332-4e66-483f-95a6-e56cd4cfdbab", "sighting--24d0c159-fe77-4f72-b18f-e2e30863fb6d", "sighting--3fde7acb-f2ed-4eca-858a-c23c2393674c", "sighting--01f32186-94ec-4302-abf3-d366e904bddb", "sighting--19b879a9-e06a-4cec-b303-cfa08534dc25", "sighting--b4aa1d68-f078-4fe1-9c79-a830eea50ae1", "sighting--1860a1cf-cb02-46dd-8320-fd457ed2738a", "sighting--c5e09364-ccf7-45fe-9c79-2da9bf080578", "sighting--d758473a-8162-4b63-87d7-3015b0578326", "sighting--46f6a125-c921-4c09-b4ca-1173ff584b2f", "sighting--1e9b3b33-2881-4354-b155-9f6a98dee6da", "sighting--d5f57253-1015-4c0e-8bcd-2764eaf70cbe", "sighting--4ce7c1fa-eb04-4fa1-ba71-20d902dc8526", "sighting--fd1cbdb6-a10b-40c0-aff9-fb8abfb2982e", "sighting--ebd053dc-9fb5-4aab-a38d-cbd8e4dee46e", "sighting--1807b1f7-2e79-4ab9-8670-6d5c6604a8a2", "sighting--69d2eb7c-72d8-4d00-aad5-a5a7628f0475", "sighting--dfdf1d0b-655d-4cb2-8849-d86ec19519dc", "sighting--62128f07-3d23-45d6-a451-dd2fa3ad4588", "sighting--b90d38f0-b828-40da-ba44-0eb3f26d7ef0", "sighting--d51b21f1-e8a9-4e65-a87b-65cf76c5c63a", "sighting--14426d87-2c59-4f68-a575-2ee95d4bfeed", "sighting--e25d3c4d-e111-4b5a-ae9d-61157b54db74", "sighting--023841c3-da12-401a-8216-dd943800af27", "sighting--7cdb4643-e0b6-4f71-82be-36b6150de967", "sighting--662fad4c-63a6-4519-b244-2dece15a368c", "sighting--ae3ff3b2-f36f-4d0a-b0cb-a1efb39809d5", "sighting--b2d805b7-c7e3-4aa5-816d-7b2a94894c6b", "sighting--049b1650-f42a-4562-a42f-e25e5c5c247a", "sighting--e63f4aae-a48d-4402-809b-6b5756000359", "sighting--1d81973e-a04e-4ad3-91d5-dc7cfc94cb3a", "sighting--87ea25d8-60e1-49e4-a8b7-a152bb5728c7", "sighting--a86379d6-8d7e-41c6-90c8-803710309893", "sighting--46604c1a-82f6-4828-83db-916b855738bd", "sighting--052fac05-a796-4afa-8106-f30ef61c1d82", "sighting--f893c9cd-4e49-4df4-9c3e-6580888d27b7", "sighting--46bc7923-2c9b-44db-a3d4-80a4ef1a0352", "sighting--953d44c6-bad4-479b-be40-8ac4312a9b06", "sighting--17460974-0bd0-452d-9494-2eb7e733e4aa", "sighting--939750de-8220-4c52-8c09-67019ee6933a", "sighting--dce21ad4-6c06-4722-8a5d-529174778764", "sighting--b1141207-6ef4-4b40-ad25-f949e266ea2f", "sighting--15c64aab-8755-4664-9cf8-71c1f6026b2c", "sighting--8ae50bb0-2e78-4bac-8dff-44c315dc9b5f", "sighting--c2bc6466-f30b-419f-a6d1-84b56d4b3cf1", "sighting--7c95c281-7255-4f35-a8ae-cd95109b8c36", "sighting--86e35c8e-695f-4241-9a9a-fc885f8a51dd", "sighting--0d229055-f00c-4650-b167-b2cc3339f34b", "sighting--d07f24a6-0057-4a41-992e-9de883130125", "sighting--7af6e2a7-2971-404b-88d9-5eb1dfbabb19", "sighting--608ad88e-71f8-42e8-8f7d-a15d32e1b8ed", "sighting--9f516d4c-f172-4e9b-8759-596d3b996d37", "sighting--fd428cfc-8cd3-4c41-921c-36ef3147d6b6", "sighting--5240748e-c00e-4190-ba8f-e96ff105ebdf", "sighting--960124e6-fbda-4031-9442-99107dde1298", "sighting--2299c79d-10b1-4ab2-b9e1-4e7561db5bef", "sighting--b5e59a58-8af6-4400-9980-04784820668e", "sighting--a28e2004-af57-422a-8211-e45a5f0c1b02", "sighting--58fd3f27-2c0a-425c-ab50-db729c766687", "sighting--b554c29e-f061-4b07-835e-e9372a591a1a", "sighting--92db39ba-1123-4a71-a7f2-750a728b4df1", "sighting--e5256949-eb82-4f6a-be9a-2231a67d6d42", "sighting--b9c57ae3-d9f1-4ecb-860c-50f3865c09df", "sighting--b30a13d3-6488-41a8-918c-542c0dadef8a", "sighting--bb2952e2-4103-4890-8ac3-fc7e058f1ca0", "sighting--6dcdc14e-d393-429a-a468-3286ab419e45", "sighting--327842a5-c715-432f-a027-628ac460d586", "sighting--0e90d308-4c28-411d-8905-00f551fdc702", "sighting--d6bbfcd4-4d79-4231-934c-f2d4a6333506", "sighting--007fdf01-1d22-4bc5-9376-5d1097493a4e", "sighting--529ba27e-dcce-4fe3-addf-4eb9f7fb5c25", "sighting--2320803e-a1a2-4ade-b96b-3a6165708e38", "sighting--9296f1a5-d2da-4b56-a006-18dafca54039", "sighting--2058ea37-1003-437a-959c-7a3ad085eb5d", "sighting--0b31c82b-fd3e-4144-a10e-4395916ae210", "sighting--bb6b324f-78fa-484e-9f81-50b5d8fdb020", "sighting--32390807-1168-4559-884a-1ba583a89a6e", "sighting--0126248c-025e-4770-b333-6756c6c9537b", "sighting--6f551bbc-0400-436f-ba49-00f915f0496e", "sighting--a626100b-d564-4101-ba34-083453336312", "sighting--1709de5e-b886-4670-a0e6-03943bc24c2e", "sighting--19df10dc-375d-4919-a91c-baf3587d15d8", "sighting--fa6d07f4-ea59-4bd9-9eab-08c9fd56602b", "sighting--d2253584-969d-4dec-967f-a2ec95904556", "sighting--c86c3a65-5c6e-48bf-83da-a1cf1181a542", "sighting--59fa9273-1568-4477-9e8e-a4c7eab8aad4", "sighting--bf45059d-929a-4b9e-9e2d-18ba9aaccd9d", "sighting--b7b2d3b8-28c3-4c63-b602-7a16c59c7495", "sighting--3648387a-2bf5-407e-ae57-8295e34fe2e9", "sighting--7a61b39f-4bf6-4ad3-829c-0d157a8412e9", "sighting--972badc3-b38a-45a6-8402-d96301d39197", "sighting--75a2a03a-f242-483e-8437-f331dda56100", "sighting--7d25215a-56d7-4423-8a00-6b56d5716d10", "sighting--f106bbcb-7dc4-4be5-be47-bf1e385bae72", "sighting--8516382a-7742-438f-855c-115a157c667b", "sighting--3089040d-badb-42b9-90a2-ac32de21da6b", "sighting--f67c1e2f-1f20-4311-9a40-f45e0f5d69c1", "sighting--64dfd06f-8766-47e4-af83-1c591a626532", "sighting--0856aada-b527-4eee-92f5-f1947eb04086", "sighting--dc86e03b-ae36-47dd-b1a1-dbb7cafc79f3", "sighting--44d2940f-ef38-42b4-8960-d531583031b3", "sighting--792ca93d-28fe-4277-93d0-d71488841446", "sighting--feaa6a9e-9447-456c-9b75-53f1151377a9", "sighting--ae25d75b-92b7-48a9-ab8a-257019442816", "sighting--6f4f8712-e0f6-434f-a3b2-e4be28665030", "sighting--22420d32-2548-4a5c-b646-b985c14200a4", "sighting--e90d2f73-4dd7-4a33-a52b-2631d3e45515", "sighting--d98a1932-ae69-4508-8c56-0d37960a2b88", "sighting--76ba7e3b-9a7d-4738-9d7a-83411e74a933", "sighting--ab4430ee-f74d-43d9-b32d-a9fe0f257075", "sighting--4cbe509c-da33-40f1-904b-5e22ed66e109", "sighting--59da95a5-bfcb-4c69-b57e-cd1c143b3124", "sighting--3ee70703-cf51-4233-8f32-6a532133d89d", "sighting--d4ff7558-df9b-4534-a909-83e6df5ecaa1", "sighting--8fe696cf-fc3d-4c3a-82df-415d1ca52745", "sighting--4a4df6ff-01c5-4e32-bcea-aa8fc75d6958", "sighting--783df347-cc75-4d0e-9e90-14ebde01d4b2", "sighting--3fb68d4a-efc8-464d-8e5c-42687aeb0188", "sighting--69e7ee37-9d30-4a62-afe6-0bd62e8d6503", "sighting--6284907c-0889-4247-ba30-57288e26b0ab", "sighting--9dc38b89-7c00-4e8d-ac11-66134673c130", "sighting--d6dcdd01-07b8-4f18-8116-d64db8ac2359", "sighting--0ae81d7c-d788-4496-8d49-4531b2ce1126", "sighting--32409a7e-8a87-4c9f-b9ca-7f93dd8450c7", "sighting--c816239d-5af2-4634-8bcf-8f4ac1e8f7a3", "sighting--668c9a95-a72f-471f-a73b-60120450df80", "sighting--dd71e80e-b2b3-411c-9893-5a3afa8e5bae", "sighting--144895d6-a499-402d-a9f7-e45b605e9083", "sighting--e6a1cbe7-94fb-42f5-99d3-4ee4f6ff33c1", "sighting--3438fb22-09ee-4b17-9327-bd8b9ecffdd8", "sighting--f8d17018-6e6f-4e13-9efa-40d5dce33ff1", "sighting--71954bc3-3f8e-4e5f-abc7-cfa804e8794b", "sighting--3db7600c-acdb-4dde-980b-1b3f94319d63", "sighting--8a87de4a-392a-4c36-9bf3-d73bf3e0d9d7", "sighting--97932e98-ec88-4a89-a2b9-e9b51f8b8011", "sighting--1ff4fa37-57e7-4665-b3b8-42e09ae339b5", "sighting--32ecac20-808a-4a3c-8ce5-8278910d912b", "sighting--7d55389e-33d2-4a0e-83ee-5d585f73c075", "sighting--15654ce4-25bd-4277-af70-161bf40dccdf", "sighting--ff03af93-1be6-4601-8e5e-9745f6d5cdda", "sighting--27ea901b-0dcd-4b00-8eac-45bb9af0979c", "sighting--bdb7ba1b-d2f2-473b-8b0d-0c0e0f10e957", "sighting--ac226c45-2c46-465b-9eaf-3f0c6688f4f3", "sighting--dec26dac-f80c-46fb-bf8e-190cd420e8b8", "sighting--0ae53282-c500-4641-a3ed-1b95a3db38bc", "sighting--0cc3c30d-51d6-49f5-8487-e6cbf2689847", "sighting--7a3f32a6-829e-4b1d-b170-98077f7eeb93", "sighting--87f5529d-8a90-4078-9d2c-b54fe83aac9b", "sighting--ea3c213f-f91e-4490-ad7c-c6b380477223", "sighting--c0bd14a2-c677-4f66-b93d-513ba84dab1e", "sighting--b78a35e3-d7b8-4eb1-bc6a-7c5db9635207", "sighting--eead8539-1591-4d51-9c18-31c20bc72b7c", "sighting--5a98885a-b345-45af-85a1-847bca610234", "sighting--0d37ce9e-4717-47e5-8198-01f0b42cf3d7", "sighting--8fb7819c-4281-4d33-b428-fa96c608ed7d", "sighting--f46a44b0-7484-4ff2-9137-a449d697f49d", "sighting--b3b993e0-2e35-4506-8e48-3140279fe5ea", "sighting--a6f95cc9-78ea-4aa5-a06a-dd078c91c031", "sighting--d7dfc72e-eb87-4b87-85b6-94a1372f838c", "sighting--6d5c58ed-cfcb-415f-a3ac-0e1710670735", "sighting--14a0c3a2-833b-4377-85d3-de5cd15da438", "sighting--afedd6e6-54f9-44c3-b109-5d2a256b79f6", "sighting--d3bfb166-84e6-4bcb-bc88-fe327e7c4695", "sighting--78f11b7d-6a6f-4391-839c-4834f9616c26", "sighting--7f078fe4-3fee-400c-8ba3-534d93528665", "sighting--86ccc7d8-0174-4e2d-aab9-d8eba8bf690d", "sighting--76dc9dca-603d-45a3-8f3e-60b14945f1cd", "sighting--f7703293-5abf-4ad4-8528-aa9e89b4e0c7", "sighting--d7b6ed7b-994e-4364-8e98-b43cca2074a2", "sighting--701c94f0-f9d1-4825-b6bd-26d9f7fc2244", "sighting--e7a96869-bd2b-45f5-8826-27b65e4a2818", "sighting--7417dfa7-1d64-4208-a5e1-316c642244b7", "sighting--e16b3a6e-fd89-4c82-be8c-64ad5384de16", "sighting--229111d0-0679-4a5c-99fc-1bcdd1fc1c03", "sighting--ab261b59-65b9-4ea8-a628-245cd8c8b151", "sighting--9e5f6450-720e-4ba0-be2b-73b3faaaecfd", "sighting--20b58869-6a6b-43f6-8d75-bc4cf3ac4592", "sighting--7ffa745a-8937-481e-8b96-5a052d6ded4a", "sighting--750f86d2-ff3d-4ef3-ab96-055ce694867f", "sighting--bf98736d-9a5e-45d1-9731-26e562331394", "sighting--7d832555-5a84-4b06-9000-ea0269c8b29e", "sighting--00ae4a7b-a2ca-4142-b27e-99f0f62a7bbb", "sighting--6c5d4887-e393-4282-a2b2-90b889f5cb4d", "sighting--99e8f503-04ab-473b-9857-e808d128faf2", "sighting--3115c205-5452-44be-aa9b-b55628d77df4", "sighting--ceff4cd2-5e40-47dc-8aee-ac7ac8b30bba", "sighting--48584782-53f1-4312-ad54-08f95504b262", "sighting--9683bfab-1294-45f6-82aa-18544aad958a", "sighting--3e81950b-d560-4b69-8022-ed77cdcdaf5f", "sighting--31535cb6-feb7-45e1-bcef-a2d9fefed69f", "sighting--74ff48c9-c27b-4f4d-9b7b-efc33aa55497", "sighting--c9d40f55-510d-49df-9f27-a1202eb104a4", "sighting--dcd035fb-089e-462c-881c-f4e6c94374ca", "sighting--9dec5f1b-0a4e-431d-9e0b-5bfcdf4eb401", "sighting--8ed713a7-cd8e-4a26-a009-69be1115cf0a", "sighting--47d59947-9ac4-4c38-8290-429197d5040c", "sighting--93183210-8cbc-43a4-99d1-1c117c2acf0b", "sighting--273bb003-8380-4291-b6d0-4ff9b23e34ff", "sighting--d24809c6-24f7-4563-bdc5-70599cbd8d43", "sighting--dfa90589-fe50-41a1-94d0-6d78bf0ffc07", "sighting--2a20209b-78a1-4768-a607-403afba642c1", "sighting--864e03a9-6c58-4262-b0ac-9eb2df4d9229", "sighting--49921013-11ca-45ff-9c94-01efd0aec369", "sighting--a83c943c-679a-4eba-ae64-deaad0da88ca", "sighting--b97194a7-24bb-4b62-92f1-b6b8245c619e", "sighting--30470413-61ca-4cee-9126-bae0734c2e5c", "sighting--d988ffe4-1edd-49a1-89d4-9814d4b2578c", "sighting--fb790ede-2516-493b-ba0a-e4e70e816ee4", "sighting--bd48f129-c944-45a6-81e5-c50f14602370", "sighting--4f5dd253-62fc-4acb-997c-ce7c669a4b65", "sighting--86f30087-e948-40fe-bea0-b0ec5bd015eb", "sighting--5842a4a7-fe49-474e-8c30-125c423decb8", "sighting--e3103036-63c3-40e6-bec5-bdfa1d58589c", "sighting--ed51132e-1a1e-43ce-89d3-13bc34bf4af8", "sighting--60e85a27-8c63-48bd-b287-91fe70288ead", "sighting--fee9e703-9e78-4ce5-aee7-39f30312eb4d", "sighting--11f52c3a-bfd1-4a9d-99ab-69aa249a4488", "sighting--c800aedb-e9e5-461d-a2fb-1607df4069d2", "sighting--1e1ef1c7-6382-4991-aafb-54196a97104f", "sighting--e1c5720a-bb18-4a04-a27a-a363b25040f4", "sighting--38e2de1d-8912-4385-a64b-c38924e76d42", "sighting--da2f64fe-e8f4-49f3-8cb1-2e2a0b91ee65", "sighting--b671c14a-792f-4183-839e-e70adb5a6dd0", "sighting--16b73702-0c70-4cdb-aa9b-36a97dd934f6", "sighting--99b5fd77-a3d1-481a-88ef-ccd1cd70c93e", "sighting--62c15b7f-ec9d-4ca8-8e5a-f55a4ca3e500", "sighting--68eccc49-9b06-49c9-a6d5-7a8ffd4005e8", "sighting--7c3cf06d-c178-4054-b285-61ad886f14d2", "sighting--762732b1-54f7-43d5-b81e-de28e06ba410", "sighting--bcf7e54f-e397-44e6-bb5b-d7afeaa301cd", "sighting--53fcd520-6dda-475b-8ce2-f8e3051988d7", "sighting--d74f194b-9fa9-4baa-842f-30f709873d00", "sighting--9e34511f-48bf-4839-be50-4bb1efc1e45b", "sighting--233e0f43-20d8-4689-a120-5be2e5357f99", "sighting--8ae06fc5-0c68-4940-b6c4-0ba9048bccbd", "sighting--ccbc727d-4b60-41db-9795-b27ed172a364", "sighting--b109aaaa-06b1-4242-af11-0881c4c69b21", "sighting--7db8b6db-6d11-42d0-8434-a7925ea84cb7", "sighting--d02e6c60-0823-45f0-9406-cde0db79a58c", "sighting--1dcb5164-7eaf-4967-8a69-f47e91157dae", "sighting--2779381c-534b-405e-8478-869b0c1ae7ae", "sighting--9d34e4f7-01c2-452b-ad89-ee160a53270b", "sighting--1b34cbda-e74e-45a2-8ee4-3ea0c17cbc1d", "sighting--fbac5f4a-2f07-487c-b278-ae8ea2a840e3", "sighting--5547d408-c762-4776-a087-8aebe6da0538", "sighting--e7b717e9-2059-4d3a-8582-da918dbb34d5", "sighting--3c40bbab-a40a-4435-b50c-cec665d274d9", "sighting--1bffe94a-fe37-4d86-b55a-d4b1d299a457", "sighting--53c765fc-92e2-439b-93a9-3d549e88af83", "sighting--74dd6c61-16c7-442a-b969-c932bf7c1873", "sighting--331e61b3-817c-4ae6-84a7-e53937e5d0d8", "sighting--9997fab5-93f1-43c5-a91a-2724d8577ccb", "sighting--c5c0d8b5-4e07-49d8-9641-6a56b8796c34", "sighting--0bb85ed3-b6db-4410-a56f-17c484f2eddf", "sighting--06963240-0ff4-4937-b834-6c90372a7b3a", "sighting--69f41a82-ada4-4869-bd31-f43b021344dd", "sighting--db093f41-8958-4650-b087-3dec44d0189e", "sighting--ea24e7c5-1652-418c-ba5c-32a998066ccc", "sighting--e214ddb0-a56e-4c44-978a-05cf92091c0c", "sighting--e62a35ac-ffca-48e5-9509-5f7caf7e8258", "sighting--cc0600f2-65ac-4be9-8f9c-6e2cf82b052b", "sighting--cb6571ac-d2e9-4d10-94ae-ac29f3cbde84", "sighting--3f84b525-4565-43c5-aca3-0f6404e39766", "sighting--f4503b30-349e-4780-9536-c1bd72f08378", "sighting--e283b6c4-5cc1-4891-8559-c8e5aa2cd433", "sighting--86a9e546-62ed-4962-b2f7-1b770e5b327e", "sighting--734d6675-6775-4bd5-ac9c-728001dcbcd5", "sighting--d16a3364-5ae4-42b6-a5f3-bbb6842cf55f", "sighting--2fad5cc0-2bd2-4771-9c53-28eb3c5fc5b7", "sighting--2b278469-561e-4b3f-b93a-61aade0657c0", "sighting--10e9b901-acc9-4421-8439-62c78b0948a1", "sighting--99dc1843-92bf-46f4-8117-b19064c163c2", "sighting--7b7d64b0-4155-4884-ab68-6d3c3ba570f4", "sighting--8cf94f90-3589-47a7-9c27-64fe1c8b7aca", "sighting--c2fa3968-336a-4372-a356-79e485972f78", "sighting--ca919ef3-6e17-4982-a3b4-cd7c6c67b964", "sighting--84c821fc-756a-4846-a7d5-f2711e444709", "sighting--8115be5c-4b98-48e3-b4ad-9441bd6a35b5", "sighting--f8a1fcb5-1b9f-483c-bb37-361c0afd5706", "sighting--8090ea0c-f4d4-49f7-a1f9-5149cb1d5a54", "sighting--ed2d69f8-e311-433c-972d-19d75b4e3940", "sighting--fd366e93-2ad7-47ef-b883-dae2132c8873", "sighting--69f0b8bf-3b43-430f-ac55-518bdc5f1c2a", "sighting--74399cdc-2bf8-4d6a-bf58-d09ece14b30d", "sighting--afeacfdd-1a27-42d0-85be-8e6e50a2aa61", "sighting--eb56cbf4-5a60-4cf1-8625-e305ddfed9cd", "sighting--6e9b1bf2-3dc6-4d10-a737-f6a4313795bd", "sighting--0449c9b4-bce2-494c-a73d-614abe2636c5", "sighting--7e504d16-e682-4c10-a586-87395e7aa7e6", "sighting--27a28fdf-61d4-40d0-a68c-8ac1eb5b1130", "sighting--396dabe1-dac8-4164-80b7-4cce7712bdc2", "sighting--801597fe-1fbb-46d1-9916-0cdc398a3227", "sighting--64d65222-d736-4c13-880f-9fa68ac353cc", "sighting--727cb9d6-5a43-4078-b16b-a7265a3b1ab6", "sighting--1e33169b-9187-4504-84f7-de94e6ff3387", "sighting--81f5e488-6e3e-4988-9be1-6df95402b2eb", "sighting--bfd14be6-6170-4fd3-a2f3-c16acb6a445b", "sighting--b180fff6-bf05-4d64-be3b-7ed5c41eeee1", "sighting--82560083-6579-4a36-b534-a886a898482e", "sighting--231e77cf-227d-4dfe-8d2a-e49402f7331a", "sighting--252de56f-f616-42a8-b69d-c841360b0068", "sighting--a0c99294-ee26-493a-82c9-44a09c53e32b", "sighting--86db8719-af59-48e8-82ae-43976508d517", "sighting--b3245180-4d05-4ff3-a1f9-89dc994393cb", "sighting--19c8e015-5b90-48da-842b-9690e1c06286", "sighting--a669d683-39db-44b0-9883-c567087a9f2a", "sighting--00b88cf1-b5be-4bce-9483-5b712506801a", "sighting--da191579-5d5c-4c4c-ae01-c71cf357b73e", "sighting--b4d777cc-ae7b-4ca4-b9b6-b28627947174", "sighting--6c41799a-ad05-4c1a-bbdb-a24e14a042f0", "sighting--1f2f6581-34bf-4cd9-b30e-23416f5e4db0", "sighting--8a1bdee1-8136-4e5a-bb98-f9d83c9c1969", "sighting--6f7dfaa9-8ea8-4e2e-8325-094f4bc3e63b", "sighting--a7fe9ff4-277d-4467-8b1a-e36c7080b089", "sighting--d81423ec-1a76-4d2f-ad75-5ae516c987d0", "sighting--eeda1aa6-76bf-4a2a-848f-42ac5ce11e48", "sighting--a4cf2faf-7ec4-4239-8211-ea1ed08d1e4e", "sighting--f1629a1f-d9bf-45f3-a466-23f6ca41b1ef", "sighting--13356d97-3a45-4f76-9822-1493fe43e48d", "sighting--ad8b20e7-1306-4722-a1a4-dc5f7ef3c589", "sighting--86bba440-76ef-432f-9643-e841eccb7bed", "sighting--69875bfb-641a-4097-9e6a-11aeb129d7ff", "sighting--a6516310-8835-4cb3-b94e-bfc0229013cd", "sighting--e6aebab8-a7e6-4f99-9e08-afb5d00cd227", "sighting--aae74704-609d-4b4e-9f7f-72747c39a9fb", "sighting--2e36574d-e436-4ab3-9b0c-b6362c3eb80a", "sighting--e5f6df92-24eb-4a5e-af88-b6112fb992b2", "sighting--84e1c1df-fb94-462d-8323-5d4ebcbdd5de", "sighting--cabed8e2-0daa-4441-a575-1f897c3d7600", "sighting--bfec5212-a1e7-45d3-8903-192fef8ca78f", "sighting--c9b5cb6d-5f55-4a12-ba49-f48c0116f4f2", "sighting--c530b588-281a-436d-aa82-f854acf4199a", "sighting--57aa8376-f5bb-4f6c-8ed8-52147058da6d", "sighting--09df0405-e62b-494f-a340-dc6671c9a511", "sighting--5488230f-64ad-488d-ad80-033b82f3355b", "sighting--8062cde3-6f77-4eeb-b934-1821eb9180ce", "sighting--f8612f56-bf48-468b-95f9-6ac634c767bc", "sighting--53caa5e6-e840-4efa-a686-26fa130b336b", "sighting--78d6bda6-3c32-4fa2-b46c-484d5a7dfada", "sighting--1b0289da-289f-4393-8456-c8813b443348", "sighting--5d6fc568-4b3b-4d78-8668-dd3a664f1e5e", "sighting--25888301-89d1-4a7d-a158-613fb4ecd5f8", "sighting--9db268f2-a208-46bd-b016-d83c52b130e8", "sighting--855a4987-9c90-4522-abec-d2636216a024", "sighting--dd7aef11-cd99-43b2-b6ad-ec8afc4e5441", "sighting--a26535ea-6c02-4228-8cfc-f72369965b30", "sighting--69a43ccd-b276-4e40-81a0-beb7421e326c", "sighting--4f26f67e-2d96-434e-b862-731894b98d7c", "sighting--596d2bc2-c2f5-453e-a0a5-ab2e79f5a225", "sighting--61d52041-b592-494e-b33f-f14ddbf231e0", "sighting--8e8faf9e-594e-4881-a76f-86467b1673dd", "sighting--6ce90d15-2fd2-465e-9897-d7c1b57a7785", "sighting--204e4a89-0aa0-41fb-b47c-91741d443cd3", "sighting--85bbc00b-15c9-4348-b35d-080dcac77651", "sighting--362b5914-d174-4c62-bb82-70ba0d45760a", "sighting--2aba2dfc-e87c-4113-8c5f-fae5ee151ae9", "sighting--524ea976-81d7-464f-86bd-34ed848b0c79", "sighting--28bff70c-a970-4560-b610-32a58f02ad62", "sighting--f0bb8023-e9e2-43a7-b031-0ec671cb4d03", "sighting--698aeb46-dfc0-49ab-be26-5f8c9da30298", "sighting--73e6acd8-e149-4c99-b5de-a619f88df632", "sighting--efea9b04-14e7-4833-b78f-477dc951793f", "sighting--1c6000c1-c127-422d-838f-6804b8a26aee", "sighting--70ac29ba-cd45-4f6d-a29c-345768a01525", "sighting--cde22742-a3de-4bca-b48d-6acb4ef49e95", "sighting--5ffa5831-8b10-45f9-941f-6f7939a89db0", "sighting--0ede6f5d-244a-43b5-9910-30e935a32ba6", "sighting--f63bc157-fe65-4ebf-a857-5df7cf9315f6", "sighting--9592e28d-242f-489b-a0b5-d5b5e9959082", "sighting--3c1a0078-084c-448d-b897-c5c108be7622", "sighting--97856d37-cb2f-414d-adc7-1e3d6e3f9592", "sighting--c43d6e49-9af7-4733-a349-da964d6850e5", "sighting--a0d1df30-faa8-407b-8b17-381629c17bdb", "sighting--513c26df-4219-4cdc-9f41-e7db5ffad325", "sighting--16aeff3d-881f-45e9-ba40-aea4e78ada90", "sighting--d6c085f6-be66-49b9-907e-dd152a3c2d00", "sighting--fe363429-a152-4132-a744-ec5d64835cc4", "sighting--1beab65c-ae17-43b2-8419-b9fcde209c3e", "sighting--71528c2f-0fbf-493c-a285-4d4b2550e4bb", "sighting--c11fc3b0-7df8-41c4-b522-6ff32b72871b", "sighting--ddd53b01-fc6c-4862-85c4-34615e1a7645", "sighting--067b9f68-1616-40f7-9ab2-649fc4f9ee5c", "sighting--fa6fdb15-5c31-435f-89c1-e79ac21d15d2", "sighting--1c3decd7-e166-48bb-94fe-749b2fca6048", "sighting--04170175-aeb6-417f-a376-78a1f785588d", "sighting--f13a34a9-8744-410d-abee-e0d6768c12fe", "sighting--580013e9-0dee-4b99-bb46-79ac71874e44", "sighting--811d354b-6739-4aa0-b5dc-8c61b9f89076", "sighting--dfd372af-997e-4ffb-be6e-61ce8dd60455", "sighting--90511404-d8e6-4910-bd3a-deeb2b6013a0", "sighting--00237fd8-b67f-4572-a064-c16bcc5594de", "sighting--c72bff53-fe6e-49b2-b404-4c65da97ae64", "sighting--e7246569-6f53-4e7f-8d92-ae41db24c518", "sighting--72b1ee7b-dcfb-4e03-80ec-927823ddcd6b", "sighting--2d716ce2-292e-478c-a4c6-34e08e3dc798", "sighting--76730d58-c648-446b-9793-1cc61ca4cf3c", "sighting--56fe80e0-c106-4ad2-82c8-96a0edf49a6c", "sighting--68d2eb31-4c30-4a01-a260-fad03339353d", "sighting--d80d2abc-89f9-4d0f-be44-eb9d0b46e5ce", "sighting--b116835c-ee46-43b9-b146-434788f64254", "sighting--e8649337-6da6-487f-a5c0-789d63dfe8dd", "sighting--f01044e5-f245-4c79-b449-b1bd64daf41a", "sighting--f061564c-cc4c-462c-8ccb-fca054c1e0cf", "sighting--9798e1f2-bc02-435c-91bf-5b99cc47aa80", "sighting--4279e3a7-a1bc-4c68-b094-351e062caa3a", "sighting--c7c2dfb8-1a3e-48bf-8bbc-e37ed15122d4", "sighting--0e1aa3a2-9356-414c-839e-aa1d758aed1d", "sighting--410598a7-676c-4f77-8509-a6e9c7f7ff1e", "sighting--bff395a0-c0f9-4cec-84c5-1b34cea8187c", "sighting--f77b1003-b7c7-402f-a4db-df3cac5704ba", "sighting--1b70785c-afef-4547-b2a0-3233c6b9f8b0", "sighting--654f6f65-19db-4d5c-8d32-2fb3b09861a5", "sighting--ca0c4506-9ece-4c5f-98be-28df77e1daea", "sighting--0857b625-db92-439e-943e-965252e5e26f", "sighting--ac4a2d48-391b-485c-a13a-f8f3aa7cae03", "sighting--0b15b4e5-8a16-494c-99d4-ebaee35ffdc6", "sighting--8d1a3c69-40ba-41ae-9039-46da94c9869f", "sighting--0b87b47a-2622-4bd3-b404-342fc362a219", "sighting--8fa236c7-5db9-417a-904f-708346a5acd9", "sighting--a7c0e5db-2bc7-4af9-9f12-61d496cb17fb", "sighting--a0e379d6-290d-4bbc-86c9-c5c3fe57c272", "sighting--0afa8b62-b4f8-42cd-8302-2e00ae4f213d", "sighting--0b0a189b-6917-4dc1-a6df-762c6df3a1a7", "sighting--32f3db4d-f549-4503-b1a2-48e9d8222a33", "sighting--33818fda-0837-4549-b80c-8fcc48e2d1f9", "sighting--329d74ca-1417-4433-bd4a-0808439df6eb", "sighting--9ef1940e-95e1-43d6-986c-7dc0a0bd2c1e", "sighting--113cfeb0-2595-474e-a2ec-3a164fdbd7f4", "sighting--d3fb6fec-3014-488e-bc62-bccb52a6f29f", "sighting--aa287f11-d7b6-476c-b940-3d1a99bac4b2", "sighting--3e1de150-89c8-4503-818b-675ec367b7ef", "sighting--38a1ce7f-5a6c-4fba-b79b-7cd512c7e13b", "sighting--35ea7b5f-604d-4f81-8395-8589b09f7c81", "sighting--68f0d16e-d2c5-4545-b508-a62cef44ab7c", "sighting--f8662233-1a94-4d6a-8d9f-bac6df35a6d3", "sighting--a8b4badb-d181-4ae5-be01-40a60fbebe39", "sighting--ab7e6ddf-9dd1-4ca4-9ad3-743b277a04e6", "sighting--f4b1696e-cb57-49ea-be3b-53e117913e3d", "sighting--445db0ce-7636-4705-8d35-bd45f8e29933", "sighting--961a827e-4b3d-4218-bdff-ec80e69d947f", "sighting--c4d594de-cbe5-4508-adc1-6a0d1964f82e", "sighting--51e44494-d42f-43a2-9134-81ce3b6e6abe", "sighting--58ef5795-7501-4c87-bc89-2a2cfdd00b54", "sighting--62704f4b-e503-4d57-b037-5d8d7bfa9ac0", "sighting--77613973-4a87-4b04-85ab-761726c15443", "sighting--bceb4672-533c-487b-9dc6-37cb10ed62b2", "sighting--a6c53e6d-17d4-4e73-89c4-057b8589cad3", "sighting--a591253c-5f3b-4ed3-950b-2fc414957deb", "sighting--45492d3b-778b-437d-90e1-28fc7ccfc2e1", "sighting--25dbea65-79b1-4d77-a22f-3dece12808c8", "sighting--e1e32027-ebab-4a62-81dc-ca0fe2f21031", "sighting--32a2c812-f270-4a33-bf10-e1c58fc1dcf3", "sighting--a4f57db6-0a33-42e6-870c-16f16111ef4c", "sighting--b8130103-ecbf-4b1b-a30e-a251c108a361", "sighting--a70da85b-7a32-4471-9a17-e4efcfd6345d", "sighting--e7ec3e12-acd6-4317-8e65-c7d4ff498787", "sighting--d80a4c13-c5e6-499e-94aa-3668d8dc24b9", "sighting--ecc867a9-9e40-4b23-b482-951c741bbbdf", "sighting--ed83d327-ae68-4be0-9f03-a327cf3d9436", "sighting--6d744f01-eb2c-48c7-a1cc-6e3650d98e20", "sighting--2a9439c5-cf01-4f47-8f7a-0874676213e2", "sighting--fcb2c227-2f5e-4b7b-b962-c0b78afd6d7d", "sighting--eae07ab2-7150-4cc9-b3c6-b94283f8c94f", "sighting--dc997072-a459-40da-9cd1-f71a3cc7634b", "sighting--eb9624eb-d7c4-48db-989a-ef4d5102ec4a", "sighting--e4bfe1a5-5eb5-4bc9-b240-f24cd11aaa40", "sighting--e09da2f3-fe20-42b8-8248-ac0bd4c2d51f", "sighting--1d200a47-4c18-4f02-be5c-2e980c28b234", "sighting--f3b8e5c4-0d94-474e-b036-fe8777320e7c", "sighting--8afba20b-9b8b-46fb-be56-483e88bb0559", "sighting--4e1147cc-c316-4ffa-9a3f-07109990eb0a", "sighting--561b1dc4-aaca-4ee9-9573-97a5f05a0178", "sighting--b71705e5-0f2b-4306-a653-d614e3159571", "sighting--b3fd58cb-f1b6-4ff8-9173-56df6bb06dc4", "sighting--300260c0-f102-4b8a-a148-f89fda992df0", "sighting--8ee0f2bd-a5ed-4d7b-8f20-dd59cf8ade16", "sighting--f0e34e7a-fd69-4684-b9cb-ed716bf706f7", "sighting--0f954cde-8516-4cd4-ba6d-0b36dadcf8b8", "sighting--995ca169-a585-48f6-8930-c6ee5744c432", "sighting--c8bfcb08-3a19-4985-ac0f-c020429fa8f2", "sighting--44462489-9254-4325-93e6-49436542c0e8", "sighting--79747519-bf5d-465a-8225-5324993dd017", "sighting--3d3a2ce6-a9b3-497e-b697-ae497c9f3ad7", "sighting--ec6c0d9c-4232-456d-9a53-936d82d8a875", "sighting--2194cfa5-c870-45cb-b77a-10e99891e7e4", "sighting--78fe46f6-405f-4f8e-97c0-02686eed3f69", "sighting--eabc7794-811b-4e4a-9344-6280d698e5ff", "sighting--0ea24196-64d5-4774-b5d1-74158b4c411c", "sighting--acd70410-1d8d-420c-b0b9-64cd0bc33531", "sighting--2c5b0d01-6fff-43f7-8e87-84c8401edc14", "sighting--aeaebfa4-c2dc-4984-b624-dfccd73738a8", "sighting--e321d348-a98e-4db7-b49c-9bb1fa935e55", "sighting--a5ffc9a9-b54f-4418-9b44-8581129af91a", "sighting--dc880bba-d514-44ca-bc91-bb9394e07ccd", "sighting--20412c0f-d3fa-410f-b852-2273c48d0bd0", "sighting--9368516d-e19e-475d-a792-f4a2d1b7a792", "sighting--d2fdef9b-2906-43a1-82b0-63d0f485814c", "sighting--558b34ff-85eb-45da-9077-b5c454a6502e", "sighting--eaa55001-a688-4c63-8055-1bd93fc17f0f", "sighting--a1006394-a177-4416-8f0d-e426e4eaa5ff", "sighting--db170965-f0f7-41a1-9d20-bf0e05dc90eb", "sighting--5739f923-cdc2-48d3-85bc-82845b5f7cf6", "sighting--02338be6-d249-4471-8c2e-9c20e1b37aa5", "sighting--8c8f09c4-2ab7-4c5e-b95d-893be5d45a32", "sighting--41dfcfa0-2383-4093-a79e-699c75d3c4be", "sighting--61928a62-3d7c-470e-8dac-9c386090d630", "sighting--0e1a6e8e-a115-4a82-94d5-2b31cbd999d3", "sighting--920343e7-cd82-41dc-aeb8-bfb8a185f933", "sighting--792a2965-c851-438c-b0fd-90e760015e02", "sighting--e5046fc5-dcb8-446c-8b78-d95305406365", "sighting--da419efd-ea98-4dec-a6ed-16089cbb5657", "sighting--eb5c21a8-d4d4-4636-956f-5b0c3fe8a592", "sighting--380820b4-7c35-41e4-912e-86f4e6ca3a98", "sighting--7f2a88f9-c21a-4f07-a47c-754ef8281d77", "sighting--5b6e8878-b62c-4166-a3ec-a5e0f42de36f", "sighting--68db4f28-39c1-48f5-9eb5-c9c2b0942c43", "sighting--35664957-ec33-4dbc-818d-1e1e74467160", "sighting--d20d74d9-81c8-4338-a507-8c5c59a43988", "sighting--c0509d6f-d8a5-4564-9d4d-e424aa8e6ea5", "sighting--d302dc4f-1b71-414d-9484-ba813baecbf1", "sighting--05c02de4-02ae-4e73-8f1a-4caf562c5571", "sighting--5f868d68-c25a-441f-b3a9-7e90a6844d10", "sighting--99fb4c49-7c1b-4c4e-a18a-71a0f41ef52c", "sighting--9a992a15-6fbe-4fd9-a8f6-1e343c4a0c24", "sighting--119882d2-b003-4c73-ad41-a80940c1db08", "sighting--3f105e7c-8e55-4ff9-ae98-d0089a6d79d0", "sighting--7a93d66d-5f12-4c7b-a495-7d634ed2f523", "sighting--169dfa98-88a9-4036-8521-eb957b8ecee3", "sighting--a2cb3530-d9a8-49ae-83f8-3f3712e3be4e", "sighting--0939088a-fad1-4a64-b683-be9de67bf9d1", "sighting--9ef9a699-f0f8-4bd2-ad53-4dda3842e292", "sighting--a357d2f1-6fb4-440c-996b-59953c510400", "sighting--df3f6dcf-6068-4fdf-b256-49753f1011cb", "sighting--09ba85b4-d553-4326-a96a-5b7501be5077", "sighting--c87f978f-a3db-43d3-8ee3-0fd013b9b8e7", "sighting--c2e4aabe-2dfd-466d-8e32-0aa7cf8df8bf", "sighting--a90f749f-f872-44e0-b39b-a2eccdc6117b", "sighting--cd790dc5-ce7a-4413-8b9b-20743a53f4d3", "sighting--ab6daaf7-9faf-4725-9eca-3b70c71b5095", "sighting--f8c79d9c-eaea-4156-88af-0dba32eb0c8d", "sighting--d546605e-5771-4fa5-96d7-3994267ecdeb", "sighting--5872fbec-e93e-4a74-8edf-2506522fb6e5", "sighting--22547a4f-727d-4cf8-9122-ad2511e68e80", "sighting--5cf3b47c-9e6f-45da-8457-ee78fe67f7e2", "sighting--530de2e8-24dd-4679-99b1-37798dc9e407", "sighting--56adc535-9ed8-49dc-809d-eacea5d210b2", "sighting--575b21b9-574e-4d9d-a235-7f6df5cabf26", "sighting--d191623e-9550-40ea-950f-4f8f59b8dddf", "sighting--1674a092-0259-4217-912b-804502ab3528", "sighting--0480c961-1ae1-4bc4-992e-5db1d332d802", "sighting--78bf87a8-68cd-4d65-854f-3d64031d0a75", "sighting--9e307a89-e298-4cd0-8120-6986428cbd93", "sighting--1b0df049-219d-47b1-9cd2-d38cad107ef5", "sighting--76dfd6b2-54d2-43f7-b27e-f2d70bfd4dd7", "sighting--5b944b92-8bfb-43ff-b683-f7bc09a1176e", "sighting--0261c3df-0918-4eb5-adb2-53e11eb04055", "sighting--567fc2b7-f671-4126-a860-7dc3718bb293", "sighting--f023e8a7-eb39-4dc9-84c2-56d9d94b81ff", "sighting--bde753f9-3ed5-43c0-9a2a-c0f52e065a3e", "sighting--bad8ff12-d1d2-4905-956e-7a8d03dfdb80", "sighting--8a305caa-219f-4680-89cd-85e4f567a8f1", "sighting--a3810b3d-b8a7-4821-b253-3b94aef6d151", "sighting--b31357cb-462a-4a49-8488-be0068e1e9aa", "sighting--8e750a28-73db-4f8c-a629-3cbb2cdaa9cf", "sighting--7c75545e-2e00-422c-b8b8-ffd0e918d79d", "sighting--c9ba179d-c368-4712-a508-63b7a77efd5b", "sighting--81bcd812-4bf3-4cac-acaf-c75f0d78e8bd", "sighting--ec5bd585-f02a-4aa5-b0f2-32eeb9f16f16", "sighting--7036716f-1d9a-45b7-a82a-613126f36105", "sighting--9081101f-2db0-4e94-8cae-649810f9714d", "sighting--ffee5cb5-e03b-413b-b905-8e205f76ed69", "sighting--20ad3d04-1999-4fcb-a2ae-229bdef791cb", "sighting--04fa207c-2d90-4c95-95ae-6ef186d22b18", "sighting--76f5f432-cf91-4b9c-810c-7155eeab16a5", "sighting--17c36262-c725-4471-b4bb-b353b3b89c0f", "sighting--ad585f26-aea0-4861-900b-c8f952b47963", "sighting--b820eb9a-c30c-4e93-bfea-bbb518bf15d6", "sighting--bac4c938-1600-462b-a64a-f3f1dde0f19e", "sighting--35b1de2b-c20c-413b-a50d-f0f55a8583af", "sighting--600ae83e-bf60-406f-a04a-0a67907ff517", "sighting--2cad5d2b-f109-4257-b9ec-66fb873e5e8a", "sighting--443f9b5f-b05a-4e50-80cd-06d922123a71", "sighting--b851a3c4-fbc0-4e47-b834-f57298bff3a6", "sighting--6d9c3da3-d6ca-493c-ab1b-1776fc9b9274", "sighting--9e498640-592d-4ac6-887f-47c2ebd9bcf7", "sighting--6b240ea8-4af2-4254-8890-63fa2431770f", "sighting--83375da9-de10-41f6-a068-c0baad269a00", "sighting--192dca69-fe77-4f57-81ab-f575f26d78bd", "sighting--1e2be54e-3bef-4e20-be60-2c80e2b935af", "sighting--fd1d0279-2e86-41bd-8e4c-4d29b1a24018", "sighting--83c22685-883d-431a-9170-b6c1cedbc990", "sighting--0035f8dc-d7a8-420f-a993-3419c2fb759c", "sighting--a163c8ff-46b8-43fa-a13f-476142553975", "sighting--363c3963-6d84-4762-a2c6-3d4d71f90fc2", "sighting--6ba4a7d1-c85a-4177-9234-283ca07cc509", "sighting--9938dbaf-bd26-4056-8917-069fdd6bcd83", "sighting--b96646db-9154-47b1-a13d-523644ed6d61", "sighting--830ad793-4bd6-4d26-8857-f18c712eaa38", "sighting--b4fae8ac-8a9b-4080-9095-c9681567534a", "sighting--d60e921b-5bf8-4323-9b46-1726701ff08d", "sighting--633f2d64-9ab6-444c-9b29-bd8b7829774d", "sighting--fe3f0af5-790b-4250-aa4b-2acf65409228", "sighting--48a6399e-367a-4766-9b49-3f9f582d5072", "sighting--507ea6b7-406f-4b95-82af-d5f4307ac9b0", "sighting--20d4bc6f-0212-4d84-a53c-47c870e29b14", "sighting--6253caf7-6bbb-4c69-b190-0d1266f06b2c", "sighting--ac1a670e-4742-4624-a1bf-b5a8f3130b4f", "sighting--d22a4830-8b90-462f-8b9a-dbe28e4ebcc9", "sighting--4d7b0a5a-e080-4b09-bcd9-a52e1b2e0f36", "sighting--18419f8a-db3c-480d-a764-c67beeead027", "sighting--513ab990-0ed0-4b74-97eb-a465063ebb15", "sighting--7ec5d1f3-791b-4ab0-b239-4b19a528ba50", "sighting--1627214f-a073-4b45-a412-a429c8eae7fe", "sighting--c5c47e68-f23d-4295-82d2-9a7f7db80f5e", "sighting--1c66d068-07df-483f-beb4-49a58a571e6a", "sighting--d26a3904-9596-44cd-8c35-a90e1f37c6df", "sighting--e23f0c3c-a231-4e77-b9b6-dd0df15f9b45", "sighting--b4b83e4b-dd3e-43c9-8b97-4aeda38a9ccb", "sighting--cc94a871-cb9c-46dc-8793-3e55fad8c3a9", "sighting--15f9cfe6-40ec-4268-b71f-b5929711606c", "sighting--be9bffb4-a2c0-4e5d-a69a-274544d35049", "sighting--295e03be-794d-4c5a-abbe-7385f475abc3", "sighting--40371161-4c75-4022-a9b9-1239de0ef687", "sighting--6c2e2285-03a4-4bfb-9fff-094245998a8d", "sighting--ae30f6fe-5ab9-4334-89ff-3958441fb5a6", "sighting--d5e6aed3-a6c5-467b-a126-5e9822a66f38", "sighting--9daf18a8-fe85-4cd1-bcc0-672cb0b3ee09", "sighting--c1346bbf-ac6d-43c2-bc00-71a5715f0fbf", "sighting--f6eb7d99-e676-4718-be2c-f2d595796470", "sighting--11a5ef12-0db5-451d-a557-a2b866dd3283", "sighting--57cfd3fc-1487-44c4-9dcd-421810b3b172", "sighting--5dae4169-1726-45d1-8899-828953f4c90e", "sighting--95c397a8-a4f7-4b62-a856-3724e561af3d", "sighting--4c66b06d-bb98-4e17-b8a8-f3ebab624ff3", "sighting--16653f80-6881-412c-8d2e-03c1550f8e1b", "sighting--bd80f28c-c503-406b-8663-03d92883ba34", "sighting--7575c74b-1705-40bf-a88d-c7b65aaf71e8", "sighting--7e425dde-9572-43f2-a77c-1a303e053d55", "sighting--2b007b2d-eed5-497c-b47f-2bdc18c7b6d6", "sighting--33c3e5c3-de78-4388-b788-8c0bf241a4aa", "sighting--5e6efebf-f330-4e02-b5e0-6b9ccaba5584", "sighting--33fba50e-e049-40f4-9d7c-73b299f9207a", "sighting--ac634da8-e38f-4797-a201-e359ba3a54ff", "sighting--3451ab1a-7e1d-45e5-8968-dec6a90ed65b", "sighting--4653be5e-207b-482c-8b62-84435717e6c5", "sighting--34e31392-6178-4601-afd7-9fe4e9dc5e19", "sighting--f8e6bbf8-da2a-400d-8c29-c61cc9f790a4", "sighting--55340ca1-efd7-4b7e-98fc-6a884a838560", "sighting--04defa64-871a-4003-999f-c3efe32cbf9e", "sighting--b2022372-d475-4cac-aa73-c5244cd1810a", "sighting--91d90047-0c78-4f35-97bf-5da1d85c4371", "sighting--b5cce8d8-2ced-4228-8784-89f52b41c27d", "sighting--6b02c528-a433-45e8-a755-2b0d5ec57ae7", "sighting--a1a1cc54-446e-4944-ae09-564c2033ee17", "sighting--f229200f-ee5a-48e2-9e4a-1f979f56046a", "sighting--d0a2797f-77ac-4f4a-bc90-0c0056dadd98", "sighting--be15509b-2f51-4b1a-b927-a968f2427bc9", "sighting--f917059d-97a2-4f3e-b3f9-68cc8e3031ec", "sighting--dcb98cde-590a-4cc7-b400-936241ca90c6", "sighting--38c177b5-e53c-4370-a38d-be1bd22813ae", "sighting--10c88698-d96c-4b86-8942-2ff824affac9", "sighting--4ab83b75-b216-412b-abe5-390e5ed3fe48", "sighting--2c23eb06-4880-4c76-b412-a54206a4eb82", "sighting--158303f4-d3a5-4dd0-ba11-cfc9a2fde046", "sighting--2ad17eb0-93bc-45c3-8313-d53a02ec3584", "sighting--8463db12-a8ac-4c59-a75f-abfdaf7ecdc1", "sighting--dc017cc5-2c73-4c66-8d32-f60329238036", "sighting--2ea8d595-284a-4ca4-8472-14f990fa092f", "sighting--5b6a2549-3fbb-43f3-8b9f-607a17cb870f", "sighting--cb856ee8-8f80-4f9d-9e3b-6d95f914f098", "sighting--d71d14b0-0be4-441c-8c41-14b0e8ea31f2", "sighting--43400f82-871e-45f7-a653-5280f71b6859", "sighting--52ac56be-e2e0-4bf7-b59a-57fb19f82425", "sighting--3161c28c-5d31-496a-8f08-cd4916b9b359", "sighting--be7746c1-0a32-44b0-87d3-3f593182b5e2", "sighting--82689b60-01c1-4375-9ad1-b2ab38d823d2", "sighting--b4d47e84-b0e0-4041-a170-e1abcc134811", "sighting--5e42e9fe-a909-400a-824c-172d831e59c5", "sighting--f018f3d5-fbff-4c1a-a20f-51f4ec45b338", "sighting--6f238fee-3c04-466b-ae9d-584b6263e18e", "sighting--837c7e8a-83c0-4562-b9d8-3eb1de5fd1fb", "sighting--f9da5d20-406c-4b19-86d2-f3b84f09aa16", "sighting--6602aed5-ad3b-4a66-8aa9-9689b3f4ff5a", "sighting--7ca7ec4b-8542-4b6f-8dbb-f142e4f41c85", "sighting--e01c6de7-bca8-4fdc-a204-e5eb84ffc455", "sighting--28d880c0-50c9-4863-87c5-3ce797786604", "sighting--a3e459e5-7678-412b-827a-b69110cf7541", "sighting--e87117a0-dec4-4416-ac21-069afda84b9b", "sighting--19c63917-d9ba-4eff-a69d-30d84804bc59", "sighting--e6f0adab-dc54-4d33-8869-0e01009014ce", "sighting--89d0378f-7819-42dc-a730-040911ff4043", "sighting--e0742687-c781-4996-8ab7-011dea15a985", "sighting--2b4bda85-6b24-404f-9140-a033a0db34d8", "sighting--d8dab6a6-95df-4007-851c-7e91ece89b6e", "sighting--50ef352c-b994-4ffb-8c0d-2a5698afb8f8", "sighting--520b4a92-fe6f-4239-901f-3d37dbd8a2fb", "sighting--a06083f1-ecfe-46c2-9a33-7283ebb8d183", "sighting--0085b7be-5e3d-4b55-8369-841d2158bbe8", "sighting--71f5e843-12da-48ba-8422-4239d6d1345d", "sighting--8bdd19f8-5e7c-4ef2-b612-8501d695d2cb", "sighting--1de12b38-cdb6-412e-b653-a2830fc35bca", "sighting--f5cf188c-91ba-4f8e-8383-2f9ab6926b7c", "sighting--0b8aa28e-f0be-432d-bd7d-4f9d13d6a40f", "sighting--54d157fc-fe5e-4da6-a44e-bd14621cd645", "sighting--6a0882c3-8ced-4fcd-87a6-7dab7117bca4", "sighting--0c6190e9-1a2a-400d-b343-579acc4c3d97", "sighting--26848455-0ddc-49f9-899b-960319b84586", "sighting--758417d6-3d27-4aa6-b5e2-1eb0e0b1f915", "sighting--b0015716-ea41-4f5f-89a1-ba2900bff5d9", "sighting--915037cb-0b93-4de5-855c-5787403d6695", "sighting--d7b94d9d-8140-450c-bf47-58ae0abd60a0", "sighting--07d7b3ed-16a4-4553-9bd4-dd9119ad5caf", "sighting--7bb2ee2e-a1f4-4519-8881-ae40fd08ecef", "sighting--97b2a6db-f92a-4f2d-9a4d-6c31bb67db36", "sighting--48c9cdd5-e22e-4fba-b225-c0a36046a4d8", "sighting--6bda87fe-f477-4a92-8b7b-dfbb4a2cfb01", "sighting--41ae90b7-b451-4cd3-99d0-afe9c887ffd0", "sighting--928b15e4-ea4e-41eb-a84d-554fe11e4e39", "sighting--8f33373b-e7e0-4ae1-ba8c-bf722a7f55f9", "sighting--fbbe4b1f-a03e-443c-a0e6-cb913c3a26a1", "sighting--69988e4b-e624-446d-99bb-ad3e583234a1", "sighting--58c23a59-9282-47ce-8a7f-1df5a3ff6025", "sighting--f2872344-0374-48d5-b03d-709a1cf693b6", "sighting--bd39b1c6-bcaf-4161-a58d-30132691f94f", "sighting--1c88322c-7606-4b7c-9dc8-d9045f687e44", "sighting--11218816-ef15-405f-9dcd-be5e4ce8ee31", "sighting--0e81ce04-e8b2-4d5b-bfee-b9242351d19b", "sighting--32b1b7bf-c10e-4e8d-b89c-bd87dfa631da", "sighting--ec70e16f-fc84-4332-a83d-2dfd7f244b2f", "sighting--1f34d13c-bbcd-40c1-9fef-12579b728238", "sighting--912ca0b8-2868-46ca-a0cb-5e6293219ed5", "sighting--460eb744-3a61-4fc9-970f-ecdb52b621b0", "sighting--492da314-8605-494e-ab9f-d4f917c26b7e", "sighting--15df8253-51e5-4b6f-bf57-db649a696c17", "sighting--53b944c2-2b30-429c-aadb-e0aed86a18be", "sighting--157b8467-bde3-419f-aa20-cb1d7336408e", "sighting--7eb40a4f-7f94-4678-8a4c-7fdc75a3c2bc", "sighting--b069faf0-a8b1-4aa7-b1ba-61fd711f8a2c", "sighting--2c2ab92b-fdf9-4a7d-8bec-3fc41a324d2a", "sighting--925f7bf8-4f04-4656-a450-27de61d7e637", "sighting--40fd0220-b6fd-4ef0-b7c8-d05fd51cb90a", "sighting--95ac8bf2-95e1-4f07-8310-e206bfea3c59", "sighting--6085b7f0-2a0d-4533-a351-dcf473370ad1", "sighting--23199348-d98f-4508-86c4-02e371f879d7", "sighting--cdb12d36-a663-476e-8690-a8d5726d49a3", "sighting--6071ab5a-f406-4bd7-ade2-830b8f23b314", "sighting--731e4328-9fe8-40af-b8ed-932b4267bfbd", "sighting--f43438a3-484f-4641-a72e-049cd08fe4d2", "sighting--f8070075-dd53-44e7-90c5-1b68f32cc5fd", "sighting--fbcd36d4-59f7-4bd5-84bc-e79fab829665", "sighting--cde67543-d4ab-4a8f-8ecf-23b8645ec3d2", "sighting--25fa7cb6-8443-4bca-b799-e92ba0b737cb", "sighting--df19433a-a773-4eb7-bec0-44eb5f2ecc11", "sighting--cdc79c70-76c2-463e-9c6b-8c03ff12e475", "sighting--c45ce9c7-e0fe-4381-b501-013530a300b1", "sighting--da1dfe2f-c024-43b6-a614-91e499b3e61e", "sighting--6d7450ba-6562-4066-ac8d-312b305db603", "sighting--de597b32-facc-448d-838e-40f77dd3bb5e", "sighting--f9f6b343-91e5-40fb-92b4-ea91783bdd7a", "sighting--680be5eb-5c23-4f1a-b237-8314203a7f23", "sighting--c9548786-cb85-47db-9bcd-14cd9824a98e", "sighting--5dc9c1fd-4f99-454c-b23d-4a24ea6926ba", "sighting--37185790-584c-4a6c-8ce2-0634c335b932", "sighting--18c0137c-03b5-4847-9f3e-c558f8c43071", "sighting--996a00a4-74e7-4ff7-bf8e-c981c17f2a72", "sighting--d4e101ce-cca2-4da2-bcb0-bf30cd4b5518", "sighting--25e33d5b-c7b1-4437-9846-0f9b04433eed", "sighting--13cd7f0c-8df7-4140-9114-2637d456381f", "sighting--11336503-d968-45a5-9f70-6133ea7bc600", "sighting--b2538018-54e2-4f76-a068-42a347f4dc4b", "sighting--6aeff7bb-4b0e-462e-8977-d71280aad6f7", "sighting--1dee8b28-b78d-42dc-b237-0f6789244999", "sighting--d88cf27b-771e-4e27-adb1-c08811750017", "sighting--21eca96b-0434-40d4-a317-cd9598f36d11", "sighting--b7d78fa1-61df-428f-a4bc-28400da62dfc", "sighting--be1ef180-f16a-47d6-92dd-3b57f98dbd19", "sighting--0025ec2e-33b2-4395-b1f3-d7c3e9c290df", "sighting--a1327b2c-8356-48ea-ab46-0d0b31678b86", "sighting--4a7e30ec-a140-4793-a8e9-a7b524e97bad", "sighting--a452b28c-e695-4d72-befe-09b3fa0f9192", "sighting--3139bea8-4fe6-403c-ba77-636d4ad6589b", "sighting--d5c8c7ba-f298-46e2-9d24-2070e727bc65", "sighting--b7a99f17-15f3-4db7-817e-d85fbd57140e", "sighting--4ea4e954-ea8d-499f-9ca1-fc4b5171fcea", "sighting--8c777c30-bcab-4d27-ae3e-374fb623f21b", "sighting--bd163765-ccb9-495b-82ce-f4656901f722", "sighting--e70866c7-94ad-487a-bd07-04d845759b9a", "sighting--db7bfa7f-2017-4fd0-a8b3-879843168080", "sighting--3e39f754-810c-4e14-8104-9ae687153839", "sighting--d6d72e1c-16ea-46f4-9063-41e12d02f763", "sighting--eca4a7bd-a64d-448b-9c0a-fcdac3792333", "sighting--fc2a3abb-f37c-4afc-ae47-5613600c0397", "sighting--24806716-7cca-4b56-a47b-f71c552b4cc5", "sighting--e76f0144-06ca-43ce-b51e-b9fd32d6105f", "sighting--15f01ab1-9ad4-43b9-8881-4c32b8733661", "sighting--dfd89df9-9cef-486e-aaf9-1345186a5684", "sighting--a866f683-3d0f-49a2-931c-44a15e41e6fc", "sighting--f2fb6136-8997-4007-b560-6940d49e04af", "sighting--a31ba49d-7e54-4447-984e-146c0bc038ce", "sighting--d0a43b2d-dc70-4022-a7de-05c2d94552a3", "sighting--2a9a70ff-ff04-48ed-a6db-bdc4a461b76c", "sighting--b5ef27ab-b0bb-4e51-9f9b-55c8d399b8fc", "sighting--f8682a8d-4a18-40a2-a419-ec8745061117", "sighting--a07c3c15-b904-4050-b76a-b071a112f919", "sighting--0efcdb41-339e-4354-a077-ba715ea8b204", "sighting--eac6975f-cbdb-4d9b-84bd-e7c52fe1581f", "sighting--8e0df9f5-ddaf-49af-959a-8a16dbf47b0f", "sighting--23556d16-a728-4889-98ba-0f983b53835b", "sighting--975849b0-e1ee-4f3f-8c55-c357950d2d53", "sighting--2c78be61-27b9-43fb-b6fb-a8de42b25047", "sighting--4bf7abb6-103f-40ea-85a4-20c7c1dee28a", "sighting--19b65fb4-e057-41f4-b574-5e1025f7d48d", "sighting--03682d8e-aa30-4dba-9516-0ae663aedee9", "sighting--1809bb9b-e764-4f28-8edc-ac61910246bc", "sighting--a6e57192-0d4e-4ef2-a6d7-4dab455f1522", "sighting--39b412b1-4297-4224-92e4-c15dc01a4b54", "sighting--baff6ffc-24d6-4c76-bfd7-961550c2d3b6", "sighting--fdcfe765-0953-4cb2-bb4d-a4020ee65c7b", "sighting--667772c9-f843-4f61-858b-8f0443524b7c", "sighting--ed7e35b7-89bd-4e61-9f1b-5010572ce7e3", "sighting--e073b2bd-6d1b-4247-84c4-cca6e995d59e", "sighting--7b3944a9-6c53-4711-b740-86b5143d637b", "sighting--953c0e90-d2ac-467f-9583-cd23ee8cad7d", "sighting--42dc5da7-73af-4932-b4b1-3f70cd6d5ea6", "sighting--9ef5e41a-6b29-488d-bb90-cb2e572b474e", "sighting--fb47b916-132c-4a8d-9c1f-793456b398d5", "sighting--1ab26ebc-e97a-4b57-bfe3-ac0b7f78567e", "sighting--dc517555-4dad-4e0a-a1ee-d5caba6146f6", "sighting--5514d1a4-8680-41fc-b29f-f9e4e39a6138", "sighting--28ff96bc-d416-4b20-8b2d-bcb517cb01a6", "sighting--3cbc75a5-41ef-4705-9392-27ed28f8603a", "sighting--38b0e4f7-53c8-4fef-a5e5-b5838b570953", "sighting--be5b3eb7-ffe3-4c28-92de-2e4a5c5e731b", "sighting--6026e057-bd32-44db-904b-d69920466524", "sighting--bc3138b9-2fec-4320-b0c8-974ea67179de", "sighting--8e87cdbe-2cf6-4bb7-a391-c8bdf395f606", "sighting--e23a3092-07ef-4335-84a0-371329950c72", "sighting--6cfa9cf7-b1ff-43d9-9eda-18456f2e7375", "sighting--2d31305f-8805-48d7-9263-a707c1bfebcf", "sighting--c1df4b91-9377-4b95-9c2d-b336a9828816", "sighting--95b65bd3-5cd6-497c-9194-3b39747997ff", "sighting--48caa249-4164-479a-84e7-97aadf1f1fc1", "sighting--6b1052f7-4d9d-46ba-b054-b6541fd70eb8", "sighting--041f4114-2ee1-4acf-a94f-755a32495366", "sighting--fd648ab4-5d5e-4d75-98b7-702cf8f7741b", "sighting--58574149-771e-4846-aa60-72acbf4e2dd6", "sighting--7b52a980-cece-4e5d-88cd-9d46dc34cb5a", "sighting--16e32436-7e1e-4fb2-827d-fd70c04a82fb", "sighting--762f927a-9102-4e06-b0d9-c233b2d3fbbe", "sighting--c4a34c58-05ac-46e3-97e6-ac7ad28f6ee1", "sighting--0dc853a8-d229-49d2-9b75-1a5a691c2738", "sighting--1b4c017f-fb66-444e-99f8-39d112009f85", "sighting--207101d6-dd09-48ae-8dc0-c47b60d8b58d", "sighting--3e30886a-25be-4d6f-a7cb-afebee66e6f2", "sighting--8104f0e8-6b67-4f57-afe5-518deb914ac0", "sighting--9586ea4c-fd51-4733-88dd-280884e31286", "sighting--84fc300e-e42b-4462-990f-1cde25b458d8", "sighting--f4d2c4b0-4c7d-4e9e-adfe-abff7eae1066", "sighting--687f64f3-1269-45e0-afd9-458427356cfe", "sighting--144a29d8-9802-4001-b1f2-f06bd519f8ae", "sighting--98540d0d-6759-42ea-84af-eb15f5e78265", "sighting--0a7e4f4f-414f-4498-8f2a-ee8632d045d9", "sighting--e4f428fe-c95d-42c6-99a8-69553f1cd483", "sighting--27b143ce-3e55-464f-8b4e-b3834c67ef24", "sighting--b7424df7-59f0-4888-91a6-2d7434633809", "sighting--c291ff0b-f3e0-410c-8722-ed64cd6db47b", "sighting--b97555cf-53fe-4185-845c-b8cf2208e458", "sighting--2fdfe1b6-b7cb-451f-95c2-4b276df0368a", "sighting--99cfdfaa-8acf-422e-b446-eabc8252b687", "sighting--bfa8cbf6-802a-4d22-93c9-62ade3cc7cfd", "sighting--d73ddd5a-9a19-4d1e-bd08-a3f2084516bf", "sighting--17eea8ca-9309-43bc-ad08-58fd5bdfe415", "sighting--2b806f70-1c8c-40d1-9a34-d4c158efa839", "sighting--262fe98b-49d9-47c3-b975-861d26a06e0d", "sighting--6224f89b-45ed-4ddb-ba12-2ea5a2e750cb", "sighting--8905a1a5-eb72-487c-a2cf-9fdf5659172b", "sighting--4fdba7cc-6e1c-4ec7-8219-db5d6865d3bf", "sighting--69193d07-0dd0-473a-acc2-32581eb5acf2", "sighting--5e0ada5e-3b27-4e7d-8e94-b7f27c23dfd1", "sighting--c7ba1e1e-253d-4e79-9da0-16a0159fbcc2", "sighting--73400d95-07e8-44f2-9b7e-7c4bc65487aa", "sighting--6c5d552b-22f9-46d3-a823-81594c270149", "sighting--0e4d2618-21f2-47a5-8d5a-3879f99ba1d2", "sighting--8a4ceec9-482c-4950-a64e-9cb1831a299f", "sighting--d41fa198-a6db-434d-ab51-fa1d2d236451", "sighting--ed03765a-714c-46d2-91d9-6850de1235d9", "sighting--7b8da9ed-f02a-4f45-a319-fde099a297b2", "sighting--755924ad-01db-4449-afba-902ed04f7440", "sighting--35e02e54-acf4-4229-9558-eb7e6fb5a7f4", "sighting--57f7b432-e6e9-4858-8cf4-b074aa19b02c", "sighting--d14ff90a-3624-4e8c-8463-2141018388b7", "sighting--b1779839-5ea3-4ccf-9751-1ccff4710957", "sighting--d0bf57dd-a326-427a-8f01-e5b0dd3e49e7", "sighting--96679838-4055-4464-a768-9adcdcf1a2e9", "sighting--5d115490-f03d-4ea6-b0fc-0ea7e58917f7", "sighting--1fb05eda-af5d-4c4c-9316-c9f336e959ee", "sighting--651bc785-b082-44e4-a702-36e654c76134", "sighting--a1649d99-265a-4ba0-9ece-23f25c27b904", "sighting--470d8112-19a6-4572-9535-cc26a9d73c24", "sighting--fbc1228d-34ca-4c62-b9e8-8c722dc2ada6", "sighting--5a264982-3792-47dd-ab0e-909437ee5e5a", "sighting--9b8a257d-c7ba-4726-a70d-4fe4564380d9", "sighting--a7ddf72d-62d4-4ca5-abd4-4da1e68e2275", "sighting--119c790f-a11a-45f1-9d6d-95cca2443d23", "sighting--08df879e-e6b5-47cb-8382-9832f02f7f08", "sighting--2a389cd9-b5d5-46bd-8cbd-8c558e210eca", "sighting--90928346-5530-4f38-af6d-d12e097ac3f5", "sighting--cb4e4716-bbe9-4b17-aa26-8f2f231e330a", "sighting--3d6e1601-398e-447c-874f-b6e65265d38c", "sighting--d75ef370-6648-46c0-a713-6cdc4807263c", "sighting--18adaba4-3f42-463d-9f25-fb71052c8373", "sighting--f548b3b1-12fc-483d-b50a-f6aea5550a81", "sighting--b91f743e-303a-4548-a7c8-0aa0c29d405c", "sighting--b76ad3ea-052a-4b05-8f29-708dc43bae19", "sighting--1929c804-1086-4f4d-9f11-1b68d5e55b63", "sighting--dc9c4902-3694-4607-9cf9-7c51b4ae8c7b", "sighting--3b179b11-f9d2-4600-89cd-528fdbfe12f0", "sighting--cae49d2b-e711-4457-b6a4-8c302e082d13", "sighting--ffcb20d3-8197-49ed-9313-32de618df972", "sighting--7781e2b6-70b4-4cd8-a0c2-4735ea4a9e22", "sighting--90f446ea-df71-4eeb-bb03-1351618ee5d6", "sighting--10453ea2-eb13-48e8-b7f9-e0b7429c23f1", "sighting--a4ba187b-f7cc-4a54-a92b-84735380a704", "sighting--b7a03a5b-cf19-4090-9636-4e4e3e6b13ae", "sighting--6dee8a61-c620-4c33-a8a5-fb6549528f32", "sighting--202259a6-176a-4acb-9f49-6878589e55ee", "sighting--c8c1873f-15d5-47d2-85f0-9c3534309e6d", "sighting--4b5b144c-913f-44da-b885-e8d11f341178", "sighting--4a82a76f-f235-4107-954d-48fd6c302831", "sighting--6b59c4b6-d862-424e-a87b-e059f54262d2", "sighting--03a16ce5-6532-4b54-85a4-3116eb6b3b3e", "sighting--a83e57c3-e337-4b19-b831-651e8eb1543a", "sighting--4db39b2e-1ade-4143-a223-8d4f21eee3f7", "sighting--70834339-530c-4287-b818-74cc4d29bec3", "sighting--9fc299ce-b8cb-4d84-836e-8e677c5a66d9", "sighting--fd5e88ce-4245-4642-8b39-643a977e9162", "sighting--c483400c-2392-43ac-a4e2-812109eff178", "sighting--b152cea9-90fa-4154-9e20-1064fdd37076", "sighting--6b4dde2e-304a-4ba7-8851-80f4bc23129e", "sighting--711a3e65-d806-47a3-8b47-b5a31e1c6d0f", "sighting--028f58a4-0298-4945-9f88-710a27d6e680", "sighting--ebf4146d-6f6e-4ad3-93b5-5a582231f486", "sighting--58320a63-88b9-4666-9d92-540a6cca9f9c", "sighting--4c5246f0-e1fe-424e-b69d-a776489a62ad", "sighting--6530b791-c82b-4bc3-9014-275f7f12596e", "sighting--94245ecf-f977-4498-b2d7-b6c3bc84b89a", "sighting--da3c2800-7ba9-45b4-89de-25ccd245428c", "sighting--ec1eef55-8916-4b6a-b19c-4b4ee81c5a07", "sighting--4c3e76c7-07f4-4f5f-8f85-45c913c65928", "sighting--10849e4f-6ff0-401d-ad74-9e402de0371c", "sighting--07db9d33-17ec-4455-ae2c-4ad4951dc4a5", "sighting--6ca8e021-fc54-413d-a621-5573cc6cc639", "sighting--acd38082-7d38-4d0a-9ae1-1e9a718ae2e0", "sighting--7bf396b5-5fbc-4394-a53b-74f7eacf070d", "sighting--b90a1247-6509-4051-bfad-ddd5c37a0d56", "sighting--f1e09ab1-5d3f-4bfa-820a-692508b1eaad", "sighting--e54344d4-9867-45bd-9625-90edf2f48914", "sighting--cce62306-61e1-435c-931a-5707838c4b8c", "sighting--41ac07c9-9f90-4642-a116-7d7c520c8ad4", "sighting--9c55afa2-3c66-49c2-a3b1-4af14a195784", "sighting--22254442-e7d9-4318-9c73-b63d77940e07", "sighting--00b855b5-36a0-4f37-b67a-6a083521d7c6", "sighting--3082fae0-c48f-40ad-a15d-1ecdecc976a1", "sighting--7600e995-428e-44ca-a49e-f85fcbd30c4a", "sighting--cff43fab-133e-4425-8d06-1cf631f61dd3", "sighting--72e8f226-7023-4ea0-b9b9-8d5d944298bc", "sighting--8579041a-113d-47cf-82ce-3f8c5d686a1b", "sighting--23c3d42e-5970-449c-8f9e-dd19a7f396f4", "sighting--4c05696c-c98e-4a3a-ad7c-1ae95ef8e6f5", "sighting--ef966d25-e7b2-4e07-9c75-f0839a3b1f49", "sighting--282cdad0-b48b-4ca4-9929-2c9737df085c", "sighting--ae3ec494-6405-4935-bf0b-fae2ba84736a", "sighting--f7977575-1d84-4a41-851f-4ca1679e3609", "sighting--b1e2ad8b-30e1-4d6e-a803-bc3bc638c1b7", "sighting--1eb82403-626e-406e-8a7f-b9b842bd9bab", "sighting--da849c98-1f34-40f0-93fc-c091cc21fd85", "sighting--12fdc660-f2d2-45ae-a3a9-f7e4e45cde49", "sighting--3373ccfd-f2f5-4f9b-965b-4f5cb07680de", "sighting--c6cb1ba2-ed30-4f97-a30d-70264247cd0e", "sighting--de7e6ec4-2ea0-4cea-9926-caff5b08a942", "sighting--7b6b868b-394f-4eb0-a72a-ef44c433498e", "sighting--6662a56f-d117-4060-98a5-d21be63faae9", "sighting--6b5b9d83-b6cf-4f12-94a9-b1b8786bd478", "sighting--a22e7a9a-3585-43ec-9eda-383b759ce6b5", "sighting--56f79ab1-3621-4cc9-8afd-18da2b05758e", "sighting--0a163c27-63ca-4ea5-b828-af1b2fb147dc", "sighting--f293b607-f0f0-492c-acf9-fc3ce11b340b", "sighting--ee006899-a48c-48cc-84e7-351c73ba5495", "sighting--0a66b615-e0ab-4faf-bb96-dad4ed0febd0", "sighting--11fca845-1824-4d46-8f56-f753c3284555", "sighting--a2738f6c-6ad2-424a-b6c7-7e5dd2d278b0", "sighting--b65d400f-444f-4318-85b2-e156649165ef", "sighting--92f65a4d-584e-41e6-b6dd-18b1d38edb8b", "sighting--607b6fd9-f562-40a5-b709-8904bbbdda4e", "sighting--5d7a9cf8-5e88-494e-85de-42fdd2038f61", "sighting--e255b937-4236-43ff-8954-1dabb1d8920d", "sighting--1b25d3f1-564f-46af-92df-5c8aabe3cef6", "sighting--9769763e-290b-45eb-9411-5d3858e2d718", "sighting--044ab24a-53b9-4a54-b1a1-c0b535b1ff4e", "sighting--561bc83d-2865-4d82-8f98-ada2d7268752", "sighting--d3082d28-59be-42ea-b570-80a6a8dbb6f5", "sighting--7c123c20-5d07-4208-9e2b-a6dafee23bd7", "sighting--297f6fa7-510e-4882-a203-dc8cc4a1923d", "sighting--e30f06a7-bcbf-419b-ac6d-bb9a285e13d4", "sighting--9b822821-9617-42b8-990b-1db188bb7769", "sighting--562b08c9-8cce-4f31-919c-919bae3d5cf6", "sighting--7a703288-00a8-4d17-8d4e-d08fbd1925bc", "sighting--bbd0183f-f600-431f-b91d-d7cbd30a7fdc", "sighting--fd1b53a1-32da-4d01-afef-2c82371414e7", "sighting--b35848b4-951a-4656-bfd3-c2b855140f2f", "sighting--271a9e2c-63aa-4d3e-b238-fa560059848a", "sighting--7d4c405e-9360-4104-8658-5bab26783992", "sighting--070ac84e-a698-4a2e-97f6-52afc97dc495", "sighting--d0378fa7-eec3-49d1-ac21-3dd055fafd7e", "sighting--9a2831f6-3f1a-44ee-9f82-f8081fd92689", "sighting--be6c2dcc-96f6-44fe-8aa3-68f93fb376b1", "sighting--f4602e78-c4fa-450c-93bf-7c0e31c04ab0", "sighting--d77fc504-e075-4759-b09e-b611202730b3", "sighting--f58f3197-f4ad-4b55-8911-c9f0d49a0933", "sighting--553e0ffc-addf-458e-9c93-bd4e0816b807", "sighting--11b6eac0-1684-4f64-92aa-c2012baf52a1", "sighting--65024546-d1e2-4930-9e74-ad226804e6dd", "sighting--cb7b2f1b-f361-4b58-a625-3811592bf415", "sighting--1614d3b3-723b-4bdb-8b0d-b0929237710a", "sighting--e307303a-9369-4efc-b320-f4868910952a", "sighting--8ad251a6-a765-400f-a999-a92e52e7ff18", "sighting--2b7f5c49-4805-43f6-bb97-2350f2d6c563", "sighting--f3054aba-550f-44d1-8659-038f7e18e851", "sighting--2d3f2232-008d-4f78-addb-39cc8016f0a1", "sighting--82f6e192-b475-41d8-bb51-4a1addc1a67f", "sighting--2e7ce29f-a9e1-45e7-bca6-e2d3016b3f73", "sighting--cec8337b-7d0f-4752-a943-72b513b5406a", "sighting--cd185e03-ca1a-40a3-b745-be076ed0e83a", "sighting--06a5bd4e-c92d-47e0-9e98-eae9bc98b180", "sighting--3e76e43d-4406-4037-988d-39f3f36b5841", "sighting--14965ea8-3b15-42a3-86bc-bee911dde8e3", "sighting--f1aafb5e-5d5d-4cef-b3df-819d18c9bddf", "sighting--b8e9769d-475a-4ae0-a7d5-62ec12d28aed", "sighting--58b1ecee-e40d-4067-8a1b-3cc26e0c1522", "sighting--121633dc-4abe-4359-9df9-34f154360993", "sighting--2054eb69-bab9-4b2a-a440-bfc251ebcbb1", "sighting--ee1be4dd-5dea-4cf9-b8bb-4e4c5f15d763", "sighting--5485d434-8b03-44a8-ae6b-eda354adf17a", "sighting--572f3165-51a5-4432-8a66-3bae39466a76", "sighting--b61b48d8-d8c6-41da-acd6-baa43343a7f2", "sighting--cae26249-e797-4d9f-8453-32aa73a00b49", "sighting--7593412f-5e81-4d76-b069-489e83af2987", "sighting--2233c7b5-24a2-4eb4-a892-d9e54bd8fd51", "sighting--878e7526-e29c-49b0-94f0-ad009898807e", "sighting--9f4d21e3-2012-4b40-b6e7-a6a637f1d22e", "sighting--3e784662-060a-41c4-a8fd-a5ac64a2b83a", "sighting--7632b4e3-9da8-4fe0-835e-7b9f2c5296cd", "sighting--27cd739b-4373-4b7c-9996-55249f0c44cb", "sighting--5c621068-32c2-4d9c-a5f9-ed26da146897", "sighting--9d62591d-aa2b-4646-8764-2b61509355bd", "sighting--eff6c3d6-9d3e-45b3-827d-38e38d885611", "sighting--34ee5fb0-9c19-4aa9-859c-63d55f67d823", "sighting--8057f833-1c66-4bfd-a8fc-dff1cb47c16d", "sighting--613b25f7-4cd2-4529-8980-27297f991291", "sighting--0a6d81e7-c0ef-4373-8313-1d6cf58c8931", "sighting--fb3dd6dd-675b-447d-bc3a-5aeccb976306", "sighting--5605b9d8-5681-4c5a-9641-a77d931d572d", "sighting--cdc59a61-fd8b-4797-ae1d-7452abf5b51e", "sighting--39204bd3-7767-4a3f-bb7a-a97ffa910152", "sighting--724832df-701a-491a-a0f9-7955c9d86626", "sighting--6b45f763-3f24-45fa-abe3-b25c6d6c0435", "sighting--09cd1f17-45bb-4ce7-8670-8e7c2ece2bfc", "sighting--b41587be-561a-470d-8eb7-74a43db2610e", "sighting--a7e4954f-bed3-4c1c-b40a-ef3dee886fd6", "sighting--fab613df-74bf-48c6-a2a5-b18629084dd8", "sighting--d4403691-2041-409e-a64b-bd64d95a801c", "sighting--3ad05ca4-bee9-4475-bb26-5ba3de634500", "sighting--49c87d9d-7a1f-4e24-9ea2-42b5db5c7c44", "sighting--dcbba805-e54a-4f98-abda-9ba659c77d22", "sighting--505dd62f-a45b-45fb-89fc-46b10efe3776", "sighting--d7ad7049-e563-4579-9fef-2e658f097d2c", "sighting--f0326ff9-d8dd-4813-b4ff-8703dda853eb", "sighting--bc9b6f11-e925-4e8c-b47f-85d89ebef537", "sighting--b1f7db00-4af2-463e-9e4f-fff1af6cc9ed", "sighting--bfb6427f-92a6-4852-abf7-bb1246c4818a", "sighting--e0cb64b7-0da6-41f5-8636-e885106f6f81", "sighting--8a19b40d-885f-4107-97d0-785261800e9b", "sighting--cda52f13-2b96-4779-b7e8-d19ac901eb0a", "sighting--4e7bc31c-1e00-47e2-8703-39a21f068ba0", "sighting--1c48d332-eead-434f-add5-a41b59629f6b", "sighting--9725615b-5aea-45a7-b89b-8022c58cbc7e", "sighting--f49e0a86-2e79-4649-b880-be6bedd8bb76", "sighting--4bd7a911-c138-4f47-ae2c-f1ef77abd192", "sighting--89efccc5-8e3d-4184-bb7e-6a10ab27b648", "sighting--8b14ebde-aeea-495b-8b1d-ba9cabbe70f5", "sighting--655e893c-7e30-4c6e-a4d2-4759318c045c", "sighting--1a99605a-bd49-424c-a162-ccc7c0063226", "sighting--2a673f72-1047-452e-9c19-88174adfeb71", "sighting--a652e707-c005-47f7-b0c3-13579607e483", "sighting--6f17abdf-1555-4d5b-9191-5f14d6c29e3f", "sighting--747af261-068d-43f8-9d67-3964850befcb", "sighting--48a6b7e6-3f48-404b-8000-e8011cb95ce6", "sighting--c3e83fcf-567f-4646-a1c7-ed8da90fca2a", "sighting--175c415b-2d88-42c7-9807-a0502785cd47", "sighting--c31a0497-38ff-4c8e-8e11-c72db2bd055f", "sighting--12ee41bd-376e-4fb9-8d23-d636b343a870", "sighting--41bd778b-1515-41d7-903c-ac2e9c29bd2b", "sighting--24125fcf-8c74-4d4f-b2d3-cd1861694876", "sighting--f48aaf66-49e5-4154-a092-fbdf5a47fed5", "sighting--7d5c44a9-7a15-44df-aaaf-5a77f29a85e6", "sighting--fc9b71a8-232c-47f4-bf28-0d22bd515855", "sighting--fe03801c-9534-4d36-b4f9-ba6cbdc27be4", "sighting--97d6c4bf-3334-4297-953c-dabaa8f6cc8c", "sighting--a8547958-128c-4c1e-a3df-af79e1734e56", "sighting--f2dd710a-dbec-4dc5-9c25-64c890a56c28", "sighting--1a8caba9-1887-4918-b548-32905de0c7d8", "sighting--fa6dca51-9bfd-457b-8683-932ba5e6d8c9", "sighting--83dc9fb3-8c54-4a91-a73a-b2fff11b44d2", "sighting--833f7529-7c9b-4134-8cdc-61f8fbd5bb3c", "sighting--377d1f3b-d652-4228-8890-2b9082e550e8", "sighting--fb763974-c96d-4e0a-8d74-110f74731d4d", "sighting--382e9813-ad7e-4552-a1e5-f5d51e6de2da", "sighting--1a65ecfd-d5a0-4c18-985f-914a5481c272", "sighting--efd6dae4-4830-4e46-9fee-3445c80f597a", "sighting--8e2ecea5-27c8-4944-a7b1-69dac9e6509b", "sighting--a27ffd8c-3965-4b7d-9f7b-54f6b3e7145f", "sighting--f208fc15-9fb8-481f-bf3d-45bb0a451690", "sighting--b442737a-645f-417e-824f-47f806cc69c2", "sighting--036ac54f-f63f-4ef4-8c47-345eb5d6e362", "sighting--ec765163-b849-48cc-bf9b-2a3fce071936", "sighting--7c464a05-1cea-468a-94f2-c45da4ee6b86", "sighting--5e9fc464-b5da-4709-a58f-8675b24ee04c", "sighting--4eaf40c3-13a4-44a7-a328-e8418a6c7b9b", "sighting--ff673ff3-5947-4845-9db5-bbdd0a0d1688", "sighting--5319d9f5-eeda-47fa-ae83-b9d0b2ba5a2a", "sighting--a8e7a8fc-20b9-40fa-be8d-0f3d089ac740", "sighting--fea83807-a75e-4118-856f-51ed1c1f4b0b", "sighting--7d056f3c-0dbf-4c42-b99b-18bb742ef969", "sighting--1f139ece-9665-438d-8800-00e433c45890", "sighting--bb46083b-ed9c-49e4-8a2a-ea9d7287f8eb", "sighting--f512befb-43f0-4c10-8ab8-e28243129288", "sighting--1c556e90-6896-43c5-bc19-970428a44a7d", "sighting--33f620d3-8a3c-4ef1-bf2f-2b2984858f29", "sighting--54bfd28c-99ae-4363-bb16-18315c18af85", "sighting--746d2934-57f7-4d6b-b04e-875c278da7c1", "sighting--8e28825a-c7e7-4912-bc46-9e5ac8daa5be", "sighting--979d819d-51cb-40ac-904f-dde40fe97488", "sighting--d232570a-a46e-4630-9f34-9867dc31bdcb", "sighting--19526640-2b18-446d-a694-22f3c46fd553", "sighting--c1ac3b9b-47ff-4581-8d9d-b1041628d448", "sighting--49c6d9a3-c624-4150-9f67-0b08413a9066", "sighting--c632e8a8-e42c-4cfd-bf59-30e7b7190162", "sighting--aa1f1ce5-3026-46f1-8ece-2589d1beeb6d", "sighting--333608a4-013f-401c-ac64-00bd594fef6f", "sighting--f97a45f6-5a7f-4104-a2b8-f9f88e38267f", "sighting--50fa7d9d-e83a-4536-905d-9b3e98131f5b", "sighting--e905eaf8-6dda-403f-83b1-f5093cd56ba8", "sighting--04d4a7a4-abed-4fdd-a8df-5720d4dbebf6", "sighting--c04ffc6d-56f8-4cd5-b549-f9ec0f8cdb93", "sighting--e04daeb1-9a57-4037-9df7-21da3bd3a3ef", "sighting--2d36a2bc-50a8-495c-b267-cf6903d78690", "sighting--c46fabbe-e4e0-4e2d-bbb9-a76800ad6f22", "sighting--b07b8326-f543-408d-a367-6061ff6fc2db", "sighting--fce786de-4d77-4374-92ed-32714ed67df5", "sighting--147f2435-e6d3-48b4-b529-18849fb59f3a", "sighting--b7b830ed-5e1e-4e5c-bc9e-b3b87ccfd40b", "sighting--53e50f6f-8956-4738-808d-4f3735c036c1", "sighting--b49f7b04-bdac-4eda-b34f-8673c96eef55", "sighting--1feaf8f9-d779-4931-ab1f-1c6e905cd71e", "sighting--227cb88d-0847-4830-a950-4df84647009c", "sighting--9cddbd0b-4246-4eb0-b8c4-e1966cb4d880", "sighting--440b0da5-335e-4571-9f89-c1d6acfa1f7b", "sighting--204dc040-49c3-4a44-a88a-bab1b751c046", "sighting--1a91b4e9-a640-4dbe-8ffc-77f9372d1993", "sighting--2407b6ed-662f-4a1f-9219-3a161c3eb259", "sighting--1f2ee46e-0bef-4ba5-8ce9-67a3fec87ebd", "sighting--822125d3-34bd-42bd-b19f-789040b38bd6", "sighting--3fcf28b6-7af0-4554-b277-d52f83a2cca0", "sighting--40a1f7b7-a949-4c89-a665-6cc918a60f77", "sighting--c58df3f1-921b-42b9-a5dc-12c14aee76eb", "sighting--6fc2c0b9-04ec-47f9-b1c3-e1f93b8ef57d", "sighting--9d392b2e-c4d3-4a63-b151-3352cd0e59cc", "sighting--69872456-9e70-40b5-aa39-19f46f966ba5", "sighting--b2b6095e-efd2-444a-b800-287af5409e26", "sighting--e2c2d077-a1bb-4d37-b794-17afc3ea5851", "sighting--ee83da62-eb5e-4336-8933-2b9c7da580fc", "sighting--5c033b8d-d111-42fb-9047-9e378aef14e5", "sighting--bba96c0f-f737-44ec-8bd5-010ff3474f46", "sighting--84d18698-719c-45ac-ba14-a9b9e64a4ceb", "sighting--6e49202d-9643-4a2a-b78a-3e9653b7535f", "sighting--98359423-8756-4887-849e-a51658a73b1a", "sighting--a122c5bb-b27d-4359-8792-3e1673a5df65", "sighting--e77405b1-9045-41eb-af8a-8c9d8cfd6c1f", "sighting--1e3c1caa-2318-49f7-a7b2-4fe19cf982af", "sighting--de8a1fe0-e1c8-48bb-8a85-d8998c3923f5", "sighting--08d4f155-3a23-4781-a457-de257863be82", "sighting--090abc34-85b2-4b21-84db-047915469fb4", "sighting--c1241dc9-8433-43b5-beb8-523f7815676d", "sighting--b3ebf5ff-2437-4e5f-b4d3-b09c769003c2", "sighting--17e80cd5-5b7e-4b6d-85cd-08f224ece869", "sighting--13eec0b2-fb0e-4bb2-adaf-0bae57e64ee5", "sighting--7f728008-fa71-4c6b-bc64-419d71423360", "sighting--889515f0-dcb3-4658-9d5a-02f7ba7fe06a", "sighting--86684875-bee4-4c16-819f-63a4c1455813", "sighting--33e7e0b1-9c51-41aa-af4a-95f3732fd4c4", "sighting--ccc072c9-9954-432c-a3ec-0bb8a65e5be6", "sighting--79fc517f-3c27-4ddb-9911-b08789cc791e", "sighting--fdb0004c-a6af-4af4-ae45-239d0f413a4b", "sighting--d0ea3a05-0163-48c5-bad9-b706e3f4add1", "sighting--7de99e94-d598-45ff-a364-fd0e4e141617", "sighting--9c1f2567-ac70-4c5a-b6d5-710095cc7beb", "sighting--78192c61-450f-4a1b-adf1-9cb19be66c3a", "sighting--7b1401bb-8063-479a-bf1e-2636ad665355", "sighting--97866322-4ad4-4ff8-ae7e-bb8aec5cadbf", "sighting--f52977e1-478f-4292-9188-5061e6106557", "sighting--d864e491-31e5-4007-9d54-a15518b126f9", "sighting--698cf903-dac5-4e80-a741-81545f6b5df6", "sighting--44aaa728-08cd-49b6-adb2-745075b2b85a", "sighting--e4ae8755-d3ee-43fe-b89a-bb72866bb606", "sighting--019fbe1c-27de-48b5-9705-0cc763be962c", "sighting--f7bc6151-edd7-4d32-a375-e96ff9fb817d", "sighting--817a6d90-6f18-4db9-b2c8-7648e3ed18dd", "sighting--e22810d3-e4d9-4602-bfbb-3c10489804a2", "sighting--1d26372b-6341-4e6a-a3da-0b19bb790d7f", "sighting--3d28f6da-51e6-4ed4-90c3-bb4d6ac33d55", "sighting--f43ecfd6-d6d7-40c8-8a64-f9288401c108", "sighting--12bafe94-7ab8-4a0f-96f8-b0d4c0360ff8", "sighting--35a27be0-10c3-4c2d-b495-6343bf4e4868", "sighting--0fb33b18-0677-425d-b2b1-412bbe0a663a", "sighting--573040d5-44ac-47bc-b59a-6706f76b9430", "sighting--856dccec-9ae9-4d02-93c9-c46933d754db", "sighting--71352229-6674-4834-91e7-23cba9e5d2f6", "sighting--6c26c38a-67e5-43b3-a75c-686dc2f43475", "sighting--edfe33cd-be5d-4fbd-a3a4-c6e5406aa8c5", "sighting--c4ba30ef-6c1c-4db7-9d34-d507145d2fbe", "sighting--05ba2ddd-77c7-43f1-9ce5-68caa6509f8e", "sighting--0fa8ea38-8844-4f1f-890c-38578849bd38", "sighting--dac3562c-8358-4ebb-a102-60bb71b0c1fc", "sighting--547122f5-67a8-4fa8-bdb3-ccf68c369d2d", "sighting--79a4b691-d01f-4d9e-86b8-b2c76c487a25", "sighting--56c38b9b-80da-4035-9c01-eb06af38cf32", "sighting--17859028-32fe-4de1-aacc-30507570cf5e", "sighting--983f4e04-c646-4e1f-a2ec-e427950c8977", "sighting--29896c90-dc2d-4699-b8aa-e77bfcb5b056", "sighting--a59f041f-47f7-43bf-a44e-dc3239d57958", "sighting--cd5ed4bd-c0a9-4b83-adcc-a2db41918f80", "sighting--c204672b-94d2-49be-888f-1a572db288ab", "sighting--28ca48f3-f5ca-4260-8828-214aa4d327cc", "sighting--4f865b68-34c2-4774-9120-99631c0fc620", "sighting--e452d3fd-3d99-4e9b-b713-80d1227080ab", "sighting--978efa31-fe98-4af6-8f9c-3c00f44eb209", "sighting--b20e61a2-2046-49db-8e70-63aefe2bfca4", "sighting--feaa2c1f-188a-482c-8bda-01cad3bc8c95", "sighting--c55f072b-feee-4c05-992c-7bed59e46c7b", "sighting--d93b4d9b-7545-45d6-8e94-11f2f023e999", "sighting--188f0970-cf08-41cd-8c9e-e4925f6eff4a", "sighting--00980a72-8924-413c-820a-8d187d2ae9cb", "sighting--a7ec5413-42fa-46b9-bf6e-5c9f35b9ce6e", "sighting--3f2b5a2e-f994-45fc-877f-605ac13eab50", "sighting--5234e217-212d-49e1-9fd2-da1b5b658e62", "sighting--9a9a7d1e-c9cc-479e-81d7-8d7664072d86", "sighting--dd46cb9a-e410-459d-9b74-d68ea5cc0e0b", "sighting--3c201d17-4778-4383-a86a-fdcab9308604", "sighting--bf852d7b-4be2-4774-975e-65e02455874c", "sighting--1febb672-e37f-4281-8ec3-453b5ec43863", "sighting--984e242b-c383-4096-a04a-6b7d46c50b50", "sighting--a09f437a-44fa-4b55-8a01-d8097a709a7b", "sighting--9946cf72-340e-4e36-87d2-e1df8096ff44", "sighting--93aa835d-67f5-4b36-b73b-3ec21c0ff9b1", "sighting--0b1a902d-715d-4cdc-98b5-eb0f01e11669", "sighting--e4e9730c-5c71-42c0-94e7-72f4b2e28b4c", "sighting--360fbf9e-922b-4ffb-86af-4975dda04770", "sighting--c7c5dffe-6267-46bd-b25f-99932fdbac5b", "sighting--90dd67cc-9b11-479b-8e68-478dc456cc2e", "sighting--6484b510-97a6-47af-92f8-5dae2c00c954", "sighting--62c96998-4edf-4589-9230-a807b6d1b75c", "sighting--f256a66a-9825-4c4d-be1f-977392383818", "sighting--abfb13a9-ce10-4283-b94c-483ae4b2258a", "sighting--e9693439-4736-4629-90dd-9d6d8ed2d3fb", "sighting--8e5a41e4-c09a-49f3-89e8-dc6b9782f095", "sighting--67b74261-64e7-4dc6-9369-ce1c20db9c66", "sighting--9fba68a3-8b9d-4fa5-96e6-3b22fff55e92", "sighting--2ec7c80a-b26d-4150-8c86-85c97c4a1a25", "sighting--f6a08855-1e7b-431c-bbd0-3f318d43a126", "sighting--5508cd86-90ce-4919-97bb-c02e2618acf6", "sighting--b91ee42b-7e23-4f8a-8d89-64488d93878d", "sighting--d235cb2e-b4e1-456e-9a90-69fddbc09bcc", "sighting--f9cf7ed8-9075-4f74-b69f-6cffa4b18249", "sighting--253b27f5-e254-40e4-8acd-a1b462879c8a", "sighting--8feb8d65-fbb9-4fd5-9da1-933bc9bb405e", "sighting--87903e96-9038-4eb8-8f7a-87a5e2a5093d", "sighting--dd59b924-6e64-45cc-94d9-2f0dc01595ae", "sighting--119b33e6-263d-4693-871a-35bcb3b48da7", "sighting--5c8610d6-8ab8-4935-8cc4-ff23fa4a41cc", "sighting--bc557286-94cb-4a3c-aaef-d04989dfb0a9", "sighting--5da17b4d-bda2-4f79-860a-7225f9c1421e", "sighting--236974d3-278c-4eba-b5b1-27d4a72671b6", "sighting--4c15a10e-01b4-45c3-b200-40c3db2c319a", "sighting--056d8717-350c-41b5-a171-22419edf93d9", "sighting--a0168331-930a-450f-8739-cba48341d693", "sighting--018ca21a-f5e7-4e0a-a3dc-8f5c66f8364b", "sighting--ba90f11c-2aa0-47d1-8eed-8b013b8a8207", "sighting--45e8d472-4da3-4f86-aa26-26f991e0530f", "sighting--3eab1c5b-d42b-4542-ba77-279b25061b52", "sighting--545cf540-d425-47f2-90d2-03ce10216277", "sighting--96fd4195-c3ae-4960-bba9-bc101e115edf", "sighting--c1a2ae95-9312-4d55-889c-dbe0c1366874", "sighting--34042b56-8625-4348-989c-d36dd1c89a84", "sighting--ed69b0c4-edb7-4ac7-8c0e-0ef50a6a5693", "sighting--2c4dba93-91d9-4546-97fe-e8d7bc46197c", "sighting--d3863cfd-e54e-4d96-834e-7a458e4ede8f", "sighting--91f81039-777b-4e97-81d6-5656a15694d1", "sighting--ceedb95c-7098-4aa5-8da7-847df117734b", "sighting--08271543-533c-4fd7-a792-e7cb7b72915c", "sighting--4efb05d8-ac9e-4f13-83e5-7233dedc17a8", "sighting--1437c4c4-0a8d-4e7e-a714-29271586353a", "sighting--e63330ad-5240-40c8-85bf-0784689105eb", "sighting--31ded6ac-c872-42a1-829e-343eca2435b5", "sighting--6a3eacc1-83d3-461b-8a0f-b89486879d36", "sighting--ebb9ff1d-e9e4-442d-8725-bceacc239682", "sighting--c28300b5-5c51-469c-b8f8-a82edd31221e", "sighting--6bc68a41-013f-4262-82e6-7f2c715fd356", "sighting--3497105a-477d-49ef-bd20-a7203b855ee1", "sighting--13cb5f4f-640f-4705-b177-f26fae232c12", "sighting--ffadbd09-0b43-408d-adf7-51ecc33f2500", "sighting--15c0618e-e8ca-4308-8397-87b58b37980f", "sighting--ca3e3bef-a868-40b6-bc6a-2d4c123e9693", "sighting--7f085f65-72d0-4a07-84bd-6dd2bfc1e371", "sighting--aeeda2e2-983e-44ff-8e2b-ea6c4f48e7f4", "sighting--5367552c-3623-42f8-a185-49db6d3f4265", "sighting--e5a65476-c6d3-4743-8b19-4bea8126ae6a", "sighting--6778875f-74ff-4c9c-87c2-a90ed210dd14", "sighting--191d1f0a-8949-4447-8ba9-574ad49dc743", "sighting--a9510283-f6f5-4f5b-bfa0-283a1f0b9414", "sighting--df1e9237-3d82-466c-bb2b-6288ee9cf512", "sighting--1379b719-adaf-4601-8bd2-617ce21e524c", "sighting--d33a9da7-2961-46ee-baa5-d2242085e698", "sighting--1c14f70c-3afb-4d97-b5d6-5acd98c4fa58", "sighting--fcab3577-0cf9-44b7-b6eb-494c9ad92459", "sighting--462d4ac9-e073-49b3-a9b7-6952a23c4cdd", "sighting--8552c0ab-6059-4932-8c8f-fea1d530ad00", "sighting--5e28e31c-8300-4ca9-b89f-4473587bd3af", "sighting--c0adb603-fe8e-4f75-b288-b603ec982b86", "sighting--61df158b-52cb-47eb-b2f1-59535b203c5c", "sighting--7f7f1711-f39f-4cf0-8e9d-e6d7b891af4e", "sighting--9bcef577-d641-4b62-bb62-47cb1dcce1cc", "sighting--fcda1d99-09b3-4259-960f-e5fd15f34057", "sighting--ed320493-ca02-4164-8229-8581b935a093", "sighting--662bda31-181a-43bd-916b-1c550b046985", "sighting--aa2c4d3f-0ad3-49b5-a790-d29b82d1890e", "sighting--48948e72-8c6d-46cd-99e6-4c6f802500f1", "sighting--7dad505f-d985-4a8e-851a-e8ab3d5df431", "sighting--51411ffa-5b3a-49b5-aae3-840ef2396b37", "sighting--f9ceabb1-e6f9-4b67-b7d8-93e3daf2f005", "sighting--7249bc09-1fd0-4b69-a4f5-a54403852f39", "sighting--aad94fbc-c332-4261-80b2-24c8d5258f98", "sighting--782adb19-99df-4392-99c8-6c717fcc83f5", "sighting--831cb15e-81dd-4e78-bddb-7aa35b9e138a", "sighting--23440924-e9e9-4b7e-9ee7-80f55f62a091", "sighting--e24ba57b-e729-4553-bd58-6923682462ed", "sighting--cb68c01c-5466-42b2-be95-9919b97a9e9f", "sighting--8bcac9ac-5b89-46f0-ada5-2d2361f3b3f2", "sighting--9a65c470-0418-4139-954d-35123aba62d9", "sighting--759e792d-508b-4d15-b6c7-e28b9543c841", "sighting--3ecc6408-4b40-43fa-88a4-a7320ca63b38", "sighting--1857cf2e-7322-4ec2-a4eb-c296c4bf0533", "sighting--c9ddf8cb-ffad-4a7e-b477-99bc27168e68", "sighting--99a3b30d-97a7-4cef-b538-60dd605c4799", "sighting--42d54b94-1ff6-4227-9951-b13d41f38202", "sighting--e7e4a237-2ab8-4d58-aa5a-8d82fce215af", "sighting--83543c56-0d86-449f-91b2-4f4bab1fee92", "sighting--eaa99f02-7a13-4668-a574-8f95c7d65a13", "sighting--e55871dc-e630-491a-94b6-14aa017097fb", "sighting--99024635-3aeb-40ef-b231-c0d4335a7618", "sighting--35c2ab96-b9ec-4f10-b7e4-9b7e154b141f", "sighting--d2823ba2-883e-4a82-af0b-fc2a504372fe", "sighting--bea888ee-2c8b-4208-9ff1-c2c9e096d974", "sighting--019705a6-3175-4806-84b1-c85984eec0a8", "sighting--9a92316b-aa10-4542-b70d-4e2fe3005d75", "sighting--5967b8c5-3988-4fce-994c-c7a5a04086fd", "sighting--2d19cc29-d502-495a-bea9-dcd0d6da64cc", "sighting--a2063a96-9713-4ae5-9bf7-958d73083778", "sighting--437a25fb-e8e2-4579-bcb1-3d3e95ee94bd", "sighting--f118a140-1431-4855-80e3-74171138c57c", "sighting--00992a3c-0eb2-4f69-967b-0fd327a364f3", "sighting--86e7ae30-34cb-437b-a92d-d790cef37a2c", "sighting--f3f1ecba-ccbd-48fe-9afb-14da627c3eca", "sighting--c76c258a-a3ff-4619-9f4b-3281523cbef6", "sighting--efd6efe6-b367-420b-a9eb-1aec27997851", "sighting--41f57420-66eb-4f6d-80d0-331f11d67d8c", "sighting--7e69e963-6d11-45d6-afdb-cd5cc9b6c99a", "sighting--c070dae1-50fc-498f-b2ec-13c80186e7cc", "sighting--50b933da-2f28-46b4-b85a-65147df3061f", "sighting--d58c80c3-5f97-4753-9f1b-b047946aa1bf", "sighting--efa704ec-372b-4a74-b5bd-7f28e4471759", "sighting--a4cd14ac-8479-40d3-a828-7a856f096299", "sighting--64dba214-8eb0-4783-8857-1163982ab4fc", "sighting--62f8fc5f-6264-4c96-8651-ca130845a500", "sighting--f9b6e9cf-ff8f-4196-aaf6-40dffc75c00e", "sighting--57fb743a-5ac0-4875-88bd-96d7feb349c8", "sighting--ed6e2377-0404-4de4-aa41-2b0a999d93fa", "sighting--4def7f5d-4aea-4af6-9d50-4eed8ff1ea02", "sighting--501e9b03-e403-42c7-a707-dcb176aaee03", "sighting--af3f6e5c-a626-4b93-8ebd-07f2a94c150b", "sighting--12edd38c-f879-4a67-880b-bdb9ef055f2e", "sighting--2fbee2cc-984c-45de-8025-800a883b610c", "sighting--5449fe59-ed37-4569-a8f0-510c7ee1c4c5", "sighting--64349790-b823-4759-b4dc-2cbbcaa04b3c", "sighting--5789704d-c601-499a-8128-bfeec66b3a10", "sighting--2e65f51e-72b0-481a-889f-0862b83ad731", "sighting--c9949e88-33e6-46bf-9189-455ec966d512", "sighting--0b2948c7-ba39-4b2a-a942-1cc6b92fd02c", "sighting--6a950a2c-795e-487c-bb22-4e7521fd1b5f", "sighting--ff08b060-c167-45ad-bb99-10466dce6c93", "sighting--3bd0a576-515f-4cf8-ae37-1a824b791eef", "sighting--c1cf30db-88db-45d8-8d3d-65a6ec33b2b4", "sighting--179f8e50-535b-4f94-9ad2-694c84d3c22e", "sighting--055620eb-b855-43fa-94e7-5257bba38b57", "sighting--c8cd2325-4da9-498a-bd10-7bb298cb3e5c", "sighting--d76d3b91-f407-4790-9208-6e58b9801f1f", "sighting--e3c8629f-ace9-42f7-a605-30c565a67c96", "sighting--5f5f622a-d11f-41a4-abc2-7d8d00285210", "sighting--c2af073f-a693-41c6-a83f-a49be06ff301", "sighting--0518e9a9-75b2-43fe-a7b1-5144b80bceb2", "sighting--9e228646-4aeb-4dbf-a9fa-2168a88ef011", "sighting--fc7f286f-3bf9-4644-b8ed-2c47b23752bb", "sighting--56a16afd-ecf4-4fa0-a58b-b1f767050c1d", "sighting--d9a60405-a25a-4f90-a7e8-8c8cbf73bddb", "sighting--3acc38c7-5c45-4e0b-b83d-69af339a6da5", "sighting--1ea65584-593b-4cab-8852-73ce6797d96c", "sighting--2772644c-1ee5-4600-a290-d19bdc2a091c", "sighting--edec5997-721e-410d-9f6c-41a55e615624", "sighting--1b911ead-d0da-44d9-b75f-2fe0e57bf184", "sighting--52b19428-f02d-4747-86ae-3c749b40151b", "sighting--b0458770-2ae6-4c29-8c8f-eef2e1e2d85f", "sighting--93b9f375-7f32-41ec-b761-2e9d4c9e9d2c", "sighting--b6d5cb1b-bfa3-4d77-9e01-89a3133952a7", "sighting--a14dff66-1689-453d-a152-59b07162a2f4", "sighting--16fd5bae-f8bc-48d1-bd75-94d81018f37f", "sighting--5bd9a36d-2fd1-4449-8d6e-1a3248fe716e", "sighting--c162bda1-62eb-4d6a-a0a9-73649e920b9d", "sighting--9f6e9240-5f0a-43ad-ac9a-26c159895925", "sighting--122c3e4d-e8bb-4c29-b3d1-a11230c9c4a9", "sighting--b11c3b8a-8ce2-4c8c-a1fa-559512ea7ba5", "sighting--878a0f49-4c64-466c-98f2-a09921639402", "sighting--317aa4df-60b8-408d-bf3b-d30773433af5", "sighting--9848c5a4-e232-48b3-b462-73d12274619e", "sighting--b661cae8-3087-44c9-b124-9ce3392e500c", "sighting--9b8b23d9-9d0c-4e38-8f60-969d8b72e153", "sighting--c0623855-e347-44e4-ace8-e7a627d4f4d3", "sighting--a6f332cb-c019-4530-9447-9da3256653e6", "sighting--9779fec6-8d1d-4808-874e-fd6fa1942ef3", "sighting--39a59f9f-c74c-4b0d-882d-40904b85cfa7", "sighting--c58217bf-c3ea-43fa-a8c3-2030c977f998", "sighting--9231befd-a29a-4c9f-8a2e-1bb5d8811703", "sighting--57754340-345a-47e6-b8f7-83446edc0277", "sighting--8ac41f5e-386f-4f73-ae6d-068d6e9a6cc1", "sighting--9da4baad-89d4-443a-81f3-b4ee7342b4ea", "sighting--48bc631b-84aa-43cb-a90a-a07595c2abb9", "sighting--0a5a676a-540c-4520-adc6-cade65e0ac31", "sighting--c9622968-4d0f-4a20-85c4-f7f54d9d6c86", "sighting--6b5bf205-fa6d-4531-827e-1a66d02c1653", "sighting--be91e02e-daaf-4f03-b749-5f18e96c2d6a", "sighting--2374e4a1-6162-4b01-8413-d4316aead7dc", "sighting--132ba9e5-a5cc-436b-bcb8-0963cad72ad3", "sighting--eb2e526d-52d8-4d47-9b98-29e4d29094a7", "sighting--3b46583b-c723-4a56-8fe2-81bf491f3827", "sighting--37ac79df-1450-4ac3-b487-cc7755bd00d7", "sighting--561206ac-c110-4d01-be5b-16b89eeffa36", "sighting--344dcf30-e126-40f1-b8c7-f38f2368a913", "sighting--b2d62974-e151-495e-af3b-93abf7522c1f", "sighting--ffd02692-f89c-406f-9c2f-2f8c41a18c0c", "sighting--e537a10f-d5c7-4a41-b836-ac9e642ca0b1", "sighting--8191ff93-39f6-4154-8a46-6ba9c0b2241d", "sighting--93aaba80-126e-4a3f-aecb-832faddf3384", "sighting--c95ffe92-b974-40e7-912e-681698b387af", "sighting--0859f7c2-3aeb-42bb-9197-b3803f8ff17d", "sighting--81a5e9e6-995b-475b-9be9-9aadee9bf87e", "sighting--e4b22f7a-ea8c-4684-bf47-20d9aac902c2", "sighting--d6936165-3fb8-41d0-9b61-c60954e887e6", "sighting--e3564bfa-b027-4483-ba31-da844adebb80", "sighting--bef823be-d7b2-4ccb-821f-b9124af0e400", "sighting--2b31a31e-a09a-428a-af2a-95278dbc02f1", "sighting--5c0cd6a5-a181-4c12-a156-88837e355e99", "sighting--e9f92eaa-d478-4841-a28f-7ed70ecf9360", "sighting--63ea6bed-1c15-41a8-949b-4b0c7d68bf71", "sighting--d5ac18ce-6dd7-45ad-a8e9-f85e6d71221d", "sighting--99cb736c-aba0-4d6e-abec-c21edc475a4a", "sighting--b6f1cb29-1a04-40d1-a1db-fa358f477807", "sighting--d56c4451-602b-45e5-b427-04e2135e67cd", "sighting--b353192a-183c-4c4d-ad07-d9b00b769331", "sighting--add4c7af-2455-4cd1-b821-6a7b124e5494", "sighting--e7d7a0af-7d80-437e-bffe-fbbc306554cc", "sighting--27189722-9f7b-4b40-a399-d5f9cd49e81d", "sighting--0c2acd95-1a35-441d-8f45-5d817419dcaa", "sighting--785f2d3c-0d91-4f90-a056-da929172440e", "sighting--a6a0f70e-43d4-4171-a622-142da8ff65c2", "sighting--3048a78c-1af7-40b3-8222-5d87208f83d4", "sighting--dc0e3b17-76b2-4ecb-8046-3c30d72dd60c", "sighting--f57842ae-d43d-48a5-a27f-ffcc2a6db75c", "sighting--cbec95dd-898c-4789-a793-c663196c1cce", "sighting--58691687-4996-4316-889d-4c36ab2dd8c8", "sighting--5c0bbd21-a2d4-4685-9b9e-f412d3392778", "sighting--f91a8a0b-f37b-40de-afe8-18148f642f62", "sighting--cdeafb62-62e7-41c9-83ec-5ec9d7ea0a40", "sighting--abb1498a-6524-4f30-b3fa-7e447a05c72d", "sighting--c5933e50-e364-4ac9-a74a-456e08ecd28b", "sighting--df0bc3ae-1bb3-46c8-abf6-8ceabb4d821b", "sighting--c574056e-9349-4ab0-97f0-05a92e37c357", "sighting--c189f601-84c6-4809-ad24-c7e1b77db58c", "sighting--4300520e-72f2-49a9-9ffb-152036949c5b", "sighting--908cae15-8a7b-45f7-96c2-578cef3f074d", "sighting--9d76cd01-6681-4fd5-8e41-89b9e4dc5d80", "sighting--cc69d21f-4d73-43e6-81c6-6f8449fc1462", "sighting--43bb6489-1bd3-4769-964e-d1470729c971", "sighting--f5a4d95b-e02a-4c1f-a6b1-e08b3a3ecff4", "sighting--ddf0dfe6-135a-45cd-8ce2-827aa5272a65", "sighting--b2a30977-846a-4b48-ac0d-d985cadadd59", "sighting--39002c57-21fe-470c-ba7f-6d4b093f3df9", "sighting--f964d9c5-1beb-430b-8955-9eaf735a5993", "sighting--8bcd691b-dcf0-423c-86d2-1b3f2b99bcdd", "sighting--fc220755-ab51-450f-bc7f-0aff06e68c75", "sighting--c9a06f82-4665-48a9-b41a-d1a1acf954af", "sighting--e46a3252-aaef-4740-b739-176d51192a83", "sighting--82e17d96-66ff-46cf-8e37-87ee41e1ad6d", "sighting--0b1efb4b-6d3b-47be-8d02-25fbfb04da9a", "sighting--0f1b9767-e696-430a-9f93-5f58ba059ea7", "sighting--deca6f2a-7b3c-4734-843c-c7569f37aad3", "sighting--7c06a9df-0bfe-4c6b-9a0c-adaf312bb613", "sighting--e8bd2ce4-36fb-4d3f-a890-156eaf079e0b", "sighting--a03f9635-cdd1-4260-bdc4-369bac51eb34", "sighting--41d5a54c-6f4d-49b3-8245-cf18aff82ef9", "sighting--c36d34d8-b1ba-444f-924b-9719b778154f", "sighting--3ff10293-26ca-4042-8b5a-2060d38e22e0", "sighting--e6d7bfa2-5a49-4823-8a88-f6e9b266c300", "sighting--429d43d4-33a1-4ee8-b19a-5dbbad9f800f", "sighting--6b22ddee-aefc-498e-b11b-2ef0ecf61543", "sighting--7ab2e5fb-f457-43a2-9f2a-c93b93d46683", "sighting--bc7404b4-c73d-4f66-9a8a-fc585cb0abcc", "sighting--4307da63-3908-44a9-b1d4-d17da3485489", "sighting--8cd6fe98-93a8-412e-baa2-88725ed9d93f", "sighting--adaffeda-2099-4b19-95a4-6fd044f67cd8", "sighting--0ac53025-8d73-4329-8342-ea678c6ae1c1", "sighting--032112d2-85ab-43ea-8271-4178f5921cb3", "sighting--0e932434-268e-4811-95f4-07e2b4b99647", "sighting--bdc6200f-f236-419e-81aa-8d11655ddc18", "sighting--84bdd13e-f4bd-4fc6-bb0a-c1d4826b1d64", "sighting--60a107cb-2611-4e93-afb9-e29a4ffa507e", "sighting--8e70f6fb-c48f-4b14-9de9-cf33866a9b52", "sighting--d3666d43-8077-4481-ae95-fafa2607b9f3", "sighting--409b8785-eed6-4602-bad5-046a3e6ddc0b", "sighting--0a9528c3-88fb-4fbb-a184-2f5914c4751d", "sighting--8823e74b-a2a9-4318-aea8-d0c94aa2d272", "sighting--12b69562-5243-4edd-aad8-b20818a23c3d", "sighting--ea731e24-3ed4-4030-8f0b-c88ee8c3d83f", "sighting--19cd50b7-5952-4149-b74b-0609adf1ec3c", "sighting--9e2712a0-3f22-4fec-9baa-cacba6c7830e", "sighting--0b88eb0b-60b4-467f-a18c-1bdc7ef87f93", "sighting--0fab860d-3bac-4894-bebf-f97706f494dd", "sighting--b0581a39-4b82-4ee0-8265-71c4a2ebe04d", "sighting--9a73cf07-2552-4cab-888b-ef5c7f0ae208", "sighting--caf5b9bc-46ba-48f4-b3e2-22984925bb95", "sighting--11bfd7ea-afb7-4db8-b4ba-cde6c731808f", "sighting--469f956f-4688-4ef2-9332-e4afa8ffedf2", "sighting--2393c501-5646-41bd-9239-c4f9d95425c8", "sighting--a3932957-0534-486b-83e4-0edf3edf0528", "sighting--7361bd47-4395-429a-b58d-37a75d9b66f1", "sighting--35788097-5a79-4187-ae69-16e274db604c", "sighting--817a0f68-909d-44c7-9539-220f17873128", "sighting--18832b25-a113-4a0c-a0e2-1c6dd3ed75ae", "sighting--736436ec-268c-4daa-903c-7b4eb5cc7301", "sighting--3e5bba9c-6caf-46c9-bd78-862b5d887e26", "sighting--09e9628f-4ea0-4100-8588-6d3fcc3e2b00", "sighting--13a2297a-240f-48a5-b1e4-4f78675b940f", "sighting--c306d7ef-4aa6-4a50-bd97-0765c8fdd579", "sighting--f13d3bbc-bfe0-437f-9060-2a8442166b1e", "sighting--7f7e3caa-d8fd-4f10-bf44-940d501cbd0e", "sighting--2baa7dba-b42f-416a-9178-80f2e15ebd89", "sighting--15543c57-91fa-4dfa-b3df-1e21c3d8d5fd", "sighting--d07a163f-64cd-46d1-9b41-015fedadcd18", "sighting--8b7ed96a-d8cd-438a-a4e7-03f7fab82351", "sighting--f774021f-47ce-422c-9dbf-5809288a0d3b", "sighting--49ef117e-9179-4b3c-b12b-2d6f60d49633", "sighting--9d474e05-e827-47d1-a2e9-ab9510582b34", "sighting--5ba2995a-133c-4dbb-9332-6521041ece6f", "sighting--d23e24e6-9beb-4ce4-96ff-fc40e1d17031", "sighting--3baaea4d-bf70-4ec8-b244-c3c4571650d0", "sighting--8b6162c8-1795-45d9-8479-0a6a53edec59", "sighting--a75cd3f7-7315-4b95-9a40-b42fe589871b", "sighting--67cb35c4-5047-481e-a124-c2fdeba95ae2", "sighting--d119bdd3-909b-45f1-a972-61d55fc484dd", "sighting--6817f91b-5dd6-4860-ad27-c59c12c00c6c", "sighting--1e84c83e-63fa-489a-8574-3f5f8a8e0235", "sighting--a13adb0c-ddd5-4730-b7e5-97e30fd96977", "sighting--54d5c71d-8c96-4f60-9677-7f979f37f98a", "sighting--407bafea-769e-4502-8e31-2a33ef5e46e3", "sighting--2b328f81-21f5-4653-ad35-0dfcc9754986", "sighting--1a2fa5a7-c830-4340-af10-5323603b3de3", "sighting--8f7d6b3e-bca0-4b21-9551-13f19c1dfde3", "sighting--54999aa6-7a56-4c69-be42-91ae2af6da6a", "sighting--6c1dcfe4-5b62-4eec-824c-319c4b94f4ae", "sighting--a12d2157-157f-4529-840b-0151cae77c0b", "sighting--c9a36299-73bf-4376-9c3a-687a77020c87", "sighting--205a8da6-ce8b-4dd9-8e4c-70dea5a577e8", "sighting--f2a79fa9-47fa-4fc0-b881-f78ad0080ed2", "sighting--8a39cbf8-f6e1-49c3-b390-7570827a7359", "sighting--b9f37989-7f06-434d-ad30-66680d636dff", "sighting--4a637f8d-af1a-48f0-9a89-951b402e644b", "sighting--a5699a77-be20-4ad7-a7ee-b7cc3be65eff", "sighting--a2f90f27-7bc6-48c7-afaf-e9be3a66dd2b", "sighting--e4626e3b-cae7-46f5-bb9f-e1cbb98c8666", "sighting--92211357-5920-40bd-a5af-85662d277baf", "sighting--f2312f4a-8eb8-4247-99f5-3d34781cf85e", "sighting--484631a5-06b5-4cbf-83e0-37e275006395", "sighting--44be50ad-8c94-454f-8d8b-c44314216ca8", "sighting--10afc3f9-ab75-4142-8d13-87b68f1e48a2", "sighting--f2eeed07-c737-42aa-b7e9-c196520f23b8", "sighting--cec9dec2-2d3a-4da9-850f-cb9bab973768", "sighting--64f3688c-81ab-4d06-a698-4e715e52ae1f", "sighting--4b4bf12d-cdcf-41f9-b2e8-074a2121cc1a", "sighting--4891884b-df06-4208-91ed-ac600858c8b2", "sighting--60cdefc5-cfaf-43a5-b669-f43f85b65ab0", "sighting--b4cdc89e-3fea-4243-8351-5db7cde1f346", "sighting--1b37d0b9-c0e8-4371-9edd-ecceec654af0", "sighting--85f67b73-ccec-435d-8acb-6afaa81665fe", "sighting--c4b3412b-c248-4dbb-8d37-029cce378442", "sighting--ef186578-90e7-4ce9-b03f-a6e2a6e30598", "sighting--b84d67db-cf2a-4a79-9af6-bd3bb938623b", "sighting--1645c856-afd4-42b7-8799-384121935e28", "sighting--5a007be7-0416-4f37-9240-29ebbb94030c", "sighting--2032d073-3754-4549-9662-a531e8176be0", "sighting--5b8366dc-022b-4cc9-aba9-78f2ce10abac", "sighting--6b3a724d-d6ae-4bc4-a96c-e06867c63280", "sighting--d77dbe37-f011-4e04-9adb-9c7571a931b5", "sighting--ff22f647-056a-43f7-9902-fcfce75793ac", "sighting--48892fd0-1a54-43d1-8134-7b12ae2dbe2a", "sighting--8bdb11d8-e959-4fab-973c-5256193c6f4d", "sighting--2c6409c5-a19a-4f3d-abe7-4a9d50cdcc5e", "sighting--1a0d4f0a-46c8-4567-b134-68d1b4e500ea", "sighting--1b9033ac-e217-437b-a194-ac7f7b070c61", "sighting--4e389bbe-72ee-410b-a9b8-68f2b0294c28", "sighting--d90032db-3f23-4ff5-b123-ffe62f5c3d43", "sighting--1b49c646-86de-40bb-b1db-3c49c3fc1a4b", "sighting--898f36d2-a1c9-4e00-9293-9adc04c71b91", "sighting--171e4e5b-71d0-40b5-8d4d-428e19cb90d5", "sighting--1bda102d-53e9-4c75-a299-f4dde5168046", "sighting--5a273868-31bb-429d-9b35-4803ecb370ef", "sighting--2afcbf7f-aaa5-41ee-825e-c0be30ca70fd", "sighting--2db16ebe-ce5b-4271-a792-08a2e2207596", "sighting--e10aa512-67cd-488f-9ba8-0ba34cda17ea", "sighting--bd339433-a5f3-456f-8171-1e2ba8810de0", "sighting--da3c4912-680a-42c6-91cc-65670ecf4406", "sighting--6edf59cf-c6e1-4941-91c8-bda3eaa45bd8", "sighting--b9f2ee26-05a6-41e0-aa87-68c97faa2389", "sighting--ec525322-cd16-4d01-b1c8-adf8dc0ac71b", "sighting--acdb0df7-2f21-4d74-b3d3-b91a0f8122b8", "sighting--200c3f99-98b2-47b9-88b6-0288c955be8f", "sighting--924d1ce9-c2bb-4494-a4f8-c0f9a2897aee", "sighting--62599d55-1cea-44f2-acd9-200b7865f8c8", "sighting--c6c52abd-f037-4a8c-90dc-d19a35f044d4", "sighting--8f8a134b-dfcc-4680-817a-a36b8b270105", "sighting--96d6e255-cd82-4bfe-acb8-fefc2d8dda78", "sighting--6f44d2f4-a56b-4fd7-ad0e-4a102d7d4cdc", "sighting--37577b4f-0407-4dae-86d3-4ddc6de7a24b", "sighting--10f35a2a-7a38-4626-ab8c-3dfd14018ac5", "sighting--7d82e9a2-5df5-4408-b492-782d052de0be", "sighting--a2adae35-1cd0-4b04-b308-842290f84896", "sighting--6d941f8b-fc7d-422c-883e-3c860c5ff8b8", "sighting--f2b176fe-3504-4d30-abfc-3e7dff640654", "sighting--0b34e7a6-3373-4d9b-b8df-e50f44b0eb9b", "sighting--302d4888-587b-446c-b186-9a5584bfb6ea", "sighting--595e27dc-7e03-420b-9a8d-81ffb52712a4", "sighting--42f4ab2f-1423-480d-99b1-d29fcd9d8ac0", "sighting--4431c664-d44d-46aa-9d94-63291ea7ded7", "sighting--af1eef8d-62d9-4ef7-b8bb-9353684e71da", "sighting--927d44fa-778a-47b7-b097-387af341b5ce", "sighting--50a162a7-aa8e-435d-9da3-a1ac548ea452", "sighting--38d0b7ca-caeb-433a-a81d-6d1d371e75bf", "sighting--c50c400a-bab8-41f5-af7c-0187b2657750", "sighting--f4127390-1d3e-4be3-90d4-30a1a3829dac", "sighting--8c84d6c3-3d22-40b0-a0a6-15f84061d43f", "sighting--9a05ef76-bab7-46b9-aef0-d9df2dd3a81d", "sighting--92de12fa-9db1-4f3e-81ba-05caf6b660e0", "sighting--230c94db-e311-4bd7-8ace-ec4f6ab9ff56", "sighting--38e05846-10ad-4df0-be55-ae692134f7bc", "sighting--e43d81e5-9965-4bd0-97ed-25f7a8f724c3", "sighting--11895e10-d791-42a3-8791-f041c851df28", "sighting--667d12c4-1fa7-44e8-9477-6f3b8e872a42", "sighting--c13dbdf4-8207-4c66-a483-f479be5eb9c5", "sighting--191f1ff7-36c9-4bc2-ba55-89260f5a77aa", "sighting--c02ff164-2562-458e-8393-9b1d09eca996", "sighting--3c4f5526-3de6-4e49-970b-b3119f311a0d", "sighting--5faf68bb-4143-4e00-bec3-3fc93bf026f5", "sighting--7b77fc48-fddc-40bf-bc7b-7e8c3ba5690d", "sighting--17cb1f46-d7cc-43bb-a26d-700160284da5", "sighting--63e2e697-2ae4-4183-91aa-893e691e275c", "sighting--c925bf3b-4319-4e0a-b593-d41cc0588b5e", "sighting--068f12c0-3ca6-43ff-b22e-2e10c38cfbfc", "sighting--10f7a10d-1eba-49c5-8caf-4fd316f44887", "sighting--2ec7984d-5dc1-44ed-ac74-126a8382b6fc", "sighting--a8de5a79-bc08-4e51-ba31-71c7591456ee", "sighting--ea1383ba-1abe-4624-a88a-16ef7dd1e972", "sighting--9097c45b-2bd3-485f-be2f-8fbe08d161d6", "sighting--6a76135a-917f-4c19-a7e3-9e1271c4f44d", "sighting--d19fdbd8-9862-45e6-9501-0f656fb6ab3f", "sighting--e2745e31-2297-47a3-bd93-6c0f7341e610", "sighting--53f9d4fc-f907-4c4d-a9c3-c6e8e6d08982", "sighting--47c4ec96-da65-4c83-83fa-4ad75f8d937c", "sighting--1bb6d1d3-8033-4900-9824-cb5fd806fc4c", "sighting--bc495670-f964-452a-bb4f-cde370ccf7e0", "sighting--cefdfa4d-366b-4051-8de0-daa258ee4df2", "sighting--27cdeddf-20eb-4b27-8758-011263d3c088", "sighting--1ecfd3e8-29fa-498e-bfb7-7f745fad92b4", "sighting--1a91b11b-9e2a-40c6-be34-db1b10a8ae32", "sighting--558982de-2fb7-4f81-8472-5cd0dbbf74ab", "sighting--60e46eb9-3182-4cc8-8e5c-7271109890e4", "sighting--e73fb121-0028-4592-ab49-e781244621e5", "sighting--df368184-1851-42da-9bd9-ab12d0515563", "sighting--a63c3f7c-77fb-46dd-84fe-dc28d2b70294", "sighting--13733ea0-23d8-4b3d-a42e-5643b1780a76", "sighting--2cdba9e8-d24a-4ee2-854a-5ca58e4df20c", "sighting--e6239dc2-d5a4-44d1-adf9-66f053b12fdc", "sighting--a8207ece-1c80-4e46-8e27-6b46280b86b1", "sighting--9e612224-1200-469b-ab01-60b122bbc9b8", "sighting--ad274872-c940-4d1c-ad4c-dbc8524f2fe7", "sighting--1319e1ea-5b63-432f-942a-b75b680754d7", "sighting--3c4e2808-dab4-41e4-9ffd-36d417df3973", "sighting--6859c1c4-64c0-4ff2-832f-86b2ce2caf5c", "sighting--bdd85fce-e2ca-408a-9338-a9f7bffefdb4", "sighting--ccf2890f-ccd0-4f70-a841-ff44a14f7685", "sighting--2d004984-631e-4249-a929-73de0fc7aef7", "sighting--d85fc867-5b61-4763-8c1d-3864c5eca55c", "sighting--667d4ac8-d223-477f-b913-4427ba3d762f", "sighting--3c80e414-3cfb-4e64-be84-aafac860310b", "sighting--3ed8a236-d26c-42c0-bfe4-90a360d9188f", "sighting--e1ab88ac-80a7-4a3a-8b0d-efe4efaafa96", "sighting--73969f33-747d-474a-b20f-320e5de6c874", "sighting--e238c64e-41c0-41c6-b181-d08f9f4140ff", "sighting--818148ee-24da-4ee4-8db1-2edbfb649296", "sighting--e5582cdb-93b9-48b8-844c-11cb723c5f5e", "sighting--0fa59445-a637-44b3-b806-302ae4737d69", "sighting--d3286e47-b21b-42a3-b851-d79975210623", "sighting--b559e675-af67-4854-adfc-2fd0e8b17906", "sighting--0279913e-5e37-4d49-a4d5-521b160d8929", "sighting--58149adf-b1e0-4694-a47a-12e9ee68c014", "sighting--2076d990-5405-483f-a1a3-eea5915290da", "sighting--86738335-5b43-4d30-8fee-f77bd85b3398", "sighting--c28c91ad-383c-41f1-b156-d3b2c4606ff4", "sighting--a3e72092-fb8f-4d6e-8592-1e5dd7229b97", "sighting--b2dc8bde-e526-4db4-94f2-57f9a1d8d540", "sighting--9004514d-753a-4113-b99b-e326587b10c6", "sighting--db1e662d-1f72-4825-9635-f94487e5bf47", "sighting--ebfae543-b82d-421b-9db7-95a17e5b2fba", "sighting--1cc2fcce-1e88-4303-9f21-38903a9757cf", "sighting--5aa8e4d7-0d0d-4de8-872b-2caa78625563", "sighting--053be4a7-f1b0-4a61-b907-7c02bbb775c8", "sighting--1aa04ba9-3a19-4829-a0b1-d90906667b28", "sighting--5c205e73-2206-4dab-9719-fc04a7f2adab", "sighting--ccda3281-1310-406e-a5cb-8848779936ec", "sighting--51094807-2c5c-4a01-9fda-9a565b5f9534", "sighting--22964de9-5140-4d08-aedf-096f08ca66db", "sighting--182c8295-fc0c-4ca7-bff2-eede957e5e90", "sighting--c20363ea-f987-4394-9cef-7da152c99c79", "sighting--15bfb3a0-ce09-46d8-adf5-880f112d5a8e", "sighting--67ff8318-3581-42bf-90a6-3980948625b7", "sighting--ead7fac2-c32c-4790-aac5-74d19f342fe5", "sighting--c6da5a3f-73e6-4910-b594-0772ed92ddea", "sighting--76e938bf-a681-4a9f-9ee5-cf7d5f1ff08b", "sighting--9017f83a-ee3d-4615-9884-08096c515e87", "sighting--8a608bd8-ca0f-4bfc-aaa6-f3f9bb33dd10", "sighting--ec9b0605-78c8-4601-a8ad-4535ff542fbe", "sighting--22307dfc-4460-41ab-9795-d87b611b19de", "sighting--00ef10fd-b94c-4601-95b5-4f9d56432691", "sighting--aeca1b82-6d13-4796-b10e-1d71d6c9e357", "sighting--4ccc4c1b-0e31-4b4d-ac62-55f43f79dde7", "sighting--2c775bc9-e592-499c-a6cd-a2ab4472fa6f", "sighting--4f48ab7c-4da8-4ec6-b492-a1e6de9c6093", "sighting--7fc6a446-e204-4c2a-92a8-3c96efdb54ec", "sighting--48bc44db-f41e-4b47-bbc8-8f85be20e9f9", "sighting--8f6f881c-280f-470d-94b8-151f2102c57c", "sighting--621cf6d8-d614-4ea9-9bc0-7fa87f79397b", "sighting--323c9a36-47d4-4cb3-896c-003e966adfc6", "sighting--79ae7f57-4d97-4461-8ca6-6e98c142d93f", "sighting--58fffd3e-260f-469b-85e6-53e692c961e5", "sighting--df703e5d-8fcf-4e12-b17d-66f4a33d23a9", "sighting--53c9565a-e9b4-43c1-8b40-2783301f798f", "sighting--a03d6321-4134-4d00-9794-eb2afcd0a01a", "sighting--41a6074f-30b2-4896-8298-4609e137b963", "sighting--6e216cf8-c6c7-4591-a846-cf21f84d89fa", "sighting--596ad96b-2e49-4538-84f7-ea8ce861d3d7", "sighting--5572ac83-f5b7-4223-9214-22113d188d91", "sighting--02b6875e-f106-497f-af88-c0915f81674d", "sighting--5ad3a77f-0e0e-44aa-af39-e1761682596f", "sighting--1bef274c-5cdf-4d41-a7ec-abba068e44d7", "sighting--9063d8d7-1d00-42ee-b554-9dce8698cbae", "sighting--9719353c-cae2-4a63-87fd-2e12a4ab997e", "sighting--77105d30-c925-4a64-af73-558b59b31e70", "sighting--153dfa6d-95ae-4f85-ac57-70efa6f378a0", "sighting--0b048981-1793-4f1a-8450-6cbcae8884c2", "sighting--9be53e1e-516c-4085-b9f7-c85f8e819282", "sighting--c88d9955-ebfd-4a90-9f42-93c73175ef45", "sighting--01316499-91c5-4fa4-96b0-04f6bb1fcf3b", "sighting--64ef91fa-6f30-48cb-9821-9b7097a4718d", "sighting--84a0e04b-0162-4530-a9e7-a7067673b8ab", "sighting--b6198994-e2b9-4536-8708-c650b66c73ff", "sighting--31a96795-ff03-4577-ac87-be124ac680dc", "sighting--167cad74-cf21-4f6e-9a50-779fb07edd57", "sighting--e0f50e7a-7697-47c1-b5f4-11a496b5a753", "sighting--2ab94f27-b065-4beb-8ff4-5776d85187c1", "sighting--75bf4e3e-5044-4474-a02b-7a2d46c305ca", "sighting--6c06a70f-2f5d-4e5c-b284-79e7535b3c50", "sighting--7baca967-e0f3-4503-af88-c27ee3aa3a87", "sighting--f2b4443b-fb10-43ef-98e5-025a169435c8", "sighting--d8269a68-1308-413f-a489-c7353234b6ae", "sighting--3ea77507-2f97-456c-8316-e9760fc2f094", "sighting--d8c4654c-62fb-43cc-977e-64c39f0cd556", "sighting--cdf61db1-715d-4ec5-9a25-c510bd96e3eb", "sighting--9b972c4c-cf1f-433e-8a8d-a1687fca8084", "sighting--aa3f6412-5151-4dd0-a3c6-d76a69f3e5f5", "sighting--28161756-18d4-4f54-9d1b-94acbeb1fdb6", "sighting--33a66677-cb35-47cd-88af-c765c51f6b6e", "sighting--d1ef680a-54e3-4b2b-a6da-22b3d62994ac", "sighting--63cc384a-e8de-4567-9a75-15ba1e789ab2", "sighting--a4793d45-b2f6-422d-b814-55201f2c1379", "sighting--6a5769cc-ea74-40db-8672-76a46a6855ca", "sighting--abcbda91-60f5-4157-961e-971915d11adc", "sighting--994eeeab-9b78-4ae1-8649-23b782150697", "sighting--589627ff-472a-4aee-bba0-d95ce9457776", "sighting--fce4ddaa-b3a6-47d8-a81f-44793081e089", "sighting--d286782e-d461-41d0-bfd3-1b590d5a96b7", "sighting--0248f2d2-57a6-4edd-aed2-f3b645ef6f50", "sighting--4d0c4c7a-551d-4737-837c-404b13ee16d2", "sighting--baa8625c-8a76-4a7c-9ea9-c7e7b53013a5", "sighting--584cb4dc-363b-4a0c-a009-edf1478d23fb", "sighting--8f8dedf8-d9e3-4448-b222-ee0cdecedc52", "sighting--1be3a89b-40fb-4cea-8202-1ebf61125585", "sighting--42254156-1f52-4d4b-a73d-373f1d9094e3", "sighting--1651ab01-f2d7-421c-bfca-536a65e5b9d0", "sighting--fa52b7fb-b3ae-4af8-8063-e65867c94138", "sighting--103149b8-25dc-4b7d-b7f4-2f7941fd514f", "sighting--ee4eaf10-ec09-4385-a405-fb293dd5cd77", "sighting--a86a5b8a-a316-4915-babe-c8df244495e5", "sighting--a6408eee-2795-4ddb-81f7-070f5cf430b1", "sighting--03563b37-1922-423b-be84-9186a796bc37", "sighting--de50dbd8-5f08-43f5-9be6-11301c43d19d", "sighting--6bf6796f-e90c-439e-91fc-de6f11e62eb1", "sighting--0a693a8e-2a1d-483b-be84-56009281eade", "sighting--ffe05136-6b50-4296-ae91-244c869d6100", "sighting--9968054a-f988-4b85-b533-e20a55908543", "sighting--6d55d125-e238-4a94-9bff-e05a8b01c687", "sighting--8b91b291-4a00-419a-8136-14fc6de2df50", "sighting--987c208e-c839-4b59-8789-5b67b2ddd02a", "sighting--f24e73dd-ea18-4c27-a119-7acae5edfd7a", "sighting--29785454-f12c-474b-baaa-c18b62a9aebc", "sighting--f0ab8190-97d2-44de-9c91-d057e683c824", "sighting--172ae138-b259-4f4b-98b1-80d7b5f44308", "sighting--71530b32-ca4b-4842-84c0-988df90fa56d", "sighting--7bedc7f7-4bba-44a0-8586-e0b908793586", "sighting--475e5b5a-a990-4ff8-85e6-73b40a94703e", "sighting--6fe61c6e-8334-4e1c-a299-a4ac1fe63b05", "sighting--018c07c9-0da2-459a-9cc1-a7d1e5f58dcd", "sighting--37c4dd81-5404-48d3-b730-51236d3e40d7", "sighting--ac437b4b-ffeb-4fbd-85e2-83a37c9ede86", "sighting--a71412a9-6a89-4811-99c8-e5d2850bc2fe", "sighting--9c45e893-a578-467a-9098-ce13c7689246", "sighting--ede14cbb-3748-492d-8f62-9cc53b898be0", "sighting--91ca7570-4686-4711-8990-a065fe30e939", "sighting--d2e6982a-30a0-44e4-b276-2184eb3649cd", "sighting--6b2e2cdd-9b7b-4946-86bc-df09df4558bf", "sighting--9655dc18-084d-4b3f-8f31-74cd4ddb2acd", "sighting--979d17df-f47b-426b-bc87-902e2571c95d", "sighting--ee6e2e3c-df15-43e7-a169-bc8ef459af97", "sighting--53a978d7-7b92-4dbc-b7c6-efd71a00ea13", "sighting--67ef25d1-2bdf-489e-9692-32808370c760", "sighting--14cdd223-99d2-4ff6-af71-1d7f72f2696e", "sighting--2a30cfd0-fe92-4441-be62-3389f92407d1", "sighting--b54623f8-01c3-44e8-a0d5-7efbb3931101", "sighting--817b482b-0c51-4607-87b3-722bd6bb7be3", "sighting--cf2d882f-f923-4afd-a1a4-f1474416de23", "sighting--2b32b94b-1407-45dd-bdd1-80c842bb40a3", "sighting--b6d843ca-6f3c-4ca6-97ea-c9254fd58727", "sighting--0812c6b4-1b57-4a89-956d-0965a32731b4", "sighting--96bbedf4-a01f-4b9c-aaf5-592c24c5e379", "sighting--7103a79b-deda-4101-8cfc-8af812ad547a", "sighting--ab16e33f-d48f-43a0-b701-5a9c438fd068", "sighting--8e26521c-4e24-4722-877f-1443885c5afe", "sighting--45e7a978-0f83-47cf-b8f2-c6486d1b2d51", "sighting--cc7c9e51-065f-4fc2-b07c-e7c8076c4a8c", "sighting--28ce84f6-aec8-46ac-a292-f1ace906ec79", "sighting--8fcd0897-f0c0-4316-b0b7-230e4972c5dc", "sighting--bb2ccb4b-13f8-4bc2-bc97-9a8fb90004fd", "sighting--efba26c7-fe2d-468d-bac9-381333026ddd", "sighting--d5ebfb47-43bd-4f3c-a509-cc0aabe50c8c", "sighting--1e766278-1b58-4e37-ac4f-981fa545fdb0", "sighting--f30bd6ed-c710-44d4-b9f8-4df3c40b2014", "sighting--7eff91ba-06a0-4ab1-a45b-ef855ee2532c", "sighting--feae5fe7-982d-434d-bb0d-d7fd1c345c40", "sighting--57fbf267-ba83-4a62-987b-61b20c4a5477", "sighting--e6295805-9381-4ba6-ac5b-72c85188ebac", "sighting--c1f76e69-f553-4b39-805f-be9011845ee8", "sighting--958edbe2-1b2c-45b1-943e-0bdd04d4ccab", "sighting--6f22b230-b881-46f9-af21-856cf231d187", "sighting--088452bc-38a2-43b2-9df8-cce8b3ed9958", "sighting--3e113c9a-fa7a-4fd5-bc4f-7613fa5d4af7", "sighting--f4e0e554-a5c7-4ce0-b77d-2d71ccb0789d", "sighting--b205a7be-beba-45c0-880c-0aa5c163d557", "sighting--5ac8ec42-8010-4aa8-ab84-f80e37698948", "sighting--744050b4-164c-4699-bfcf-7ee624605489", "sighting--b7d8e0d8-8502-41ca-8935-ce85541b1f32", "sighting--c2cb852f-1b78-4bbd-817c-dc3007b43c28", "sighting--44208880-b503-4e68-8507-1ea2a2a23d9c", "sighting--ca44032e-5e13-4a8f-a01e-0a244ff21232", "sighting--7ab1d9f4-3d75-42b2-8438-381027d3a404", "sighting--f8deb274-408e-4e80-a910-e89cc005d5c1", "sighting--f6f4e12f-e8b4-41ba-805a-8cc5d9bab9e0", "sighting--2c5a24e6-514a-4079-8dac-dedff797cfc9", "sighting--a80c1a49-274c-4566-9abc-a687b339423d", "sighting--3e9ee214-b0bd-449d-be7c-ea48d6802e56", "sighting--d2503086-dc87-4b5c-9357-f44cb92e7f3d", "sighting--b05ed5e2-b30b-4194-80a4-71a8c4781210", "sighting--63b08902-1b2f-4656-918f-02acc3e6bcd1", "sighting--8cd7119a-0075-4da4-ab8c-f6abd408cf15", "sighting--423a2bb8-0917-46c0-9248-1e1d9a22c040", "sighting--1bb27339-8245-4389-91e9-9d1ba4b5cac9", "sighting--1ea6ea88-1186-4b30-9afb-0b83f1971602", "sighting--ef9c7ead-5045-4d2e-a0f5-5e66b1c93ddc", "sighting--cff6de2d-347a-4d1d-889e-430818cc9352", "sighting--c672753c-87dc-47b0-98ba-bb76a6d6fee1", "sighting--2f730ea3-c723-4310-87e0-1c8d70bfc1b3", "sighting--419dc737-5d38-47a9-9ca9-e3d682111587", "sighting--440a4fc1-c7b2-4cf1-ac0d-60ed29c9673a", "sighting--43038f72-6693-43f6-b103-b31abedf2dd9", "sighting--ba61463b-0249-48e0-8f16-dcb9c84c7d00", "sighting--c178ef39-e80b-45cd-82e9-d58bbacb86dd", "sighting--0814f696-b76f-48d5-8506-a9c701988ee3", "sighting--e4f91446-b94e-4be3-b594-4e0f523c2632", "sighting--f770a96b-409d-4ce8-8ed9-ff7cf9290d3c", "sighting--3512d7f2-a3ce-465a-a8a2-3465ded10e2d", "sighting--381e1fef-24a7-4641-b499-1aa731f8e2c6", "sighting--f5438528-5af6-41c5-9016-d9db94cf87fb", "sighting--b72249c2-99fe-438e-aedf-925780c5c5fa", "sighting--65c17e0f-20db-48c0-ad66-04235353e35e", "sighting--0e7b9d2f-ff59-4f1e-849a-6daee42b122d", "sighting--b0677ee1-0c9a-4c5b-af89-9f2eb9062df9", "sighting--8419b4fa-9926-43f1-918e-0c68d8fd1c76", "sighting--4dfbf2e7-2360-4794-bea6-4a3f3b4a2d9e", "sighting--c7708567-0961-494d-8e34-d151bf2dc4b6", "sighting--02000185-e2e4-465a-b77d-1a3b0ac86d47", "sighting--dd2f1dc6-721a-4fa8-b45a-27774bb77336", "sighting--700c2ed9-8066-48e7-a6ba-24fd4a63d573", "sighting--5f6b8203-ccd0-460a-8bc9-c8eb1fad0801", "sighting--113d94d9-702a-4006-8e03-0fa247272338", "sighting--ff634f37-f1b1-429f-8c08-6ce910bebf86", "sighting--02b0b018-563d-4a92-8fb5-c68ab79ad6ec", "sighting--42a0aa9f-06c8-415b-be0b-86802ca5fa5d", "sighting--9b1df203-c16c-4608-af9f-9541c063059f", "sighting--1086039c-1748-425e-99e0-a51277e21039", "sighting--8ad325a1-a140-474c-9415-b73a71e4a5ec", "sighting--9e750c93-2c45-4af5-a99f-598df8533940", "sighting--4169e2ef-7f14-4fa4-904d-afb84073b8b1", "sighting--e58eaf31-0f58-4d5e-849a-6ea0399226b7", "sighting--cd247166-165b-4d1f-a294-77863e552291", "sighting--83cc3173-f3a5-4f2d-9208-c60e68d08f94", "sighting--7e1138c5-3dc9-481f-84e7-4f01e0df3d95", "sighting--f742db4d-93d9-4a60-831a-80ed174261ba", "sighting--d12da1ef-4ec6-4bd2-a599-73edb702d88d", "sighting--5df18d8b-121c-40bb-8d2b-af5a889c4951", "sighting--e6217389-6346-469c-808b-fb8257743c7e", "sighting--adb4d932-13c3-4bb0-afc4-c8ae53b12987", "sighting--bd4d4322-8ecb-4970-a4b7-ed4945ff112a", "sighting--af321cec-0e23-4673-8b0c-2eed8ba7406b", "sighting--1e24c0de-1db6-41b5-8653-84be7ec2ac2f", "sighting--32bac497-1056-412d-9aee-b782b61a56c5", "sighting--5cbd7f90-af92-4e07-91d3-45c62b4daf6a", "sighting--2c0229ae-25ad-4add-af75-255828467f3c", "sighting--bbcb9416-51d1-4d34-9af0-b4f071b1ad2e", "sighting--a4023275-98af-49e0-90a9-66a996d064e7", "sighting--1e811204-2f67-4281-89f7-9cfc8a44f1ad", "sighting--18351d68-33fc-466d-a6bb-02ead9822a85", "sighting--c641c283-8434-4ebb-b7a3-8edbe6996f0e", "sighting--93758aa0-00e6-4bda-9ad1-b8811ee85f0b", "sighting--442788ef-630d-48ad-9c45-36c215601cb1", "sighting--55cb85fb-24ac-449c-825e-9c96f7133e68", "sighting--ed7abf2d-128f-4009-b378-8895e6a67cb9", "sighting--d0a653b6-fe37-4901-895d-b5e7a09e3a54", "sighting--0860e421-d59b-4b34-88a2-d00d1d250fec", "sighting--72fd7776-6d06-42c0-a934-2fe3b6e031c7", "sighting--4a4b3592-2245-430c-865d-6eda02797fa6", "sighting--1d271462-bd79-4316-927d-c46bea69f188", "sighting--723b2d1c-0384-46c3-885a-2be3f17157d7", "sighting--d51c9bae-3db2-4c3f-adf9-02ddee33938d", "sighting--44a0fe1b-3437-4388-942f-a5acf3488b0c", "sighting--bca8a1ee-6b1b-4823-9e8a-35f1520dbed7", "sighting--6356fee9-71e2-4ae1-b507-c242195945d8", "sighting--6a99b59d-64be-4d10-99f3-1d0dfaee3578", "sighting--8bf37e8b-253f-43aa-8a83-a0138bbe0a20", "sighting--8612b7bb-ba11-4d5d-a0ed-b1492e594634", "sighting--40afae1c-cfca-436a-abc8-58a9971a0871", "sighting--923cb3fe-75e5-4d62-87e7-594a60323b98", "sighting--5fd2e81a-7ac8-4d5a-be6b-270a9643136b", "sighting--53b33507-b1a9-42ad-a721-2bfdae5323ae", "sighting--75e3c655-e5c6-40ff-afb0-f3f4b08c217c", "sighting--919ae5d4-9ee1-435b-ada0-3fc3bede1168", "sighting--e323d517-1e6e-4c83-b259-de068b039dc5", "sighting--2813702e-3f1d-46b5-8776-c44a8b95eb72", "sighting--ade575f5-f4a5-41cd-a72f-47b58733aa65", "sighting--964ee80d-71d7-4511-a99f-07e014e37361", "sighting--256f5765-97dd-433f-8549-f6023266efd6", "sighting--da2b7dcf-517d-44fb-a124-ada51d4d2059", "sighting--81851b29-968d-48f5-b20e-84b1e8decb25", "sighting--9226bb38-280a-4541-8b7c-eff0a9e03253", "sighting--2ca2f781-fc83-4823-b392-4967fa63d054", "sighting--db3150df-91b4-4de3-852c-a1db5543e446", "sighting--169d2839-24b8-4914-a4ab-dad8ef6e8478", "sighting--b105fc5c-b8e9-46ec-906e-76ce70b25271", "sighting--fa3e266c-0a78-4eee-a31a-8466eb8839ab", "sighting--e8211f97-ceb8-447f-bf31-0273196d4e10", "sighting--b69ab1ae-0632-4d18-8081-464e20a3469e", "sighting--430ed6de-3bfc-47b9-85d8-ca52cce90ace", "sighting--331ecb68-cc69-4638-a41d-885b0e30b975", "sighting--d9000f04-470d-4e81-944f-fb8f282750b3", "sighting--f4cb3bfb-aa17-4e93-950f-86cca6e86573", "sighting--0d158200-1fbd-4705-9943-2e6792ab0324", "sighting--b60cef14-174e-4b63-a641-0d868505af85", "sighting--80a01063-4919-4601-9814-5322a5d1535e", "sighting--2149c7a9-c82c-4d10-ab0b-79f60ce76785", "sighting--16478561-5474-4142-adf1-54d4751ea51d", "sighting--db57fb31-a1c3-40f4-a863-5bcbe943b036", "sighting--75a9138d-b2d7-419d-8d4f-a9c96faaa4bd", "sighting--1a71e351-278b-4b84-b01c-78a47a22046d", "sighting--2047e06e-0c57-431b-ada6-4b722fd0f888", "sighting--1bd3f281-9352-452c-bd74-d42d0261e220", "sighting--aee9a350-b69f-4f96-880c-9091fddd9956", "sighting--da3d9e62-17bc-4069-bac7-e4e4979ef9c0", "sighting--e2971c4d-5023-486b-b017-68dd6eb8d45b", "sighting--dd3ee7b4-08c2-4400-9fd3-cac67dfe1e9f", "sighting--6fbe96ed-c3ab-48cf-9c18-b73e400799f7", "sighting--21d4282c-3935-4778-97e7-8c6277a90c5e", "sighting--3322aa84-3ce3-4479-8234-0376a6ba1489", "sighting--1bf5593c-58c9-46f8-85c8-dcbb03e90555", "sighting--12060c52-6a9b-41fa-98a9-7d9918cfca95", "sighting--b7a3b181-a4f7-4b80-a1f7-f3b52d333b2f", "sighting--382ac9a8-56eb-4b48-8859-2b2ea72c429a", "sighting--3f7aac80-e8aa-490c-a3a1-ce76dc28e86d", "sighting--b780ac9b-9cf9-49dc-a91f-639dc47eb97c", "sighting--bc332c24-494a-4bd0-81b0-64be4a61209b", "sighting--85eaef82-ae27-4380-8e80-f846b9b5384e", "sighting--2962576c-b45e-4fdb-b18c-48eeadf95b38", "sighting--ccb90e38-c3b1-4c92-ba52-5f4ea1f812c9", "sighting--eb59def3-602e-4752-a102-0e5f68d3fa37", "sighting--afefffb9-96e7-4ba4-bcd0-74f5449c08fb", "sighting--2a85e1c2-006d-418f-a0ce-abca3ac669de", "sighting--a52bf7de-68f4-433d-92f9-89e5197882fc", "sighting--c69041d9-fa8b-44ce-990b-63f8519d5fd2", "sighting--3dc4b299-7853-4e58-8e10-a6d73c6300ca", "sighting--ce765ed2-2a82-43f6-922f-cc74f885d7be", "sighting--420cd0a7-372a-4af3-bfec-8eb5f36d2fdd", "sighting--8632ede5-77a9-4b31-83de-def34f72094d", "sighting--ac85a05a-d449-46ef-941e-07d94153d7c0", "sighting--95a0afa3-2870-4e5a-92eb-99f56c5482f0", "sighting--d2e51119-9208-422b-919d-d32abc8eb430", "sighting--c0130148-2619-493f-b46c-10b013072aef", "sighting--ad018630-03ec-49b2-991b-b1af18b03a72", "sighting--31f01b4d-92ca-4387-b3dc-f17817c54aa0", "sighting--de8ed2ca-9e9e-48fc-bac8-684a7526e3a1", "sighting--95ae5ff7-dbe5-4de0-8b98-24c32f979d7e", "sighting--896e03a4-106a-4264-a782-a0a886ef1e18", "sighting--55e68177-334e-4452-b09f-2c397dd8b677", "sighting--04a3bfb6-d588-4e96-8234-471a8d7cee53", "sighting--96edd2d8-4457-42ea-b02e-a3dfa476b5e7", "sighting--3b156ddc-f654-479d-a063-a0e4642dfcea", "sighting--b1f7a337-0a70-4dd5-aa0e-8989e83cb98f", "sighting--48f394be-ee67-4d12-9369-8bf6d2b5ceab", "sighting--0f7bedb1-b100-47b4-a2bb-ddca8e1e4193", "sighting--af1cc23e-5807-422b-b88a-53836640c0f8", "sighting--f049ecba-6f2a-4c47-affe-02366398c6ae", "sighting--5abd72fa-6cf1-4942-9ec0-430f3ff5fc1d", "sighting--73f56555-5780-4339-b744-4c85f9ef97d0", "sighting--8033e788-4df3-4b3f-905f-6e5bc619885f", "sighting--603b552f-3b73-443d-b5be-661d0f8a16b7", "sighting--6effeacc-489f-47c0-82f0-7c31a1934ec5", "sighting--ed56355d-9c5a-4ae2-81cd-e283aa11c558", "sighting--199987b1-596d-4a66-9348-b1313d06801a", "sighting--e7c2d1d3-f09b-41c3-9f91-2c41dbda8fbe", "sighting--c12f3dc6-8bdf-4deb-91c2-0b37c36dcc93", "sighting--4ffc4744-0a7d-492c-9db0-f346c89152ec", "sighting--189bf0fa-13d8-4669-bc78-48781858f89d", "sighting--b5266146-d147-4088-b951-67d1120f408f", "sighting--22861a00-0d3a-4019-9fc7-e47866b443c9", "sighting--4a513edb-0c62-46e5-a07e-9c55cdcc785f", "sighting--6e6b7597-1e5e-4d1f-a710-9596a9cdc7a4", "sighting--458afbf6-cf10-4e44-a0ba-fdb0ec99004a", "sighting--7a346c44-9a73-4743-ae79-0866b5ed9b84", "sighting--ae75062f-2f4a-497e-ad89-16cb8f13771d", "sighting--8c92216d-b82b-4b4b-bf10-b74be8d3dbf2", "sighting--56e1f20b-87f3-4c88-82c6-19c86eb747ad", "sighting--c610e076-4a27-4b4f-b933-d828c3a28aa9", "sighting--d9be0bc4-71c6-4382-9c98-1075f56dd350", "sighting--ae77a239-49a1-444c-b84f-455069a549c1", "sighting--c866917d-bf51-4bda-aa64-e526ced4fac6", "sighting--1ca4a7a6-7d64-42c2-8e43-035cfef1579c", "sighting--d2cad2ed-e86b-46e9-a178-4046457aaad0", "sighting--950a3fae-9880-405f-b117-72c07bd1c5df", "sighting--346f73a1-febb-413c-b931-dd9233d15617", "sighting--766995b8-c48f-46ed-a1c2-8b49e2a055ad", "sighting--1ea2ef77-f592-4914-bada-120e569d8d42", "sighting--89c13cad-bb00-4021-aee0-0e4b7aa1a5d1", "sighting--bea57165-4161-4949-a532-b3d343cfcf24", "sighting--725db532-3274-4b18-8ecb-0ed938925b67", "sighting--4a5156ca-7759-46cb-8e0b-6624180b2686", "sighting--8fd065e6-9f6c-4baa-8ce5-44e3de491faa", "sighting--81ae863d-3979-47bd-919d-755a9021e8e3", "sighting--c4f443e7-02ad-4e3c-adb7-9840dd2c12b0", "sighting--bb4ee378-840b-4b4b-adb5-d1514cff22fc", "sighting--1f04fcd9-0db6-4be9-ab2e-aeb2187bfbc4", "sighting--faf307c7-a26c-4827-8da5-9c2753a332cc", "sighting--e00ac52f-e1ce-4d07-8f2f-94e11734e1ac", "sighting--e0471308-8638-40eb-ad63-27a6707278fd", "sighting--37950cc6-f253-44cd-a1cd-0bcaf95b4561", "sighting--b98c8647-f2cc-4298-83da-b43618cdafc3", "sighting--f452a4d4-c7e9-4fd8-81a9-8f17c9f3c8db", "sighting--b279c9be-0aa1-47bc-8ed2-397d0fa8f6a7", "sighting--f75a39bf-43b3-41b7-bf56-9c24cab7b842", "sighting--de5d93c9-c60b-448f-8ee5-d79577933569", "sighting--e6ad61d4-cd76-498c-ad72-d29e7d90bf98", "sighting--73f728a7-7b38-4611-bed3-edd304805c07", "sighting--7fcb2abb-5507-4336-ae74-409f424928ec", "sighting--14981431-cf07-4be0-aa8e-27299252616d", "sighting--fc125cd7-8b0c-455b-a938-82117313092f", "sighting--17219e91-3e51-4f86-9a99-d0a6d69be622", "sighting--4decc590-702b-4047-9a99-3c6b89b85771", "sighting--b8e8d3c6-3736-44fa-8a30-53d1c5007fe4", "sighting--2b2d50fc-9071-4c3c-a21c-949d93556ed4", "sighting--a5e5a2d2-ce9b-4dd4-87d7-6560d676148c", "sighting--a6c40ab8-c273-4570-8353-9571d7e01a95", "sighting--fa1af75d-aa39-4f0c-9ec6-01ebe48daafc", "sighting--f69d381d-2b15-410f-9aa7-06a1e665641b", "sighting--b667ab1f-d537-4a20-84f2-949c2b889e2d", "sighting--25d9960a-0f28-40ba-b518-ba3a8c8b2bf8", "sighting--e6988bfd-209c-4ed2-a6f5-eb35ffe05b7a", "sighting--58862a4c-944d-4bba-9391-07411dda8205", "sighting--74856515-c7c7-436a-945a-54be0041bfdc", "sighting--958826bf-aec7-4a13-ab71-eb17d266bf2c", "sighting--586b61e0-36eb-45be-b3a6-2b985f7fbb5a", "sighting--8fe8a494-2a45-492d-b40c-95da45c63024", "sighting--c9b9409a-f2a3-4804-936c-fd02b3e4e635", "sighting--12423b5f-68a2-437f-9e48-3f05b66bfbed", "sighting--25cc55b9-13a7-473e-b395-5be900082caf", "sighting--372ca005-ab34-4012-999c-fc5b1280c1dc", "sighting--dcdcffac-cdd3-424b-80f9-46e0abb3cfb9", "sighting--325fbb92-3b14-4849-ad0e-9d2f0cafff06", "sighting--ab807060-13f9-4931-a2b4-f1d6cffdd581", "sighting--a57434a9-2128-4435-afb1-c21c4224754c", "sighting--fcd96a53-79f5-4932-93a9-d25f3020c57e", "sighting--a2a29660-cb64-4556-96b5-cc939f0c5351", "sighting--e2970f3b-72c5-4318-ae5f-866165975c69", "sighting--d5f2cc0e-b35f-4458-b9a9-217e671d888b", "sighting--76fa141f-9f42-4297-936f-faade0a03513", "sighting--7f75eea5-edfa-4713-8a30-eda30ce714f6", "sighting--288f8a00-dc00-40c1-962d-08091c84997f", "sighting--5bddfe83-81c0-450f-a747-4efde771e7ad", "sighting--e4911fde-7400-4e7a-849a-946580d2dd70", "sighting--2c3416b7-ec64-4968-8d56-a9827d6f5771", "sighting--5312caee-8976-4f6b-82a4-e910d4acf49b", "sighting--283f03ce-3a2c-4bec-93ed-a810919252c2", "sighting--44024865-cb19-4d38-ad19-ce82b2b9f963", "sighting--5bebce78-eb32-48b0-bc49-981d3f6a974a", "sighting--4fe9fde8-8d9b-4a91-ba7f-1beda8a5e23f", "sighting--ece6e8b6-c335-402d-a497-2406289a2e82", "sighting--26d7c0e0-44b4-4351-a563-d35ab6d4a70f", "sighting--0fb44b1a-cd4a-4034-8818-e2c1dd29a559", "sighting--d02f4409-2173-42f8-bd37-65e0539101ce", "sighting--df5e1572-9f3d-42b7-95cd-21f203ddc817", "sighting--06c19ebd-d3be-4845-a595-b3ab4a519313", "sighting--6fb44dff-4d30-4111-909b-b67f8c8eea41", "sighting--b635b16f-c50f-4923-b5ba-0f734f7b8c55", "sighting--7bcaefe6-0e36-40cf-9f8d-fd254f1c4a9d", "sighting--59632df8-7a91-44e8-8e8d-01cba6968239", "sighting--cb480369-1a17-4a59-8b4e-7dea25895245", "sighting--cc3fcdfa-aaae-497e-b777-4a256b2cc2fd", "sighting--9d834452-1fd1-476e-8803-cd075e2298ce", "sighting--3d70ba11-2d54-4759-a3fc-e4987a9450e4", "sighting--71502e43-2c82-471b-b22d-be69b0fed947", "sighting--2d663c77-6f9c-4232-badf-f7fcdd9cc564", "sighting--a26d4d14-4bb7-49ee-b7a2-71e2608819f8", "sighting--3f5d38dd-1139-4bb7-acd7-9fb518fe310f", "sighting--b9bf06a0-d81d-4bbe-af06-d79dbf22bc59", "sighting--1d5a1d74-eea1-40b6-99cf-b4d83d668f2d", "sighting--51277820-05b8-4910-9d8c-3fa9889b1ba5", "sighting--e3f08a7e-178c-49e8-9f75-e23ea50f0f0a", "sighting--0b83b117-05c0-4897-b484-054bd89fe5c1", "sighting--640cb4c4-4eb2-421f-bed5-6f72eb92c2be", "sighting--172acdad-ed46-4f8c-a6ec-1f123270edc6", "sighting--2bf22076-3f08-48f0-b0b8-1f9bbab1e9f8", "sighting--3b8164e8-5164-436e-ac7c-5d657c5045ea", "sighting--5dbf89c0-3224-4908-8c99-87cd845d7b90", "sighting--afcdab8a-a1a5-484d-884b-aa6b4f56e9da", "sighting--38d6237a-dad0-4de0-b051-b17d9bd67144", "sighting--370110b3-178d-472b-a13e-dc20b67863fa", "sighting--2edf50c6-1fd9-45c9-9fd3-0ec3cf631add", "sighting--5cd41ce6-c012-4e42-bdd4-64d365c65485", "sighting--b4c17641-3087-4c88-b1a7-1e4ca3b78163", "sighting--e46fe8c0-f8c0-469b-8517-1a267122a644", "sighting--0e2eee41-d5e6-4eec-8246-fd031ff8162d", "sighting--b150839f-afec-453a-bdec-0b4da5af935c", "sighting--219c6d3a-35be-4925-963b-0f7a887817b4", "sighting--a48871d2-09fa-4103-ba3e-46ebcb90be0a", "sighting--4a3ec25d-ad33-4c3c-a473-43665dc5d438", "sighting--b005ae57-86b8-422b-a2bb-97a90a4abb99", "sighting--d1bc3a39-bc9f-45c3-a592-02d3ecdab79a", "sighting--9196df11-d65e-41a3-b46f-67db57348e36", "sighting--fb87f470-79a6-4e9e-a0c4-d4f81aa56d8a", "sighting--0f18a43d-85f7-443e-be58-ad25bef8c83e", "sighting--72e3ce76-9f6d-4a06-a602-105440e0bf7f", "sighting--b74ddebe-ce8d-46dd-b725-614fc2b7a141", "sighting--5c41715e-724e-45f1-a4ae-04f978a4f2c4", "sighting--9f5a0189-a335-46cc-83d6-10ac65873b0d", "sighting--7bd40c5e-ac56-4de4-8705-30916f5a8f3e", "sighting--9dfec1d5-e5ce-4096-8076-83cf0ac081fe", "sighting--e70d7791-b80f-4425-8213-bf96f8ae8242", "sighting--05011796-1fa0-446d-833b-482c8d62e1f1", "sighting--d4e8929e-7d40-4d21-8bd2-b443efedc118", "sighting--e810794d-ffe9-4ea3-ba1c-e797df583686", "sighting--2a5880dd-ae04-4281-b7d6-1a95e7528240", "sighting--75989de3-677f-4717-aebb-3a48d7423ee3", "sighting--c7838b30-ec03-4fb7-a879-422d3bf50deb", "sighting--66276004-057b-4f6a-875b-666fe1ece119", "sighting--d26b2767-ab6d-4687-827c-d8c5ea9d7611", "sighting--ea2eeb5c-e805-4b13-b12a-5fc5f125f4cd", "sighting--aaf2d741-2f72-45f7-bc5c-c2513b91a3d0", "sighting--cba24660-9e60-4f4e-9502-12a789d8326f", "sighting--1a4e9f48-297d-488d-a441-99b9bb3856ac", "sighting--dae4dea0-2925-47b4-9105-99b06fe32c94", "sighting--3ffeec04-4c57-4f97-911e-e4030d5b5945", "sighting--993a0b0e-34fe-4913-a20a-75b0b74cfb59", "sighting--fbbc5650-083b-4098-89f8-52104c0aabeb", "sighting--fd5b0fc9-0764-455b-825d-eaabaf851f0b", "sighting--7343bbb1-8f16-40dc-b660-757c7793fa30", "sighting--24a323dc-0596-4024-8864-5b9a58747423", "sighting--4411fd93-3254-4753-822b-42373b877fc9", "sighting--81d5387d-e244-4778-b92c-9e5ba3b8c52b", "sighting--e63e5e28-0486-4103-b7c0-45ba958027ba", "sighting--7204f672-9386-4176-a9b2-a8a8be681045", "sighting--be23836e-0034-46e5-93c5-5fac5c80ef47", "sighting--144b3bd6-11a9-49f5-84bd-eebab9592a4e", "sighting--08681747-4b03-40d7-9413-2ff38dced9a2", "sighting--fd1a7da0-2681-4abd-bac3-76b62143625b", "sighting--05159976-cbea-465f-8049-0d56a576fec6", "sighting--4cd8cc0a-c946-4910-9f45-035115c01cb8", "sighting--b56e3ffe-8f87-48be-b69d-44182859d96e", "sighting--fe03806c-52bb-44d6-9073-c7e815f68819", "sighting--22d19040-9e50-4e43-be99-bd1d6ac41d79", "sighting--19670196-9fc5-4c35-b8dd-279160edab25", "sighting--102de71d-b7b7-4875-8675-b611f6419262", "sighting--6e89a6e2-5bd4-42aa-b990-29c84247ea10", "sighting--09de6439-ebdb-4512-beb9-80e90ce18e90", "sighting--8954f22a-6d32-4d81-b5fe-e14a370f1691", "sighting--092206aa-00cb-42bf-a49b-b0de5b86a35f", "sighting--4a8ce323-6f29-4b73-9991-28e8bb83f7b6", "sighting--2bafd57f-32c8-4c5d-9b45-f5b5804c37cf", "sighting--dfe6c397-957d-4ddf-91c6-8e279121d64a", "sighting--7a597c6c-c9f8-48ef-a0fc-4217731a95c1", "sighting--8197df66-47d0-4c8c-af48-832c67fefcfb", "sighting--893c22eb-c655-46c5-b767-659df08682ed", "sighting--4ef3dd7b-8b1a-4297-87ae-e3176c488c37", "sighting--1891f773-b57d-4220-a96d-f7332942d211", "sighting--f5ca1d62-e004-42eb-8d8c-6ade1b568e81", "sighting--662e6329-c30a-4bfc-af06-fcc8fb599764", "sighting--b85a5c6f-d130-460e-be43-1bf9c043863d", "sighting--d311eaee-19bf-473d-9115-5842992b17cf", "sighting--534389bc-0b9a-4640-a661-b42832914397", "sighting--fe2e05a6-9203-48a1-8063-4cf43d54acc4", "sighting--ffa99167-5230-4595-bc96-785fd9437b37", "sighting--30b503f5-2cd0-4832-80f6-aa82b137b979", "sighting--aef57d80-9dba-4c15-879d-7af276876ddf", "sighting--7a26fac5-5a4e-40fe-87a8-ff9852a0a21e", "sighting--c4facb40-8083-4552-9846-daa6400ea59f", "sighting--ced779c7-3bc7-429c-958e-dfc661070ba5", "sighting--4078b289-4299-4828-be68-f9e1c0774f11", "sighting--7fd2ae15-920b-406d-ae9b-5bf557acab9b", "sighting--c2ac526e-1ef3-4c13-8286-888d872e713b", "sighting--4555eb04-996f-4582-9252-c0ac8e8bb527", "sighting--fa5fddb8-4f8d-4f2f-9876-2204857707cd", "sighting--ac868bd6-01fc-49e6-99d9-3c327471d27f", "sighting--9e2b23e7-85a3-4892-86fc-55cfe6e086f7", "sighting--ae85af2e-7661-4c60-bc68-d5c870a5fd2c", "sighting--c496fddf-e265-4319-b7d9-0e41f733134d", "sighting--cb440e62-f07c-4179-bc26-b013d2d40625", "sighting--de974371-4ca8-4829-b042-34db27da0840", "sighting--359e1187-1ede-426e-a6b6-798a322252d6", "sighting--55e66053-095a-4a40-bdf9-580c204833e9", "sighting--42d413b7-3f4f-431a-a6f9-83fc5e2e58e6", "sighting--803fc064-0872-43de-8e82-15c026c104bd", "sighting--bd73f911-2bf0-46bf-844e-e5385c9caea3", "sighting--c7b4a74e-0e29-4cde-ae33-9d8f210399af", "sighting--b998bf4a-b187-469e-9092-629243109f1f", "sighting--503d1319-1a16-4dae-9e13-64b4edcb2c80", "sighting--1631742d-c3db-4647-b85a-4f0e9563fa77", "sighting--df1f7cb0-80b2-42a9-9e55-8ef06ace2a4e", "sighting--e75fc916-7fab-4295-9124-45c9915e1cb5", "sighting--ecffdb89-df02-4396-815d-48acdde9f2f0", "sighting--d61baf31-2a5e-4e15-b413-a4a6c6279367", "sighting--e99bbfcb-7ab9-4bf6-9e90-f84854d2494c", "sighting--60465a4c-b4a0-4e44-a121-d6ac1a306b09", "sighting--5d0dcea6-578f-46bb-accb-81da8b86677b", "sighting--f58e22c6-d737-46a6-ba78-5a3f6988a595", "sighting--4f3c4cd5-a6a4-464b-98f4-0bf8a799e552", "sighting--4a8c584a-b5ae-4df0-8bb2-194224dd743e", "sighting--63fe5f05-5aac-46af-88a5-69d76a074601", "sighting--025a4228-8392-4c42-8095-8816848b4dbf", "sighting--f380aa3e-fbba-468a-86d5-b36d7b878216", "sighting--62faf7cc-38cd-4d4b-8935-32439dc8f54d", "sighting--129c8db6-af8e-4c3e-b0a9-d884cf1f0fd0", "sighting--76bb0cc5-d29f-491d-b489-e790b7668351", "sighting--c22c0639-517a-4c3d-b766-cb334286a169", "sighting--a0f5fe11-aaaf-4166-8452-7559eedaf862", "sighting--3163c176-52ad-4948-8643-364421da6ea9", "sighting--9835392a-ade1-49fb-8da4-d45d9f526b95", "sighting--3c6eb580-8b21-4999-9b6e-53f71255308c", "sighting--638b3966-90cb-4d43-a0de-34f97024c176", "sighting--2227ecf3-c3e4-4217-8002-caaae961767b", "sighting--cc2bf08c-7fd7-4fb3-9f4a-f44a98434322", "sighting--ef4744c8-4fbb-40c1-a604-e3de85c7f2da", "sighting--27eed859-d0f9-4ae9-8ab1-bf90a40e817b", "sighting--cb1848b1-8fcd-46b4-8374-9e2404a6c2ff", "sighting--61657b30-d60d-4bce-8895-a193f1f1a43f", "sighting--c45e2653-b656-4106-b968-5820b97fa3b6", "sighting--d658ca52-0fb8-45a4-8917-63818e2c59ee", "sighting--d7bf3cae-0fc7-4089-8b31-5e8b9c333ebc", "sighting--f498e53f-ff28-4649-a6ae-c2dc77131b5e", "sighting--dd5436ac-4d60-4193-ada3-ae144d85feb4", "sighting--6733f7f0-e019-4d96-ba79-1a13126ed0e7", "sighting--54077e4c-4da4-437b-8ae2-6658375dbbc9", "sighting--dbf6a745-386b-4d3d-86f3-adf3f89c5b0a", "sighting--3b9ee773-d532-4dfd-84ce-d19e86c49989", "sighting--e4419c57-3081-4fcf-8fc9-1714704742f9", "sighting--21ed70c3-922d-4d65-ad1a-30b719e3d873", "sighting--60fb83a9-b4a0-46b6-a3d4-d443039609c5", "sighting--d141dacf-daf0-4c8e-9d20-c1b13f18838b", "sighting--b4d1300a-623e-4d21-9686-029c2077c68c", "sighting--6dc21ed7-b4e8-4ff6-b991-c9f5e5b04390", "sighting--d8be3f33-e010-43b2-a6cc-1a5df78447d0", "sighting--47c30aa4-ec41-4ff5-85cd-818c6ff79d6b", "sighting--10a5d1f1-4c2f-4cf9-a6db-cf6c9279b431", "sighting--0d1abfb6-fd86-465f-933b-899ff1278b19", "sighting--38743df6-d015-4899-bed5-e9490936ff2b", "sighting--b7f25792-b05f-43c7-addb-9898cbede06d", "sighting--57b55bcf-72f6-4874-8298-f50051483e9d", "sighting--d7fb3178-eb2b-450e-94da-514cc2c565b5", "sighting--e68aa3d3-8667-47c6-9f51-f218c7da5aa5", "sighting--30f4e114-e1c6-4dad-8192-2e22c3ab1f20", "sighting--dc3052f0-d36f-4f15-9448-a5a7b5197501", "sighting--10e070e1-97aa-472f-82db-751e15d0281f", "sighting--20bcb745-fe94-4e8e-917a-859dc88df816", "sighting--4998f9f1-02d9-4fc3-9fa3-c934d5d4f0fe", "sighting--81f3abac-ad3f-40e2-81ca-aed6815de965", "sighting--ff595e27-8b14-4d7e-871b-a340411ab421", "sighting--a27111e1-f682-4073-a392-0d0970745841", "sighting--57691c55-e802-4138-8d6d-3e3b5c0751ab", "sighting--d3d48f8b-8cef-4488-a282-3d35e9500b0c", "sighting--60e01ca3-1b40-43ce-8586-aba6ba1fab8d", "sighting--3fad0715-9f4f-4910-98b4-c11221f84fe3", "sighting--1a08ab22-db0f-4834-b360-7056fe3b256f", "sighting--29d7b17c-c664-4699-b405-11c2802358e0", "sighting--85428902-5501-4d99-bfc6-f41f5738b583", "sighting--7f7fe3c9-76e2-49fb-865c-e45f7146f6d0", "sighting--ab7f7f62-3291-43e0-95b8-009892c912fc", "sighting--3fb639c5-ea3a-46a3-8968-fd2de6f93957", "sighting--c844ea7c-4a45-4e79-8041-25f92caa0947", "sighting--565583b6-b3db-4853-bcd4-29b6830eee1a", "sighting--22f4600d-6ce0-4a9f-a661-6130c2de4fc9", "sighting--f4ca7f01-4939-432a-b93b-b15552d58d8a", "sighting--e289f86a-3bda-4561-8efe-a9a1b3e96a6d", "sighting--2c147dcf-6577-4e13-934a-42ee89ef6638", "sighting--2708ca9c-63f9-4576-8797-1b8e54a1d634", "sighting--53c7ab56-f069-4e87-b229-d9fe7c0426e6", "sighting--e0271bf5-b6dd-46de-9289-e6162c7bd310", "sighting--ffaae29b-0802-4479-8bde-ce31020cce75", "sighting--c7bc6fda-5c40-42dc-bcd6-cdf26bd50337", "sighting--685c2798-fe78-4646-b78d-d5d099085d46", "sighting--e4e43962-1b22-4421-a4f6-8c88ce757abb", "sighting--774e676c-f7fe-4166-95bd-a9a9daabeecb", "sighting--15eb6e71-8a88-42fd-a0df-f8ff1011109d", "sighting--4e09973d-8431-4b70-ab37-83b01ef5446e", "sighting--11fd00ec-2a73-4bc0-8311-e08c06b2a9b2", "sighting--1312f76f-3c17-4b48-9687-256dfc185f1b", "sighting--a551d2b8-e131-4e59-b80c-de83fdd57dfa", "sighting--09f3a819-b39d-4a0e-9d68-4d2f9ee92721", "sighting--1024e551-ef3e-43ce-acc1-70798d7f89d9", "sighting--6fed3b76-a127-4309-9e89-1d0c5778337c", "sighting--ab9d6755-1ba9-407f-824a-a22cfca8830c", "sighting--56cb4b5c-9b18-4133-b493-150d5692969e", "sighting--ddac9583-a97e-4063-8098-4a1934203980", "sighting--b7680b8e-eae2-4fbc-95b4-e412654a745d", "sighting--74fa5323-3b47-40c5-899e-254bfea52914", "sighting--a0ffd345-dca2-4056-bf51-09c0c1eb3e87", "sighting--982c313f-c663-408e-811f-c20fc51f7327", "sighting--fb1a88f8-2dd9-40b5-a831-9ee17d437c69", "sighting--1e0ed4b7-d1a3-4af8-a516-65f40811b6b2", "sighting--f381a747-120d-475e-a4fc-454174c8a52d", "sighting--5a284df7-c539-4346-b5ac-e949aa726446", "sighting--c79ee1ce-b3fe-45d8-b896-a2e063358d48", "sighting--24a1d263-f076-4227-b3d1-21c9f328f4c0", "sighting--b32157f7-ad7c-4e5d-a3f7-f7e2b51d191e", "sighting--3c30d185-85cc-4ee4-af16-1b0b1af838ff", "sighting--740643a2-eafe-46df-89da-b8af40ec01e5", "sighting--8d45e771-d6a9-4702-8df1-6038315398d1", "sighting--862f5ca1-ce63-4ba1-a9e3-8ce7411d71e1", "sighting--3afa5776-95ea-4416-94e1-ae637cdba52f", "sighting--20f60097-a357-42a0-b5c8-c71659191332", "sighting--96c25876-82fe-414f-97aa-4b374a2db6cd", "sighting--06af702e-4afe-4bf8-8972-0afade9a5d42", "sighting--239e1d49-0299-47c5-b3ce-3a269edc5bca", "sighting--0cf05862-df40-4d92-a3ed-1a19b02b1974", "sighting--97882fd4-62c0-43b0-a95f-eb72bbd1c457", "sighting--c5b709fe-e19b-44a8-b862-04a5792e1a47", "sighting--702710d6-9ba4-482e-a995-3a6aebced998", "sighting--76f42529-b142-4076-9211-167e1ed82f26", "sighting--4a452f36-20c0-4fd3-bcb8-95a6a42bde98", "sighting--0a274590-c8e8-4bc3-828c-13598387fb03", "sighting--64100206-d9c2-4bc4-99fe-568f8f36dd40", "sighting--4b29e163-dd3f-43d1-8669-413442d123df", "sighting--559be9fc-7873-430e-9be8-0de43069e3ff", "sighting--d8638221-d463-442f-95ae-6800fbb07198", "sighting--ecb6e42b-fd1a-4ada-af08-21d5e148d979", "sighting--0f28f5a2-c0ed-44b4-b905-381a9d20b5d2", "sighting--bea06b8c-95ee-4384-aaa5-b3b456268ee1", "sighting--5a6ed2ee-d62c-41b4-94bd-394ae3849f7f", "sighting--4a12598b-aefc-4262-8280-eff6e4597433", "sighting--d4f1e57f-999b-4c75-90d4-5bd2bbd76b20", "sighting--7a952a19-fa9f-4706-81ff-b3cf2db219e8", "sighting--044216e5-836a-4646-811e-eafe85101ae7", "sighting--624cae7f-75a2-49ec-aba4-1f00d9d4e6e8", "sighting--f44922cd-7cab-411f-9e9e-614d1843eb19", "sighting--e6ea8fe7-46bc-40a3-8729-d9824a08e05d", "sighting--e43be24e-28cb-43be-b0cf-ea54a338ac66", "sighting--99150fa5-f3c5-4de1-95eb-e813f64ad937", "sighting--1e26cdcb-0f5e-43d7-9b21-e31c13cfab37", "sighting--422e70d6-2b1f-43f5-9c89-04956568b7d9", "sighting--ae4776cf-7d27-4604-aa3e-670e134161e5", "sighting--064e20ae-e0e0-46d4-a76b-fba4716b8d4e", "sighting--3cec3250-6dfd-46b0-adc6-796034df4366", "sighting--52d509ec-29cd-4b3d-a7be-9e11a955690a", "sighting--35a42d82-5ef0-4ac8-a140-b1287c5bfedd", "sighting--794d4ff2-ef38-4d67-9e63-54ae96df9a59", "sighting--9013fc56-a1b5-4bf3-862d-2087b28cfec2", "sighting--360fdfb4-9e3c-42b3-a886-bc0689d6e3b6", "sighting--22efb58f-0f67-4405-943b-da2100ebe7d7", "sighting--b47ce6b7-9043-48fe-afe0-5415cd9d3fa6", "sighting--74163c66-6188-4232-baa8-078c64462abd", "sighting--f888aced-9bec-43ed-bf34-860a2724218f", "sighting--e24b12fc-c48e-4ab8-aec9-43bab5d5ce90", "sighting--f35b4ca3-4a79-4894-8a49-9fe137a43098", "sighting--8684b590-fff3-419d-944d-72d3b0ca94fc", "sighting--70f7f1f4-3004-426a-898c-3d4af4ff2663", "sighting--a58f25a4-5835-48e5-8ed1-a261bd3fd1d3", "sighting--24bd2956-58db-45d4-96b3-f7563f27b80d", "sighting--412399ee-252e-44eb-ae37-1a924c95e554", "sighting--459a7439-7832-4635-9e37-2429c1b8be93", "sighting--f10732bf-e57e-4023-b330-2dd073828840", "sighting--852ed3fa-1580-4811-ae22-f108b804491e", "sighting--f4e15259-a22b-43d9-8be7-5aaefd9914cf", "sighting--40122508-92a1-40e9-99d1-3026ada68176", "sighting--cd8eb96c-29be-45d2-8404-2928e717618f", "sighting--9ee97ffa-2b78-4137-bb1a-febd09cd4748", "sighting--f663117d-33f6-449f-ac8d-9f6471073084", "sighting--f93eff8f-d0d4-4eb7-b665-9e26e23a7687", "sighting--c29ea99e-f7f2-4c5a-b68d-03228d2f47ef", "sighting--86b8d2cd-0128-42f0-8c8d-57972d451a71", "sighting--f04a0c96-1c1f-4dfd-84b2-39ddbd328494", "sighting--c73fa031-bb2c-4b99-a295-113b8fa92c3a", "sighting--2202b137-7181-49bd-9235-5bcd1716f35b", "sighting--1b667b51-f383-40f7-a327-af13698823bd", "sighting--7cd8cb06-074d-42d1-8994-5b773d839d57", "sighting--82bd9070-97b5-454d-a184-af61ad78a61a", "sighting--07f4d8bb-1d26-4ea6-8f84-032f62177762", "sighting--a0ef5746-edcb-4960-82be-54f21bdbd390", "sighting--62250c68-6324-47b0-84ae-ff8cf49d9fde", "sighting--09dcd9b8-00ac-4cb2-af3c-8f6c8abe1616", "sighting--e7fa2bce-80fd-4e32-ae1c-d157cf372daa", "sighting--c2cb594b-3de1-4b1f-9f7a-2e915405a585", "sighting--2763c846-e0ba-4a41-b16e-2c1957775ed4", "sighting--ae9526ae-21df-45f2-8c14-b07707018df9", "sighting--d6079372-849e-43a2-a437-0226e11c2971", "sighting--7ff1a5ca-3cfa-4f44-9ca1-b386fa110d77", "sighting--c0f5a136-aeb0-4163-92be-82cedd29e05c", "sighting--5ad8a7a5-18c1-492d-b7fd-dfc1755e6dbd", "sighting--9c268eff-eaa4-404a-8394-efe508cd3beb", "sighting--5d2c36c9-9752-434b-95c0-77193dbb9bdc", "sighting--c793585d-62ef-4cc4-8036-1219a4b51f92", "sighting--248bd6a4-819c-4f9e-a368-93e278bfe90b", "sighting--043c8cdc-c33a-4b03-b6ce-e575a7c6a6fb", "sighting--b3d9db0d-189a-4caf-9e99-9fffebff9996", "sighting--13505674-d04d-4e48-9a56-a82e7e55fbb6", "sighting--c17a07e1-85b2-47d9-8fc1-b27665e4bb39", "sighting--e11b7cdc-8223-4bc7-8bd1-a22e67078153", "sighting--a7a5a2b9-dd79-4069-b4e6-ad48766d7ee8", "sighting--30591325-902c-4a0f-92f2-4be898541d30", "sighting--ac5845ad-bd44-4670-9e08-c7756206fed5", "sighting--0c5ed645-23d0-4ac8-84e2-fb18a71f8880", "sighting--75e29eef-3341-47ae-ac3a-a1c75f84ce60", "sighting--b0b09d7a-1be8-4b7b-8572-7d5394570b6c", "sighting--d0f6b7d2-8319-4726-bf4f-78c9138312f4", "sighting--66d856ba-1bf1-47c2-a494-afa427b34c10", "sighting--5b01f7ac-7b90-4df0-a375-774e57138a4b", "sighting--6cb69a93-9610-4126-b6da-5549904ecf5f", "sighting--5acbdac8-fb31-4552-9677-457967c3cce8", "sighting--87713862-d0eb-46fd-88ee-8f8d1c64c29d", "sighting--51839bc9-9870-4d68-b031-59a877f1aa66", "sighting--2d82da75-586f-4b69-a3c1-4948e6b6c5c7", "sighting--58530b28-9d17-4fa2-a808-708c75d9cb2e", "sighting--be0b614b-8c0e-4918-b50a-6a5bc19b9600", "sighting--78ebcc71-3a96-4c63-8b56-178a2c97cee7", "sighting--8c021c30-1b17-431b-8a31-12753c406aab", "sighting--05f02245-60f8-480d-87cf-2638fbb7850c", "sighting--8509fa82-5661-412f-b950-e0d0c67fb4c7", "sighting--d5daacc2-d2e2-4da5-a9d8-56c87939bde7", "sighting--a7713753-7f02-45e0-a8cf-9b26393cd7cb", "sighting--134c713d-8027-4987-b9a9-1b8687f87490", "sighting--ca51d016-30ed-49a2-acf1-a836cb6cedb9", "sighting--e8be13b7-cb1f-44a8-9670-4c711f5b3c92", "sighting--0c1c3660-093e-4dea-ab0b-4348b5fa8edf", "sighting--5de5627d-42cb-4d0d-9487-f9bce0b645d2", "sighting--8418c894-f0c2-419a-a854-032451b558d2", "sighting--7f85b9fb-8b8d-4b09-89de-d53a93095a16", "sighting--f4241b39-1591-4e2a-99e0-7c0620401ab2", "sighting--b292e81d-a803-4888-8686-0e03f7f46a8d", "sighting--9e2a86c7-f607-496d-90fa-c8ed2d96086f", "sighting--0f823f98-7de6-4281-a330-379c2b9ce069", "sighting--fb3cdcfe-aa41-4112-8f13-1165aaa3d1f8", "sighting--7ac6c537-d0c0-4461-86ce-cb697b9a6e29", "sighting--1991f9fd-548f-4079-a0d4-58274f7fe906", "sighting--3c6ac4e0-1e48-474a-a281-3a97467217c3", "sighting--500cc381-8b28-4b11-bbee-fcbfefc2238c", "sighting--a709f672-3806-4d91-87f7-e1f793fa6084", "sighting--1fd37d81-612d-447b-a961-544d1ab9f69a", "sighting--06a301a5-9cb0-4360-a10b-2b1128ceff0d", "sighting--d458c7a8-a45b-4cc5-b521-88e93198ae34", "sighting--02d4f687-b611-4f9a-8625-567b40323ed6", "sighting--241647dc-0275-4306-818e-a5a369d3667e", "sighting--af4855c4-051a-4b28-be9a-959c5393b669", "sighting--d53165f5-8153-4ebc-a271-8cb3e640c19e", "sighting--8245d364-7247-4539-ab01-5628ca835946", "sighting--ec7a8ab3-8db3-4015-900d-500ece54a4b6", "sighting--03e4b3e6-7c60-4dff-a79c-680bee9b994e", "sighting--ff53bf3b-17df-449b-81a2-d77b83d0f343", "sighting--2a9556f8-4f69-4c39-95c5-8eb94c07e0b3", "sighting--18259f2f-eb2f-4fae-8792-d7a1b99cca35", "sighting--3586ce68-ec3e-42ac-b38f-77a6297724a9", "sighting--7a1ae24a-0c0f-4218-9066-1751ba6520a9", "sighting--f8df546e-e274-456e-88f8-fe855cbb1ae7", "sighting--1ea736a1-9290-45a8-b864-759d7db63b85", "sighting--b9b9e356-3107-4e7c-a0d0-27758192b02f", "sighting--2521b491-5254-47c2-9ffc-2510101ccff0", "sighting--e307885c-c250-455e-b463-907e5f8be876", "sighting--3fadbbb7-7d39-491a-ade2-d9ddb91f3c09", "sighting--4fef1b6c-c66f-4039-afa1-fde6152651bb", "sighting--3ace9698-fd83-4407-90f7-24769fe22b5e", "sighting--8fc3ea0a-a1d4-49e7-88f6-c993d89ceb92", "sighting--5db92bde-6b1a-4626-a7ce-af5a46a4ae24", "sighting--7b717af3-515f-4483-907c-f00f32a8b782", "sighting--cdd58e4a-4b75-4a7d-bbca-c5ff04a6109a", "sighting--84cb655b-918c-4393-adae-8fab3a60bbf2", "sighting--63676318-2f80-4b13-9a0f-3339e846eb8f", "sighting--5c1e9402-a444-4577-8ba9-be009a88e82b", "sighting--60cc7070-2116-4ba6-9481-0d2fd8ed5740", "sighting--19bdd3f6-f2ec-4f0a-9b5f-7507a7db1db6", "sighting--051dda75-48e1-496f-9cc6-e4cb05db1042", "sighting--71a46d9e-d40a-4df4-948a-f0dca2938a4b", "sighting--9492bf74-a2d2-4850-9b61-94af8f66c6e4", "sighting--10c9e58b-3fff-42c2-82d1-386aca2c6eec", "sighting--9ae09f19-6f1b-4367-84c9-8210ef22240b", "sighting--ffea7e6a-f5dd-47be-8e64-589f9d755f25", "sighting--0966468a-19bf-4035-a15a-fccc8769443e", "sighting--1181895f-aee0-48f5-ba0b-e89327097161", "sighting--fd35bd88-c594-424b-aea2-54d14009a33b", "sighting--ab232e98-97a9-48c9-b2ef-b09bd07bb3be", "sighting--014de62f-6cbd-40e2-bd56-d5df8ba62d01", "sighting--8b04e67d-4bbf-4c79-a38c-666c49e44d71", "sighting--08a6d6a5-dfa9-4add-b52d-d9b21803abaf", "sighting--f9388734-7f32-4e54-92db-4645185d235a", "sighting--25eb51b8-1568-4c70-bf93-9ad2264f0fa7", "sighting--1aa0e06f-c844-4f4c-a5ab-d202cd0bf3bb", "sighting--cd8b748b-2f9f-45c9-8462-3213d1810e6b", "sighting--824a1da2-96a1-4c5c-aae2-9fa532712fe6", "sighting--84cb7ace-3a11-4f65-a17e-a0179eb7dd8c", "sighting--1a707b4f-3b72-4102-9b58-b9b01b5c8a94", "sighting--b373245f-74cc-48b6-8ec8-a180695c1ed7", "sighting--8f5b4fb2-3003-41d9-bdb0-63ca460011d6", "sighting--5cfa6bf7-84c5-4da8-ab2e-69e5a878cb00", "sighting--67a2421c-94fd-4f5b-a827-4be4ef41653d", "sighting--7b5752ff-2c80-4058-9135-95336b9e6282", "sighting--14b4dc81-4afb-4de7-90f1-b9be39953355", "sighting--1d711d1b-ca61-4abc-a7f7-f88bcf2807a2", "sighting--de0b0e9a-8355-45e2-8aa9-21a6ec76476d", "sighting--71b46463-7dd3-42cc-9e5e-bdade9a6dc14", "sighting--2a72d458-0f77-450b-b14a-7a54d0131cd6", "sighting--71727a8c-3b14-43ec-bb4b-a20ffc9fe304", "sighting--096d2932-9176-47c4-80c9-866bc807155f", "sighting--579549d0-175c-48cf-aa9f-b8b573286494", "sighting--bb329e01-2259-46c5-a0d6-9f2c45fb726c", "sighting--40288a76-33e5-43df-b09a-78076dc1fa65", "sighting--ffaff8ef-2a40-4f9d-a9ab-7337c7449cfd", "sighting--72f41c91-4355-4237-9ab3-58621356b491", "sighting--c7233fd5-0797-45fd-96e8-c32789c32862", "sighting--585980c6-1063-4535-86d0-358d73363ef9", "sighting--868d6456-f4f6-4e5d-9aa9-6b230699b766", "sighting--b6772a44-c4e5-4b80-b4d7-f2b588a490ab", "sighting--637e6168-ab71-413f-b107-3c4c93c17493", "sighting--c25f3a12-9803-4878-bf77-7a12e97aa911", "sighting--48b68a74-db1b-4122-b738-792bdff731e5", "sighting--e3f09adf-45e7-408d-a387-72da2217cc47", "sighting--d975d024-498b-4e8a-b7f5-ec394c1eb2e3", "sighting--47006bdc-760a-4649-bafa-f5926b396553", "sighting--ef59fd4b-3ab7-4e09-b7e1-0daaba2f7a0c", "sighting--7b6600ac-7c73-4989-a107-4193b534232a", "sighting--050e8ee0-69fa-4787-bd6d-a7f5cae96fa0", "sighting--826ff9ff-888d-40c5-bf12-24f6269e8719", "sighting--7d0bd705-984f-4c0f-99a3-06364983c5d9", "sighting--4ed88a6f-3250-432b-82e8-3705b431d124", "sighting--0f347398-575b-473a-9c95-402c38c79be7", "sighting--fc5b70cc-62ee-444e-8a09-af878aa57b28", "sighting--ea5359cc-fbd0-4425-82e6-64b91a69a472", "sighting--4ce77002-f0fd-41b2-bce0-9834c7999dfa", "sighting--90438e09-65c8-4a2a-9e5d-df0fd3241bdb", "sighting--9e283dac-51ba-45ad-8edb-035c166a921d", "sighting--bbebf450-60e2-4db6-9dd1-9a122dcf6a22", "sighting--abe87b19-70f0-456b-9c80-52227ae15f49", "sighting--802ae3e2-9066-470f-9019-1902879eb840", "sighting--6ed99bba-aa86-4802-85d5-93d154715b3f", "sighting--d67c64b3-408d-457b-a299-b6a7831f4c63", "sighting--879445ad-c0d3-48aa-b423-b29160cff4af", "sighting--b6e0685b-7186-48de-b841-600ea084553a", "sighting--3ad5cfd3-c5c8-4f2b-985a-f64df10ace48", "sighting--5f8662aa-9bb6-406a-9de5-994c66fcd44a", "sighting--30ec076b-eaa9-475e-8105-150c196ed004", "sighting--1e624b4c-261f-4746-8bcd-e7bc2fc30323", "sighting--d12235ed-b044-470a-90c0-c231e6109e6d", "sighting--f2e17473-162e-4160-87e4-fc3fd1b9b9ae", "sighting--b0e0d5f0-a672-40c9-9204-85281a523eee", "sighting--73476cf3-a793-4122-b287-01bdaf9ccb86", "sighting--42ad22fa-ace7-4b0a-a929-45d7d2965194", "sighting--7d0e202c-e304-4c3e-b231-d330f290323b", "sighting--7bdf15f8-9bbf-44ee-bab1-9acf810203d3", "sighting--c2f0f7fd-afd7-4e70-a646-c3de0771e989", "sighting--c4ab6683-834a-4a3f-be7c-d423ab3c3e81", "sighting--fe669803-c9f0-429f-9bc5-146ccbfe890c", "sighting--3aed96ad-06c9-4f06-8a67-28331cd1f5d3", "sighting--61e03df0-9bb2-4ece-b756-18d7292e2d72", "sighting--d96b7e75-13f9-4772-954c-40420fa96304", "sighting--1286430c-b50f-4a2c-8fa2-c5494ef6de8b", "sighting--0ac12586-8dbb-4859-847a-222a42e5cf85", "sighting--0a56675e-147d-4838-b7cc-ae36a4854cfd", "sighting--f8ddd3ca-f2e1-44ea-8d18-227ec047e6d8", "sighting--8d9c91ab-d074-4e46-a711-1534c48b5370", "sighting--c1968b05-16eb-407e-9b5c-4e56480cf9ef", "sighting--d86d71b3-4873-4eae-bb48-3bea125576cc", "sighting--a04d14c2-a6fa-405b-bec8-6f5e8a9206b1", "sighting--4f77445e-a708-4d70-a4f5-b96cd7e05b54", "sighting--bb5f934e-4011-4c46-9c37-ece27db3a701", "sighting--f7259aa4-7f62-4811-8f05-0c75851eebc9", "sighting--4dd3db58-7977-41a6-9c54-8f70df74e41c", "sighting--70a4cd7b-00cf-4430-a39d-057c4d2234a3", "sighting--afc2b7c6-c314-43dd-83c8-c385c26f2e0a", "sighting--49d36173-16ea-47f2-ad67-2845cd294419", "sighting--4bb37bb4-4ef6-4406-a5f6-8c42acdebbb8", "sighting--c7f25f86-5ccf-4c01-b6c6-7d42adcf4650", "sighting--70cecb07-3687-4048-8683-efd4c0065dba", "sighting--4d57aa17-e2e2-47cc-a453-f1b7fcca3d58", "sighting--4b34f279-b399-46e3-93e1-e9b8a6834336", "sighting--531a016a-ce51-4b4c-8b62-57a9225fefa7", "sighting--a828b694-6ee5-4a95-9c71-85112ea7097d", "sighting--e4f248b3-cf2e-4840-989a-f3638e1adf9b", "sighting--e8f05239-804a-4ccf-8d45-db2c54df32b6", "sighting--79b5dc11-a322-47aa-ad93-04527f2a9b57", "sighting--c844c631-ed81-45f1-84a6-f2f235d2ba02", "sighting--31ce6908-53b4-4b53-81d6-a0e20344d005", "sighting--eba9c980-f578-419b-a713-44aff16a7263", "sighting--612d719e-ea88-4ed3-b23f-02140659e8fc", "sighting--fa034003-97bb-484f-a4a1-bca4a52d0219", "sighting--0215e786-6d0e-43c7-82eb-e6bf3cf69eac", "sighting--90277a47-4283-449b-88c7-f43f22812298", "sighting--4655feed-d2cf-48f1-9e52-d20d4afb6dcf", "sighting--a34c9a4f-f247-4f1c-9b3d-d0d0e5ed34b2", "sighting--fa265809-c7a8-4550-ba01-f944519e09cf", "sighting--56fd4345-0645-4534-ad1c-604aae1e3162", "sighting--c67db1f6-c7c1-44bc-8735-ae0cad1883fb", "sighting--f862a01e-cd21-42ab-8afe-4b5829719736", "sighting--0bd8ec55-6c36-4d3d-8972-2147f33e1b83", "sighting--e632e251-46bb-429f-91e2-cb53d78cd2b8", "sighting--35223e22-72c6-4d3d-b4c6-36e471a65ec3", "sighting--a5e9b9bc-f0f0-49cb-9248-fee9f23d2bc3", "sighting--bfa59b65-8211-45ed-a144-4f17cb8a6eb0", "sighting--e6f7d7ed-5c9d-46ff-b790-4460c6a83e1b", "sighting--da38319e-999a-4da8-8edb-5ca4bfdaeb50", "sighting--5090506f-068b-4e92-a0a2-10fd2c76d34a", "sighting--68d87a8c-63b3-414f-833a-fb54fd5367e5", "sighting--4b547ffd-a3cc-4cbc-b39f-4c5ae6c431ca", "sighting--28aed0d6-ce56-4177-8ba3-22543110be75", "sighting--08c6562c-6928-4115-9d27-19c05caba881", "sighting--30845dbf-bf22-4fec-95b7-9ddd580b7ba0", "sighting--6490c910-3c5b-406e-91dd-83852d7514a5", "sighting--83020f60-2d5c-4a35-8330-e9a64ea1a94c", "sighting--f9563412-bc4c-4a5b-ae37-27a2c6c4458a", "sighting--3bca74bb-1b7d-47b3-8302-0822dd2dde86", "sighting--8343035b-6b95-42a0-8abe-a4ee20fd6f1d", "sighting--a52fff5b-fdbe-44cb-b389-7ce2bd3f3ae0", "sighting--3a65ee7c-067f-480a-a368-be2d9f5ad81a", "sighting--41e93758-7755-4534-98dc-74645366bfc4", "sighting--5cdd78e7-5151-491c-be60-8f167661d30b", "sighting--4b1e9234-71a2-4cc4-a7ff-717113df1846", "sighting--58afa32a-f440-4090-9bfc-ae0179e810f5", "sighting--6c73dd2c-0784-4006-bd0f-7616e5c0a3ec", "sighting--7417c1c1-fe3c-40c9-a188-c1345c297f77", "sighting--e5a69ebf-9720-4247-a265-e852f9f70388", "sighting--85d2ee97-1b27-493e-9f3f-780e807bede7", "sighting--f5f395b5-19f5-4dd0-9744-763a1a234177", "sighting--b1470b79-f675-4b0a-92f7-8f80ffe21ed2", "sighting--77d9f7e2-39c5-4854-ac49-a921b5281bf4", "sighting--3a778152-3ac1-4527-94cc-119192dc7c39", "sighting--49858e42-80c1-4a38-b468-5d972a391221", "sighting--e6910fcf-8681-4158-833c-584a6dbf7cea", "sighting--535d684d-12a1-4bf5-a0d5-38879c919496", "sighting--5e84d59b-9743-4160-85f8-60494b9098a0", "sighting--69cfec1c-a3a0-4eef-b43a-eb671b839ed9", "sighting--de6bfc88-6959-44f8-a271-152aa46657d7", "sighting--d8153155-a35f-4057-bf84-9984ecf476cc", "sighting--d461c467-ffec-4437-99d1-3feddc91c787", "sighting--5961154d-f01c-461c-a6ce-af1b2f97febb", "sighting--b7b4c809-4604-433a-843d-e7030dfbb2f0", "sighting--8be009d4-677c-413f-b977-1ad89d1df3a7", "sighting--fa5248d3-7390-46d5-b2a5-ffcb3e66ca31", "sighting--4420ef73-e3a1-4a33-8cde-b2bd00f369b2", "sighting--3f05f4dd-8cd8-4dad-bfff-483cc8978707", "sighting--5b20b15f-dfd6-41b0-b269-fac45c92c570", "sighting--5b2a4ca1-4582-4abf-b54e-b9ad6e491e59", "sighting--8e48de83-6b78-4db9-8743-7ebbe6ec151d", "sighting--0f95de79-702b-4c72-a7cd-753b1d1cab64", "sighting--ffdd91c3-e3f9-4cdc-a47d-0e3bb49d7d79", "sighting--d9a7ab37-25f3-4335-bd7f-ffc8b7379111", "sighting--4475f41a-d7ea-4bc6-a1dd-5e8ffc1ef9a4", "sighting--fbd76ddc-fc07-4b77-9c09-e186eb1f8922", "sighting--23b5df83-8058-43f0-9074-28475d0e36fb", "sighting--a953ca73-b22c-4f06-8957-bdd44e40cbd2", "sighting--bd68d239-c80f-4b4d-9d7c-72fec66cc7de", "sighting--ff56d937-c3a0-459a-bedc-fc0054529efc", "sighting--86e351c2-2570-45db-b3fe-a5dcd916a2ee", "sighting--d63dee18-3b8a-46d2-ab6b-97a51d6bf66d", "sighting--7f45298e-8ce5-4e43-853c-23f413ca9b01", "sighting--20215830-1ea3-4446-861f-9c427c61ae76", "sighting--1896c784-dca1-4b8b-8b18-bf670d019fb1", "sighting--270ec414-9ba5-43ef-bd4e-0b05f507dfbf", "sighting--9e2b0361-dfac-43db-b672-6a9cc4e0166c", "sighting--2d63e93d-bda5-4b72-98ad-26e28684073b", "sighting--a18a04c9-335b-4b13-82f7-699cf702bbc2", "sighting--a63fd097-ac87-4429-906f-4c8ce10c8aa3", "sighting--849af9d0-703f-4692-93dc-52aade62b84f", "sighting--59f0e880-2c48-438c-9e0c-8be53c4b7669", "sighting--3f4a5f04-abfd-4b03-8436-93375f7b65ce", "sighting--95cc4b56-91c1-4bcd-8987-3e2409352a6d", "sighting--039eb21d-714e-4bd0-9005-8c7c64946cea", "sighting--07485149-3933-40df-a77b-742be02150af", "sighting--d639ae02-c0d9-4e7d-92ac-79f38e0f8b7d", "sighting--4b36616a-0e2a-44eb-8662-5d249a273ae6", "sighting--dbf19beb-b661-4dcf-a3ac-565c39f56cbc", "sighting--9d094c0a-ab1c-4fee-b129-48aab05d5d99", "sighting--d01f2668-0de3-4757-bd24-378fbb32765f", "sighting--0bf22871-e9e5-40f6-863e-8a06b09b0d36", "sighting--e937a8d4-b8e5-4b9b-99ed-d88dda8481a8", "sighting--99936664-054f-4e1f-ba10-b7e949171464", "sighting--f5065a5e-9a94-4d87-80b3-0d06ab74a935", "sighting--2bbcb62a-aeec-411c-a925-b80cddd7aff4", "sighting--8647df69-559f-4cb6-ad8e-b4b628040860", "sighting--4f7a20e3-dbb1-4da7-986e-090c3008376d", "sighting--686a0d80-af32-4306-b4f5-469c4bd5e40e", "sighting--eb4eb242-ef34-477a-8c16-2f64b7addc1f", "sighting--9593abfb-4573-49d7-b9fd-e4a012444af2", "sighting--88d73566-3804-4018-a170-43dd26f39bb0", "sighting--e34e6e91-5c52-4421-8112-d0db9e526afe", "sighting--bf3bd04e-2ede-476a-8ce1-006e8fd8e5bf", "sighting--2038722b-e24c-4fee-b7b8-3a0d62817efc", "sighting--5611ee8a-4417-49b4-8a32-b257bf3d52a4", "sighting--3d23051f-e2eb-406c-9fa4-543acd0ebc74", "sighting--ef36524c-0e26-4a68-8c77-7b38e317fb78", "sighting--be27b7c5-5491-41e1-bb91-b891654bea0c", "sighting--c84b626e-bd90-4ccd-b775-0de2ae5faaa9", "sighting--d6431247-fe16-471f-b0f9-9ef10bc83878", "sighting--6176514a-baba-4fbf-b893-c2d3bc79390b", "sighting--1ed39f31-da13-4312-953d-cd4e1fdfb42f", "sighting--f4506d2a-4c58-4aef-8c6c-cbb88c91718e", "sighting--a4c025b4-9bb3-4433-8fd4-bb014aeb57cb", "sighting--09fcc505-ab41-4f33-8a91-ec831825f6a9", "sighting--7739585c-23a2-4600-a45b-d97178e87527", "sighting--cec18eea-accf-4b21-87e8-3c3e9d248da8", "sighting--a2d39f95-e52d-48eb-bd2c-e613c780803c", "sighting--717514ba-e581-4840-8947-496b5fb3ec7e", "sighting--34009824-b707-43d1-926c-1fc4f7120382", "sighting--1d6b8b63-31f6-4748-b1a6-49e4c9fa2989", "sighting--1e6e62ef-6be2-454f-af60-e3f679b05b12", "sighting--74574423-56f8-4722-a30a-4a3b68dea491", "sighting--69e349fb-4d9d-4255-aff4-a65487ab3b2e", "sighting--bad7c702-a5c4-431a-9906-a1d371ea6fe2", "sighting--0eb0ec7e-3e92-4bd4-8bce-a4a9b689a4e8", "sighting--6990f66b-d31c-4baf-89f9-30dc4db936aa", "sighting--53fcc886-cb3d-4bc3-95b1-8dcfc20b7d3d", "sighting--906c641b-614f-4058-a827-5bc72162f9c8", "sighting--a2717a1f-4971-4dbd-b2bb-833eff7f4c36", "sighting--d905e2a1-1ade-42cf-a908-1d6133f54989", "sighting--8369c1e6-18d8-467a-994d-87f2e4f4808e", "sighting--13dd27a8-1b08-4979-b106-aeee20be767c", "sighting--06038515-f760-4548-ac1b-a346ba237778", "sighting--11cedd75-260c-4b9d-9509-452084008aff", "sighting--3d69ac80-613e-47d4-9933-cc7ee3f8696b", "sighting--1a6e29db-c02b-4380-9f8c-9db2eb681d09", "sighting--58e6238b-a1bb-4e40-be47-5413b359f32d", "sighting--ed84ff6e-4b4c-45f1-a175-696c4da3b98f", "sighting--3419d532-9a42-4f91-bed1-ae20d8502843", "sighting--b2336b52-4df3-49f3-b687-cce3609f6c86", "sighting--d226f4f5-2816-4b07-bd7d-2b8835e33571", "sighting--68dd380e-6fa1-431b-b9e2-bcfb7d2d6355", "sighting--aad80efc-15ce-4715-bd7c-9a6dbe988b51", "sighting--fd60cdc6-87ba-4059-bf90-af92ab24b4dd", "sighting--b51db4d8-0b54-48fd-8952-feb677d2d8cf", "sighting--971dbaab-b791-4269-96d6-09f51f49ebfc", "sighting--0bff5e03-d816-4ec7-8757-5993bcd2b662", "sighting--3c0dbe64-f891-4186-96d7-709132953b68", "sighting--aa42c57a-1deb-4171-bd1a-69c64b5d2156", "sighting--6c30c7ab-4323-499a-a7d6-7b25a805d10e", "sighting--31c9a287-65dd-4dce-a489-d958aeffe9ee", "sighting--49b03c9b-a6fa-493e-bb35-d1c89aa6a541", "sighting--189bcc9f-2cc9-43a1-824e-e4862335e1ac", "sighting--44e7c6cc-0987-4f0f-852e-42a3ca3bf619", "sighting--b2af0c4d-a455-4a1e-9500-348448572d02", "sighting--1efdb1b7-cb53-426d-ae45-1d2c2cba3cc9", "sighting--1aef5248-8b20-465a-b423-80ee80da3927", "sighting--78387650-9b8c-485a-9b04-1cfc42f2cf43", "sighting--eacc241d-ac33-4bd2-85fa-b62f67781911", "sighting--cfd7c6eb-dc8e-44cd-a50a-be07e5b69330", "sighting--a13f2835-a085-49b1-8c42-00fcda1fdacf", "sighting--3190c862-79ae-462c-a2bf-48967847d8e4", "sighting--1285db88-eb24-4649-b72c-0cd3d4901f4d", "sighting--d9cedffc-904a-4142-a4e7-d5fb995f47f9", "sighting--51027901-60e5-4d9e-b2b6-3d889e2542f6", "sighting--69801e90-9391-4aed-9154-4a304132fa9e", "sighting--3c7ced1c-5f2f-4d29-adb8-ff9f99428b38", "sighting--4aa2947e-84d2-4d6c-8741-ad73effe261d", "sighting--becc5915-5584-47dc-ba13-d175dbbdf6ae", "sighting--29307b86-347d-4ce1-8e74-56d3ea3411ca", "sighting--4e829960-a44a-408e-bd68-8cbd245dd038", "sighting--3d841c5c-7813-48e8-8790-52308b043313", "sighting--e10fc47d-6ba7-4be9-a0a8-29b92d9a0d04", "sighting--d60440c5-a909-440c-8ff0-71da60909ee0", "sighting--8efa6b8e-3002-4dec-88d4-9d9bc3c4cdcc", "sighting--e1aa533f-0cd3-4c89-abe2-28dfd87bc4b0", "sighting--ae096280-8f62-496f-a43d-8857770efa84", "sighting--85973cb5-dae4-41e9-aedb-39117186f138", "sighting--491c6826-2f2e-4880-9e06-436ebda1066b", "sighting--a0cb660b-3a3a-4cea-ac51-4a3ad7a985b3", "sighting--1eeefd1e-592a-44d8-8868-56c4b7bf0732", "sighting--2231de8f-04ec-4fc3-9e45-9b57abff4ed0", "sighting--8a33b445-0c83-4c2c-8f53-09ed22d3134a", "sighting--92544c71-6d3b-476c-b7e6-0c8c479b39d4", "sighting--6bec8636-2c89-4fb0-b33b-7414a0f67435", "sighting--ad7ba75c-27d9-4878-9941-d142d4f93133", "sighting--b4b0a4b1-fd75-47c1-864f-7fbbe04ee9b1", "sighting--aa98043c-cfd2-40d8-b6d4-5ea7ae6f4f92", "sighting--eeb5e037-5493-4d50-9421-4ef1b1dc90de", "sighting--8193cedd-c9ea-4c3a-b30d-cfa637375026", "sighting--b5d3c3cf-551c-4c02-ad58-609c1b343d77", "sighting--44889c2e-a261-4a70-a01d-f60464e36561", "sighting--bf6335dc-ae5c-4178-aa9e-63e24a19507d", "sighting--e216d657-8bc8-418c-a012-1b05376eefac", "sighting--04cf2ca7-1029-4705-ae58-bb711451b6fa", "sighting--fa249a29-6de2-478a-af1f-79bc5f786ad2", "sighting--689ed9da-c424-42b3-a3d2-055219729db7", "sighting--733e8fa5-536a-4bd0-8eab-e4495711c628", "sighting--7bf15c5b-9ae0-4f53-99a7-ff13903e0eca", "sighting--77d65200-be84-4628-90a6-ed00692aa02d", "sighting--2e83b2e8-e1d9-436a-85d4-f46fb0090672", "sighting--e3344e25-0fcb-43a4-bf64-7b8e510058d8", "sighting--88db2f19-507b-4b4e-8313-ce5fa80ec88a", "sighting--2b67a890-e7d9-42af-82d9-200e2aa7c046", "sighting--20a6a207-d7e1-46e3-bdc6-040cc495798a", "sighting--bdcc8cb4-5b96-4790-8da5-cab9965b8aaf", "sighting--de3e4bf2-824f-4c0a-9a78-ed20b2259863", "sighting--48ec1465-7116-4f1f-9f6d-ad80623f8c0b", "sighting--8b381097-3cd6-4987-9584-aec10f2d79d9", "sighting--e9f832a1-14a3-46c3-b96d-ffa46ef7147e", "sighting--7a37bbe1-6cac-4c5b-b139-4d05c8f10af6", "sighting--98633467-4625-4fbf-8241-9b4a289bdf6d", "sighting--1fca0947-e3a7-4e46-8e4f-9b3c67d35fa5", "sighting--59de5fa9-409d-4323-9c68-5e12b634c909", "sighting--1a1df7f4-8ec6-49f3-9ca7-9f891fc51fe9", "sighting--87ac7981-f455-4c26-a61f-b06749175cb0", "sighting--4023b899-ab68-4549-8965-ce92f2ef176b", "sighting--c9bd0dd9-1716-4321-8846-904d4553d581", "sighting--efec4696-b0d4-4e45-8819-368fa9c13bab", "sighting--160189ef-ed59-4312-b764-8ff8736eecd3", "sighting--effbe0e0-1288-4df1-a1e1-5794c10ebfb0", "sighting--20e304a6-a3f3-4d6c-82ef-6d9b0441bf26", "sighting--8a81a14c-0a48-4f4c-8c63-ded449f326c3", "sighting--f9f32777-e0ec-4d05-b73e-99b7307656de", "sighting--3e0219b3-305f-4c96-8b45-d578c961baab", "sighting--7ecc7c90-e71f-4233-9c90-4db8dbd041c1", "sighting--a7ddc201-9611-4a51-b864-33864dc1a4dd", "sighting--98bb533a-ea23-4d0d-8a2f-7899bd531c65", "sighting--cd588237-961c-4337-9b2b-809b8638823a", "sighting--fbcb4050-0abf-4e9b-b072-f211326b831a", "sighting--2f43890c-c7f0-49d9-83d0-d54b54f6c463", "sighting--8892de91-a3c0-4b88-adf4-9aaa835cf6fc", "sighting--bce17f0d-75dd-4d85-94dd-92034963cd83", "sighting--a27c5da4-26a5-45c5-a2ee-bdfde8084f4c", "sighting--84a45b70-47cc-469d-abe1-39b919e5f164", "sighting--6fde7563-fc3c-4808-a67e-bfff15b091a4", "sighting--df016e0b-a030-4b93-84d4-5b65c62064f4", "sighting--aa07fde1-d4e2-45b6-a677-19a70f3e1355", "sighting--60611d03-a83d-405e-bfa8-2c2960745a7a", "sighting--20df9b43-8592-4483-a701-1d285a0f7d61", "sighting--681154a2-70bd-430e-8f83-d7b54b98b537", "sighting--d0823ef5-4b08-4327-b065-a2dd3fbf426a", "sighting--85d82fa0-d279-4a1e-a0e9-546b455488b1", "sighting--53072fed-4ed7-4392-b6f0-b805c318bfe9", "sighting--b1a11c46-78ce-4644-837b-422846878fe4", "sighting--0897c960-c067-4773-8136-126edfaf9288", "sighting--32e8f69b-67d3-40b8-bac5-f4f50a8888e0", "sighting--6bd1188a-33d1-4105-9a77-57fe34ff7163", "sighting--7531bbaa-007e-4b2a-922c-0207e2758996", "sighting--df9b0f79-da95-4a0f-900a-42ae591a874e", "sighting--eb556abb-a627-477b-8e10-c3b07fb93ff0", "sighting--fbb5c874-21cf-4e6d-9c33-c9845aa8da65", "sighting--e9d87dc9-1037-4b06-8d37-29d5bebf2a18", "sighting--54353024-9539-4947-88ee-abc89d466d3c", "sighting--3ce278f6-2925-405a-b76b-ce617dcaf20a", "sighting--cd3fef81-4ffe-49bd-86c1-cf1de2689ff5", "sighting--31dfd5c6-c496-43ae-bcd2-9b330d54116f", "sighting--84f7194a-a935-47fd-bdff-21cd2cfc4e83", "sighting--0ea06100-fdd4-4b3d-8d06-f627182a4fc7", "sighting--62bc236f-2c09-45c3-ac4e-0271dd519e78", "sighting--956f55de-4d36-4d3c-94dd-92895eee8732", "sighting--81295803-35af-4358-bd9e-8f3c5a3c97c0", "sighting--33be2cc9-376c-4d40-b57f-a1bb623d0b3e", "sighting--785e1d3f-af42-42a9-88d3-901a61a9d152", "sighting--184624fb-f0df-4463-b03e-960be80f9891", "sighting--0d5cc6bf-01d6-47e9-bb5b-dbd13784276d", "sighting--46357043-beb6-4ed4-8443-ba7be127e8a3", "sighting--36f96053-4770-445e-bfa3-4dda72835a49", "sighting--74223f5c-9b99-495c-9c1c-252d92907cd1", "sighting--d3939827-aca4-462a-85e3-f054e01c43a5", "sighting--688e24ba-9919-437f-b437-e60305d3da65", "sighting--083ef1f0-9896-4f2a-b0f0-12e60972772e", "sighting--5a45d601-3f54-4e44-819e-a40453e664b9", "sighting--bb8a3eaf-1b19-4fde-b35c-8c1410778379", "sighting--47c0884e-84e6-44bb-acf0-e78ada0d547e", "sighting--46b18fbe-c63a-4141-94d7-df6fc84d2193", "sighting--357b1713-18fc-43fa-8928-f4db8c0d243f", "sighting--20d0dba3-6108-4307-a323-229152473db6", "sighting--ede2247a-b6d8-4fd7-9693-b1d0ce9f5bf3", "sighting--c7560dd0-260a-49ce-b96d-100bba302509", "sighting--01bfb2b4-9b1d-4cd1-8418-93c760c62382", "sighting--e7b12cab-16b5-434d-b720-97add13b7cd5", "sighting--0bd2fa1f-a913-4745-a324-7b61a90ed8ca", "sighting--ebad0df4-863b-4a58-9bad-f21acb09871b", "sighting--ed993204-2148-4579-9e5f-910a4ab826b3", "sighting--86f48f6a-543d-4e58-ae54-5ce5ac3838a7", "sighting--ccab284e-7b2f-4560-aa5c-d3bd791b173b", "sighting--9998cf68-6e76-4371-8035-866b488c34ed", "sighting--d3a95fab-fa54-4b35-841c-35ed04885eb8", "sighting--2ac072c9-d27c-4983-9b7e-f04bbcae4561", "sighting--8e506bed-eb96-4cfe-91ad-64dac906679c", "sighting--d710fed1-8ff0-4b58-b7ff-45a5b9caaf87", "sighting--720c5378-7d65-41ea-a283-3b4eb0af2056", "sighting--52a9414b-95fe-4f14-a8eb-b815c208b8e2", "sighting--294eac9b-290f-4a46-9c57-4b72893ec090", "sighting--0f2db00e-06b2-406f-8c48-8cd31ee6c04b", "sighting--80318e48-9614-4461-a79d-d91cd55d568f", "sighting--689865b5-dfd4-4dc1-9df9-be95a5c4cad1", "sighting--6de41c0c-d87a-40be-918f-a7de5b23cbb2", "sighting--21609adb-c335-478f-8b76-d5e58296f25e", "sighting--ea3ee4c5-6d62-4665-8206-83e3f3e6b41f", "sighting--f7614ec6-fa01-446f-ae13-8e9d3c4e822d", "sighting--3fe7dcaf-a123-41b2-801e-106ca1d643c0", "sighting--0f2a6133-5260-4c65-bcc3-0edbfd9ee88f", "sighting--3da5905d-0ff8-4c71-bce9-72a0e479e577", "sighting--a477dbc0-0a9d-4aff-bb56-0c394c7e8ecd", "sighting--36d9a912-3b8f-4cd4-a1fa-f7e5753a69f8", "sighting--6340c20b-9095-4bb5-8bba-8a8226044dbb", "sighting--70d63b79-105d-4c84-bbe9-0298767a2421", "sighting--ff3a0743-d333-4d4f-aefa-d95691feead7", "sighting--7355b105-2559-4037-99b3-4d00d9a4d8b3", "sighting--e5dfb5ea-3210-4f69-b52a-880666c1383d", "sighting--42deb033-399b-47dd-adab-ccd199122603", "sighting--45de5c58-de0a-42d4-9f84-3ab8cd81fb20", "sighting--fd75a0f7-7752-46e8-8aa6-bd582c078836", "sighting--ae81c6bc-f166-4f65-8c5c-a15f4d4ec776", "sighting--5c70ea9c-81f2-45a9-bf72-87af8c798f45", "sighting--5af4a87b-910a-49d0-b1a1-c9bbaf0247d8", "sighting--f0d9df35-507f-43f2-8fde-aec52e999409", "sighting--0094334a-2dfd-4991-a375-8c894f90f831", "sighting--61bf8cfe-04d4-423f-9e44-481da39a72a5", "sighting--14e76596-ed2e-463a-92f7-8c80d68188c5", "sighting--3320c5d5-36cf-4d33-b79b-cd56eaa00fcc", "sighting--2b2c4515-f1df-4aca-b9b7-30d987830c4e", "sighting--1eaa4693-44b9-4790-a410-0447f692fba6", "sighting--f11b2bb0-34d7-4e72-af75-c9407ec985cb", "sighting--fda83f23-269c-454d-819f-4880546b9d84", "sighting--6485e018-ee0d-4e6f-bc2f-42ebb9019f16", "sighting--cb313cac-69a1-4e9e-89ae-71872dbcd08a", "sighting--7c178374-1060-4e0c-94ff-d1c7d5027539", "sighting--a10eeffc-a2fa-4f8c-b7e2-b364dd2148dc", "sighting--b770398c-2d55-4ac7-8154-a6a444e78b10", "sighting--e2e780f4-2eb4-4bb7-ab67-e6be5b7dddda", "sighting--9dcf1deb-44c0-406d-b708-9f2d284c948a", "sighting--f0ac9806-585b-4262-9d69-c2ba7b6c3997", "sighting--5b27715e-0ade-4771-b24f-ec4dc1b549ee", "sighting--f2bd092e-a04d-4dfd-8863-6d617b5e83be", "sighting--cd0f3cd1-df8d-4806-8c13-f71b75ca9106", "sighting--a0a0c175-bfe3-4fa4-bbf2-a522cb19b8d1", "sighting--73b06acc-7c40-492e-a7e9-c4bf6999bcf8", "sighting--524b314e-4cd3-425e-8a98-649a0dccd94d", "sighting--d7d1d00a-1e56-4f92-9381-54f30bc667fc", "sighting--505858f0-2fb7-4ec9-bafd-eaaf212d0999", "sighting--bb5e6ce8-4504-4d44-8eca-a165799b50be", "sighting--07b098e5-f4f6-48e6-9396-1970cc51eea6", "sighting--ea9106cb-82b7-4042-a970-a1e1562d0b2c", "sighting--6e46fe0c-8eda-4b93-bb35-e8a7cb50022b", "sighting--c17e4b98-d40c-40c9-a497-f735bba6bbb7", "sighting--e156d7d2-9fcf-44a9-8b27-321207e89568", "sighting--f8c4cee5-6c0f-45b2-b558-9aecd19ebf30", "sighting--610153ce-7a73-45e4-b1a2-c5baa733101c", "sighting--4e193554-a9f6-43ff-af20-abdfe10e42c1", "sighting--cb833c49-63d9-46b0-abb0-0c8f785fa140", "sighting--597c235a-9b55-45d0-95cb-29b5747375f6", "sighting--b65692ef-95da-4848-aabb-2575013314b8", "sighting--b870bce2-f717-4988-aebf-66dcb57cf8ad", "sighting--e6de10ac-8d2b-45da-ba4c-812c680e1d6f", "sighting--379c916b-5504-47b2-9424-d0e9e0feb521", "sighting--d62d21a4-e1be-4242-8478-54162478b67c", "sighting--f05d3a9f-c748-43b5-a43e-356ac444374c", "sighting--abea7f05-c48a-4bac-8257-72f696037be3", "sighting--d7865ea8-012d-45f4-bfcb-37a78f0179fc", "sighting--fd10c60e-4346-4353-8f23-bba4dfa027ac", "sighting--980fb98f-db8f-4c13-874c-eb0f23ee04d9", "sighting--bd293f69-5235-4bb9-9a44-24210b382069", "sighting--fb7bcdc3-a25a-4dfb-a9de-d35a9f432b1d", "sighting--47d30885-1c16-41ae-ada6-45479659bf97", "sighting--75fee0d4-2c83-46da-ab41-46c925093114", "sighting--61409ab3-44da-44f3-bbec-8c5c752a9798", "sighting--b650273d-29b1-4bcb-9070-e530f7c849a0", "sighting--dca26324-81a9-4f6b-8759-e1bde36d5ec4", "sighting--f8f768b6-11ea-460c-8352-760a998518ae", "sighting--7c002bf8-2202-4e05-993d-1c7fd25a9db2", "sighting--ae82662e-3ad9-411e-8eee-eda8311ae8e7", "sighting--f652d07a-8ed3-4ee7-8366-166e58b7d168", "sighting--93bf9356-cfc6-4d51-b2a3-ac5e73144630", "sighting--8bb691b4-af87-41f6-9870-803b1b820d44", "sighting--ea71d53f-f9fa-4308-b4b5-4dc5e4ba94ce", "sighting--42003359-bc26-45f7-8167-637d98a6c65a", "sighting--235f54c5-2b12-4688-a142-9e0a84b5f9a2", "sighting--36d08536-e8ac-46c0-bb81-8df0facae721", "sighting--fe628a92-0db1-4152-84ec-7df4f5594958", "sighting--4822b16d-284e-4b3b-88aa-d9d144c3f497", "sighting--e1722652-2f7c-47fc-befd-3cfdf5fd8336", "sighting--f8362925-d893-4c2b-a555-51da00a346f8", "sighting--764bf081-a9c3-4378-a4f4-80f0bbc89a29", "sighting--0660a72d-864e-4e7a-9077-21f5d749b775", "sighting--9dfbe386-1374-4f7e-917c-aa4912b2b8ce", "sighting--c82a9d49-a180-493c-9ad5-18ad9f296d6d", "sighting--d71fb22a-af87-44bd-a671-2e29519d1907", "sighting--661b8942-2c23-4384-895e-6e03bd5b2148", "sighting--e9fd1e21-2256-4174-bf3d-5794e07d43f4", "sighting--11111056-d2d2-4280-b045-e042a1661711", "sighting--e72fac39-e545-4854-a214-df85dc567191", "sighting--e78c9fab-246a-47e4-b87c-92001bc52d28", "sighting--56aab28f-5937-4b4f-8b17-467e2e01c316", "sighting--ef58ef09-532a-48af-98c1-f31e4100dafe", "sighting--e2613999-bdda-440c-96d1-d865f73a0572", "sighting--5d03262e-489a-4024-b160-d704f37c7dd4", "sighting--7b509703-368f-4de8-a184-57bdb292a144", "sighting--7b3b7c7c-3b6a-4266-a210-555b7306e1b8", "sighting--7f005ade-8bfd-48d5-97c4-e755aaad2f17", "sighting--8f9c0355-6cf1-47af-a3fa-d27762aa5a57", "sighting--f48243c4-890c-4aa5-b940-8ec962c87a14", "sighting--43e389e3-28ee-4d44-875b-63886d351acd", "sighting--78e75dbb-373b-4cbb-a8d0-3be3c06b466b", "sighting--f4947f7b-0879-4416-be62-edd18a0eeed5", "sighting--650f2bd7-810f-44a1-8560-2b8ed8d0d6a1", "sighting--d87696ec-6c44-4824-9941-e5f70f97871a", "sighting--9196be38-8d2c-4b07-840e-493cd0048fd4", "sighting--32a0edeb-16ed-431d-89be-5ca777cf8576", "sighting--6ad300ad-55e3-4701-a5c5-6e269d339250", "sighting--175dcf65-0334-4d66-a341-4a7c3f245709", "sighting--c5f64a99-c3ee-4dcd-b27a-7be3485e194c", "sighting--06698c53-2f82-4b2a-b718-9b0da39a1674", "sighting--d26c9da5-7929-405d-8afb-09fb61b1df7b", "sighting--1359c458-0144-474c-a394-69dff2fd0d1f", "sighting--7f0f8619-2862-4e16-8cb9-5303011792f2", "sighting--50b8e2d8-5b7e-4bcd-93de-40aa8da188fd", "sighting--af91c1ee-6045-4339-b416-6da30d1d073b", "sighting--bbb0ca06-0e01-4838-aa75-cf8e52aa44d1", "sighting--0aaa200a-846c-412c-ac6b-512410c8f32d", "sighting--0f4842db-a498-4ab1-9a6f-d104f6be81e7", "sighting--eb3fcc37-a891-4b76-9dbd-8702d3a75df1", "sighting--832c5cd7-84c9-4944-b3bf-1f79cb7a197a", "sighting--a54d96b4-610a-4c68-80e7-0b46875def89", "sighting--667550bf-101e-4eb2-aa4d-197ba3a08803", "sighting--00325342-f198-4d04-a549-54143202e61a", "sighting--631b6209-fb41-41c2-bfd5-5e5a4d45f8a7", "sighting--26d3e970-7904-4d8f-8a7a-97bf94d41f12", "sighting--a2c6caba-3176-4f20-92c3-800b31112f92", "sighting--358c0174-5381-4f66-ae50-e6c09075c78b", "sighting--32071ced-20bc-4e60-868e-80bf490bf602", "sighting--aa48905b-c674-44fa-b3d1-6b87b118cfe9", "sighting--7633b36b-b10c-43aa-8bae-ba117a5240a0", "sighting--99386fba-a08b-4e02-9908-aaa3d611d037", "sighting--be95a134-e492-498c-a0d8-0a49b870dbb6", "sighting--5311cae4-b80a-47e4-9e6f-fd80cce0e68b", "sighting--678259a0-af2b-4c24-804e-1fd1dca2e95e", "sighting--1fbe2c21-65d7-4dd0-987b-c9639287b168", "sighting--efa2b4ec-d71e-4fb8-9edb-44a59e3d087b", "sighting--ca37a7b5-4dad-4201-85ae-b1e0b004fc76", "sighting--d0f38737-8460-4b15-8291-87929b9c5ae1", "sighting--cf910cca-cd66-41ad-b80d-1d8210f97acb", "sighting--a90d82c0-13c6-46ba-bb17-4362d967d7c2", "sighting--543882c9-ddff-402f-a796-f1ea52049973", "sighting--3caf64ce-8be6-4ed5-8ffc-f7e62d840f1a", "sighting--47d6e1d0-e8e3-487a-b6da-2784c8474e3f", "sighting--a576b19e-d464-4351-9365-dc6fdd1f5ba5", "sighting--05471d50-dd94-4e62-8646-295f01360177", "sighting--c3f571c5-c58d-4ba5-8ed7-32b71fe3a07a", "sighting--1fe42a43-067c-4c72-9019-974913767aaf", "sighting--70830213-eaa9-44e7-91fd-114b8cd47d5c", "sighting--204480d4-9bc1-4cc0-abf6-002cdd5e5698", "sighting--17554f63-6d24-4ba2-9de9-7e8f929e2478", "sighting--bf1b6fc8-3db2-459c-8c87-5495de8a9f7f", "sighting--3e42527a-aef5-4f5e-90cb-5f00d80a1798", "sighting--9644b4e1-3cb8-4986-9225-9f46c14570c6", "sighting--a1b7cad4-6207-41f9-81c5-a6c7a9a9465f", "sighting--1b1778e5-b767-40d7-a1ea-dc45f223a8e9", "sighting--1d07e4c5-9dbe-4b8a-8d8c-fc2d9561c9cc", "sighting--abbbc7bc-86e7-4242-8c67-d83670cb1584", "sighting--77f1c618-b09b-4cdf-b935-379ee8825498", "sighting--22b4fc4f-f16d-4ac2-b436-f26aad287fe4", "sighting--eb4dc285-c16b-4ebe-a149-8b0ceab28677", "sighting--3bac5848-7f07-4121-a80f-b4babd380d9d", "sighting--5ac8a362-9759-4d07-94d6-cb6b6bbacde5", "sighting--1b4ed6c0-6034-478b-bbfb-e9a51882308b", "sighting--55304d9e-31ba-4d1f-8ce6-96fef3434679", "sighting--8e95e5f6-5a3d-42fe-83ab-fcdaae45fac0", "sighting--144a0dc2-eb10-4374-afaf-495bbb1a3db3", "sighting--028371a2-4600-4c61-82d9-d9f4599198dd", "sighting--b38a66d0-f4bf-41e4-99ff-6a4fc0cf662e", "sighting--826abb16-4940-4893-ba3a-7c50ebc2fb5e", "sighting--abe3cd75-7669-450f-b6a7-89cb52d61714", "sighting--54796081-7c73-41da-bfe3-e5661a18b918", "sighting--04b13fde-cb00-4850-9b18-6921f9303ffb", "sighting--7857f3e7-37ef-411e-8580-17da27b8e816", "sighting--f183e1d3-4cfb-4d43-8b8a-bf6663c0d1dd", "sighting--8695e9c3-8abd-4bd5-8056-fa269030c006", "sighting--19774baa-275b-4d41-8be5-563eaac916de", "sighting--716f4c90-0777-4d68-9bd9-0bfeaf88d5ee", "sighting--b901c57b-20b6-4f0a-ac34-7d53c6a50142", "sighting--fe365e83-4cad-4707-9817-a8d9f2ab83a9", "sighting--a680e599-789d-40f1-b9b2-6f518b7472e0", "sighting--778b2a8f-c7c2-4027-a280-0918bb1e1960", "sighting--bc909d4d-95c1-43f8-a983-c1762b186bed", "sighting--a8373d7c-85ae-4e93-9e2b-c54d24d2ff2b", "sighting--d0a24a62-fd48-4143-88a7-28708347bae9", "sighting--9baf9d75-6dc2-49f3-a02f-8507d2914ce2", "sighting--262ad34d-f729-4347-8434-db95148d6e48", "sighting--271029a5-69d3-4215-9113-782157653bfc", "sighting--084eaeb7-b53b-4bdf-8bfb-2d729d30a7aa", "sighting--6bdc2695-1fea-429e-b620-2ed958dcc102", "sighting--6f1356f8-d153-42b2-a701-33b94b6edc9b", "sighting--4ed25781-2a9b-4e5e-855f-be91cfd9b4b1", "sighting--e8dfb0c0-2b8f-4f99-9e5d-27fef6e45a1d", "sighting--23c40102-bb74-4a82-be74-566a2a1e800b", "sighting--4d4f93bb-df45-4c81-aca8-12071a1c83a1", "sighting--d3a23515-1a08-45b1-a284-baa661f3c3f9", "sighting--f0dedd70-b37a-4b70-a1fa-9dd4086e7907", "sighting--a5a755f5-7d3a-45b8-b5f6-e60778ddd11b", "sighting--0380c18a-d565-45e8-b4b5-dec003bdcb0f", "sighting--c4ee58f4-9d11-4d0d-ab23-62285662e591", "sighting--77cbc229-340b-4114-b7e1-5d28ffdfe2a4", "sighting--95d57ab3-2fb0-4710-bf50-8e2613205425", "sighting--aede1bf9-e9dd-425c-b9ec-b11324f9f3e3", "sighting--42e49668-9294-4f2b-8edb-568a71544ae2", "sighting--99b17402-b3a1-4d65-b477-32e147c2668f", "sighting--bc19e867-6307-4ac4-9bde-29fbbb7b3c23", "sighting--2265831d-312f-479f-ac01-1fe339419114", "sighting--209cfca9-3c71-49cc-90b8-3a915d9fad9f", "sighting--5ddfc84c-6753-4ea7-88c4-cb815a14679a", "sighting--7591d6db-ac81-4906-9df5-95d917c975c1", "sighting--bc5430ab-3c47-4308-a44e-0bcbea70f77b", "sighting--f614771d-8151-4654-955b-839d29336bdd", "sighting--4de00373-2dfa-41c0-a8c9-6b0538216157", "sighting--7e127b80-db04-4aa1-90b1-cebc925122ac", "sighting--ff828a40-cfa4-4273-b4ab-09d1e37cd76d", "sighting--62c6d027-6b6f-4b36-b85f-f61d33cd71ae", "sighting--ba6876d5-400b-49c2-9f3c-ba5bf52c3fd6", "sighting--83ca88ca-9386-4169-ab80-76346197dd78", "sighting--4a4ef46a-4d0d-4951-8a0f-5597b41fb00b", "sighting--1c188010-fc8e-467d-80d2-2ee12a274091", "sighting--64d2d1f2-c421-4751-85c7-94e7f7e70611", "sighting--027944a2-8843-4965-bf04-d1178264313d", "sighting--5e0c8d18-8186-4f9d-afb3-c04238fc1b32", "sighting--d79220cb-4b96-4a56-924c-bca1bbd267c5", "sighting--3f380522-70dd-4be1-9726-1d2274fe5948", "sighting--9e2a5169-7121-486a-9fea-76c2c9a1149d", "sighting--8125fd1c-a31e-4fc5-91f4-ae1532b8a0d1", "sighting--558076e9-e3ce-4067-aa0e-d2616a962c52", "sighting--c8f09713-9174-4ae3-99c7-e393803bc3a1", "sighting--d44c8565-64c8-446e-9a80-0607fcca4149", "sighting--581a4571-6aa3-4b65-b5df-24200ed09783", "sighting--47656bba-d0d4-4163-973e-a000b4ed131c", "sighting--81366496-a080-4751-bfec-94daf3602ae0", "sighting--6d634e01-c201-4486-854c-9ab0fe6afc6a", "sighting--ef238afd-0d54-45ba-a954-4fb40320a8f4", "sighting--61ebd9c7-4018-4fc1-b5d9-0fc3d169aaab", "sighting--879aa406-08f4-46a5-a4fe-c42a021c43bd", "sighting--d386b7e6-fb7c-48be-8157-3b0ee49f63fd", "sighting--171d63e2-6bf5-47e9-ba11-b96645fd027b", "sighting--e622cbeb-c14a-4e88-b372-20cab0c29149", "sighting--9236f0da-5e04-4c67-81d1-55d85598ce43", "sighting--95e831ba-8465-40e6-89ab-46fc66c7d86c", "sighting--4edfc83e-1150-4b59-99fd-55f6ee544c32", "sighting--bfb52b8a-9016-4086-a436-641c68297424", "sighting--22bd089c-31b2-401f-89ba-b2782f42489d", "sighting--fae38f9e-6ed0-4e36-bc3d-c68b1c73d0c8", "sighting--1678ced2-5990-42c5-91b3-85454382e679", "sighting--c9314c3f-e5d0-4fe1-afde-ce6c3f423534", "sighting--720cf164-dd17-424d-b222-25b61f67c400", "sighting--b4367db6-8bd7-4858-a379-0852ae8a1735", "sighting--862066e8-d11b-4194-950c-15fdd626e4e5", "sighting--4bae4b8c-49cd-4d0e-bff5-11b029c98fe7", "sighting--38d4dd5b-9950-4191-85a5-c0163209be4b", "sighting--455dc0e0-07e7-4f2e-958d-4de0d7af2392", "sighting--b9620691-54ee-45f0-af41-c13fd897765a", "sighting--95d26645-5562-44ea-abac-fade57b96e6d", "sighting--ec3b4f08-37cc-4fea-84e1-14e956a6374b", "sighting--d97c8e1b-2e5e-4ae5-9434-048a9f73bc42", "sighting--8e3bc301-fd8c-4ddf-bd0d-faf58e7f6b98", "sighting--6960595c-52f7-4efd-9652-cb0b85e26fe7", "sighting--4bca41b6-b62b-4e50-8db0-5df75698688f", "sighting--5caa09ed-8ae3-4e4b-ae48-bbdd5a737f12", "sighting--5b9035cd-f9d0-4067-b308-3ac403520177", "sighting--e98d70ab-b40f-45e6-8c10-9d4fbbbecb53", "sighting--74561d35-b23f-439e-8321-df190bc29b54", "sighting--4f720aaa-52a0-470a-88d3-c83b65ebaa48", "sighting--b11b1eb8-e7ab-40c4-8611-4b90a1ec43de", "sighting--195f780a-ffa5-4b5f-b005-093892d444a9", "sighting--239d8c4e-be72-4c2c-85b7-c05f420cd8cf", "sighting--3cb18e7e-f710-4795-8259-7576816a111e", "sighting--34a64847-db98-47a2-a5fc-39cec53d0ce8", "sighting--77020180-595d-4ac0-8f7f-85328576c3f3", "sighting--5b5cd53a-e268-4dde-b9fb-9ebd48e77533", "sighting--92736679-6f33-4513-aadb-8a9944f36d0d", "sighting--4607ea72-a549-48a4-85fe-348ac04bfaa6", "sighting--eb6f0a6a-d92c-4a98-8306-089d3ba2b5e4", "sighting--212c977f-d95a-4f36-83a3-d2e5f01ae349", "sighting--368d337c-1959-484c-b5ff-d0b4c366f8ac", "sighting--0f2ddbda-390d-44d5-af03-432ccf9d9320", "sighting--a8483033-44eb-4ff4-a50b-dffd8b1be638", "sighting--041d9030-b2b4-4e76-9c33-c13b1cae0743", "sighting--45bd790f-96e4-4591-b627-97ccae578980", "sighting--68e27ec9-0a23-431c-8649-718ac99a002b", "sighting--61d1b098-4544-4f21-b59d-3de80552c457", "sighting--e59a667c-e676-4839-b0b3-cdab619f04db", "sighting--e4248bb7-702c-4cd2-a116-1df2f3095a47", "sighting--874eadcb-3c48-4207-9f3d-84801afbeadd", "sighting--5b3ae3e0-82c6-4642-9ad6-ad8111c1b14a", "sighting--278d3d77-22a4-4009-9d75-44c1eecacd61", "sighting--8021d9ed-29b1-4f0d-9458-0de61715c0cd", "sighting--b42900ae-1294-4afd-a1c7-68993aa56717", "sighting--249d8d1a-bfec-4cc3-9cd0-a6e46826c7b1", "sighting--b18d8d52-b1b5-428e-b7cb-18f4a9fad723", "sighting--f481aa8f-928f-4496-a7c8-d14df09cf038", "sighting--fdad4e51-2639-411f-be96-d52c2a996706", "sighting--b0de603f-2d77-4889-980c-4e1d7eb01286", "sighting--dbf4efaa-0e41-49a6-905d-fb5fcde23162", "sighting--45635c71-b155-4c00-8935-3a792972b67b", "sighting--777b9e72-e77a-4c7b-b101-4261d2dfe0f5", "sighting--a43f76b4-e24c-4b3c-b290-320c473e5c9e", "sighting--f4b63438-c9ba-47d9-b34e-40808b9e9746", "sighting--944a2355-76ff-40a6-9bd0-7a3d0c95bc5a", "sighting--44dd7119-e50c-4236-8d23-ff4601a5c7cb", "sighting--8b727436-cc97-4649-9fa4-699cb14d325b", "sighting--a95f2cd8-5dd6-407d-a5f1-85a926f44b96", "sighting--38f9f095-0472-4744-bffe-fb7dc6a0aba8", "sighting--2889b477-71d0-494e-af1c-5855a418fc1b", "sighting--1d87e92c-5a9d-46fc-b113-4f04f2104bd5", "sighting--eefb9ccf-0d49-4cc9-86ca-4c69c75c619f", "sighting--e2c6bfd4-0da4-482c-95d4-05d00d7294d7", "sighting--22430f44-bad3-468d-8849-03b2f7d1b95e", "sighting--903e66b4-6e52-4e6c-9bba-2137a8f662b0", "sighting--3b2690f4-2ecd-48d3-8177-51ff90d10fbc", "sighting--fc0cd125-dca5-4b76-9afd-5955d7a9d6f5", "sighting--22d0a73d-bed3-4819-85dd-90208e1a50e5", "sighting--a17731fb-42f3-4038-bc28-99f31401367f", "sighting--bced1065-d9b9-4e90-a25a-49300f7eedb5", "sighting--ca062679-2af8-4da6-ad8f-2cf183cedb3e", "sighting--927aed79-f2c8-41af-bfde-117bf1c4dc97", "sighting--24443c6e-8e3b-4d67-9819-5fad3dc3070f", "sighting--722e5e84-5e0b-4903-9917-f1ab45bf1728", "sighting--2e2b034d-f239-475b-9ab1-313c4a28e73e", "sighting--2e205857-6a26-4569-bc09-807beee8e174", "sighting--3ffbba34-6b20-4d14-a2ab-12c71ed99b7c", "sighting--3b944174-c0f1-4796-8b60-a5cf0d6ef9f1", "sighting--c9677d5f-f3c4-415b-819a-a8609c1fc4c2", "sighting--7d1531b3-20de-4abb-b560-27336d97d060", "sighting--303b6c89-e3b0-4b96-a505-2402d85de57f", "sighting--6bcb7d08-ae10-4f60-afb8-51c08167dbe0", "sighting--4eea8107-9c5a-4065-bd85-61f99453b451", "sighting--1c01dc02-725c-4492-a39a-b0d1618cbce7", "sighting--2558a9d8-6c4a-4dc5-91c6-e26218d9fd31", "sighting--1c9d55a0-7d28-4dc6-b14a-b2abc87b380f", "sighting--f455324f-fa8e-4ea4-9418-2713300dc40f", "sighting--dd3c7e3e-3edb-4e36-a616-5ea12b9f5069", "sighting--743645c1-a770-4ff3-bf7b-356495a8651b", "sighting--7cb6d3f1-b1dc-491f-ad71-2569a32811da", "sighting--cbf99175-1d35-4360-989c-cdb1ee12822f", "sighting--5c936f21-0b30-487d-bad2-6abc85e13997", "sighting--258f1115-e1a3-486b-92e8-75d40b7eaeef", "sighting--f606f221-d03a-4cf9-bd54-25db230a25f1", "sighting--b75bdd99-a507-4b44-8086-2d43f9994f17", "sighting--3aba9634-f5a7-439a-bae6-d563699db550", "sighting--ce9600f9-a2d2-407d-84e6-47d89591a282", "sighting--1c813317-a103-4c2a-a4a3-467ca243a814", "sighting--8e62273b-91e9-4edb-a46f-aebb9f10853d", "sighting--b986bb6c-2318-43e4-9957-f00647bdd15a", "sighting--60ec35da-23ee-4faf-aba8-b8e47bd766c0", "sighting--e7cd5a27-9b47-41c6-89b9-50cfe587dd1d", "sighting--3c2b5b82-3106-40ed-af25-7981576c6cb8", "sighting--c8200686-d95e-4ecd-ac04-0511e9c77dac", "sighting--d465db45-cfd9-4e26-a719-917d27490cbf", "sighting--16d446b4-ee0f-467a-862b-c8636bdd1ef6", "sighting--1e06b77e-18b4-4f12-982f-b93a6e86c4ec", "sighting--e8411bb9-dd26-4a32-98e5-f9363abf7a26", "sighting--1e8e6dc7-e45e-44ff-89d7-cfc5f448b117", "sighting--464174c6-d8c6-487d-838a-c87c74c8c26f", "sighting--09a813f4-6c9b-4109-8199-4d180ee2c5e8", "sighting--fa343a94-e27c-4153-b106-85419537f2c3", "sighting--e6a8df14-acd8-4b44-b350-fb4e28fe3faa", "sighting--85e667a7-f534-49d6-a0f6-b386a4fe448b", "sighting--6deb0591-1072-48af-b3fd-fe0269214a7f", "sighting--d7e74a17-7cc8-4566-b54e-9cf79ba9712e", "sighting--36236b13-0cec-4460-af0a-c3495560f387", "sighting--16e5887b-7f4f-4353-a862-da4d27d67d61", "sighting--709a6bff-3592-4df0-8c9d-13219ecb7992", "sighting--4b8917b5-4334-4c24-bcdc-13d14aaf4980", "sighting--4f4779c4-11fa-4321-9890-1a0fb470c0a1", "sighting--05ff05b6-3a2c-4a54-950a-0bdf01297b1c", "sighting--1eef9269-7fc5-4ba8-b204-65efbbd1bd6f", "sighting--21be48f6-2172-4fd9-a128-5a4084c6daa6", "sighting--b287b51f-982a-48ea-b7a4-28d7dfab9da8", "sighting--d5108c55-efcd-4620-b405-8ccbf59c6521", "sighting--9d7e26bf-e2fa-4f79-af53-e4482d9a8e3c", "sighting--b0dca7f3-dc1d-4e03-b89c-5b05ad450677", "sighting--a2432355-1a21-4732-8a4d-7fd15f376071", "sighting--9a9a02a8-1d58-4ad0-8731-f2029d9758ca", "sighting--53e68d05-c058-4165-92e1-48480e7f67b5", "sighting--c562340c-706a-4638-9024-9a58733ef779", "sighting--bce69fcb-a72b-44ac-a5cf-700895c0a29e", "sighting--d2c5a481-46ae-41cb-96c9-b682fe23a02c", "sighting--ffae8683-4669-4b8d-9e3c-72e759f7d43f", "sighting--d3495324-105b-4e66-8ea4-3ea4322beb81", "sighting--11f037a9-ee6c-46c0-ae4d-1d498d53a96e", "sighting--3da29dec-65ae-46e8-a4ed-2efb8c1f5aa8", "sighting--8549230d-be9c-433f-b13e-8b5803feb9eb", "sighting--20c749d4-42ea-4e13-aa57-5a8feb4856d6", "sighting--32722de4-8616-40fb-9bf1-dc741a66c5c9", "sighting--ab2832de-f532-4ba7-a426-31a7052f4502", "sighting--396ad327-d99d-44eb-91de-56ca78a4e7cb", "sighting--5732a172-e3cb-4bd2-b07c-c1015c874a07", "sighting--b893dfde-2eff-4ed7-b371-c1c729f602db", "sighting--f7ee48d9-6233-49b3-997e-5ad004adce0f", "sighting--8c1a0f7b-ab3e-4909-9dca-a55c0c0cfbda", "sighting--379dc358-3dca-46b3-ab03-2e4b815b68c9", "sighting--9c8a43aa-01df-4695-904f-209f14e34b0c", "sighting--186f4879-90e4-434f-b49c-eb5884a79b7d", "sighting--2879473d-5709-403e-85c0-be11e8af59ed", "sighting--8d169d98-330b-46ef-9dc5-267f2babfbfb", "sighting--09fced98-55c0-48cc-ac08-5ba118b58a31", "sighting--ea49b277-db21-4c57-bac0-458b02bc1f25", "sighting--7b11fab9-0b41-4b39-920f-4d5eba8102b7", "sighting--09dea82d-a30c-4d2f-804c-4c2e67008bb2", "sighting--dbfe81f6-b9ca-42f5-a98b-d1cf91bf250a", "sighting--32834df9-f379-4f03-82e7-5c5942f3be76", "sighting--55886809-0c14-49f9-8fd5-d9c65c818717", "sighting--9a6b606d-4d8d-4cda-9c4a-fd3d103e01fa", "sighting--9f631353-adb6-495e-a924-25aefadf8322", "sighting--5182e1e6-8d83-4dd4-b65f-a6831923b1d7", "sighting--0dd4d242-1045-49f2-815a-6d8daed379cc", "sighting--3129b939-d655-4817-9dc0-335c6a9ab1cb", "sighting--c748c728-0483-4935-aad2-5dc9fa472ec3", "sighting--10698956-cedd-4523-a522-47a7b6c88c51", "sighting--904ad507-543d-4a93-a445-39b9d917c440", "sighting--cbbbc293-05f1-400a-9ad6-a5e3a4879624", "sighting--8c713976-c37f-4f36-bada-dcc684dd8fd0", "sighting--a2e8523e-d755-4ebd-8bce-adf1a5ead072", "sighting--be2f0127-895c-44a1-9b04-86c0a5034ccb", "sighting--27d142f4-b914-4221-81b8-74e2372f1fed", "sighting--9a261157-837d-4922-9d9f-e59f320b9cee", "sighting--c4e18b4a-05fb-4c56-b5ab-700a89d513e2", "sighting--9cedb78d-39a7-42a3-8cf5-ce19a3f1f429", "sighting--03a6a578-46bf-4600-809b-5d1ddcb48479", "sighting--793ddd9a-e4d2-42a5-8513-7cabf6411a8e", "sighting--ee832a57-2210-4935-9db6-dc37391b6005", "sighting--3a21970f-7125-4c99-a21b-6f7b490692c5", "sighting--47661f40-c6f2-4a2b-a809-b8fdad02b307", "sighting--ecf50d83-09e4-4a94-b71f-0c7b4d672376", "sighting--8994e684-6662-45d6-990b-b582051c3ee4", "sighting--62c07068-3b5b-4d94-9c08-8c6026f4fe42", "sighting--13ee3eee-ae7e-4c3b-9567-1be43299b717", "sighting--8b5d94e9-a7d3-474c-84cd-740f09c98a49", "sighting--8e77e0f8-7f2b-49d2-89cc-4a779caaeab6", "sighting--936fc18d-e464-4eba-b31e-d06d1e516304", "sighting--cddecf01-4f5c-422e-b912-91bea4274c8f", "sighting--0e1e2df9-441d-4869-8e0e-6afc8641bc20", "sighting--5d234793-72e4-4b65-b841-d23ac275d319", "sighting--9be73f06-1960-4909-bab6-907352597c11", "sighting--7a689b2e-b1b4-46f3-b433-3524de6003bf", "sighting--db3cb49b-b062-4f0b-8f8d-2d151fc632c1", "sighting--1388ef62-184e-4ce0-9b3c-78c954af9302", "sighting--9aa1d85e-a995-434c-8397-2e87a3fb55cf", "sighting--64deb8a5-508b-47c6-a917-f97570bb56e4", "sighting--3e5e54a3-4b19-445d-8866-e263ea7d6ce3", "sighting--3e091664-9b6a-4e8c-901e-4349ecf1c86e", "sighting--541bc010-544f-4be8-bd1d-8c3dc0da1628", "sighting--47a6b867-7b4b-4abb-9e2b-542a0aef58f1", "sighting--2804b609-c4bb-422d-b8e4-cdf75282acb6", "sighting--27ff8f25-e49a-4246-8681-52f5348dbdcb", "sighting--0b0c68a5-56fc-45d7-b20a-8c11a330ce84", "sighting--253f9e71-f004-4270-91d9-6fb749cdf8ef", "sighting--cccda9b7-2a1f-4f0f-8bd6-ee3451b9d2d6", "sighting--68d5fb8f-fb66-4c27-a0ba-28ddbbcb6dee", "sighting--3ce3c06a-200a-484e-9ffc-3e63a445c37e", "sighting--e58b0e2a-8610-4a39-aa79-ebdc985bb0c5", "sighting--fea441ed-31f5-48b1-b00e-09c482ebe7fc", "sighting--a989b471-52f2-45c0-816e-683f2ab9fb11", "sighting--bdbfc3cb-3f03-4e01-a4d6-6730dcdba8fe", "sighting--34e5f9ce-683e-472f-95ef-200d769c9195", "sighting--3786f9eb-e57a-47c3-ab75-922f2e7e7f34", "sighting--7f30713f-ef02-4dde-b8cc-534b4b63e30d", "sighting--8b1e3426-d5d7-4aef-a392-0610e8c39a58", "sighting--c9c740b9-36a1-4f07-8b1e-6a37fa483f0d", "sighting--faa9e4a2-babc-42fe-b486-de38d1e54c7d", "sighting--6ba02d6d-b3e9-4f13-8093-50049d934574", "sighting--8f679640-4c20-4713-b804-fe435e9cc16f", "sighting--2c439e2d-2664-4a39-bf4c-7f382dd3ffd2", "sighting--876a6bcb-2688-4b66-b0ef-2a71282e2de2", "sighting--2d2fe63f-f650-4c0a-aa72-4f669818d8da", "sighting--a0a270ad-6977-41a4-95a2-e2daf91e870c", "sighting--1153c224-e377-45b2-9431-b95ebc2f10cf", "sighting--2537dee2-b6b3-4a85-87b4-60b98999b1cf", "sighting--79f3eb47-abd4-4135-adaa-9ccb8f2740b4", "sighting--36829915-8f44-4d20-bdc6-fee03c21b4f3", "sighting--d49c21d0-9cbf-4f9b-9fc7-e8574d282001", "sighting--f50eef99-303a-404e-94ad-c0b2d8cd5d21", "sighting--1b2a19ac-be31-4992-b010-b12331db2056", "sighting--035f0fb6-acb7-4d19-95cc-0a02b558ae33", "sighting--246d77fd-9499-42eb-a925-796b7809ad61", "sighting--db23e9ca-af00-4d70-8386-61d51e841133", "sighting--eaefaba0-e7fe-4cf9-9d30-b5f2de53b1c9", "sighting--a67a726e-1451-4cd5-8a23-eac2924f9747", "sighting--34e7365f-c72c-43e9-a2e5-ea1eb87a2f99", "sighting--3c837b29-2932-4007-a16f-baa62e40e209", "sighting--02fe4e78-166f-4ba4-bd9c-0af8d031c850", "sighting--796e1c59-6a00-40d9-a5c1-6ad0f1fdcf7e", "sighting--ccd6a256-e7ee-48f9-9513-ba82eeb4f948", "sighting--2b41d213-409b-4128-a625-1e6c379ef490", "sighting--2640db98-2611-4241-b9be-0b0fae61c9fd", "sighting--315eb30a-b01b-43c7-85c4-071b66f40b48", "sighting--7358dea8-032a-4daa-8166-f38c9f77d8b3", "sighting--558db446-e84e-4964-a238-001318471e77", "sighting--d0c5126f-e067-4557-b60a-3b39976fe0f0", "sighting--97cdcfb8-21bb-44ea-bef1-cf2d0fa4baf6", "sighting--c5e007f6-a773-4deb-904c-efe429a5e999", "sighting--65bf9686-2a13-4249-8e12-3c980522a4c5", "sighting--56b9b803-34dc-4557-8f79-8f1ec18290ca", "sighting--fdff5eb2-496d-4b9c-ad64-9cf1c75f4236", "sighting--d35c5683-85e4-4253-8798-b9f30301b8bc", "sighting--ffeaed9f-bc36-4f28-8aa3-cdd48d907a89", "sighting--60c98b74-d242-4866-9628-acb94f391a5b", "sighting--1b4863ad-70e1-4f0a-957f-e6413d468704", "sighting--ed00d6d7-7879-42a1-b1b1-4b6402118836", "sighting--997e98e4-ddcd-49dd-9be6-030033e0f10e", "sighting--b3598e50-7674-4463-b5ef-d6d17e1ed391", "sighting--74d2e134-0b1e-443a-a1d0-b55f064accad", "sighting--89e0c0bd-2949-4746-a2b2-659aab04bf87", "sighting--d692ce38-b76c-4134-9253-81d380f1fe62", "sighting--df5bc2f8-d89c-46b4-87b2-c91dc530dba6", "sighting--401f3da3-6e9d-4148-8c65-a68f5a82bd24", "sighting--2809b99d-d610-4d5b-ae5f-f718e97646e8", "sighting--ec2df2a5-8643-4d17-af34-97ae2c5914e4", "sighting--1d13b4eb-1363-41a8-afb7-9e58307df054", "sighting--780bc7bf-4c05-4c4b-b206-7a276bb2717b", "sighting--2b7f3403-dd44-44ee-983c-ae7a04912085", "sighting--a599f60f-8381-4d33-b4e0-8ecdaa07c1e4", "sighting--e76b7045-1615-482a-a2ac-eeee249b0f2b", "sighting--077621c7-7147-4740-9c96-f22170d4a34f", "sighting--8bb40cc9-8a77-4e48-b92b-768fe1fe18e6", "sighting--a4d844a4-cafd-4829-9203-86d8e6e6f6dd", "sighting--18bca933-e3e4-4653-9ee4-6517b7c18016", "sighting--0a2ea175-6516-4c8f-8394-97460284e899", "sighting--456bba02-def3-445d-8bb0-98dcf040b1bc", "sighting--ae8c0cdf-be77-4d54-b62f-8661e95b05df", "sighting--ff381f7d-c526-49d7-b510-2a39706dbcda", "sighting--38e19b37-2dd1-4f20-85ac-8bba8c852a25", "sighting--221fe8c3-eaff-4906-8781-90ea90793c5f", "sighting--c4ea6e43-9fd2-42b9-b0c0-6a5c381c34e2", "sighting--06bcc4d0-72cd-443f-9a08-9e0af475dab1", "sighting--755e5276-83ca-498d-9015-0d3764b164c8", "sighting--f0b5ca8a-5ebe-44d9-8f23-b00ff109facb", "sighting--e2768a92-14d4-4088-a78e-b76e122d2641", "sighting--b75d97c4-aaa1-4485-959b-c6c4e9111287", "sighting--10bd8749-4f65-4f7e-8b1b-cfbbc67f6960", "sighting--b1cfe3e3-3553-4f1e-8048-0c1064e5b1da", "sighting--a456e69f-86b9-4050-9524-84004b973c04", "sighting--5e16cb13-a4cb-48fe-862e-921e79d12bb0", "sighting--7ffd07d5-4c4c-43fa-83f9-32a5eaf9f750", "sighting--df980fdd-72cd-4714-a42d-c9df6b643364", "sighting--6f316e23-f26b-4933-ab2f-01cecdd2089e", "sighting--070e4750-965c-4f21-b5d5-24f08815da57", "sighting--fef1d0f3-d4d7-4703-8660-c2bc7e856134", "sighting--36f91de9-5edb-42ae-aceb-020a674d7ea8", "sighting--dea801e7-608e-4e3e-b473-279a8fa077e5", "sighting--616a68ac-bdf7-4ecb-b119-920a01286836", "sighting--df524bb8-5272-4684-a863-8fb470fce5b5", "sighting--a5f7c1d1-4b73-4188-89ca-18dd2cf00907", "sighting--4e25c460-0c03-41ad-abc6-9877f9025b70", "sighting--3b5e8327-bb77-461b-8408-e124363fe2ba", "sighting--29b3ceec-f375-4410-98e9-27f9dcba90b2", "sighting--f45d0b19-9eb3-405d-b0d5-3043bbab3b60", "sighting--6f008fd0-45db-4f6e-ae5e-21371a534e32", "sighting--9f744fc2-fb80-4dcb-8e54-c1035194b9c6", "sighting--e3a262c5-f4bf-465a-b1e8-28552564e4b7", "sighting--0784a9ba-ded3-480f-8757-7be7844bc0cc", "sighting--1accfb6d-df53-4d22-a98d-08ac6ec61554", "sighting--610899a1-276f-48bb-83d0-eb76fe5512a9", "sighting--2e6f9bcc-ff2d-4f6d-bcd8-9308f56aaa4f", "sighting--39593fb2-8a2a-4177-a380-4410a7be06d6", "sighting--009afd2a-f5aa-4a92-94d3-e5b1239cb808", "sighting--58876494-4eb3-4cdf-af8b-f96d4215c61a", "sighting--1db7504d-2ad7-488f-b67b-9a1f555e32da", "sighting--b12bde35-8196-4261-8f1d-f43354be1b75", "sighting--2d8c08cd-a569-4365-9720-f628fb77445e", "sighting--5278f7d2-0115-40e9-99b6-f0f6c80b9827", "sighting--6ef577e2-326a-487e-aeb2-d494264b6b59", "sighting--f467f184-4d9e-4fb9-827d-fc50d35afbae", "sighting--a00bb9b1-527a-41e5-af45-396b09de7735", "sighting--690f24ab-4a6e-406f-ba40-c9b8b899d535", "sighting--07ef6ddf-007e-4142-8c1c-798625fc6e84", "sighting--9ca211a5-ae37-4ce2-85cc-7620f377143c", "sighting--32045814-797d-4f17-9600-240d41a29182", "sighting--f655316e-a8e6-4b83-af0e-43b9a8276c5c", "sighting--afeca2a6-4477-4922-8e88-2b2ec89f5e85", "sighting--737fa399-4e00-4fe2-833a-99736ec286a5", "sighting--3a832ef9-0416-4b83-b9b9-bd1d20f36109", "sighting--38a54448-695e-4011-9278-74a371a424af", "sighting--cc1b66d4-58ed-441b-95dd-75cb4c246bad", "sighting--7f2366f0-ed60-4ce6-a9e4-1d8e96cbdc63", "sighting--71bd6382-bc29-4640-a558-0340fcd6b59a", "sighting--8523c503-8f4f-4b11-a0b3-95595c617e02", "sighting--0fa5a876-dadd-4ec6-b58b-0359a9f86795", "sighting--3de2595e-293b-4ff4-8e28-a1f6f23333fb", "sighting--781134f3-dfbc-4674-bdd4-a815193a13e9", "sighting--ddd7a5d2-6cf5-4f57-a06f-ab63daf8ca80", "sighting--bed120eb-0ddf-459c-adf6-d7b5c73ed4e5", "sighting--e3e01952-9190-4afb-9cb2-1f8842defb99", "sighting--bb40b09e-acfd-4e71-8b09-c5c26c20ebc5", "sighting--3ea4bd9a-4e3b-4cf6-9005-02abc004dda4", "sighting--acc7bff8-06f5-44ac-88ea-33b3da50cf1b", "sighting--c7a680e7-a6e7-44e3-8396-a343a632c095", "sighting--708d478f-4c5c-4046-b0e9-d0c51684ebc3", "sighting--8c86ff91-ef0f-4512-80f4-49a9c554ec60", "sighting--abaef156-3712-49a8-83b5-9ff19769d8d3", "sighting--9f635699-c50e-4c82-879c-4d7eb41df19e", "sighting--ffa88201-a677-48b3-8efc-a002f0d4fe3d", "sighting--86c826c6-49a9-40d6-b6e3-51558601dde4", "sighting--35438c36-0c78-4809-b484-d7458ecd6cda", "sighting--257f7302-c00c-419d-8190-f87e460a7d41", "sighting--b8639cb6-0ba8-4bc4-a831-2a0a0a59fd83", "sighting--482dd15e-4592-46b6-9fb5-7c599e0e777e", "sighting--fea598a1-9865-4b37-8736-cc94fb35304a", "sighting--8a36f42d-37b6-407f-a817-3e8c12682cdd", "sighting--e74e6bf4-5633-4aa7-892d-96efaf4d07bc", "sighting--e8ac1587-4637-4095-b0c2-ea8051b557b6", "sighting--b66acc97-9585-4785-b4d1-b28f1c2ac903", "sighting--6dd33d2c-ef5d-43c9-9e0e-aa4c4b7f5a60", "sighting--ff4f66b5-51cc-45d5-9774-a2eea6622e5b", "sighting--40f2ef8f-b5eb-499c-8acf-c0d3172879fd", "sighting--bce1e9f7-4c53-4d91-882b-0e3600d14b27", "sighting--157700c1-8628-4173-be91-4bb190c2a42d", "sighting--df3678cf-78cb-4fed-9d02-2f683f881e69", "sighting--a6e91cdf-38eb-4f6b-8c56-2a54799bacb1", "sighting--adfc1ddb-9e4a-45ff-893d-63bdcbf53778", "sighting--a02abf8b-f84c-43e5-b3fa-fc9b89e25067", "sighting--fd897158-3187-426c-a15f-b77f75596ced", "sighting--307ca971-add4-4f59-87eb-37c97bdc16cc", "sighting--68a3af07-28f3-4ac7-ab48-090beee2c498", "sighting--6b691bd4-129f-4fc9-9cff-be05d8e66343", "sighting--308f188f-1a76-47f9-b1c8-c264a45b2ce7", "sighting--073afc2d-8198-46f7-ab30-46b37f2020b8", "sighting--ad8a6a4c-d9f4-4f69-8278-e8ee98c15d17", "sighting--fc93a7c5-5673-4f43-93cd-9d597ddda95a", "sighting--8c88f531-e52b-44f3-9383-235942716bbd", "sighting--a54487d2-f895-49c0-bfd1-2f479b6bba3d", "sighting--c042e8c8-89dd-489f-ac5f-d39083fac62f", "sighting--3b6e37ba-31fa-4625-be97-f2df4980df43", "sighting--21627959-3e7b-41ae-8ddf-afeb6fd2355e", "sighting--daf732cd-9d09-4d85-918c-e7cabba60d46", "sighting--12885d7d-137a-47f4-bc1b-34abdcf63c15", "sighting--034c3914-32c9-4a10-a17b-7fadf3e57546", "sighting--3e41ec45-da2e-4c40-bce7-17d194e5a647", "sighting--fa90fb12-cf73-4836-8889-d9267583c260", "sighting--671ddb7f-b601-444c-841f-c6740fe503de", "sighting--f64743b2-07a9-4288-a5a1-8943e2c79db8", "sighting--81b477b3-eeca-44d7-887f-8d0d71e64f24", "sighting--dc79f45d-87ed-4c58-b08f-99189cc9c275", "sighting--5c76d192-f82a-48f4-9478-9b069303a23d", "sighting--9e4029f2-8d95-473d-a133-7e01f861a433", "sighting--02bb45ee-5a34-49d0-a103-f0d483faf13a", "sighting--eaa18ae5-e646-4609-9bf1-ca23990d5afc", "sighting--71d44d35-79a7-4c71-9209-f0dc40f65893", "sighting--c2fc9c35-36aa-41ad-89e8-721225019078", "sighting--a3930ec2-4f2d-4148-a19a-054a7b7daa2f", "sighting--70187546-6b89-4151-b1ac-f44174c8be69", "sighting--1a556d98-f56a-4155-8a1b-d5a9e435cf92", "sighting--4d66eacd-1f08-46cd-8f85-221178cbc676", "sighting--1004dc4a-4a8a-491f-80a6-4ceacf514fcd", "sighting--a84100b6-01f7-492f-ba7b-a7a181cb46cc", "sighting--3e3bd30e-0a90-41e0-bd46-e7ad3811d590", "sighting--85827ef7-9468-4fb9-ace1-293569a1025a", "sighting--3d7dbd9a-4692-48ca-981c-8ecc9653836f", "sighting--b0c181a5-f3a8-42d7-836e-5132d0cb2aff", "sighting--b50cd6bb-2f90-491a-b16a-e99134d067fd", "sighting--a8a596d4-5ca6-4dba-8a39-4221e26fc571", "sighting--62545835-e55b-4004-b63a-e4fc7de8a95f", "sighting--3b014cee-6af3-4d8e-a865-48fd7bfde41d", "sighting--85f73ad2-cf1f-48b2-931a-7579d2de17ce", "sighting--6b01b5d0-d7fc-4873-8d08-c4905daf8c82", "sighting--7f793ba7-b3a8-4feb-80dc-72c77774335f", "sighting--47b90ef3-8a55-4c6f-8783-4c44211ea1ab", "sighting--d50923d4-a489-4306-93e8-956eae295724", "sighting--cae45ab7-e0c9-45cd-853c-835052cc02f6", "sighting--ed837d56-eaba-478d-891f-9a9382f15edc", "sighting--091980fa-b8a2-455b-b8d4-43535af2baf9", "sighting--9efc3708-ce83-4578-b16a-36b3fe24596a", "sighting--b7ece7f9-f370-4b7a-8748-a29cb787538f", "sighting--0b088add-2d62-458c-9405-ae23d0334113", "sighting--16b105cc-e89a-4e50-ac43-ed58269c448a", "sighting--4052fbf8-0c6b-459e-bf88-d6f563e8660f", "sighting--3ab755fd-4f0e-44c0-bf8d-254dea0ac7fe", "sighting--184522bd-89dc-413f-a694-574b9704c3df", "sighting--bba8b68b-2306-4666-8715-d4373fb74705", "sighting--7073ae1b-29fa-4083-b105-f5487f7e977e", "sighting--0f711930-8319-4cb4-bd59-1fb5d0f431ad", "sighting--df5488be-a220-485c-87e0-7d8f066c9cda", "sighting--f507e8a1-9c2e-47db-829b-c2d72014ab19", "sighting--6383ac07-db0a-4f88-89ff-210b08b70f32", "sighting--9123061e-560a-431c-a28f-776a5f9794d3", "sighting--e81d00b6-0972-4e12-8f26-8cbb9801ffdc", "sighting--f6a83055-b7b7-46c4-8979-0586fe1bb8ef", "sighting--fcf9d73a-cf3b-4350-9ae2-707cbacff205", "sighting--83d44371-446f-46e1-a41d-04c201b04d44", "sighting--94003a43-61f0-4bc1-9538-949801f27727", "sighting--44edaace-3c6b-4cdd-aecf-c988d64053da", "sighting--5750b3bc-fc0e-43c2-a0bc-5e8c0d27ae5c", "sighting--7fe18ddd-ce1b-427a-b8d6-3d0583123deb", "sighting--e2b453ea-fdd2-46a2-b671-8637f5c894cb", "sighting--742861f6-6287-4002-a0d9-edaf4cadb702", "sighting--131bbf18-c6c8-40cd-85e3-18df58ee0993", "sighting--bc326193-b366-43d0-857b-9fd2ec2dd7b2", "sighting--cc350142-2752-4f14-b1cf-1b7b535a6883", "sighting--d1490c29-153e-4c02-bc0a-64e924dd65fd", "sighting--78180b49-a3d2-4c5c-afa6-bde70e44142d", "sighting--45de0f0b-4bd1-4bc8-8675-975ac940208b", "sighting--d476fb40-c45a-48b5-9535-7d7c1b24b435", "sighting--3cb8adc8-7836-47f2-8112-145a790d533f", "sighting--dbe975e6-323c-4178-9006-a4c80497c593", "sighting--0edddf35-7eb2-459d-a44f-25aca57d41d9", "sighting--c94b7888-b36a-4f5a-a221-ec65ab7b7f5f", "sighting--f20b3ec3-d2a1-4a96-b061-2fd5b261b367", "sighting--7e3befd0-e07b-40af-93e1-dcde65b3b7b2", "sighting--877a744e-b37c-4f83-9f43-9b64dfa130ae", "sighting--8999e6fe-b312-44f2-90d4-389e3b9f6ab5", "sighting--4ffa798d-f579-4632-8f4b-68898d7134b6", "sighting--2ce1b386-fff1-4a65-ac00-c3a21fe8d58c", "sighting--af968b6c-d161-47b0-b94c-e18e81549bfe", "sighting--c54d6336-a886-478e-839e-a7fcd1d0e539", "sighting--4d9ded8e-bab5-48c5-bc86-69b12798f382", "sighting--16c0c553-d823-4664-83b8-5849cabda270", "sighting--9633303c-e84d-4ea0-b80d-318247a7e326", "sighting--dfc8063b-c907-4040-b7d4-15252a325d94", "sighting--feb730c7-b619-4a1a-8a02-00e338ae6f94", "sighting--22c49ea9-9e14-44b1-8ada-c532b7cc973e", "sighting--d4d6d301-6bee-4b2a-af29-80ea0e59f5b2", "sighting--0ac74416-e29c-40c3-92a5-2c0c2ad5abef", "sighting--48550a43-8ad3-4ade-9680-93b294b5f6f9", "sighting--95c336ae-aaa8-4cfa-b23c-d44fa0f13ecd", "sighting--088e8e50-28f2-4cd4-bcb7-7a1843c50187", "sighting--4a3cbd77-331f-454c-a433-3d45044bce83", "sighting--495353e4-ce4d-423c-a813-148e9db9db30", "sighting--a74aedfc-a6bf-4934-8a54-3cec71c3595a", "sighting--37cb63e9-69e6-438b-8c6b-f57c2a9bf743", "sighting--591c2fab-b37f-4998-9a3e-d2a3dd8f211c", "sighting--b45a34db-a7f9-470e-8729-20c6785b8928", "sighting--2963de6f-03f9-43a6-85c3-ef9806f564d0", "sighting--9ab15882-24ad-4b24-b020-0bc471432a2a", "sighting--7d5dfb94-4d04-43ab-95a8-4d95fc28c2d6", "sighting--85d948e6-9c2d-4e45-84e5-d20abacbac3d", "sighting--e1786808-c3e4-42d7-8e0d-3a549eb339ca", "sighting--29cf7e3c-2c5c-4b61-8abf-45d9bb9c8fdd", "sighting--3ca59e9c-5c48-426e-8e03-339d9a04d186", "sighting--35e506d0-a232-4bdb-ad6b-407f85df96e8", "sighting--27de9bda-a7de-4da2-8213-fac3394eafb5", "sighting--b92f3fdb-f908-4db8-a6ee-36f826c4cdd1", "sighting--2bcfbf03-d762-40f8-a164-ecc66d89afe1", "sighting--22cd51d7-839d-45aa-92a8-6e9909a1776f", "sighting--a54ee712-77ff-4d2e-8d61-2d1885dbe3dd", "sighting--9365dbb7-50e2-4600-a1e2-58f4c194cfeb", "sighting--d0e94fd8-7d3a-4dd2-8659-d4c481ea294b", "sighting--c43223e6-84cc-477a-b8da-eba2c22e9780", "sighting--7ee8ab45-1479-4b43-8e62-a5baa09be787", "sighting--6a58ad78-bbf2-4681-afb5-9010a8c6d603", "sighting--5fa5105b-c1ba-4aed-a0f2-2d1817805f0f", "sighting--c9750cdf-1dbd-42bc-97b6-95f4c8142881", "sighting--2952b4c2-10c5-49c8-98a7-97af3628a56d", "sighting--79c68393-ac41-4f2b-9ed1-fd3513cbb35e", "sighting--6dfc7618-7162-4b16-ac9d-d34f4fc84605", "sighting--a1fcc81f-c09f-481e-a437-793d6fe16059", "sighting--702a2117-b0d0-43bc-8bc0-eb331b88494b", "sighting--9abb653f-615d-42d5-88b7-d4ef87261097", "sighting--18042c2d-39bf-4253-961c-65d0fd656da3", "sighting--23cf9086-a12d-49ad-abcb-84bb6cf87681", "sighting--e55101a0-9eae-42af-8f95-26db3d3b5c75", "sighting--1c47c3b8-ff2f-451f-af91-ff19b600dc23", "sighting--7a48e5ba-d455-4a49-bd83-d1cd483a3098", "sighting--912f1fa2-3e29-47da-9ecb-b99b8f0d2f4f", "sighting--43f49b31-d55d-4e76-9237-2355ec872f8e", "sighting--013b970f-1250-4443-a09e-2d93074267d3", "sighting--f260e7db-83a5-475b-bf23-1461ae8c9be6", "sighting--fe9922c5-3798-4ecd-bf99-48e758385412", "sighting--d22a58b4-427a-4c9e-a57c-eacf9876ee81", "sighting--933fb987-4568-4009-b198-2a44a0089938", "sighting--d71509ce-f832-4b91-96ef-6742e688d1e7", "sighting--df85ff1f-0433-4735-81aa-d438c3103955", "sighting--dcd4cd73-f0ad-473b-a8fa-aec8654b3b68", "sighting--3658d179-7c99-4f7d-b761-dd88a4080ee8", "sighting--4f251bae-cbdd-4ab1-aef6-f6d445245f3b", "sighting--1d166ed0-dbd2-4684-a68c-3994ca4b604d", "sighting--31896147-8ddc-4ba2-80a7-c50b0057d8fb", "sighting--9dc9faa0-8626-4a16-9fad-abb04ed0d6a6", "sighting--a43d65b1-954a-4a85-af16-79331156838e", "sighting--78561688-de7c-4480-a302-0d074bdba76e", "sighting--adb00e93-7b76-4002-8c5d-75eacaaef22e", "sighting--684fdc15-2268-4d69-99f8-5e1ca9f660a5", "sighting--335fefa6-d9aa-4b61-9937-f19cb6faea01", "sighting--201ea7f3-c604-44d9-9b1a-ad04a5a95a15", "sighting--86b47207-68e4-4017-8386-6c060da33037", "sighting--484238ba-789c-46db-8f99-945e579699b8", "sighting--197abbd0-0496-4dd3-a820-8a7ed6fbe706", "sighting--bb894cba-1d94-4ebf-9594-3611bc14d1c8", "sighting--4d594616-9871-4a3f-8b7c-0a9e601f0631", "sighting--4ea8d01b-0b21-48e4-8265-4ba5c8405141", "sighting--e1d43d86-df6d-4467-a36f-7f77a13ef6f2", "sighting--d61ac046-5923-4b83-a857-1cffea619cbb", "sighting--25b83274-93e9-4d91-949a-7dbad469564c", "sighting--2cbf3c78-7daa-4221-b833-ea190b809a1d", "sighting--abfe2f07-c932-43af-9c23-f419e746bb16", "sighting--35b1ba02-d62d-4bd4-b711-6a74a7f660c5", "sighting--1137ca18-fef8-4357-8ff1-91439af3728d", "sighting--7dbf6703-6f50-4aad-8da9-50659ac73561", "sighting--0b5aeed5-3f50-480d-aa5c-e963252e9560", "sighting--b6ed0a23-8727-49a3-965c-37aad8a9d2d5", "sighting--bcf8ceef-9704-4a7c-a344-6bf58bbd29d3", "sighting--1b997677-bd01-4127-8884-b003782637dc", "sighting--33204408-9d14-4f9b-8762-15bc291b8da1", "sighting--f4137107-9375-456c-ac51-501c54d00c67", "sighting--440c42c2-4942-464d-8a8a-7f574dd31dbe", "sighting--06fdcd76-75fa-49b7-b26e-f0b5eb795442", "sighting--edd1221b-0111-40c9-aedf-cda1dbf618ad", "sighting--3c703bd8-10d7-4b79-bcbb-fe47027a95ca", "sighting--10d0b6c7-b4df-4eb1-b8b4-058217f62162", "sighting--d20b549d-1a2e-4e66-8729-604ba22f9910", "sighting--95773247-8da7-40f7-a7b4-846957a3488d", "sighting--113ce2c3-8828-4887-857b-7f52a74e7a10", "sighting--0d3db201-b544-4ad4-afbc-740d603bb254", "sighting--f152b7a9-f392-44aa-8173-a76b42deeacb", "sighting--9c11a78e-d2c5-4e11-a670-19438306fb6b", "sighting--96d4b419-aa07-4418-8753-26888a234121", "sighting--e221a348-cca8-49db-994f-faface3b34ba", "sighting--e7ad3b5a-0521-44d0-9ec9-2940ca59800e", "sighting--59f8933a-e2d2-421d-a63e-27997079e539", "sighting--77d2fb2d-c23b-4b22-ae4e-f96aacfb1bdd", "sighting--2033a16c-25c7-496a-b953-8151c77786d5", "sighting--315f5092-922b-4a06-be78-f16f96d9867e", "sighting--dd8a06d0-b3c1-494d-8c7d-225f351d0e01", "sighting--00def8df-8020-4eb5-ab91-83e85a94d8dd", "sighting--04010f64-fa3e-4ca2-b81f-19e830aaf5e4", "sighting--55768ceb-e889-43f0-913d-44d91c2b4ac5", "sighting--96db2d0c-872f-4f65-8fb8-574da365e79f", "sighting--35fe126a-e270-4234-baec-336321df3500", "sighting--582d3020-d94f-44fa-80b1-16057c3a28dd", "sighting--a7f35c7c-fdb1-4eff-bff5-a34c01aecdaf", "sighting--efb637e2-f22c-4ada-b303-942fb255f4cb", "sighting--bc5e6988-acbe-448d-8897-e72dd6175b3c", "sighting--24ff9b80-18f7-487d-896b-5462352a58fb", "sighting--05a9623c-8a5b-4fac-815d-2dee4097b998", "sighting--64e6c368-70e6-4813-a65c-9a47963101f9", "sighting--b201d62e-6ba3-455c-af73-225ada1f7126", "sighting--8ad87bee-bd07-42c9-969c-14b5a3db0690", "sighting--06000518-1dd1-441b-bef4-390c431ab2eb", "sighting--32ec4f66-5573-467d-96f6-edbba7cb0fbe", "sighting--58611ab2-d74c-440a-9d38-3326f20951e3", "sighting--0af2cc62-94c3-4739-84b2-3b6abbe5f36f", "sighting--0e19a98e-1e28-44a1-bebb-119fa77c5349", "sighting--3f6dd9ab-f2d5-4367-b9d8-6285cd95f6f0", "sighting--279d1860-a935-443e-9c35-83a41cc07088", "sighting--1eefa25a-d1aa-4079-9c98-1aa91eca6e26", "sighting--c817d912-d3ef-4bf5-8a7a-c5f1f56ecdc9", "sighting--5a90dd45-37fa-41f8-962b-7c86373f3158", "sighting--e17be094-4b8c-4cb0-9eca-f53df000c969", "sighting--4e7b31c8-fc82-4843-a1af-0d3ba90d91bf", "sighting--9336e29f-4e69-43a2-8450-b0fb9022570b", "sighting--fc578b50-6674-4be7-9773-b640ea1222e8", "sighting--538c63ff-f193-4ca5-a71c-75879c35c411", "sighting--518be4a6-7771-4293-b7ba-c9920dcc5c73", "sighting--57d0a160-99d4-4a6f-b656-5e13f04ef1bb", "sighting--12fb093f-bda2-4def-bbd4-6a945df5b6fe", "sighting--cec1b59f-41e6-4f19-ae76-28f33e212f61", "sighting--13300c57-9219-4495-9a36-44fbdd10de25", "sighting--d66229d0-79cf-4e00-a9dc-b4dcaf591484", "sighting--81646780-76c8-48de-a739-0fcbd95d3e63", "sighting--b7b2fb9f-812b-4e6b-8158-7f58b2616f58", "sighting--2c155629-7c59-48e5-bb1a-5d2ac2722916", "sighting--52e01f2b-8d17-4ad4-a717-8912f8a29de5", "sighting--2a65ccac-674a-40c5-aacd-7d25dc02aeb4", "sighting--30c4cec1-ef58-41f8-affb-5e936f962101", "sighting--6f9bcf0e-47aa-43eb-af28-2cfc97a813fe", "sighting--2d25dce3-c398-42a0-90e2-4284344cb7fc", "sighting--d2580172-914a-49e7-8e28-a9c88f5087dc", "sighting--b8ba4dc8-1aff-499f-bfba-b85e58da408b", "sighting--f02a863f-782c-4331-a817-601dded7a972", "sighting--8a7be326-fc9a-41cc-b912-2d7212356071", "sighting--7532e2f0-14bf-45e4-9db9-a78e7b57823e", "sighting--84f2348e-4c84-41d7-9b20-956f121046f0", "sighting--a65b8060-8630-4106-adcb-633ba1dd353a", "sighting--4b9cff42-084d-49be-99bc-4583f90eeade", "sighting--fd40b576-0796-4f41-b279-13bcf99e3f3f", "sighting--45aaa87c-d0ed-4da1-a03f-fa8301dec8a9", "sighting--a187d634-145e-41ab-9517-bbf44397a2c5", "sighting--b90d33fb-c3cd-4699-93aa-8709a83707da", "sighting--70fbd6e1-b054-44c9-89dd-96d179c71f3a", "sighting--0ce42f85-639c-4818-9453-ae80b6ef8501", "sighting--6745c564-0fc9-42a5-9c91-f724f8a1cc31", "sighting--ae5e0941-8282-40b3-8df5-9f76a253f416", "sighting--8f51c90e-bb24-4e23-a99c-33a874e28f9c", "sighting--13be43a2-db80-44e9-9b27-ae85c903a9cd", "sighting--2e352b86-0b88-4cbb-b662-13a3c352d99d", "sighting--163494f9-cbc1-488d-9b00-cd36285a31dd", "sighting--e86f1c30-2389-4649-9665-8cd121933160", "sighting--88b96500-a672-481a-b5ee-37318b8a8ef7", "sighting--c02945af-4b17-41c4-9744-20ca3adb0e87", "sighting--f192f06c-9496-45d2-a045-a4546f94396a", "sighting--e845265f-2544-4db4-95ca-d91ca0a84f97", "sighting--6cbaa116-93a7-465d-82e9-32f359889c6f", "sighting--253415af-d304-450c-a06e-1bff0e830920", "sighting--5e4a4818-e2d1-4fdf-8ec1-24cabed707ad", "sighting--ff88ec27-7688-4568-a739-a5059f20e791", "sighting--f6c0fcbb-8e6d-4e47-b368-6f90532fd54d", "sighting--8d277059-60ea-456f-9960-8c0d0062058b", "sighting--d5ff91c5-a40d-4113-b5e4-070f89917566", "sighting--9126fb3a-7d49-4662-ae55-fa45a45d9aed", "sighting--6a0e2254-8491-4b55-b7aa-d79fc55462fc", "sighting--307d1244-e4e3-4c1c-b475-a08075fce029", "sighting--7d4bff89-6c64-48da-affd-543b69042da7", "sighting--732fd694-05b3-4070-9678-e15f25dc1b9d", "sighting--78258722-a1a5-4675-bddc-87a0bdaba829", "sighting--983e2781-31bb-4239-8004-2c248f8203c1", "sighting--727f577a-5e27-489b-a5b9-205d80a8c718", "sighting--e200479c-be81-46c3-b879-0d24c454eb14", "sighting--6380b4b6-3e08-4003-9fb0-be1bab66967d", "sighting--61c1b3ac-b530-44ba-9138-c22553bb7dab", "sighting--46397644-69ec-4db4-8b99-a5b9243a3e38", "sighting--1fa793ab-f2da-456c-afd8-a30e9ac8a96f", "sighting--e07c745a-14e2-4df0-9245-f0f3a3f6bef9", "sighting--b7488c49-1c57-4beb-bcbe-5c454f49ed45", "sighting--6c5b0798-00e5-48e3-a0c2-8faa2042a195", "sighting--7fe6bc6a-3f3e-4599-9343-1a60b4b7060f", "sighting--0de557f7-6fdc-4206-a268-08a921efbb28", "sighting--6c432291-407a-489a-8a20-2bc407706a16", "sighting--37adc73e-0ec8-4fe7-bd75-1b846278f16b", "sighting--882e8917-7151-4801-91fb-302eb8cc9a70", "sighting--78bde766-f36c-4a9b-98e5-4a428eae25c6", "sighting--c9719c45-5fbe-41fc-92dd-cf8a4bad5052", "sighting--d1714877-96f3-411d-a694-4296ed99f80a", "sighting--8da9a4a3-af99-4dab-aef0-0940523083f5", "sighting--739d07ae-663c-4410-8c0c-c0972fad8777", "sighting--ffb3315f-9b8d-402b-a023-63cbef535c42", "sighting--4f474599-c95a-4775-9c7e-81f2737497c3", "sighting--2d5f00fa-779a-4f2d-8f40-444a8017998e", "sighting--d226b7a6-8a44-4267-b16e-734d9905ddbb", "sighting--4a218a08-22d5-4705-9363-555ce40f4e4e", "sighting--f97918a7-31d5-4ac6-ae1d-15c56794de9f", "sighting--651ad4ed-4e89-4bb8-b213-8adf76cdb55f", "sighting--de5e09cb-2e18-47eb-bf26-9458a30412b2", "sighting--19a8e3f1-140f-4ce2-b4e1-b08e59c15322", "sighting--83739af7-9dda-4bc2-9ee1-8b9c23f5554c", "sighting--3d697623-43ee-44a3-a018-1b3688b6ce42", "sighting--ed0c8f68-a64f-43d6-9440-df8f3c2cb233", "sighting--a7562e2e-a007-46ad-adf5-a15be9a7d631", "sighting--e772c939-4cb1-49d8-b9a3-1fd2f291819d", "sighting--0e261d50-e4db-46bb-8429-c10e44c19b9a", "sighting--5dcd8734-55df-44bb-bf26-93b376eef662", "sighting--ebd187df-05e5-4edd-880f-557ad4038953", "sighting--8399b50b-e999-4a94-bb1a-8e720809b7d1", "sighting--cce1cd7c-032f-4a30-a731-9fc90324fb9f", "sighting--22069cfa-4637-4a75-9fd0-098d101e441b", "sighting--0dccc194-72f5-452f-a013-ecbbd03acdf0", "sighting--9232bae2-2d75-4658-9945-611877ce7a44", "sighting--3f564caa-78e3-4af7-a21b-76cde03de831", "sighting--19d0244d-9d19-4d4e-a565-70bceedaadc4", "sighting--70e30076-f609-4ea8-99a9-b094aba2bafa", "sighting--d26dcd46-e89c-4a03-a21c-301602b093fc", "sighting--49ac97e1-fc81-4ce0-b71b-9a5cbce60327", "sighting--2db78ec5-5bfe-4c05-89a6-28b2c145eeaa", "sighting--89cf5280-a676-4010-ac02-51c6fdb77cec", "sighting--efa39f4e-37af-47bb-b4b5-bd63c610c223", "sighting--04945a68-799b-465b-ac04-3418a37d947f", "sighting--7a06e620-8277-40d0-9deb-9326905f40b5", "sighting--8a9095e8-6cdd-488f-83d3-7c35f1d4cffd", "sighting--577e6f6f-7b8a-47e2-923b-bddf62ec60f4", "sighting--82dd2807-4696-4131-8ff6-8fe5630b2f21", "sighting--083d1716-0e0b-48f7-8e5b-8c87fa63be20", "sighting--5444e7d5-0045-48ae-9e15-61ce4739e101", "sighting--7ccefb89-0eef-4991-a73e-a08f07441886", "sighting--33f7fa43-aa84-4167-91de-369a9792e797", "sighting--510cb6d0-e77a-4701-9053-178b31eb5824", "sighting--0018adae-4378-477c-8847-1caf93e62f91", "sighting--0a3bc02f-31fc-4a0b-b52f-52a82e7ea398", "sighting--d58bd6c4-e88c-4fd5-ae5a-f90dc5458259", "sighting--dc2e01f6-dfd9-4395-9048-94090f2bb01b", "sighting--af533429-a5e0-4b32-928c-f37ad8969df0", "sighting--58599e77-47a2-4f02-8a35-ecb9794a841f", "sighting--2bcaa5dd-604c-4a3e-a495-2dd2fa6f9632", "sighting--2253134c-e066-43d4-bbc1-213a6b491898", "sighting--dd1720eb-b0f4-4ce2-8b06-bac393bc10d5", "sighting--aa91fe17-3b48-489d-8bff-2c927d3148cd", "sighting--54df3d65-fadf-4c36-a2d8-12fb47470b1b", "sighting--b220b025-d11a-40fc-856b-b46b8d09d43a", "sighting--146afb9e-2001-4f8c-a125-cb02fd7e5ef3", "sighting--56fd0f63-6d39-4b7a-82ff-70de7f2f4a7f", "sighting--fb5a2b0f-1082-43fb-8d41-795bb08ab74a", "sighting--b8d23c05-6e69-49d1-92e6-7f5ca5d96014", "sighting--c1e18022-7eda-41fa-9dd0-588b53f6f5db", "sighting--2bb0d029-bfcf-4905-859a-e58e0b1008c5", "sighting--c77cf5b9-c587-4817-8a6d-10aad7f3ca8f", "sighting--99e749a6-b293-4d95-858c-8a8ceb174cb2", "sighting--977f4ce7-81e7-48b1-becc-edc9d4394984", "sighting--7022ac67-8743-419b-b152-ab2fe23a6370", "sighting--62ca0fad-177b-49d3-a726-a9aba51e5572", "sighting--84ce4089-7363-4a90-8fae-a9d6aa6b56d9", "sighting--6c547912-023a-4bb4-84a8-d6dfdad36d80", "sighting--c4e908af-bbac-43dc-9ab4-49063d11768d", "sighting--9b13bf39-e461-406a-903f-8b50d80fd4cb", "sighting--613e2f84-ff13-45ae-864b-1f21ec5929db", "sighting--40a659c4-2c6b-4042-a249-4ef7e982b25a", "sighting--1604a1bf-1d22-4d61-84cf-57ffd107aeb0", "sighting--5d7191bb-8a79-4e89-9e67-bb949eb8f24d", "sighting--d63587ba-1a25-4e43-b6b5-20f10e255c1b", "sighting--73bf6e5d-017f-480a-8aac-d604ff85b088", "sighting--daa6593e-e9e2-4aad-8892-7ac60ebcedd6", "sighting--b57d2711-44bf-4e02-9af1-75c060a566a4", "sighting--0b8d502e-d2fd-4377-ab84-bd657148ca8c", "sighting--e2656d03-99f9-46f2-99e1-e64ac220e4e6", "sighting--8647173b-1dd5-4ea8-b57b-8de56145ddd1", "sighting--4140f9cd-36c2-43a2-9b3f-d12cd8b8ac07", "sighting--9b5c315e-851d-49ca-987c-a7ff002947a4", "sighting--e3d76ee8-d5a5-41ee-b7cf-6b269eab609e", "sighting--ee0ff06d-55f1-4210-bc01-5f9154e5203e", "sighting--2a8a2612-5ab9-497a-9200-750bc13b430c", "sighting--edf74574-24b8-4262-93ce-326fc56d94e2", "sighting--cd33f6c8-45e1-4a32-8894-590f14ad3cd8", "sighting--0e5c6e85-7284-4ab5-9b50-a0d11d2943fb", "sighting--aa7400f6-d7fb-4273-87e4-d1e2431d9cb3", "sighting--9ae9366f-3039-4f72-ad3c-d7491a2c3d89", "sighting--daa79033-206f-4018-a18e-7ddfc244d198", "sighting--4570e25d-9d25-4158-80c1-f43c2ac0499a", "sighting--049975b2-aae3-4e07-a571-a9a9222c0800", "sighting--072377a7-214d-498d-b755-0c5924051d47", "sighting--df9970b3-6391-4787-b6ca-5562486db48e", "sighting--6a026630-1915-4986-b588-ce56aeecf20c", "sighting--da747a24-f922-4e46-b172-74476db27c2b", "sighting--84770f04-c669-4084-bedf-71c369442917", "sighting--6bcb4f69-b763-458d-83a7-be6e31d1d909", "sighting--01e2f9cb-ca94-4190-bb08-e0a3e4553331", "sighting--ecbbc2f2-dc95-4337-8f74-3942d671d75f", "sighting--d9f8f53c-e8cf-46bc-b72e-6999d30f18a2", "sighting--1a792d19-82c5-4613-83ed-46ef5f1161c0", "sighting--2ff59f2f-ed18-4bac-942a-ba14bc3f0cc5", "sighting--8d2476bb-d361-405c-82ac-eba4739941d6", "sighting--0f1f0a40-d937-4d1d-a1e4-3beaf450c118", "sighting--f345b7ac-ee77-4f00-9551-e12cf49bab96", "sighting--0568b80f-86b2-4f55-95bc-d73a40b0dfb2", "sighting--b04c4734-d61b-464e-bad4-85db98e5a75c", "sighting--91c2dcbf-ffd0-443e-bc86-bf8a24c6a04d", "sighting--bb70cec8-8e62-426a-8aab-2b61d91c235f", "sighting--2613ed9a-cf5b-4f5d-9aef-a959ff5a0160", "sighting--4f7694f9-9f37-4209-b9d8-71218bcc0e1f", "sighting--fe802aab-513a-47cb-8032-7d1c688cd5e4", "sighting--2d420f91-e795-4dd5-9e23-c5438995f945", "sighting--fe63450a-716e-4865-8fc8-8b8220f6e129", "sighting--3b8acb9b-92e1-4ec4-a94b-5ccdea0a1181", "sighting--8c384bed-81a4-47ca-a4b0-c1fd5fd5b050", "sighting--3486bee0-4e7e-4599-b5b7-0e28c44ec50e", "sighting--1c003ab1-e3c7-4dca-9301-8ba8d36f5dcf", "sighting--39c43c28-10da-4963-82cc-e6dab72d424e", "sighting--d68722ee-5c9a-405a-a724-ae813fa05698", "sighting--b2db16dd-f0b6-464c-b336-f3f941aa8542", "sighting--206cf325-f55b-4d73-817e-141df073fd99", "sighting--8188d7ca-fbbd-430a-b111-7b31a3d1bd1b", "sighting--420302ae-fec1-4a6c-ae5e-6acca71c8f22", "sighting--6f892966-84c1-4463-9a9b-1f27570ba820", "sighting--06f5eeca-00e2-47d0-966d-5c8abbcb8bb1", "sighting--9789fca1-9d5b-4634-9603-4cb460bddaa9", "sighting--0c9fa279-b1bd-41c1-bda5-aab5ff6fdbe5", "sighting--90027993-4284-4d5d-9f31-a1bbb4434f51", "sighting--5d0db5d1-5502-4c95-aa4a-27bcca6142d3", "sighting--cf39d306-31ec-467c-b44c-13e1db4a2242", "sighting--1849310a-6ae5-406e-8387-709f534c3654", "sighting--911b1b76-a140-460a-8a04-b7902c89e052", "sighting--93c1f769-091c-4076-9db1-5fdce03422a8", "sighting--f0be7f2f-5e2f-41a5-a144-ac42b7440ac9", "sighting--9e217c43-325a-47e2-91a7-a5116a33f4ed", "sighting--043b036f-0dcd-46ae-9ddf-f6bf218fb615", "sighting--713e990c-c2ec-417d-941b-8a07736e5515", "sighting--520c64fe-49e8-4200-9bd2-252c5aec89c5", "sighting--349e695c-bd1b-447b-8a7c-47137be101a9", "sighting--6282e56a-a910-4801-886d-015c61390068", "sighting--8344b87c-79e0-4e1b-af77-213abbd0f8ad", "sighting--d740d5c4-0cf4-45c8-a02e-0f98391dca17", "sighting--05b09f62-6123-4e43-a098-454e2193f71c", "sighting--a1f50299-5251-4402-ad43-4b8c30411628", "sighting--62e31beb-0292-4fad-bb43-41c996090162", "sighting--7fee3a58-8d88-4329-b335-e4f288f1e2d2", "sighting--ce1b6fb5-c54b-4226-91ba-3251c32f3c19", "sighting--5c725558-0ec3-4bc9-a597-8b32261a6136", "sighting--2fd8c3fb-c2b5-464f-9be4-d51bb39c6624", "sighting--d393cf6d-fe6e-4db4-8b6b-15bafbfe1565", "sighting--5d1fd229-209b-43f6-a980-d8334e81f609", "sighting--33887488-4ab8-4bf9-9058-808cba535308", "sighting--509f0393-35b1-418d-8580-e7c52f981c93", "sighting--fd709e86-e45a-4ed6-90fa-fcf8d7e18998", "sighting--0a20a67e-b661-4761-bfe3-bd0363449e90", "sighting--17421128-42cd-4445-80f0-6466e13bf72a", "sighting--309c877b-7058-4030-915d-fb2cac910c4e", "sighting--6a40aa84-a71e-460d-be0c-351110980093", "sighting--6a0e427a-21cd-4d87-a010-b01696febd5c", "sighting--2d162351-697d-41bb-a713-0093dc0de18d", "sighting--30d679ae-9016-4545-980d-4fc4e359e816", "sighting--02116698-9252-46d4-b0bc-bb95f47570e1", "sighting--aaeebb50-e3f8-419d-ae95-eabcee6ba643", "sighting--72742187-1e5a-4735-a29b-d810cbc4a45f", "sighting--9f18cda5-0a5a-42a8-a42c-8c9230a544a4", "sighting--3f2d6987-7612-4859-a237-12ed6fc409a5", "sighting--7056199d-1e0d-4dd5-8a66-05fc82ea2125", "sighting--5e206e8f-82bf-4242-9ecc-92993180309c", "sighting--504db03e-1d57-4bfd-ad3f-a155320c53e5", "sighting--01af01a0-4b3b-4157-9f5d-bba24de992c2", "sighting--f9ca93f0-6889-4794-82bc-4aaf9a5d175a", "sighting--49ed75a9-665e-4d58-90ad-b3ab73f878a5", "sighting--030efe13-7023-4ae1-b8a6-90cafe5bb18d", "sighting--947a8127-1c70-453d-b13d-2a4ddd0a886d", "sighting--02011861-c78e-4566-bf15-f615b63eaa5d", "sighting--ae9b8cf5-9cf4-4b65-89c7-900d2999f5be", "sighting--22ef58ce-54ff-4203-982b-384c4d99fade", "sighting--70a2d3e6-882a-4386-9027-46c663689098", "sighting--657ca138-bdc6-4378-9b06-2271d4c2df2a", "sighting--933c8755-e3a0-4c43-8203-b73610b232d1", "sighting--8d5f9d53-2405-4947-8637-1743ca210ee4", "sighting--7bf87f6b-5401-403f-bf22-70cf174ed914", "sighting--0effacb8-6c75-4185-a316-401891aa5ce9", "sighting--d3fa78b9-30ca-4eef-a11a-9732eb985d23", "sighting--22cfb0bf-889d-4687-897a-e394d5f8ed2a", "sighting--db1358a7-8447-4405-8759-6ab1802ed930", "sighting--f500d938-6630-433d-b610-ac9118b51a39", "sighting--55766b00-d501-464d-8a4d-409d25a6082c", "sighting--1d699496-9e50-45c2-a818-141edc8eb5b9", "sighting--919d14fb-2806-4693-9845-11c8b8376b3c", "sighting--89a7cb7e-3b1c-4666-9e39-ec4979c0f6b4", "sighting--39935841-4c35-44e2-b99e-4bde75c69608", "sighting--3bb10388-2f21-4995-ac99-2ba88781cb87", "sighting--06647ca3-e6b4-43de-80b5-c83ff860d95b", "sighting--39d5523a-0a24-47d9-8c9c-5477e49cc95c", "sighting--1027df59-99b7-4fb8-8fae-7bd90a0f6d63", "sighting--52af6e87-df6d-4d17-933c-16cede5d5761", "sighting--d196e1a9-84be-4836-b512-a69fc02ae190", "sighting--fe666bde-ff5a-4f9c-9e5c-6471907315c1", "sighting--6c647eb9-49a8-475f-b6fb-70f139514d96", "sighting--001a8500-6337-43ab-9b13-63ffff8f1028", "sighting--987fe222-aa56-4dfb-bda9-7db1c63a638c", "sighting--424d01be-4c7f-4d8f-a44a-7b7f2f56e9c8", "sighting--e38929f5-0ae1-4abb-8e01-6501c08b0b18", "sighting--8d548492-4a9f-4b5c-bb32-ecb112227fd3", "sighting--344d699c-1107-4493-9b18-d1f09a04a1c9", "sighting--2af3ebde-736f-4c3f-a774-d350fcd04917", "sighting--f013d426-6e9d-4476-af32-ee77cc2d7012", "sighting--df7da0a1-4e7b-4709-a90b-ef2767ff89b0", "sighting--14853d09-ac92-4705-9fa1-109d1ee8d0b1", "sighting--b21e3aaa-6ac7-4710-9d31-f1eabe316b12", "sighting--ab51fe04-e850-405a-8044-1a9ea83316aa", "sighting--3007e9dc-735c-4b89-9169-b2c282d8d040", "sighting--cdd7b198-779b-4439-893e-9479ced5cf30", "sighting--9658a389-9bc4-42b5-a282-a8b0adf14c93", "sighting--a6179370-b853-4c3c-b57d-36780888988c", "sighting--b0912152-d069-45c4-83db-04a4056bf5cd", "sighting--ffef6d61-3c0b-469f-ae8c-61091e6a8af4", "sighting--608b05ad-4977-4361-ba17-e698ff1bd7f2", "sighting--d7735807-7b35-4a6b-8420-cb6c6966b3e1", "sighting--6e7f9c8d-e362-4601-a975-9f03f98310ce", "sighting--1dcae663-0817-45a8-ac73-5d4030f70b4c", "sighting--8764a6c1-b086-49b0-a326-ec54770202ee", "sighting--29ad6242-02af-4a36-8de9-37d2802b4411", "sighting--c977cbe1-c540-4814-b4bc-bcb3438e4487", "sighting--878cd161-2230-4feb-b73a-b8ba8590be6b", "sighting--3767c5d4-5e42-494b-a97b-b92301accec0", "sighting--a2165682-f408-457c-acef-e53ba960b83a", "sighting--a3210f1f-9998-4412-922e-37045b7b253e", "sighting--ea08127c-5706-45c7-b43c-b688cf556c18", "sighting--96f3c605-b0cb-49bd-b4ad-8080b18db39c", "sighting--ce0c01a0-28ad-4a77-9d29-7717f53711fb", "sighting--8abdc1b0-c8ad-45b4-933e-a6dd03852271", "sighting--bf1919c1-1454-4731-ae28-b2a58c8ca41f", "sighting--413e0c1c-7192-4c3e-9615-bedc888f6d6e", "sighting--1ab46060-4b0c-40da-8e0b-e6107258c96f", "sighting--2b2a7d27-21e7-4d9e-a829-07f0fcac1543", "sighting--377fb02f-feb3-4349-ab74-a233ffcfebc7", "sighting--56a0edda-73fc-4885-8950-b95ab2262f45", "sighting--c4448019-aeb5-4d86-972d-0eac975a27e1", "sighting--67829466-376b-435b-90ce-ffae40812f3d", "sighting--522ed250-433d-4258-ae1d-b2288e212ce6", "sighting--8db1a65a-c9b2-4b7d-be52-7c3a792c26ca", "sighting--3a470840-c8d4-4d19-9a45-688f6134856a", "sighting--6860d288-67c6-4901-9e29-211e0ddfd47f", "sighting--c8384fcf-5d3f-47d5-981b-f4c8f6836678", "sighting--cf395af8-f94b-40c6-a3bc-079513f19732", "sighting--6bf0d28d-8505-4782-8a32-140fc3512707", "sighting--5b8ef72f-a4a2-4313-a48b-dbfe30f9c0d7", "sighting--7d52d6af-d719-4be6-b3e2-921cf763050c", "sighting--450ce855-6f99-401d-8701-63a5b517448d", "sighting--6dc8ca51-1b94-4051-967a-d9ffff0f2c53", "sighting--2e6ef7fe-3dff-4909-b7df-7283f744e079", "sighting--ab944cf5-c741-474b-921a-a97c68706d83", "sighting--fcb158e9-42bd-4934-b127-040a24aec576", "sighting--a2b33df0-522a-4830-8b39-8e7bd95c5f0d", "sighting--c6596e43-ec94-4572-aa70-1557d48e6912", "sighting--442b6334-fff0-4db3-8b58-d0d5bbcdad1b", "sighting--4a01b0eb-62bf-4ade-8493-09c2573dccbd", "sighting--1c30d12c-441f-4e95-8f9a-6c1af7583255", "sighting--e9ae395e-d0e7-453e-9432-12315e86cc62", "sighting--14324f52-0f51-4164-b794-31d40d5e3e90", "sighting--a695e2ca-5b5f-415f-b503-1af037459582", "sighting--c9698b2c-8911-46ee-a561-70a3418c1ca9", "sighting--5a789ebc-aabc-4adf-a444-98d8900cb976", "sighting--17855028-9790-4fb5-b58f-a4c12fb04791", "sighting--627b7f8b-cd66-48b6-a469-0cfc188b473b", "sighting--7f477844-0741-4798-8bfc-f1997caee6c8", "sighting--57fe3a41-a500-46a3-9734-49578b30768e", "sighting--82200248-5089-438a-8f0b-6304cf6eb5aa", "sighting--5b675ca2-f430-4ee6-89c4-c4aad8357be2", "sighting--5aa78222-fa71-410a-8651-7459219e55ee", "sighting--cbafe24a-3fae-4920-b8d9-dde42814a1eb", "sighting--3145a0a0-64db-4145-aa97-90429b920fcb", "sighting--7633a32f-b67d-4bbb-8f3f-ff72c323caaf", "sighting--4fbb9fb9-6770-4d03-a202-1256f2dd5a1b", "sighting--a584e294-d207-4615-a90f-9e28f412b0e9", "sighting--e622b9c8-adf3-4be5-9dda-90e408b1f66b", "sighting--f89f09ae-dfec-49ae-9c1a-2ab06d5d2ad1", "sighting--fa3178aa-b863-4c7b-99fb-48f8a655ad9e", "sighting--4620e966-8386-4a0a-a33d-c6d27098434f", "sighting--056098fd-882b-4937-a034-c3e672341b6a", "sighting--53cbb20b-0cd3-4687-8f9f-9aa9ca4ee69f", "sighting--c73f4174-3095-4f11-bb41-3fd1c4358b25", "sighting--86a3a40e-e2ad-469a-b872-3c4487640aae", "sighting--75886ec9-b7ce-40a4-b0f3-3edc8bc8ddaa", "sighting--51f699d4-b1bd-46dc-9638-3dffd934d734", "sighting--4ebb0c6f-0a50-4460-8f2e-38d9245423fd", "sighting--7672e8de-8b58-451d-aa68-d7364bb65e08", "sighting--dbf27e85-a712-44b4-9dfd-acf75b7ee78e", "sighting--7edc1ace-83da-462d-9644-121dd07204ea", "sighting--e823733b-dab1-469c-a2c1-2eb45a59a26b", "sighting--04be3c54-94a3-484b-8bc0-39930025b4cb", "sighting--f5cc9478-61e6-4efc-852d-763e776ea010", "sighting--34b0b1bf-b20c-45c0-a4d6-d87b3117a832", "sighting--2f261a6e-9c0e-42fc-9b3b-cbcab500a4a0", "sighting--7cdb3918-bfc3-45fb-a51a-317ca5855c5d", "sighting--56691833-689e-4737-a4b0-ef9ecb0a6922", "sighting--1463a3aa-d98d-452b-b06b-e308a96e8abd", "sighting--01174310-fa1c-462b-b92d-314bf2871681", "sighting--6d066d18-2a39-46e6-b78a-df63cc0fdad1", "sighting--1e689ce5-90d7-451f-9954-8ac5d6e34abb", "sighting--62fc14a8-e93f-4e29-be4c-e76f462fc57c", "sighting--2f70e547-557a-4f0c-bedd-4431bc412ab4", "sighting--47f5a20c-4de8-4a83-9701-3ddc8415a53d", "sighting--54ceadce-2942-472c-92c8-429e9f96505f", "sighting--685578ef-bba8-4a4f-b27c-f3a68faa0794", "sighting--82218ebf-aecd-4df8-af63-d6385bdb1df0", "sighting--595151e8-0fe2-42f5-89f2-90ea932c7bc1", "sighting--00ba8c7e-ecd8-493f-ae89-dea362af268b", "sighting--448c4dfc-8d0e-43da-b8eb-86b793afeaf1", "sighting--45d3bfdf-504a-44b6-8482-c0f602ffa9da", "sighting--c55cab3c-9099-4103-89fd-71c021e768a9", "sighting--6800cbeb-14fa-445d-b547-a31e8c743536", "sighting--bd436232-e538-4dd2-8ea4-bd32c675ade5", "sighting--7bfc8c0f-b396-43c9-b5a2-e44b30afd148", "sighting--7fdf92cc-a2bb-41a2-b670-d3ea09788e9c", "sighting--33f8c8a3-c9ec-4cc9-b61b-307d6aa1b84a", "sighting--4231af6b-da7b-422c-9c85-14c10c24a3d5", "sighting--76d35236-bb0f-4c35-b847-c409b620a53a", "sighting--cd130a3d-6e09-4366-b444-ab18fa08f463", "sighting--100020cf-f0fd-4c8e-8db5-dd459f65ccd0", "sighting--51333ce4-b406-40d3-bb5b-8b36ba093712", "sighting--9410b296-7a03-4ea9-93e8-8d1bc907a208", "sighting--dd992302-5817-4229-951a-4c956aeb6fbb", "sighting--1fda6947-4667-43ca-bfe1-de6c6bd7a3f7", "sighting--4ef77733-0073-4a3d-b200-5a1c426a6ead", "sighting--c9a366f3-71b6-4b32-8b53-c6b87aca5b1b", "sighting--ee5168a6-43cc-4016-86f4-b49eb2bffc4c", "sighting--9fd94090-f1f4-4ace-b35a-43fbac0b8632", "sighting--88b0b667-f7fe-46d9-8c68-7fb2fff97593", "sighting--4c5f4371-448b-4f7e-a72c-e5c4e9efdf2e", "sighting--f23b6dde-f9a6-41a8-8bc8-1a4558184423", "sighting--3dd3b698-ddef-427d-aa80-8b63f8959ae8", "sighting--2d5cf2da-8fb2-44c1-ad16-b749f7ff8af6", "sighting--ece08ab0-b251-4624-ab1f-bce59d947b4d", "sighting--69fc0570-e8ab-4936-921c-4961017013c6", "sighting--13ba78b2-57a5-477b-8de3-1f787ef83dcb", "sighting--1cd08398-8e88-4e85-99ba-36255dc3675b", "sighting--42e70e87-dd66-44f1-b2bf-360b4b591192", "sighting--58465d11-5e15-4936-a037-b687ccb5d4c0", "sighting--98ae7399-5e2b-490d-8de4-12aeee37ff0e", "sighting--76a3a3ac-70ff-43e9-a852-2ea23b74a496", "sighting--a947f60e-3db4-439d-b6fc-c90af452903c", "sighting--c8971194-15de-4f19-a42f-a22a9dddd3ec", "sighting--962fe345-6f90-46a4-b6b7-3087536d4b6f", "sighting--8432f6d7-8849-4bd4-98e2-8283219a6553", "sighting--a059a9b1-cf66-49ab-854c-26c105e97fa9", "sighting--296fc0b8-cbb5-43fa-ad4d-bb1cc629a0f9", "sighting--8acaad17-8409-42c3-9c0d-300ff82b47e0", "sighting--c3445c4c-5578-4265-831d-f3a8a1c0286b", "sighting--aa402ff9-05a5-4e9c-85a1-ab1e53ad44d3", "sighting--1c977156-ae7e-4734-8e0d-f0b070f96c78", "sighting--4164685a-998a-449c-b58d-bc7007c9dfc5", "sighting--d9573e9e-050c-4e98-abc6-1711cd84d075", "sighting--2fa35808-83b6-47ff-b1c9-7ac266247a94", "sighting--87ebfaec-d814-44d1-b544-940e7c34320a", "sighting--79edeeb2-c0c9-4019-8b81-ee987a2d3a72", "sighting--d20c9410-9c23-4163-89ac-cde141eabbc2", "sighting--b78be596-9ffd-4cbf-87c6-63dcf941b0b5", "sighting--cf24cc2e-4952-47e5-9548-b15c04c1d2f2", "sighting--5d5b4c2d-f2bb-4962-81ee-81e8ae9b2073", "sighting--e676735e-bebe-4785-89df-549aa45c5cf4", "sighting--f7733884-d052-4b8d-9130-c3d6c05a1ed1", "sighting--89e23ab7-19db-4f17-9389-5a868d6ef101", "sighting--a8b7e4e9-fc6a-4ab7-959e-fffde2d9e06d", "sighting--d024ab6c-3a81-4316-99b1-647be4c689e1", "sighting--84119356-b8d0-4d3b-80ee-3fe1afb06b63", "sighting--04c281c0-1de2-43d3-b8ba-92112e6a922f", "sighting--48944e04-345a-44d7-b052-d749c407bf71", "sighting--3d76a835-177d-4c7f-aba3-e4ab33c9b32b", "sighting--93c0023c-2db5-4366-8c89-7f8cce7de9ad", "sighting--ceff9186-d897-49e7-80e3-dbb2f4ba7401", "sighting--f23a4f57-cd0f-452c-84be-7f5bd6cecd5e", "sighting--141fc6d1-8a32-432a-a8d6-e5fbe0fabf66", "sighting--c90c4e15-879a-4969-81f7-4038a6f6a103", "sighting--273cb5aa-948c-4aa3-ba03-12255521e171", "sighting--fab1bc69-345f-48d2-9730-d92ccb663a95", "sighting--3262a7a8-e0e4-4f7f-9a52-a47794c2381f", "sighting--09f191a2-c34f-48ed-8de7-751f160d91d6", "sighting--bed40379-9d3a-449d-a6d7-27afca95edd3", "sighting--767f3652-315b-4e2a-93b2-17664fbcd5c9", "sighting--20bc3791-f1e0-449e-9d44-5ff0953d8eb4", "sighting--c0072e01-43c7-4c45-9ce1-d9a0370ef067", "sighting--dd86dcde-4047-4696-a83e-d826760cd0e7", "sighting--e88e9caa-8e19-4b5c-b650-f2adc9c1fa14", "sighting--50e800c0-656f-4fe5-8567-5ecdd123e1d0", "sighting--36975f53-ef3e-4f12-b1cf-5a80fa469777", "sighting--55ee1be7-8c74-4984-a466-f3a70f3f2147", "sighting--ff611c4c-11f8-4d65-a4a3-57e3d88db7f1", "sighting--ef51e028-7956-4cba-8d61-18db936e9c50", "sighting--f6847906-1ab2-4d78-b6fe-4543a1325308", "sighting--64e37a9f-fe60-46ed-bd47-ae68e7aba1f2", "sighting--3d586455-27fe-41d1-acab-3afac3c7bb05", "sighting--32958759-dcf1-4d2a-911b-44ce403a8f80", "sighting--fac7143d-e439-438c-b2b1-26dbea8560cf", "sighting--aadfc1e0-34e0-4aa0-99b1-9eb3319178db", "sighting--70d6c433-d6af-4231-8ca3-489311c19d24", "sighting--fd9ee4a4-f558-4832-aeb4-24edde1da345", "sighting--00076a9e-62cf-4d4d-b8d2-1fd0addf2fae", "sighting--893110a6-b1be-47e7-950a-b8c359571fbd", "sighting--28b3e97a-5cd4-42c4-bdc4-cb44d722723c", "sighting--c442c3e2-aab9-41bf-b13e-cc02c56d50fe", "sighting--7ef60b2d-34e1-42fc-b1c6-12378031566c", "sighting--0f2a1e35-a74c-415c-9c40-29fdf0335381", "sighting--2718b4ec-e183-4517-8cdb-8a47ed8b9104", "sighting--9dcbc76a-2bfa-48d6-b907-4b5416391361", "sighting--9353ba26-8611-46e2-87d4-9806862af466", "sighting--f56bfada-7df4-45b8-8a73-bfbc7f7ef649", "sighting--b6c075d1-5350-45b0-b9aa-1e237e82e143", "sighting--8f3b7732-86de-49c8-84ce-627361c055c2", "sighting--12b24241-e8df-421f-88d6-425c79f72987", "sighting--c7335157-b663-4069-8c67-690a9526976e", "sighting--56b39a55-eea6-4630-b773-4734fbae6305", "sighting--0184d378-4c37-457e-a943-ce387f017804", "sighting--6bcd8140-0cc7-44de-8eff-259354106178", "sighting--39406afb-5072-4780-b3e1-15bff9ab73d3", "sighting--36364bd9-d7a1-4fe8-8928-d78a45000e0a", "sighting--7852c311-499b-4aad-b761-8b08d9f7b6fb", "sighting--a9b0a871-b657-4bbb-8c08-1daf719d55e1", "sighting--6b5eded0-ab13-43f0-8b2f-c37337e5c6e9", "sighting--928fcef9-e096-49a1-afe6-5fbab9bc1c58", "sighting--1afabf2f-afdc-4311-a3fe-1e1fe2b92927", "sighting--f1cc66e2-3b1c-4c95-a921-d5e78dc657a6", "sighting--09f1a74d-2054-4aed-8735-8646604a5428", "sighting--d9891de6-93fe-4a0f-a999-0e5ab16e2e35", "sighting--1cff395a-1171-4b7a-8a96-791aab6680d4", "sighting--cf7e07cb-6fa6-4f4b-880a-be9e30981cd2", "sighting--809044c6-dd28-42da-ab88-a5985fbc03f4"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-07-23T11:00:03.373Z", "modified": "2026-07-23T11:00:03.373Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}